last executing test programs: 21.606026989s ago: executing program 2 (id=11357): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 21.101182288s ago: executing program 2 (id=11362): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x85, 0x0, 0x200000000000004, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 20.628785736s ago: executing program 2 (id=11364): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x800000000000000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) recvmsg$kcm(r0, 0x0, 0x102) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x8000, 0x0, 0x1}, 0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc29a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 20.230148099s ago: executing program 1 (id=11368): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x15, 0x5, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff7b, 0x0}, 0x40000) 19.823605813s ago: executing program 3 (id=11372): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x1058c9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x20) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 19.738039938s ago: executing program 1 (id=11373): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 19.675184161s ago: executing program 0 (id=11374): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x85, 0x0, 0x200000000000004, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 19.564505578s ago: executing program 2 (id=11376): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.503280531s ago: executing program 1 (id=11377): syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3}, 0x50) (async, rerun: 32) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_config_ext, 0x500}, 0x0, 0x0, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x10, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}, 0x0, 0x20000000000000c8, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0xb) close(0xffffffffffffffff) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r4 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="d5", 0x101d0}], 0x1}, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x80, 0x0, 0xc2ba, 0x0, 0x4040000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x10000, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) (async) close(r3) (async) socket$kcm(0xa, 0x5, 0x0) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) (async) sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000000c3d000000c07146b44453c340115e997ab4b06389010000a20f2b", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20}, 0x20000081) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000200), &(0x7f0000000280)='syzkaller\x00', 0x7c, 0x1, &(0x7f00000002c0)=""/1, 0x41000, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=r0, 0x15, 0x0, 0x200, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000500)=[0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 32) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@fallback=r0, r6, 0x2b, 0x8, 0x0, @void, @value=r9, @void, @void, r7}, 0x20) (rerun: 64) 19.453751894s ago: executing program 3 (id=11378): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada", 0x23}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 19.405460477s ago: executing program 0 (id=11379): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c00"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000008000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000001c0)=""/61, 0x3d, 0x0, &(0x7f00000005c0)=""/208, 0xd0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x11) openat$cgroup_ro(r4, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 19.167749091s ago: executing program 2 (id=11380): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000b40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x30, 0x5f, 0x5f]}}, &(0x7f0000000bc0)=""/205, 0x29, 0xcd, 0x1}, 0x28) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x3, 0x80000000}, 0x0, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r4 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x5411, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002940)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x5112, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22ffef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r7, 0x0, 0x67, 0x94, &(0x7f0000000540)="825441535230e3d76c81cb76e15f11ddf6a02a086b7b1e64226eca5e28ae9aeb91b5d371a9528b39ab47a89c8876b7d7d8d18b6737dc59f1af5c2c6d2aa71cc277c5d533c411581f58d4a05fe50786b56680d5a07c8ed11bab347e9a267ffd231ffbc2b3cf466b", &(0x7f0000000640)=""/148, 0x3, 0x0, 0xc8, 0x3a, &(0x7f0000000700)="0f9cddec1c88c7c091d3a34ae10b7d44379a7e77db08bba0d05f4207889cfc151c2191b05a5f2992cedcf56ae5e6eb8e9b5166f0813ba620c9249ace90ee8bd96d17b89a0ad0d29ed3e5a9403b3cdba2ce611016fd5f33a46451425d1788afbf69a45ddd0cb2eb0a64a48e4a94809951bded43bcd0f69e3c5f042dc009a2ea443968ae20cff0a98d2c3a0571461e3d45ed95048bc0f92b75fcb34d0ef6550092fd7ee410578819392d747827c8c8059ca9a19ee7eef1ec32f8fd2e9dfc22da286699c7fe952ab42d", &(0x7f0000000800)="4ba0ce256558b94dd7b57dd13b02d56fcd7a660fb01cde9b940331212ffeb48f97fa4a266b031fb30eaae2b3b3e2dcaf2d113f5090d233a328c4", 0x5, 0x0, 0x80000000}, 0x50) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) 19.033929289s ago: executing program 3 (id=11381): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c00"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000008000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000001c0)=""/61, 0x3d, 0x0, &(0x7f00000005c0)=""/208, 0xd0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x11) openat$cgroup_ro(r4, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 18.921728075s ago: executing program 1 (id=11382): socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x12000) sendmsg$unix(r0, 0x0, 0x41) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500003000000079102800000000003e500000000000009500000000000000b6b65a9dbee4b08c613ce8461331f97c9611fbf7e972fa326671"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 18.449013933s ago: executing program 0 (id=11384): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061043c00"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d0000000008000000000000000000000000000000006100"], 0x0, 0x43}, 0x28) (fail_nth: 1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x8}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000001c0)=""/61, 0x3d, 0x0, &(0x7f00000005c0)=""/208, 0xd0}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r5, 0x11) openat$cgroup_ro(r4, &(0x7f00000007c0)='cgroup.freeze\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 18.284756763s ago: executing program 3 (id=11385): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) (fail_nth: 6) 17.387274225s ago: executing program 0 (id=11387): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 17.250799363s ago: executing program 0 (id=11388): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x1058c9, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0300000000000000000000000000000d03000000000000000000000204000000000000000000000b020000000000000061"], 0x0, 0x52}, 0x20) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000180)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x58, &(0x7f0000000280)}, 0x10) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) 17.225706464s ago: executing program 3 (id=11389): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x7, 0x0, 0x85, 0x0, 0x200000000000004, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x1828a6, 0xca, 0x2, 0x0, 0x4, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff0000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b29, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3e0002"], 0x9a) 17.223786844s ago: executing program 4 (id=11390): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x42, &(0x7f0000000000), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200"/31], 0xffffffffffffffff, 0x3e, 0x0, 0x2}, 0x28) recvmsg$unix(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000012006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 17.116747421s ago: executing program 2 (id=11391): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x5000, 0xb44, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x9) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x12}, 0x8042, 0x0, 0x21b, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x8, 0x7, 0x0, 0x7fffffff, 0xd3751, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x1, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x100000, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.076849713s ago: executing program 4 (id=11392): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00c80ecdb4cb9f207c804a00d00000088080efb0a0002000a0ada1b40d80800c5", 0x29}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 16.95973291s ago: executing program 4 (id=11393): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) 16.896332794s ago: executing program 3 (id=11394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000980)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @broadcast}}}], 0x20}, 0x4008804) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x7, '\x00', 0x0, r2, 0x4, 0x5}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @func={0xe, 0x0, 0x0, 0xc, 0x9}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xf00}}]}, {0x0, [0x5f]}}, 0x0, 0x7b, 0x0, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffffff82, 0x0, r3, 0x6, '\x00', 0x0, r4, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, r4, 0x1, 0x5, 0x2}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 16.826313938s ago: executing program 4 (id=11395): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x40000, 0x0, 0x0, &(0x7f0000010000)=[@rights={{0x10}}, @rights={{0x10}}], 0x20}, 0x2160) 16.79764535s ago: executing program 1 (id=11396): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005b7c6f7975241cb124a62eeebc26b9be3d501356a7c145fb91735ea3ed9a836c109e313880c54810956d691cd38bf3fbc2337b870792690998d3fb3081520dc9d8ebbb3be1911479df67d2350cdf91e554a0ec874ff4f180b1654aed644121c84ad7ac3bd62547", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.663170018s ago: executing program 4 (id=11397): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x3, 0x0, 0x10000}, {0x10000002, 0x0, 0x0, 0x9}]}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x2, @loopback}, 0x10, 0x0}, 0x10) r1 = socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0xd, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(r0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) (fail_nth: 3) 16.350538776s ago: executing program 0 (id=11398): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 16.10458404s ago: executing program 1 (id=11399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdc, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x100000, 0x0, 0xffff0000, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x13, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000400000005000000000000", @ANYRES32, @ANYBLOB="0000000000000473fb5b6994fcbf09", @ANYRES32, @ANYBLOB], 0x50) (async) socketpair(0x26, 0x5, 0x10000, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b50c19c25a9228210d5aea3e1f6de161725ea3"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000003090000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181200006b0f3ad6537398c179aa1dd75f397ada188399d64fd1a701309a870bb48783a828f3da7d67554e6747eae8e36bd2969fa7a79074b5389f23", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000045b3f0ff08000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e10b0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="0300000000000000000d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="c00e00005e0007"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 15.979915348s ago: executing program 4 (id=11400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x100000000, 0x12) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfe, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) 1.809911625s ago: executing program 32 (id=11391): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xc}, 0x5000, 0xb44, 0x0, 0x0, 0x9, 0xa, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x6, r1, 0x9) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(0x0, 0x0, 0x9, 0xffffffffffffffff, 0x9) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0x2, 0x80088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x12}, 0x8042, 0x0, 0x21b, 0x0, 0x2, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x8, 0x7, 0x0, 0x7fffffff, 0xd3751, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x1, 0x3, 0x8, 0x81, 0x8005, 0x3, 0x0, 0x2cb, 0x0, 0xfffffffffffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x100000, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.680151512s ago: executing program 33 (id=11394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003a80)={&(0x7f0000000980)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @broadcast}}}], 0x20}, 0x4008804) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x7, '\x00', 0x0, r2, 0x4, 0x5}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@func={0xe, 0x0, 0x0, 0xc, 0x3}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @float={0xe, 0x0, 0x0, 0x10, 0x10}, @func={0xe, 0x0, 0x0, 0xc, 0x9}, @volatile={0xf, 0x0, 0x0, 0x9, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0xf00}}]}, {0x0, [0x5f]}}, 0x0, 0x7b, 0x0, 0x1, 0x1, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0xffffff82, 0x0, r3, 0x6, '\x00', 0x0, r4, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x2, '\x00', r1, r4, 0x1, 0x5, 0x2}, 0x50) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r6 = socket$kcm(0xa, 0x2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000001c0), 0x8) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x5000, 0x0, 0x0, 0x0, 0x0, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x23, &(0x7f0000000040), 0xcf) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) 499.949331ms ago: executing program 34 (id=11398): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x101c0) socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3ee901"], 0x9a) 249.942686ms ago: executing program 35 (id=11399): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2f00020b, 0xf, 0x0, &(0x7f0000000240)="63ecedf7b98637fa929140ac5ea107", 0x0, 0xefdc, 0x0, 0xfffffffffffffda0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x100000, 0x0, 0xffff0000, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x13, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="06000000040000000400000005000000000000", @ANYRES32, @ANYBLOB="0000000000000473fb5b6994fcbf09", @ANYRES32, @ANYBLOB], 0x50) (async) socketpair(0x26, 0x5, 0x10000, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b50c19c25a9228210d5aea3e1f6de161725ea3"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000003090000000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000181200006b0f3ad6537398c179aa1dd75f397ada188399d64fd1a701309a870bb48783a828f3da7d67554e6747eae8e36bd2969fa7a79074b5389f23", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000045b3f0ff08000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000e10b0000"], 0x0, 0x26, 0x0, 0x4}, 0x28) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00"/20, @ANYRES32=0x1, @ANYBLOB="0300000000000000000d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) (async) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="c00e00005e0007"], 0xfe33) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) 0s ago: executing program 36 (id=11400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r0) r1 = socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="2b0100004ec6"}) r2 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000000c0)=0x100000000, 0x12) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000001c0)={r5}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfe, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0xa000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237e09000000b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b7b4338c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x80) kernel console output (not intermixed with test programs): c/0x180 [ 2261.198853][ T7216] __kmalloc_node+0xa0/0x240 [ 2261.203462][ T7216] kvmalloc_node+0x6c/0x180 [ 2261.208019][ T7216] page_pool_create+0x1e7/0x5c0 [ 2261.212892][ T7216] bpf_test_run_xdp_live+0x223/0x1a90 [ 2261.218355][ T7216] ? 0xffffffffa0004440 [ 2261.222635][ T7216] ? text_poke_copy+0x79/0x90 [ 2261.227349][ T7216] ? 0xffffffffa0004440 [ 2261.231526][ T7216] ? bpf_dispatcher_change_prog+0xcbb/0xf10 [ 2261.237721][ T7216] ? 0xffffffffa0004440 [ 2261.241992][ T7216] ? xdp_convert_md_to_buff+0x330/0x330 [ 2261.247587][ T7216] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2261.253854][ T7216] ? bpf_test_init+0x119/0x140 [ 2261.258633][ T7216] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2261.264202][ T7216] bpf_prog_test_run_xdp+0x736/0xf10 [ 2261.269523][ T7216] ? dev_put+0x80/0x80 [ 2261.273635][ T7216] ? dev_put+0x80/0x80 [ 2261.277813][ T7216] bpf_prog_test_run+0x31e/0x390 [ 2261.282772][ T7216] __sys_bpf+0x62b/0x780 [ 2261.287094][ T7216] ? bpf_link_show_fdinfo+0x380/0x380 [ 2261.292583][ T7216] ? lock_chain_count+0x20/0x20 [ 2261.297546][ T7216] __x64_sys_bpf+0x78/0x90 [ 2261.302067][ T7216] do_syscall_64+0x4c/0xa0 [ 2261.306515][ T7216] ? clear_bhb_loop+0x60/0xb0 [ 2261.311205][ T7216] ? clear_bhb_loop+0x60/0xb0 [ 2261.315892][ T7216] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2261.321796][ T7216] RIP: 0033:0x7fdd9279aeb9 [ 2261.326236][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.345858][ T7216] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2261.354481][ T7216] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2261.362471][ T7216] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2261.370543][ T7216] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2261.378523][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2261.386501][ T7216] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2261.394496][ T7216] [ 2261.421231][ T7216] page_pool_create() gave up with errno -12 [ 2261.544099][ T4272] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 2261.616936][ T7223] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.10759'. [ 2262.198934][ T7241] IPv6: Can't replace route, no match found [ 2262.223172][ T4272] Bluetooth: hci4: unknown advertising packet type: 0x50 [ 2262.223217][ T4272] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2262.231309][ T7241] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2262.440646][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10761'. [ 2262.635098][ T7245] netlink: 'syz.1.10763': attribute type 3 has an invalid length. [ 2262.662323][ T7245] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10763'. [ 2262.845853][ T7252] FAULT_INJECTION: forcing a failure. [ 2262.845853][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 2262.879389][ T7252] CPU: 1 PID: 7252 Comm: syz.4.10768 Not tainted syzkaller #0 [ 2262.887038][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2262.897131][ T7252] Call Trace: [ 2262.900430][ T7252] [ 2262.903386][ T7252] dump_stack_lvl+0x188/0x24e [ 2262.908104][ T7252] ? show_regs_print_info+0x12/0x12 [ 2262.913326][ T7252] ? load_image+0x400/0x400 [ 2262.918029][ T7252] ? __lock_acquire+0x7d10/0x7d10 [ 2262.923073][ T7252] ? get_random_u64+0x16c/0x8d0 [ 2262.927999][ T7252] ? get_random_u64+0x53a/0x8d0 [ 2262.932879][ T7252] should_fail_ex+0x399/0x4d0 [ 2262.937585][ T7252] should_failslab+0x5/0x20 [ 2262.942111][ T7252] slab_pre_alloc_hook+0x59/0x310 [ 2262.947240][ T7252] ? memset+0x1e/0x40 [ 2262.951241][ T7252] kmem_cache_alloc+0x56/0x2f0 [ 2262.956024][ T7252] ? prepare_creds+0x3c/0x610 [ 2262.960750][ T7252] prepare_creds+0x3c/0x610 [ 2262.965361][ T7252] copy_creds+0x146/0xd50 [ 2262.969726][ T7252] copy_process+0x932/0x4030 [ 2262.974381][ T7252] ? idle_dummy+0x10/0x10 [ 2262.978740][ T7252] kernel_clone+0x24b/0x900 [ 2262.983260][ T7252] ? ksys_write+0x1c0/0x250 [ 2262.987784][ T7252] ? create_io_thread+0x170/0x170 [ 2262.992851][ T7252] __x64_sys_clone+0x1a7/0x220 [ 2262.997631][ T7252] ? __fget_files+0x43d/0x4b0 [ 2263.002419][ T7252] ? __ia32_sys_vfork+0x140/0x140 [ 2263.007507][ T7252] ? lock_chain_count+0x20/0x20 [ 2263.012423][ T7252] ? lockdep_hardirqs_on+0x94/0x140 [ 2263.017647][ T7252] do_syscall_64+0x4c/0xa0 [ 2263.022078][ T7252] ? clear_bhb_loop+0x60/0xb0 [ 2263.026770][ T7252] ? clear_bhb_loop+0x60/0xb0 [ 2263.031468][ T7252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2263.037384][ T7252] RIP: 0033:0x7fdd9279aeb9 [ 2263.041815][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2263.061868][ T7252] RSP: 002b:00007fdd935adfd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2263.070299][ T7252] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2263.078404][ T7252] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2263.086397][ T7252] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2263.094396][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2263.102384][ T7252] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2263.110397][ T7252] [ 2263.118991][ T7257] netlink: 'syz.2.10766': attribute type 25 has an invalid length. [ 2264.010735][ T7276] FAULT_INJECTION: forcing a failure. [ 2264.010735][ T7276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.064919][ T7276] CPU: 0 PID: 7276 Comm: syz.4.10777 Not tainted syzkaller #0 [ 2264.072461][ T7276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2264.082554][ T7276] Call Trace: [ 2264.085868][ T7276] [ 2264.088923][ T7276] dump_stack_lvl+0x188/0x24e [ 2264.093641][ T7276] ? show_regs_print_info+0x12/0x12 [ 2264.098881][ T7276] ? load_image+0x400/0x400 [ 2264.103430][ T7276] ? __lock_acquire+0x7d10/0x7d10 [ 2264.108498][ T7276] should_fail_ex+0x399/0x4d0 [ 2264.113224][ T7276] _copy_from_user+0x2c/0x170 [ 2264.117947][ T7276] __sys_bpf+0x2ea/0x780 [ 2264.122238][ T7276] ? bpf_link_show_fdinfo+0x380/0x380 [ 2264.127669][ T7276] ? lock_chain_count+0x20/0x20 [ 2264.132565][ T7276] __x64_sys_bpf+0x78/0x90 [ 2264.137013][ T7276] do_syscall_64+0x4c/0xa0 [ 2264.141461][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 2264.146168][ T7276] ? clear_bhb_loop+0x60/0xb0 [ 2264.150876][ T7276] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2264.156790][ T7276] RIP: 0033:0x7fdd9279aeb9 [ 2264.161314][ T7276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2264.180952][ T7276] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2264.189411][ T7276] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2264.197410][ T7276] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2264.205410][ T7276] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.213406][ T7276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.221406][ T7276] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2264.229423][ T7276] [ 2264.738482][ T7293] netlink: 'syz.1.10781': attribute type 25 has an invalid length. [ 2264.755724][ T7289] netlink: 'syz.3.10780': attribute type 1 has an invalid length. [ 2265.028900][ T7304] netlink: 'syz.2.10785': attribute type 29 has an invalid length. [ 2265.059633][ T7304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10785'. [ 2265.102052][ T7304] netlink: 'syz.2.10785': attribute type 29 has an invalid length. [ 2265.137600][ T7304] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10785'. [ 2265.157611][ T7299] netlink: 'syz.2.10785': attribute type 29 has an invalid length. [ 2265.171537][ T7299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10785'. [ 2265.188698][ T7310] netlink: 'syz.4.10790': attribute type 29 has an invalid length. [ 2265.197013][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10787'. [ 2265.224105][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10790'. [ 2265.251534][ T7310] netlink: 'syz.4.10790': attribute type 29 has an invalid length. [ 2265.259515][ T7310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10790'. [ 2265.276053][ T7307] FAULT_INJECTION: forcing a failure. [ 2265.276053][ T7307] name failslab, interval 1, probability 0, space 0, times 0 [ 2265.301314][ T7307] CPU: 0 PID: 7307 Comm: syz.4.10790 Not tainted syzkaller #0 [ 2265.308852][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2265.318959][ T7307] Call Trace: [ 2265.322276][ T7307] [ 2265.325238][ T7307] dump_stack_lvl+0x188/0x24e [ 2265.329978][ T7307] ? show_regs_print_info+0x12/0x12 [ 2265.335226][ T7307] ? load_image+0x400/0x400 [ 2265.339774][ T7307] ? __might_sleep+0xd0/0xd0 [ 2265.344429][ T7307] ? __lock_acquire+0x7d10/0x7d10 [ 2265.349507][ T7307] should_fail_ex+0x399/0x4d0 [ 2265.354236][ T7307] should_failslab+0x5/0x20 [ 2265.358781][ T7307] slab_pre_alloc_hook+0x59/0x310 [ 2265.363845][ T7307] ? netlink_dump+0xf2/0xd00 [ 2265.368592][ T7307] kmem_cache_alloc_node+0x5a/0x320 [ 2265.373846][ T7307] ? __alloc_skb+0xfc/0x7e0 [ 2265.378411][ T7307] __alloc_skb+0xfc/0x7e0 [ 2265.382792][ T7307] netlink_dump+0x1ee/0xd00 [ 2265.387447][ T7307] ? kasan_quarantine_put+0xd4/0x220 [ 2265.392781][ T7307] ? lockdep_hardirqs_on+0x94/0x140 [ 2265.398036][ T7307] ? netlink_lookup+0x200/0x200 [ 2265.402962][ T7307] ? netlink_recvmsg+0x5e3/0xe00 [ 2265.407954][ T7307] ? kmem_cache_free+0xf7/0x290 [ 2265.412940][ T7307] netlink_recvmsg+0x68f/0xe00 [ 2265.417798][ T7307] ? netlink_sendmsg+0xbd0/0xbd0 [ 2265.422785][ T7307] ? mark_lock+0x94/0x320 [ 2265.427171][ T7307] ? aa_af_perm+0x340/0x340 [ 2265.431717][ T7307] ? perf_trace_lock+0xf8/0x390 [ 2265.436625][ T7307] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 2265.441965][ T7307] ? security_socket_recvmsg+0x85/0xb0 [ 2265.447480][ T7307] ? netlink_sendmsg+0xbd0/0xbd0 [ 2265.452469][ T7307] ____sys_recvmsg+0x2cb/0x5e0 [ 2265.457309][ T7307] ? __sys_recvmsg_sock+0x40/0x40 [ 2265.462407][ T7307] ? import_iovec+0x6f/0xa0 [ 2265.466976][ T7307] ___sys_recvmsg+0x212/0x590 [ 2265.471881][ T7307] ? __sys_recvmsg+0x290/0x290 [ 2265.476706][ T7307] ? common_file_perm+0x171/0x1c0 [ 2265.481793][ T7307] ? __fget_files+0x43d/0x4b0 [ 2265.486623][ T7307] __x64_sys_recvmsg+0x205/0x2e0 [ 2265.491619][ T7307] ? ___sys_recvmsg+0x590/0x590 [ 2265.496734][ T7307] ? lockdep_hardirqs_on+0x94/0x140 [ 2265.501986][ T7307] do_syscall_64+0x4c/0xa0 [ 2265.506443][ T7307] ? clear_bhb_loop+0x60/0xb0 [ 2265.511165][ T7307] ? clear_bhb_loop+0x60/0xb0 [ 2265.515888][ T7307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2265.521828][ T7307] RIP: 0033:0x7fdd9279aeb9 [ 2265.526280][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2265.545935][ T7307] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2265.554400][ T7307] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2265.562505][ T7307] RDX: 0000000000002000 RSI: 0000200000001480 RDI: 0000000000000003 [ 2265.570523][ T7307] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.578528][ T7307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.586522][ T7307] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2265.594547][ T7307] [ 2265.825982][ T7321] FAULT_INJECTION: forcing a failure. [ 2265.825982][ T7321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2265.893237][ T7321] CPU: 0 PID: 7321 Comm: syz.4.10795 Not tainted syzkaller #0 [ 2265.900798][ T7321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2265.910916][ T7321] Call Trace: [ 2265.914247][ T7321] [ 2265.917231][ T7321] dump_stack_lvl+0x188/0x24e [ 2265.921988][ T7321] ? show_regs_print_info+0x12/0x12 [ 2265.927255][ T7321] ? load_image+0x400/0x400 [ 2265.931829][ T7321] ? __lock_acquire+0x7d10/0x7d10 [ 2265.936924][ T7321] ? mutex_unlock+0x10/0x10 [ 2265.941689][ T7321] should_fail_ex+0x399/0x4d0 [ 2265.946465][ T7321] _copy_from_user+0x2c/0x170 [ 2265.951307][ T7321] smc_setsockopt+0x418/0xb80 [ 2265.956072][ T7321] ? smc_shutdown+0x9a0/0x9a0 [ 2265.960805][ T7321] ? aa_sock_opt_perm+0x74/0x100 [ 2265.965774][ T7321] ? bpf_lsm_socket_setsockopt+0x5/0x10 [ 2265.971343][ T7321] ? security_socket_setsockopt+0x7a/0xa0 [ 2265.977115][ T7321] ? smc_shutdown+0x9a0/0x9a0 [ 2265.981843][ T7321] __sys_setsockopt+0x2bf/0x3d0 [ 2265.986911][ T7321] __x64_sys_setsockopt+0xb1/0xc0 [ 2265.991995][ T7321] do_syscall_64+0x4c/0xa0 [ 2265.996443][ T7321] ? clear_bhb_loop+0x60/0xb0 [ 2266.001153][ T7321] ? clear_bhb_loop+0x60/0xb0 [ 2266.005869][ T7321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2266.011800][ T7321] RIP: 0033:0x7fdd9279aeb9 [ 2266.016245][ T7321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2266.035879][ T7321] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2266.044325][ T7321] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2266.052325][ T7321] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000005 [ 2266.060317][ T7321] RBP: 00007fdd935ae090 R08: 0000000000000004 R09: 0000000000000000 [ 2266.068399][ T7321] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 2266.076394][ T7321] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2266.084601][ T7321] [ 2266.870023][ T7330] IPv6: Can't replace route, no match found [ 2266.893134][ T7332] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2267.044388][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10799'. [ 2267.058650][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10796'. [ 2267.114765][ T7340] IPv6: Can't replace route, no match found [ 2267.122382][ T7344] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2267.542387][ T7360] netlink: 'syz.1.10803': attribute type 29 has an invalid length. [ 2267.581383][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10803'. [ 2267.600062][ T7364] FAULT_INJECTION: forcing a failure. [ 2267.600062][ T7364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2267.637632][ T7360] netlink: 'syz.1.10803': attribute type 29 has an invalid length. [ 2267.651312][ T7360] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10803'. [ 2267.697645][ T7364] CPU: 1 PID: 7364 Comm: syz.3.10805 Not tainted syzkaller #0 [ 2267.705224][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2267.715421][ T7364] Call Trace: [ 2267.715564][ T7366] netlink: 111 bytes leftover after parsing attributes in process `syz.4.10806'. [ 2267.718732][ T7364] [ 2267.718777][ T7364] dump_stack_lvl+0x188/0x24e [ 2267.718829][ T7364] ? show_regs_print_info+0x12/0x12 [ 2267.718861][ T7364] ? load_image+0x400/0x400 [ 2267.718899][ T7364] ? __lock_acquire+0x7d10/0x7d10 [ 2267.751300][ T7364] should_fail_ex+0x399/0x4d0 [ 2267.756066][ T7364] _copy_from_iter+0x1c0/0x1130 [ 2267.760977][ T7364] ? __lock_acquire+0x7d10/0x7d10 [ 2267.766116][ T7364] ? copyout_mc+0x110/0x110 [ 2267.770934][ T7364] ? __virt_addr_valid+0x188/0x540 [ 2267.776100][ T7364] ? __virt_addr_valid+0x188/0x540 [ 2267.781380][ T7364] ? __virt_addr_valid+0x465/0x540 [ 2267.786551][ T7364] ? __check_object_size+0x500/0xa40 [ 2267.791902][ T7364] kernfs_fop_write_iter+0x1a0/0x520 [ 2267.797276][ T7364] vfs_write+0x4b1/0xa30 [ 2267.801601][ T7364] ? file_end_write+0x250/0x250 [ 2267.806522][ T7364] ? __fget_files+0x43d/0x4b0 [ 2267.811279][ T7364] ? __fdget_pos+0x2ae/0x360 [ 2267.815948][ T7364] ? ksys_write+0x71/0x250 [ 2267.820436][ T7364] ksys_write+0x14c/0x250 [ 2267.824834][ T7364] ? __ia32_sys_read+0x80/0x80 [ 2267.829675][ T7364] ? lockdep_hardirqs_on+0x94/0x140 [ 2267.834930][ T7364] do_syscall_64+0x4c/0xa0 [ 2267.839359][ T7364] ? clear_bhb_loop+0x60/0xb0 [ 2267.844070][ T7364] ? clear_bhb_loop+0x60/0xb0 [ 2267.848810][ T7364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2267.854752][ T7364] RIP: 0033:0x7fb81eb9aeb9 [ 2267.859313][ T7364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2267.879045][ T7364] RSP: 002b:00007fb81f99c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2267.887494][ T7364] RAX: ffffffffffffffda RBX: 00007fb81ee15fa0 RCX: 00007fb81eb9aeb9 [ 2267.895518][ T7364] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2267.903548][ T7364] RBP: 00007fb81f99c090 R08: 0000000000000000 R09: 0000000000000000 [ 2267.911572][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2267.919595][ T7364] R13: 00007fb81ee16038 R14: 00007fb81ee15fa0 R15: 00007ffe96df68a8 [ 2267.927666][ T7364] [ 2268.288936][ T7381] netlink: 'syz.0.10810': attribute type 12 has an invalid length. [ 2268.321275][ T7381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10810'. [ 2268.574606][ T7381] netlink: 'syz.0.10810': attribute type 10 has an invalid length. [ 2268.653868][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2268.673409][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.080279][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.097987][ T7381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2269.106201][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.113392][ T7381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.127613][ T7381] device bridge0 entered promiscuous mode [ 2269.134608][ T7381] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2269.242163][ T7395] IPv6: Can't replace route, no match found [ 2269.282694][ T7394] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2269.302513][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10814'. [ 2269.603337][ T4272] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 2269.603414][ T4272] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2269.699574][ T7416] netlink: 'syz.1.10821': attribute type 27 has an invalid length. [ 2269.762773][ T7420] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10822'. [ 2269.772589][ T7420] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10822'. [ 2269.783995][ T7420] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10822'. [ 2269.811882][ T7416] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10821'. [ 2269.832603][ T7416] netlink: 'syz.1.10821': attribute type 29 has an invalid length. [ 2269.840652][ T7416] netlink: 'syz.1.10821': attribute type 29 has an invalid length. [ 2269.928914][ T7424] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.10822'. [ 2270.998385][ T7455] IPv6: Can't replace route, no match found [ 2271.040838][ T7454] FAULT_INJECTION: forcing a failure. [ 2271.040838][ T7454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2271.066913][ T7457] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2271.114673][ T7454] CPU: 0 PID: 7454 Comm: syz.1.10833 Not tainted syzkaller #0 [ 2271.122466][ T7454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2271.132540][ T7454] Call Trace: [ 2271.135832][ T7454] [ 2271.138774][ T7454] dump_stack_lvl+0x188/0x24e [ 2271.143479][ T7454] ? show_regs_print_info+0x12/0x12 [ 2271.148715][ T7454] ? load_image+0x400/0x400 [ 2271.153253][ T7454] ? __lock_acquire+0x7d10/0x7d10 [ 2271.158416][ T7454] should_fail_ex+0x399/0x4d0 [ 2271.163157][ T7454] _copy_from_user+0x2c/0x170 [ 2271.167861][ T7454] strndup_user+0xb3/0x150 [ 2271.172301][ T7454] perf_ioctl+0x59b/0x2420 [ 2271.176737][ T7454] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2271.182218][ T7454] ? perf_poll+0x1b0/0x1b0 [ 2271.186764][ T7454] ? __fget_files+0x28/0x4b0 [ 2271.191375][ T7454] ? __fget_files+0x28/0x4b0 [ 2271.195990][ T7454] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2271.200941][ T7454] ? security_file_ioctl+0x7c/0xa0 [ 2271.206070][ T7454] ? perf_poll+0x1b0/0x1b0 [ 2271.210496][ T7454] __se_sys_ioctl+0xfa/0x170 [ 2271.215104][ T7454] do_syscall_64+0x4c/0xa0 [ 2271.219531][ T7454] ? clear_bhb_loop+0x60/0xb0 [ 2271.224246][ T7454] ? clear_bhb_loop+0x60/0xb0 [ 2271.229201][ T7454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2271.235126][ T7454] RIP: 0033:0x7f046b19aeb9 [ 2271.239547][ T7454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2271.259172][ T7454] RSP: 002b:00007f046c0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2271.267600][ T7454] RAX: ffffffffffffffda RBX: 00007f046b415fa0 RCX: 00007f046b19aeb9 [ 2271.275584][ T7454] RDX: 0000200000000040 RSI: 0000000040082406 RDI: 0000000000000004 [ 2271.283649][ T7454] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2271.291717][ T7454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2271.299792][ T7454] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2271.307787][ T7454] [ 2271.368692][ T4272] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2271.368759][ T4272] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2272.088302][ T7473] netlink: 'syz.3.10840': attribute type 25 has an invalid length. [ 2272.552008][ T4272] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2272.552086][ T4272] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2272.650290][ T7501] IPv6: Can't replace route, no match found [ 2272.658626][ T7501] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2272.959940][ T7501] __nla_validate_parse: 5 callbacks suppressed [ 2272.959962][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10850'. [ 2273.722142][ T7524] FAULT_INJECTION: forcing a failure. [ 2273.722142][ T7524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2273.736904][ T7524] CPU: 1 PID: 7524 Comm: syz.2.10858 Not tainted syzkaller #0 [ 2273.744510][ T7524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2273.754617][ T7524] Call Trace: [ 2273.757933][ T7524] [ 2273.760988][ T7524] dump_stack_lvl+0x188/0x24e [ 2273.765734][ T7524] ? show_regs_print_info+0x12/0x12 [ 2273.770988][ T7524] ? load_image+0x400/0x400 [ 2273.775636][ T7524] ? __might_fault+0xa6/0x120 [ 2273.780376][ T7524] should_fail_ex+0x399/0x4d0 [ 2273.785109][ T7524] copyin+0x1b/0x120 [ 2273.789129][ T7524] _copy_from_iter+0x447/0x1130 [ 2273.794018][ T7524] ? copyout_mc+0x110/0x110 [ 2273.798552][ T7524] ? __virt_addr_valid+0x188/0x540 [ 2273.803690][ T7524] ? __virt_addr_valid+0x188/0x540 [ 2273.808824][ T7524] ? __virt_addr_valid+0x465/0x540 [ 2273.813961][ T7524] ? __check_object_size+0x500/0xa40 [ 2273.819272][ T7524] netlink_sendmsg+0x755/0xbd0 [ 2273.824115][ T7524] ? netlink_getsockopt+0x550/0x550 [ 2273.829348][ T7524] ? aa_sock_msg_perm+0x94/0x150 [ 2273.834395][ T7524] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2273.839696][ T7524] ? security_socket_sendmsg+0x7c/0xa0 [ 2273.845267][ T7524] ? netlink_getsockopt+0x550/0x550 [ 2273.850485][ T7524] ____sys_sendmsg+0x5be/0x970 [ 2273.855287][ T7524] ? __sys_sendmsg_sock+0x30/0x30 [ 2273.860336][ T7524] ? __import_iovec+0x315/0x500 [ 2273.865221][ T7524] ? import_iovec+0x6f/0xa0 [ 2273.869747][ T7524] ___sys_sendmsg+0x2a2/0x360 [ 2273.874447][ T7524] ? __sched_text_start+0x8/0x8 [ 2273.879327][ T7524] ? __sys_sendmsg+0x290/0x290 [ 2273.884152][ T7524] ? lockdep_hardirqs_on+0x94/0x140 [ 2273.889588][ T7524] __se_sys_sendmsg+0x1bb/0x2a0 [ 2273.894469][ T7524] ? __x64_sys_sendmsg+0x80/0x80 [ 2273.899453][ T7524] ? lockdep_hardirqs_on+0x94/0x140 [ 2273.904687][ T7524] do_syscall_64+0x4c/0xa0 [ 2273.909300][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 2273.914701][ T7524] ? clear_bhb_loop+0x60/0xb0 [ 2273.919400][ T7524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2273.925424][ T7524] RIP: 0033:0x7efdf8d9aeb9 [ 2273.929857][ T7524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.949484][ T7524] RSP: 002b:00007efdf9c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2273.957955][ T7524] RAX: ffffffffffffffda RBX: 00007efdf9015fa0 RCX: 00007efdf8d9aeb9 [ 2273.965945][ T7524] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 2273.973934][ T7524] RBP: 00007efdf9c01090 R08: 0000000000000000 R09: 0000000000000000 [ 2273.981921][ T7524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2273.989913][ T7524] R13: 00007efdf9016038 R14: 00007efdf9015fa0 R15: 00007ffce47f8958 [ 2273.997925][ T7524] [ 2274.016161][ T7523] netlink: 'syz.1.10857': attribute type 25 has an invalid length. [ 2274.391508][ T4272] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2274.391579][ T4272] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2274.608025][ T7535] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10863'. [ 2274.632594][ T7546] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2274.681672][ T7535] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10863'. [ 2274.745593][ T7545] netlink: 81056 bytes leftover after parsing attributes in process `syz.2.10866'. [ 2274.753233][ T7543] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10863'. [ 2274.807909][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10865'. [ 2274.828523][ T7547] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.10863'. [ 2274.945717][ T7550] sctp: [Deprecated]: syz.3.10867 (pid 7550) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2274.945717][ T7550] Use struct sctp_sack_info instead [ 2275.129063][ T7557] FAULT_INJECTION: forcing a failure. [ 2275.129063][ T7557] name failslab, interval 1, probability 0, space 0, times 0 [ 2275.166585][ T7558] IPv6: Can't replace route, no match found [ 2275.169010][ T7557] CPU: 1 PID: 7557 Comm: syz.4.10870 Not tainted syzkaller #0 [ 2275.180197][ T7557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2275.187495][ T7558] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2275.190266][ T7557] Call Trace: [ 2275.190279][ T7557] [ 2275.205573][ T7557] dump_stack_lvl+0x188/0x24e [ 2275.210297][ T7557] ? show_regs_print_info+0x12/0x12 [ 2275.215538][ T7557] ? load_image+0x400/0x400 [ 2275.220098][ T7557] ? __might_sleep+0xd0/0xd0 [ 2275.224728][ T7557] ? __lock_acquire+0x7d10/0x7d10 [ 2275.229798][ T7557] should_fail_ex+0x399/0x4d0 [ 2275.234623][ T7557] should_failslab+0x5/0x20 [ 2275.237396][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10868'. [ 2275.239157][ T7557] slab_pre_alloc_hook+0x59/0x310 [ 2275.254056][ T7557] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2275.259741][ T7557] __kmem_cache_alloc_node+0x4f/0x260 [ 2275.265164][ T7557] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2275.270763][ T7557] __kmalloc+0xa0/0x240 [ 2275.274975][ T7557] bpf_prog_test_run_skb+0x234/0x12a0 [ 2275.280386][ T7557] ? __fget_files+0x28/0x4b0 [ 2275.285091][ T7557] ? __fget_files+0x28/0x4b0 [ 2275.289742][ T7557] ? __fget_files+0x43d/0x4b0 [ 2275.294484][ T7557] ? cpu_online+0xa0/0xa0 [ 2275.298909][ T7557] bpf_prog_test_run+0x31e/0x390 [ 2275.304060][ T7557] __sys_bpf+0x62b/0x780 [ 2275.308345][ T7557] ? bpf_link_show_fdinfo+0x380/0x380 [ 2275.313766][ T7557] ? lock_chain_count+0x20/0x20 [ 2275.319048][ T7557] __x64_sys_bpf+0x78/0x90 [ 2275.323497][ T7557] do_syscall_64+0x4c/0xa0 [ 2275.327942][ T7557] ? clear_bhb_loop+0x60/0xb0 [ 2275.332651][ T7557] ? clear_bhb_loop+0x60/0xb0 [ 2275.337361][ T7557] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.343372][ T7557] RIP: 0033:0x7fdd9279aeb9 [ 2275.347905][ T7557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.367715][ T7557] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2275.376278][ T7557] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2275.384290][ T7557] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 000000000000000a [ 2275.392311][ T7557] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.400416][ T7557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2275.408531][ T7557] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2275.416570][ T7557] [ 2276.121013][ T7582] netlink: 'syz.2.10877': attribute type 27 has an invalid length. [ 2276.185055][ T7582] netlink: 172 bytes leftover after parsing attributes in process `syz.2.10877'. [ 2276.214874][ T7582] netlink: 'syz.2.10877': attribute type 29 has an invalid length. [ 2276.225925][ T7582] netlink: 'syz.2.10877': attribute type 29 has an invalid length. [ 2276.428743][ T7592] netlink: 'syz.3.10880': attribute type 27 has an invalid length. [ 2276.454214][ T7592] netlink: 164 bytes leftover after parsing attributes in process `syz.3.10880'. [ 2276.676959][ T7606] IPv6: Can't replace route, no match found [ 2276.704170][ T7606] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2277.039380][ T7615] netlink: 'syz.2.10888': attribute type 25 has an invalid length. [ 2277.242919][ T7620] IPv6: Can't replace route, no match found [ 2277.264196][ T7622] FAULT_INJECTION: forcing a failure. [ 2277.264196][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 2277.277373][ T7622] CPU: 1 PID: 7622 Comm: syz.3.10892 Not tainted syzkaller #0 [ 2277.284965][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2277.295065][ T7622] Call Trace: [ 2277.298374][ T7622] [ 2277.301340][ T7622] dump_stack_lvl+0x188/0x24e [ 2277.306070][ T7622] ? show_regs_print_info+0x12/0x12 [ 2277.311488][ T7622] ? load_image+0x400/0x400 [ 2277.316051][ T7622] ? mark_lock+0x94/0x320 [ 2277.319527][ T7620] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2277.320416][ T7622] ? __lock_acquire+0x13cf/0x7d10 [ 2277.334592][ T7622] should_fail_ex+0x399/0x4d0 [ 2277.339325][ T7622] should_failslab+0x5/0x20 [ 2277.343877][ T7622] slab_pre_alloc_hook+0x59/0x310 [ 2277.348942][ T7622] kmem_cache_alloc+0x56/0x2f0 [ 2277.353730][ T7622] ? radix_tree_node_alloc+0x7e/0x3a0 [ 2277.359123][ T7622] radix_tree_node_alloc+0x7e/0x3a0 [ 2277.364349][ T7622] idr_get_free+0x2af/0xa60 [ 2277.368967][ T7622] idr_alloc_cyclic+0x277/0x5c0 [ 2277.373845][ T7622] ? idr_alloc+0x2e0/0x2e0 [ 2277.378363][ T7622] ? do_raw_spin_lock+0x128/0x2f0 [ 2277.383401][ T7622] ? __radix_tree_preload+0x82/0x880 [ 2277.388703][ T7622] ? bpf_map_alloc_id+0x21/0xd0 [ 2277.393573][ T7622] bpf_map_alloc_id+0x40/0xd0 [ 2277.398273][ T7622] map_create+0xae5/0x1000 [ 2277.402719][ T7622] __sys_bpf+0x38b/0x780 [ 2277.406981][ T7622] ? bpf_link_show_fdinfo+0x380/0x380 [ 2277.412382][ T7622] ? lock_chain_count+0x20/0x20 [ 2277.417270][ T7622] __x64_sys_bpf+0x78/0x90 [ 2277.421703][ T7622] do_syscall_64+0x4c/0xa0 [ 2277.426134][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 2277.430819][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 2277.435507][ T7622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2277.441499][ T7622] RIP: 0033:0x7fb81eb9aeb9 [ 2277.445934][ T7622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2277.465820][ T7622] RSP: 002b:00007fb81f99c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2277.474358][ T7622] RAX: ffffffffffffffda RBX: 00007fb81ee15fa0 RCX: 00007fb81eb9aeb9 [ 2277.482453][ T7622] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 0100000000000000 [ 2277.490446][ T7622] RBP: 00007fb81f99c090 R08: 0000000000000000 R09: 0000000000000000 [ 2277.498445][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2277.506523][ T7622] R13: 00007fb81ee16038 R14: 00007fb81ee15fa0 R15: 00007ffe96df68a8 [ 2277.514526][ T7622] [ 2278.086286][ T4272] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 2278.136885][ T7644] netlink: 'syz.1.10900': attribute type 27 has an invalid length. [ 2278.198551][ T7644] __nla_validate_parse: 2 callbacks suppressed [ 2278.198569][ T7644] netlink: 172 bytes leftover after parsing attributes in process `syz.1.10900'. [ 2278.230220][ T7644] netlink: 'syz.1.10900': attribute type 29 has an invalid length. [ 2278.267965][ T7644] netlink: 'syz.1.10900': attribute type 29 has an invalid length. [ 2278.352204][ T7646] netlink: 'syz.4.10901': attribute type 25 has an invalid length. [ 2278.587347][ T7655] IPv6: Can't replace route, no match found [ 2278.598815][ T7655] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2278.610879][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10903'. [ 2279.110519][ T7662] FAULT_INJECTION: forcing a failure. [ 2279.110519][ T7662] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.151297][ T7662] CPU: 1 PID: 7662 Comm: syz.1.10909 Not tainted syzkaller #0 [ 2279.158836][ T7662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2279.168926][ T7662] Call Trace: [ 2279.172237][ T7662] [ 2279.175205][ T7662] dump_stack_lvl+0x188/0x24e [ 2279.179935][ T7662] ? show_regs_print_info+0x12/0x12 [ 2279.185171][ T7662] ? load_image+0x400/0x400 [ 2279.189710][ T7662] ? __might_sleep+0xd0/0xd0 [ 2279.194340][ T7662] ? __lock_acquire+0x7d10/0x7d10 [ 2279.199419][ T7662] should_fail_ex+0x399/0x4d0 [ 2279.204326][ T7662] should_failslab+0x5/0x20 [ 2279.208957][ T7662] slab_pre_alloc_hook+0x59/0x310 [ 2279.214066][ T7662] ? tomoyo_encode+0x27e/0x540 [ 2279.218879][ T7662] __kmem_cache_alloc_node+0x4f/0x260 [ 2279.224300][ T7662] ? tomoyo_encode+0x27e/0x540 [ 2279.229190][ T7662] __kmalloc+0xa0/0x240 [ 2279.233401][ T7662] tomoyo_encode+0x27e/0x540 [ 2279.238040][ T7662] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2279.243782][ T7662] ? tomoyo_path_number_perm+0x205/0x650 [ 2279.249455][ T7662] tomoyo_path_number_perm+0x22f/0x650 [ 2279.254959][ T7662] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2279.260467][ T7662] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2279.266254][ T7662] ? irqentry_enter+0x33/0x50 [ 2279.271000][ T7662] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2279.277214][ T7662] ? lockdep_hardirqs_on+0x94/0x140 [ 2279.282561][ T7662] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2279.288759][ T7662] security_file_ioctl+0x6c/0xa0 [ 2279.293744][ T7662] __se_sys_ioctl+0x48/0x170 [ 2279.298369][ T7662] do_syscall_64+0x4c/0xa0 [ 2279.302813][ T7662] ? clear_bhb_loop+0x60/0xb0 [ 2279.307517][ T7662] ? clear_bhb_loop+0x60/0xb0 [ 2279.312222][ T7662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2279.318139][ T7662] RIP: 0033:0x7f046b19aeb9 [ 2279.322580][ T7662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2279.342218][ T7662] RSP: 002b:00007f046c0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2279.350664][ T7662] RAX: ffffffffffffffda RBX: 00007f046b415fa0 RCX: 00007f046b19aeb9 [ 2279.358744][ T7662] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 2279.366739][ T7662] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2279.374739][ T7662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.382733][ T7662] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2279.390742][ T7662] [ 2279.411492][ T7662] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2279.500476][ T7675] netlink: 'syz.4.10911': attribute type 11 has an invalid length. [ 2279.554865][ T7675] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.10911'. [ 2279.710804][ T7670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2279.843283][ T7682] netlink: 'syz.2.10914': attribute type 25 has an invalid length. [ 2279.888923][T30706] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 2279.888988][T30706] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2282.825499][ T7699] netlink: 'syz.0.10921': attribute type 11 has an invalid length. [ 2282.922085][ T7702] FAULT_INJECTION: forcing a failure. [ 2282.922085][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 2282.930340][ T7699] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.10921'. [ 2282.972631][ T7701] netlink: 'syz.4.10923': attribute type 12 has an invalid length. [ 2282.981113][ T7701] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10923'. [ 2283.047161][ T7701] netlink: 'syz.4.10923': attribute type 10 has an invalid length. [ 2283.082525][ T7702] CPU: 0 PID: 7702 Comm: syz.0.10921 Not tainted syzkaller #0 [ 2283.090072][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2283.100167][ T7702] Call Trace: [ 2283.103477][ T7702] [ 2283.106565][ T7702] dump_stack_lvl+0x188/0x24e [ 2283.111295][ T7702] ? show_regs_print_info+0x12/0x12 [ 2283.116548][ T7702] ? load_image+0x400/0x400 [ 2283.121100][ T7702] ? __might_sleep+0xd0/0xd0 [ 2283.125726][ T7702] ? __lock_acquire+0x7d10/0x7d10 [ 2283.130801][ T7702] should_fail_ex+0x399/0x4d0 [ 2283.135537][ T7702] should_failslab+0x5/0x20 [ 2283.139891][ T7704] netlink: 81056 bytes leftover after parsing attributes in process `syz.3.10920'. [ 2283.140164][ T7702] slab_pre_alloc_hook+0x59/0x310 [ 2283.154515][ T7702] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2283.160103][ T7702] __kmem_cache_alloc_node+0x4f/0x260 [ 2283.165524][ T7702] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2283.171119][ T7702] __kmalloc+0xa0/0x240 [ 2283.175327][ T7702] bpf_prog_test_run_skb+0x234/0x12a0 [ 2283.180742][ T7702] ? __fget_files+0x28/0x4b0 [ 2283.185376][ T7702] ? __fget_files+0x28/0x4b0 [ 2283.190034][ T7702] ? __fget_files+0x43d/0x4b0 [ 2283.194771][ T7702] ? cpu_online+0xa0/0xa0 [ 2283.199310][ T7702] bpf_prog_test_run+0x31e/0x390 [ 2283.204274][ T7702] __sys_bpf+0x62b/0x780 [ 2283.208538][ T7702] ? bpf_link_show_fdinfo+0x380/0x380 [ 2283.213953][ T7702] ? lock_chain_count+0x20/0x20 [ 2283.218864][ T7702] __x64_sys_bpf+0x78/0x90 [ 2283.223345][ T7702] do_syscall_64+0x4c/0xa0 [ 2283.227791][ T7702] ? clear_bhb_loop+0x60/0xb0 [ 2283.232501][ T7702] ? clear_bhb_loop+0x60/0xb0 [ 2283.237291][ T7702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2283.243205][ T7702] RIP: 0033:0x7f7d5879aeb9 [ 2283.247644][ T7702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2283.267363][ T7702] RSP: 002b:00007f7d59729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2283.275793][ T7702] RAX: ffffffffffffffda RBX: 00007f7d58a16090 RCX: 00007f7d5879aeb9 [ 2283.283888][ T7702] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 2283.291881][ T7702] RBP: 00007f7d59729090 R08: 0000000000000000 R09: 0000000000000000 [ 2283.299888][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2283.307899][ T7702] R13: 00007f7d58a16128 R14: 00007f7d58a16090 R15: 00007ffdb77affd8 [ 2283.315921][ T7702] [ 2283.320413][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.326853][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.502587][ T7697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2283.538397][ T7701] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.571952][ T7701] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.771544][ T7701] bridge0: port 2(bridge_slave_1) entered blocking state [ 2283.778822][ T7701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2283.786368][ T7701] bridge0: port 1(bridge_slave_0) entered blocking state [ 2283.794209][ T7701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2283.817568][ T7701] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 2283.830999][ T7706] IPv6: Can't replace route, no match found [ 2283.847368][ T7704] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2283.876532][ T7707] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2283.905176][ T7710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10922'. [ 2286.117945][ T7733] netlink: 'syz.0.10928': attribute type 25 has an invalid length. [ 2286.295047][T30706] Bluetooth: hci4: unknown advertising packet type: 0x50 [ 2286.295094][T30706] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2287.714059][ T7763] netlink: 81056 bytes leftover after parsing attributes in process `syz.0.10937'. [ 2287.777488][ T7765] IPv6: Can't replace route, no match found [ 2287.812315][ T7763] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2287.828074][T30706] Bluetooth: hci4: unknown advertising packet type: 0x50 [ 2287.828150][T30706] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2287.867900][ T7765] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2288.022298][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10940'. [ 2288.328899][ T7778] FAULT_INJECTION: forcing a failure. [ 2288.328899][ T7778] name failslab, interval 1, probability 0, space 0, times 0 [ 2288.351414][ T7778] CPU: 1 PID: 7778 Comm: syz.0.10944 Not tainted syzkaller #0 [ 2288.359229][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2288.369396][ T7778] Call Trace: [ 2288.372694][ T7778] [ 2288.375724][ T7778] dump_stack_lvl+0x188/0x24e [ 2288.380516][ T7778] ? show_regs_print_info+0x12/0x12 [ 2288.385733][ T7778] ? load_image+0x400/0x400 [ 2288.390269][ T7778] should_fail_ex+0x399/0x4d0 [ 2288.394965][ T7778] should_failslab+0x5/0x20 [ 2288.399485][ T7778] slab_pre_alloc_hook+0x59/0x310 [ 2288.404523][ T7778] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2288.410193][ T7778] __kmem_cache_alloc_node+0x4f/0x260 [ 2288.415597][ T7778] ? bpf_prog_test_run_skb+0x234/0x12a0 [ 2288.421261][ T7778] __kmalloc+0xa0/0x240 [ 2288.425448][ T7778] bpf_prog_test_run_skb+0x234/0x12a0 [ 2288.430840][ T7778] ? __fget_files+0x28/0x4b0 [ 2288.435460][ T7778] ? __fget_files+0x28/0x4b0 [ 2288.440081][ T7778] ? __fget_files+0x43d/0x4b0 [ 2288.444790][ T7778] ? cpu_online+0xa0/0xa0 [ 2288.449223][ T7778] bpf_prog_test_run+0x31e/0x390 [ 2288.454179][ T7778] __sys_bpf+0x62b/0x780 [ 2288.458435][ T7778] ? bpf_link_show_fdinfo+0x380/0x380 [ 2288.463834][ T7778] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2288.470016][ T7778] __x64_sys_bpf+0x78/0x90 [ 2288.474450][ T7778] do_syscall_64+0x4c/0xa0 [ 2288.478908][ T7778] ? clear_bhb_loop+0x60/0xb0 [ 2288.483596][ T7778] ? clear_bhb_loop+0x60/0xb0 [ 2288.488296][ T7778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2288.494289][ T7778] RIP: 0033:0x7f7d5879aeb9 [ 2288.498716][ T7778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2288.518356][ T7778] RSP: 002b:00007f7d5974a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2288.526795][ T7778] RAX: ffffffffffffffda RBX: 00007f7d58a15fa0 RCX: 00007f7d5879aeb9 [ 2288.534782][ T7778] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 2288.542787][ T7778] RBP: 00007f7d5974a090 R08: 0000000000000000 R09: 0000000000000000 [ 2288.550871][ T7778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2288.558860][ T7778] R13: 00007f7d58a16038 R14: 00007f7d58a15fa0 R15: 00007ffdb77affd8 [ 2288.566858][ T7778] [ 2288.681310][T30706] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2289.249291][ T7791] tap0: tun_chr_ioctl cmd 1074025677 [ 2289.263101][ T7791] tap0: linktype set to 1 [ 2289.340119][ T7802] FAULT_INJECTION: forcing a failure. [ 2289.340119][ T7802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2289.363623][ T7802] CPU: 0 PID: 7802 Comm: syz.0.10952 Not tainted syzkaller #0 [ 2289.371155][ T7802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2289.381335][ T7802] Call Trace: [ 2289.384643][ T7802] [ 2289.387605][ T7802] dump_stack_lvl+0x188/0x24e [ 2289.392309][ T7802] ? show_regs_print_info+0x12/0x12 [ 2289.397515][ T7802] ? load_image+0x400/0x400 [ 2289.402036][ T7802] ? __lock_acquire+0x7d10/0x7d10 [ 2289.407115][ T7802] should_fail_ex+0x399/0x4d0 [ 2289.411846][ T7802] _copy_from_user+0x2c/0x170 [ 2289.416599][ T7802] ___sys_recvmsg+0x172/0x590 [ 2289.421328][ T7802] ? __sys_recvmsg+0x290/0x290 [ 2289.426150][ T7802] ? common_file_perm+0x171/0x1c0 [ 2289.431222][ T7802] ? __fget_files+0x43d/0x4b0 [ 2289.435952][ T7802] __x64_sys_recvmsg+0x205/0x2e0 [ 2289.440938][ T7802] ? ___sys_recvmsg+0x590/0x590 [ 2289.445938][ T7802] ? lockdep_hardirqs_on+0x94/0x140 [ 2289.451190][ T7802] do_syscall_64+0x4c/0xa0 [ 2289.455645][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 2289.460355][ T7802] ? clear_bhb_loop+0x60/0xb0 [ 2289.465079][ T7802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2289.471013][ T7802] RIP: 0033:0x7f7d5879aeb9 [ 2289.475469][ T7802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2289.495110][ T7802] RSP: 002b:00007f7d59729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2289.503549][ T7802] RAX: ffffffffffffffda RBX: 00007f7d58a16090 RCX: 00007f7d5879aeb9 [ 2289.511551][ T7802] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000003 [ 2289.519546][ T7802] RBP: 00007f7d59729090 R08: 0000000000000000 R09: 0000000000000000 [ 2289.527547][ T7802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2289.535625][ T7802] R13: 00007f7d58a16128 R14: 00007f7d58a16090 R15: 00007ffdb77affd8 [ 2289.543626][ T7802] [ 2289.592087][T30706] Bluetooth: hci4: unknown advertising packet type: 0x50 [ 2289.592140][T30706] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2290.172064][ T7811] netlink: 81056 bytes leftover after parsing attributes in process `syz.1.10955'. [ 2290.312079][ T7823] FAULT_INJECTION: forcing a failure. [ 2290.312079][ T7823] name failslab, interval 1, probability 0, space 0, times 0 [ 2290.406746][ T7823] CPU: 1 PID: 7823 Comm: syz.2.10958 Not tainted syzkaller #0 [ 2290.414288][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2290.424382][ T7823] Call Trace: [ 2290.427692][ T7823] [ 2290.430743][ T7823] dump_stack_lvl+0x188/0x24e [ 2290.435502][ T7823] ? show_regs_print_info+0x12/0x12 [ 2290.440875][ T7823] ? load_image+0x400/0x400 [ 2290.445508][ T7823] should_fail_ex+0x399/0x4d0 [ 2290.450246][ T7823] should_failslab+0x5/0x20 [ 2290.454793][ T7823] slab_pre_alloc_hook+0x59/0x310 [ 2290.459948][ T7823] ? lock_chain_count+0x20/0x20 [ 2290.464845][ T7823] kmem_cache_alloc+0x56/0x2f0 [ 2290.469647][ T7823] ? skb_clone+0x1e7/0x370 [ 2290.474203][ T7823] skb_clone+0x1e7/0x370 [ 2290.478521][ T7823] bpf_clone_redirect+0xa9/0x3c0 [ 2290.483512][ T7823] bpf_prog_30a03299039a39c6+0x19/0x1d [ 2290.489008][ T7823] bpf_test_run+0x2b6/0x830 [ 2290.493574][ T7823] ? convert___skb_to_skb+0x580/0x580 [ 2290.499085][ T7823] ? bpf_prog_test_run_skb+0xa56/0x12a0 [ 2290.504767][ T7823] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 2290.510288][ T7823] ? cpu_online+0xa0/0xa0 [ 2290.514649][ T7823] bpf_prog_test_run+0x31e/0x390 [ 2290.519640][ T7823] __sys_bpf+0x62b/0x780 [ 2290.523942][ T7823] ? bpf_link_show_fdinfo+0x380/0x380 [ 2290.529397][ T7823] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2290.535674][ T7823] __x64_sys_bpf+0x78/0x90 [ 2290.540230][ T7823] do_syscall_64+0x4c/0xa0 [ 2290.544690][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 2290.549409][ T7823] ? clear_bhb_loop+0x60/0xb0 [ 2290.554156][ T7823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2290.560108][ T7823] RIP: 0033:0x7efdf8d9aeb9 [ 2290.564562][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2290.584297][ T7823] RSP: 002b:00007efdf9c01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2290.592753][ T7823] RAX: ffffffffffffffda RBX: 00007efdf9015fa0 RCX: 00007efdf8d9aeb9 [ 2290.600762][ T7823] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2290.608758][ T7823] RBP: 00007efdf9c01090 R08: 0000000000000000 R09: 0000000000000000 [ 2290.616755][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2290.624815][ T7823] R13: 00007efdf9016038 R14: 00007efdf9015fa0 R15: 00007ffce47f8958 [ 2290.632829][ T7823] [ 2290.828290][T30706] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2293.154437][ T7811] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 2293.457654][ T7847] netlink: 'syz.0.10965': attribute type 27 has an invalid length. [ 2293.482364][T30706] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2293.482411][T30706] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2293.559614][ T7847] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10965'. [ 2293.647018][ T7847] netlink: 'syz.0.10965': attribute type 29 has an invalid length. [ 2293.736313][ T7847] netlink: 'syz.0.10965': attribute type 29 has an invalid length. [ 2294.175743][ T7871] IPv6: Can't replace route, no match found [ 2294.238658][ T7866] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2294.300640][ T7873] IPv6: Can't replace route, no match found [ 2294.311999][ T7869] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2294.353152][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10975'. [ 2294.384571][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10974'. [ 2294.630697][T30706] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 2295.230984][ T7883] netlink: 'syz.0.10978': attribute type 25 has an invalid length. [ 2295.728370][ T7906] FAULT_INJECTION: forcing a failure. [ 2295.728370][ T7906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2295.771191][ T7906] CPU: 0 PID: 7906 Comm: syz.1.10985 Not tainted syzkaller #0 [ 2295.778727][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2295.788802][ T7906] Call Trace: [ 2295.792087][ T7906] [ 2295.795029][ T7906] dump_stack_lvl+0x188/0x24e [ 2295.799741][ T7906] ? show_regs_print_info+0x12/0x12 [ 2295.804956][ T7906] ? load_image+0x400/0x400 [ 2295.809646][ T7906] ? __lock_acquire+0x7d10/0x7d10 [ 2295.814698][ T7906] should_fail_ex+0x399/0x4d0 [ 2295.819395][ T7906] _copy_from_user+0x2c/0x170 [ 2295.824088][ T7906] __copy_msghdr+0x3b7/0x580 [ 2295.828697][ T7906] ___sys_sendmsg+0x210/0x360 [ 2295.833390][ T7906] ? __sys_sendmsg+0x290/0x290 [ 2295.838188][ T7906] ? __lock_acquire+0x7d10/0x7d10 [ 2295.843246][ T7906] __se_sys_sendmsg+0x1bb/0x2a0 [ 2295.848115][ T7906] ? __x64_sys_sendmsg+0x80/0x80 [ 2295.853077][ T7906] ? lockdep_hardirqs_on+0x94/0x140 [ 2295.858322][ T7906] do_syscall_64+0x4c/0xa0 [ 2295.862748][ T7906] ? clear_bhb_loop+0x60/0xb0 [ 2295.867438][ T7906] ? clear_bhb_loop+0x60/0xb0 [ 2295.872135][ T7906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2295.878042][ T7906] RIP: 0033:0x7f046b19aeb9 [ 2295.882474][ T7906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2295.902177][ T7906] RSP: 002b:00007f046c0b0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2295.910603][ T7906] RAX: ffffffffffffffda RBX: 00007f046b416090 RCX: 00007f046b19aeb9 [ 2295.918584][ T7906] RDX: 00000000040080d0 RSI: 0000200000000380 RDI: 0000000000000006 [ 2295.926564][ T7906] RBP: 00007f046c0b0090 R08: 0000000000000000 R09: 0000000000000000 [ 2295.934548][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2295.942528][ T7906] R13: 00007f046b416128 R14: 00007f046b416090 R15: 00007ffe06673448 [ 2295.950698][ T7906] [ 2296.004198][T30706] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2296.012381][T30706] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 2296.022160][T30706] CPU: 1 PID: 30706 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 2296.029865][T30706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2296.040052][T30706] Workqueue: hci1 hci_rx_work [ 2296.044761][T30706] Call Trace: [ 2296.048056][T30706] [ 2296.050994][T30706] dump_stack_lvl+0x188/0x24e [ 2296.055718][T30706] ? show_regs_print_info+0x12/0x12 [ 2296.060934][T30706] ? load_image+0x400/0x400 [ 2296.065563][T30706] sysfs_create_dir_ns+0x26a/0x290 [ 2296.070966][T30706] ? sysfs_warn_dup+0xa0/0xa0 [ 2296.075755][T30706] ? do_raw_spin_unlock+0x11d/0x230 [ 2296.081075][T30706] kobject_add_internal+0x61c/0xcc0 [ 2296.086299][T30706] kobject_add+0x160/0x230 [ 2296.090738][T30706] ? kobject_init+0x1d0/0x1d0 [ 2296.095444][T30706] ? klist_children_get+0x50/0x50 [ 2296.100570][T30706] ? get_device_parent+0x121/0x3f0 [ 2296.105725][T30706] device_add+0x483/0xfb0 [ 2296.110083][T30706] ? kmem_cache_free+0xf7/0x290 [ 2296.114957][T30706] hci_conn_add_sysfs+0xd1/0x1e0 [ 2296.119917][T30706] le_conn_complete_evt+0x105f/0x1670 [ 2296.125392][T30706] ? le_conn_complete_evt+0xe6/0x1670 [ 2296.130790][T30706] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 2296.137053][T30706] ? bt_info+0x180/0x180 [ 2296.141314][T30706] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2296.146975][T30706] ? skb_pull_data+0xf7/0x200 [ 2296.151767][T30706] hci_le_conn_complete_evt+0x183/0x440 [ 2296.157337][T30706] ? hci_remote_host_features_evt+0x270/0x270 [ 2296.163426][T30706] hci_event_packet+0x7b6/0x1280 [ 2296.168386][T30706] ? bis_list+0x280/0x280 [ 2296.172764][T30706] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2296.178768][T30706] ? kcov_remote_start+0x4c7/0x7e0 [ 2296.183982][T30706] ? mt_dump_node+0x8f0/0x1920 [ 2296.188768][T30706] ? hci_send_to_monitor+0x9c/0x4a0 [ 2296.193995][T30706] hci_rx_work+0x3eb/0xd40 [ 2296.198602][T30706] ? _raw_spin_unlock+0x40/0x40 [ 2296.203479][T30706] ? process_one_work+0x7b0/0x1160 [ 2296.208759][T30706] process_one_work+0x8a2/0x1160 [ 2296.213725][T30706] ? worker_detach_from_pool+0x240/0x240 [ 2296.219373][T30706] ? _raw_spin_lock_irq+0x86/0xf0 [ 2296.224420][T30706] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2296.229472][T30706] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2296.235046][T30706] ? kthread_data+0x4b/0xc0 [ 2296.239668][T30706] worker_thread+0xaa2/0x1270 [ 2296.244379][T30706] ? __kthread_parkme+0x162/0x1c0 [ 2296.249440][T30706] kthread+0x29d/0x330 [ 2296.253534][T30706] ? worker_clr_flags+0x1a0/0x1a0 [ 2296.258570][T30706] ? kthread_blkcg+0xd0/0xd0 [ 2296.263195][T30706] ret_from_fork+0x1f/0x30 [ 2296.267663][T30706] [ 2296.278327][T30706] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 2296.291840][T30706] Bluetooth: hci1: failed to register connection device [ 2296.376698][ T7916] IPv6: Can't replace route, no match found [ 2296.397855][ T7916] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2296.444884][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10989'. [ 2296.984719][ T7932] IPv6: Can't replace route, no match found [ 2298.057014][ T7934] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2298.361520][T30706] Bluetooth: hci1: command 0x2016 tx timeout [ 2299.520103][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10993'. [ 2299.667958][ T7941] FAULT_INJECTION: forcing a failure. [ 2299.667958][ T7941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2299.689182][ T7941] CPU: 0 PID: 7941 Comm: syz.0.10994 Not tainted syzkaller #0 [ 2299.696712][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2299.706797][ T7941] Call Trace: [ 2299.710089][ T7941] [ 2299.713290][ T7941] dump_stack_lvl+0x188/0x24e [ 2299.717999][ T7941] ? show_regs_print_info+0x12/0x12 [ 2299.723210][ T7941] ? load_image+0x400/0x400 [ 2299.727732][ T7941] ? __lock_acquire+0x7d10/0x7d10 [ 2299.732771][ T7941] ? snprintf+0xe5/0x140 [ 2299.737024][ T7941] should_fail_ex+0x399/0x4d0 [ 2299.741725][ T7941] _copy_to_user+0x2c/0x130 [ 2299.746247][ T7941] simple_read_from_buffer+0xe3/0x150 [ 2299.751640][ T7941] proc_fail_nth_read+0x1a6/0x220 [ 2299.756682][ T7941] ? proc_fault_inject_write+0x310/0x310 [ 2299.762328][ T7941] ? fsnotify_perm+0x248/0x550 [ 2299.767118][ T7941] ? proc_fault_inject_write+0x310/0x310 [ 2299.772764][ T7941] vfs_read+0x2de/0xa00 [ 2299.777114][ T7941] ? kernel_read+0x1e0/0x1e0 [ 2299.781723][ T7941] ? __fget_files+0x28/0x4b0 [ 2299.786349][ T7941] ? __fget_files+0x28/0x4b0 [ 2299.790952][ T7941] ? __fget_files+0x43d/0x4b0 [ 2299.795706][ T7941] ? __fdget_pos+0x2ae/0x360 [ 2299.800308][ T7941] ? ksys_read+0x71/0x250 [ 2299.804685][ T7941] ksys_read+0x14c/0x250 [ 2299.808945][ T7941] ? vfs_write+0xa30/0xa30 [ 2299.813470][ T7941] ? lockdep_hardirqs_on+0x94/0x140 [ 2299.818686][ T7941] do_syscall_64+0x4c/0xa0 [ 2299.823120][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 2299.827807][ T7941] ? clear_bhb_loop+0x60/0xb0 [ 2299.832492][ T7941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2299.838393][ T7941] RIP: 0033:0x7f7d5875b78e [ 2299.842819][ T7941] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2299.862644][ T7941] RSP: 002b:00007f7d59749fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2299.871171][ T7941] RAX: ffffffffffffffda RBX: 00007f7d5974a6c0 RCX: 00007f7d5875b78e [ 2299.879161][ T7941] RDX: 000000000000000f RSI: 00007f7d5974a0a0 RDI: 0000000000000004 [ 2299.887235][ T7941] RBP: 00007f7d5974a090 R08: 0000000000000000 R09: 0000000000000000 [ 2299.895216][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.903195][ T7941] R13: 00007f7d58a16038 R14: 00007f7d58a15fa0 R15: 00007ffdb77affd8 [ 2299.911206][ T7941] [ 2300.243809][ T7950] netlink: 'syz.0.10995': attribute type 25 has an invalid length. [ 2300.686158][ T7965] sock: sock_set_timeout: `syz.2.11000' (pid 7965) tries to set negative timeout [ 2304.189133][ T7990] netlink: 'syz.4.11012': attribute type 25 has an invalid length. [ 2304.512868][ T8001] IPv6: Can't replace route, no match found [ 2304.611492][ T8002] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2305.048473][ T8002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11011'. [ 2308.471258][ T8041] netlink: 'syz.3.11026': attribute type 25 has an invalid length. [ 2310.042873][ T8078] netlink: 'syz.2.11039': attribute type 25 has an invalid length. [ 2314.987681][ T8097] netlink: 'syz.3.11045': attribute type 27 has an invalid length. [ 2315.057387][ T8097] netlink: 172 bytes leftover after parsing attributes in process `syz.3.11045'. [ 2315.071433][ T8097] netlink: 'syz.3.11045': attribute type 29 has an invalid length. [ 2315.088526][ T8097] netlink: 'syz.3.11045': attribute type 29 has an invalid length. [ 2315.719038][ T8111] FAULT_INJECTION: forcing a failure. [ 2315.719038][ T8111] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.734620][ T8111] CPU: 0 PID: 8111 Comm: syz.4.11053 Not tainted syzkaller #0 [ 2315.742127][ T8111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2315.752210][ T8111] Call Trace: [ 2315.755506][ T8111] [ 2315.758453][ T8111] dump_stack_lvl+0x188/0x24e [ 2315.763157][ T8111] ? show_regs_print_info+0x12/0x12 [ 2315.768370][ T8111] ? load_image+0x400/0x400 [ 2315.772892][ T8111] ? perf_trace_preemptirq_template+0x268/0x320 [ 2315.779154][ T8111] should_fail_ex+0x399/0x4d0 [ 2315.783901][ T8111] should_failslab+0x5/0x20 [ 2315.788424][ T8111] slab_pre_alloc_hook+0x59/0x310 [ 2315.793466][ T8111] kmem_cache_alloc+0x56/0x2f0 [ 2315.798331][ T8111] ? skb_clone+0x1e7/0x370 [ 2315.802765][ T8111] skb_clone+0x1e7/0x370 [ 2315.807029][ T8111] bpf_clone_redirect+0xa9/0x3c0 [ 2315.811982][ T8111] bpf_prog_a612a187b431e31d+0x19/0x1d [ 2315.817454][ T8111] bpf_test_run+0x4c1/0x830 [ 2315.822069][ T8111] ? convert___skb_to_skb+0x580/0x580 [ 2315.827452][ T8111] ? eth_get_headlen+0x200/0x200 [ 2315.832485][ T8111] ? __build_skb+0x257/0x3c0 [ 2315.837090][ T8111] ? convert___skb_to_skb+0x3d/0x580 [ 2315.842386][ T8111] bpf_prog_test_run_skb+0xaa6/0x12a0 [ 2315.847780][ T8111] ? cpu_online+0xa0/0xa0 [ 2315.852295][ T8111] bpf_prog_test_run+0x31e/0x390 [ 2315.857343][ T8111] __sys_bpf+0x62b/0x780 [ 2315.862217][ T8111] ? bpf_link_show_fdinfo+0x380/0x380 [ 2315.867882][ T8111] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2315.874069][ T8111] __x64_sys_bpf+0x78/0x90 [ 2315.878515][ T8111] do_syscall_64+0x4c/0xa0 [ 2315.882949][ T8111] ? clear_bhb_loop+0x60/0xb0 [ 2315.887640][ T8111] ? clear_bhb_loop+0x60/0xb0 [ 2315.892336][ T8111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2315.898241][ T8111] RIP: 0033:0x7fdd9279aeb9 [ 2315.902671][ T8111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2315.922473][ T8111] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2315.930898][ T8111] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2315.938877][ T8111] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 2315.947117][ T8111] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2315.955303][ T8111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.963284][ T8111] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2315.971281][ T8111] [ 2316.124342][ T8118] netlink: 'syz.3.11054': attribute type 25 has an invalid length. [ 2318.636527][ T8132] netlink: 'syz.4.11057': attribute type 27 has an invalid length. [ 2318.705387][ T8132] netlink: 172 bytes leftover after parsing attributes in process `syz.4.11057'. [ 2318.717112][ T8132] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2318.731269][ T8132] netlink: 'syz.4.11057': attribute type 29 has an invalid length. [ 2319.455849][ T8157] netlink: 168 bytes leftover after parsing attributes in process `syz.4.11067'. [ 2319.870658][ T8169] FAULT_INJECTION: forcing a failure. [ 2319.870658][ T8169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2319.902815][ T8169] CPU: 1 PID: 8169 Comm: syz.0.11070 Not tainted syzkaller #0 [ 2319.910368][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2319.920562][ T8169] Call Trace: [ 2319.923877][ T8169] [ 2319.926823][ T8169] dump_stack_lvl+0x188/0x24e [ 2319.931540][ T8169] ? show_regs_print_info+0x12/0x12 [ 2319.936761][ T8169] ? load_image+0x400/0x400 [ 2319.941283][ T8169] ? __lock_acquire+0x7d10/0x7d10 [ 2319.946598][ T8169] ? snprintf+0xe5/0x140 [ 2319.950865][ T8169] should_fail_ex+0x399/0x4d0 [ 2319.955571][ T8169] _copy_to_user+0x2c/0x130 [ 2319.960091][ T8169] simple_read_from_buffer+0xe3/0x150 [ 2319.965489][ T8169] proc_fail_nth_read+0x1a6/0x220 [ 2319.970546][ T8169] ? proc_fault_inject_write+0x310/0x310 [ 2319.976198][ T8169] ? fsnotify_perm+0x248/0x550 [ 2319.981074][ T8169] ? proc_fault_inject_write+0x310/0x310 [ 2319.986737][ T8169] vfs_read+0x2de/0xa00 [ 2319.990929][ T8169] ? kernel_read+0x1e0/0x1e0 [ 2319.995541][ T8169] ? __fget_files+0x28/0x4b0 [ 2320.000145][ T8169] ? __fget_files+0x28/0x4b0 [ 2320.004754][ T8169] ? __fget_files+0x43d/0x4b0 [ 2320.009456][ T8169] ? __fdget_pos+0x2ae/0x360 [ 2320.014060][ T8169] ? ksys_read+0x71/0x250 [ 2320.018415][ T8169] ksys_read+0x14c/0x250 [ 2320.022676][ T8169] ? vfs_write+0xa30/0xa30 [ 2320.027130][ T8169] ? lockdep_hardirqs_on+0x94/0x140 [ 2320.032356][ T8169] do_syscall_64+0x4c/0xa0 [ 2320.036801][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 2320.041493][ T8169] ? clear_bhb_loop+0x60/0xb0 [ 2320.046185][ T8169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2320.052092][ T8169] RIP: 0033:0x7f7d5875b78e [ 2320.056523][ T8169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2320.076224][ T8169] RSP: 002b:00007f7d59749fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2320.084653][ T8169] RAX: ffffffffffffffda RBX: 00007f7d5974a6c0 RCX: 00007f7d5875b78e [ 2320.092724][ T8169] RDX: 000000000000000f RSI: 00007f7d5974a0a0 RDI: 0000000000000003 [ 2320.100707][ T8169] RBP: 00007f7d5974a090 R08: 0000000000000000 R09: 0000000000000000 [ 2320.108721][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2320.116752][ T8169] R13: 00007f7d58a16038 R14: 00007f7d58a15fa0 R15: 00007ffdb77affd8 [ 2320.124862][ T8169] [ 2323.609390][ T8199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2323.621109][ T8199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2323.666473][ T8208] netlink: 'syz.2.11079': attribute type 25 has an invalid length. [ 2324.261005][ T8219] netlink: 510 bytes leftover after parsing attributes in process `syz.1.11086'. [ 2324.719088][ T8222] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11084'. [ 2325.236466][ T8228] FAULT_INJECTION: forcing a failure. [ 2325.236466][ T8228] name failslab, interval 1, probability 0, space 0, times 0 [ 2325.303949][ T8228] CPU: 0 PID: 8228 Comm: syz.4.11088 Not tainted syzkaller #0 [ 2325.311489][ T8228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2325.321586][ T8228] Call Trace: [ 2325.325083][ T8228] [ 2325.328038][ T8228] dump_stack_lvl+0x188/0x24e [ 2325.332759][ T8228] ? show_regs_print_info+0x12/0x12 [ 2325.337992][ T8228] ? load_image+0x400/0x400 [ 2325.342539][ T8228] ? __might_sleep+0xd0/0xd0 [ 2325.347174][ T8228] ? __lock_acquire+0x7d10/0x7d10 [ 2325.352258][ T8228] should_fail_ex+0x399/0x4d0 [ 2325.356990][ T8228] should_failslab+0x5/0x20 [ 2325.361540][ T8228] slab_pre_alloc_hook+0x59/0x310 [ 2325.366956][ T8228] ? tomoyo_encode+0x27e/0x540 [ 2325.371761][ T8228] __kmem_cache_alloc_node+0x4f/0x260 [ 2325.377159][ T8228] ? tomoyo_encode+0x27e/0x540 [ 2325.381944][ T8228] __kmalloc+0xa0/0x240 [ 2325.386131][ T8228] tomoyo_encode+0x27e/0x540 [ 2325.390760][ T8228] tomoyo_realpath_from_path+0x58e/0x5d0 [ 2325.396445][ T8228] ? tomoyo_path_number_perm+0x205/0x650 [ 2325.402168][ T8228] tomoyo_path_number_perm+0x22f/0x650 [ 2325.407652][ T8228] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2325.413135][ T8228] ? ksys_write+0x1c0/0x250 [ 2325.417856][ T8228] ? common_file_perm+0x171/0x1c0 [ 2325.422940][ T8228] ? __fget_files+0x28/0x4b0 [ 2325.427562][ T8228] ? __fget_files+0x28/0x4b0 [ 2325.432190][ T8228] security_file_ioctl+0x6c/0xa0 [ 2325.437156][ T8228] __se_sys_ioctl+0x48/0x170 [ 2325.441768][ T8228] do_syscall_64+0x4c/0xa0 [ 2325.446292][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 2325.450995][ T8228] ? clear_bhb_loop+0x60/0xb0 [ 2325.455685][ T8228] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2325.461589][ T8228] RIP: 0033:0x7fdd9279aeb9 [ 2325.466013][ T8228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2325.485718][ T8228] RSP: 002b:00007fdd909f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2325.494154][ T8228] RAX: ffffffffffffffda RBX: 00007fdd92a16180 RCX: 00007fdd9279aeb9 [ 2325.502223][ T8228] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000048 [ 2325.510293][ T8228] RBP: 00007fdd909f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2325.518283][ T8228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2325.526262][ T8228] R13: 00007fdd92a16218 R14: 00007fdd92a16180 R15: 00007ffc515eb5b8 [ 2325.534263][ T8228] [ 2325.560653][ T8228] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2326.461733][ T8245] FAULT_INJECTION: forcing a failure. [ 2326.461733][ T8245] name failslab, interval 1, probability 0, space 0, times 0 [ 2326.488956][ T8245] CPU: 0 PID: 8245 Comm: syz.3.11092 Not tainted syzkaller #0 [ 2326.496500][ T8245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2326.506596][ T8245] Call Trace: [ 2326.509899][ T8245] [ 2326.512835][ T8245] dump_stack_lvl+0x188/0x24e [ 2326.517556][ T8245] ? show_regs_print_info+0x12/0x12 [ 2326.522765][ T8245] ? load_image+0x400/0x400 [ 2326.527291][ T8245] ? __might_sleep+0xd0/0xd0 [ 2326.531902][ T8245] ? __lock_acquire+0x7d10/0x7d10 [ 2326.537051][ T8245] should_fail_ex+0x399/0x4d0 [ 2326.541808][ T8245] should_failslab+0x5/0x20 [ 2326.546353][ T8245] slab_pre_alloc_hook+0x59/0x310 [ 2326.551396][ T8245] kmem_cache_alloc_node+0x5a/0x320 [ 2326.556601][ T8245] ? __alloc_skb+0xfc/0x7e0 [ 2326.561141][ T8245] __alloc_skb+0xfc/0x7e0 [ 2326.565512][ T8245] ? netlink_autobind+0xda/0x300 [ 2326.570531][ T8245] netlink_sendmsg+0x654/0xbd0 [ 2326.575325][ T8245] ? netlink_getsockopt+0x550/0x550 [ 2326.580803][ T8245] ? aa_sock_msg_perm+0x94/0x150 [ 2326.585779][ T8245] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2326.591090][ T8245] ? security_socket_sendmsg+0x7c/0xa0 [ 2326.596579][ T8245] ? netlink_getsockopt+0x550/0x550 [ 2326.601800][ T8245] ____sys_sendmsg+0x5be/0x970 [ 2326.606596][ T8245] ? __sys_sendmsg_sock+0x30/0x30 [ 2326.611636][ T8245] ? __import_iovec+0x315/0x500 [ 2326.616503][ T8245] ? import_iovec+0x6f/0xa0 [ 2326.621052][ T8245] ___sys_sendmsg+0x2a2/0x360 [ 2326.625755][ T8245] ? __sys_sendmsg+0x290/0x290 [ 2326.630550][ T8245] ? __lock_acquire+0x7d10/0x7d10 [ 2326.635703][ T8245] __se_sys_sendmsg+0x1bb/0x2a0 [ 2326.641542][ T8245] ? __x64_sys_sendmsg+0x80/0x80 [ 2326.646518][ T8245] ? lockdep_hardirqs_on+0x94/0x140 [ 2326.651744][ T8245] do_syscall_64+0x4c/0xa0 [ 2326.656261][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 2326.660948][ T8245] ? clear_bhb_loop+0x60/0xb0 [ 2326.665642][ T8245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2326.671545][ T8245] RIP: 0033:0x7fb81eb9aeb9 [ 2326.675971][ T8245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2326.695597][ T8245] RSP: 002b:00007fb81f97b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2326.704024][ T8245] RAX: ffffffffffffffda RBX: 00007fb81ee16090 RCX: 00007fb81eb9aeb9 [ 2326.712008][ T8245] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 2326.719989][ T8245] RBP: 00007fb81f97b090 R08: 0000000000000000 R09: 0000000000000000 [ 2326.727994][ T8245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2326.735998][ T8245] R13: 00007fb81ee16128 R14: 00007fb81ee16090 R15: 00007ffe96df68a8 [ 2326.744040][ T8245] [ 2327.475852][ T8255] netlink: 'syz.2.11097': attribute type 25 has an invalid length. [ 2328.021585][ T8273] netlink: 'syz.2.11103': attribute type 10 has an invalid length. [ 2328.348447][ T8273] team0: Port device veth1_macvtap added [ 2328.365102][ T8271] netlink: 'syz.2.11103': attribute type 10 has an invalid length. [ 2329.864041][ T8285] netlink: 'syz.4.11106': attribute type 2 has an invalid length. [ 2329.886589][ T8285] netlink: 'syz.4.11106': attribute type 8 has an invalid length. [ 2329.894596][ T8285] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11106'. [ 2332.020411][ T8315] FAULT_INJECTION: forcing a failure. [ 2332.020411][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2332.034174][ T8315] CPU: 0 PID: 8315 Comm: syz.3.11114 Not tainted syzkaller #0 [ 2332.041689][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2332.051793][ T8315] Call Trace: [ 2332.055109][ T8315] [ 2332.058046][ T8315] dump_stack_lvl+0x188/0x24e [ 2332.062748][ T8315] ? show_regs_print_info+0x12/0x12 [ 2332.067986][ T8315] ? load_image+0x400/0x400 [ 2332.072501][ T8315] ? __lock_acquire+0x7d10/0x7d10 [ 2332.077629][ T8315] ? __virt_addr_valid+0x188/0x540 [ 2332.082758][ T8315] should_fail_ex+0x399/0x4d0 [ 2332.087464][ T8315] _copy_from_user+0x2c/0x170 [ 2332.092160][ T8315] iovec_from_user+0x143/0x360 [ 2332.096933][ T8315] __import_iovec+0x6d/0x500 [ 2332.101534][ T8315] ? __might_fault+0xa6/0x120 [ 2332.106224][ T8315] import_iovec+0x6f/0xa0 [ 2332.110572][ T8315] ___sys_recvmsg+0x4b6/0x590 [ 2332.115272][ T8315] ? __sys_recvmsg+0x290/0x290 [ 2332.120062][ T8315] ? common_file_perm+0x171/0x1c0 [ 2332.125108][ T8315] ? __fget_files+0x43d/0x4b0 [ 2332.129815][ T8315] __x64_sys_recvmsg+0x205/0x2e0 [ 2332.134773][ T8315] ? ___sys_recvmsg+0x590/0x590 [ 2332.139657][ T8315] ? lockdep_hardirqs_on+0x94/0x140 [ 2332.144968][ T8315] do_syscall_64+0x4c/0xa0 [ 2332.149395][ T8315] ? clear_bhb_loop+0x60/0xb0 [ 2332.154084][ T8315] ? clear_bhb_loop+0x60/0xb0 [ 2332.158858][ T8315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2332.164763][ T8315] RIP: 0033:0x7fb81eb9aeb9 [ 2332.169273][ T8315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2332.188978][ T8315] RSP: 002b:00007fb81f99c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2332.197405][ T8315] RAX: ffffffffffffffda RBX: 00007fb81ee15fa0 RCX: 00007fb81eb9aeb9 [ 2332.205396][ T8315] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2332.213379][ T8315] RBP: 00007fb81f99c090 R08: 0000000000000000 R09: 0000000000000000 [ 2332.221395][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2332.229373][ T8315] R13: 00007fb81ee16038 R14: 00007fb81ee15fa0 R15: 00007ffe96df68a8 [ 2332.237366][ T8315] [ 2334.386671][ T8326] netlink: 'syz.1.11118': attribute type 25 has an invalid length. [ 2334.476727][ T8329] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2335.489845][ T8359] FAULT_INJECTION: forcing a failure. [ 2335.489845][ T8359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2335.543742][ T8359] CPU: 0 PID: 8359 Comm: syz.4.11129 Not tainted syzkaller #0 [ 2335.551534][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2335.561625][ T8359] Call Trace: [ 2335.564953][ T8359] [ 2335.567913][ T8359] dump_stack_lvl+0x188/0x24e [ 2335.572636][ T8359] ? show_regs_print_info+0x12/0x12 [ 2335.577868][ T8359] ? load_image+0x400/0x400 [ 2335.582425][ T8359] ? __lock_acquire+0x7d10/0x7d10 [ 2335.587508][ T8359] ? __rcu_read_unlock+0x78/0xd0 [ 2335.592518][ T8359] should_fail_ex+0x399/0x4d0 [ 2335.597244][ T8359] _copy_to_user+0x2c/0x130 [ 2335.601874][ T8359] bpf_test_finish+0x266/0x600 [ 2335.606680][ T8359] ? convert___skb_to_skb+0x580/0x580 [ 2335.612087][ T8359] ? convert_skb_to___skb+0x420/0x420 [ 2335.617517][ T8359] ? __build_skb+0x257/0x3c0 [ 2335.622152][ T8359] bpf_prog_test_run_skb+0xc99/0x12a0 [ 2335.627596][ T8359] ? cpu_online+0xa0/0xa0 [ 2335.632051][ T8359] bpf_prog_test_run+0x31e/0x390 [ 2335.637041][ T8359] __sys_bpf+0x62b/0x780 [ 2335.641332][ T8359] ? bpf_link_show_fdinfo+0x380/0x380 [ 2335.646774][ T8359] ? lock_chain_count+0x20/0x20 [ 2335.651727][ T8359] __x64_sys_bpf+0x78/0x90 [ 2335.656186][ T8359] do_syscall_64+0x4c/0xa0 [ 2335.660676][ T8359] ? clear_bhb_loop+0x60/0xb0 [ 2335.665403][ T8359] ? clear_bhb_loop+0x60/0xb0 [ 2335.670215][ T8359] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2335.676167][ T8359] RIP: 0033:0x7fdd9279aeb9 [ 2335.680632][ T8359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2335.700380][ T8359] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2335.708848][ T8359] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2335.716867][ T8359] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 2335.724973][ T8359] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2335.733166][ T8359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.741188][ T8359] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2335.749220][ T8359] [ 2338.009636][ T8374] netlink: 'syz.3.11134': attribute type 25 has an invalid length. [ 2338.117404][ T8385] IPv6: Can't replace route, no match found [ 2338.143849][ T8385] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2338.185952][ T8385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11139'. [ 2338.408446][ T8393] FAULT_INJECTION: forcing a failure. [ 2338.408446][ T8393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2338.436288][ T8393] CPU: 1 PID: 8393 Comm: syz.0.11141 Not tainted syzkaller #0 [ 2338.443936][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2338.454044][ T8393] Call Trace: [ 2338.457377][ T8393] [ 2338.460369][ T8393] dump_stack_lvl+0x188/0x24e [ 2338.465122][ T8393] ? show_regs_print_info+0x12/0x12 [ 2338.470394][ T8393] ? load_image+0x400/0x400 [ 2338.474962][ T8393] ? __lock_acquire+0x7d10/0x7d10 [ 2338.480048][ T8393] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 2338.485758][ T8393] should_fail_ex+0x399/0x4d0 [ 2338.490516][ T8393] _copy_from_user+0x2c/0x170 [ 2338.495344][ T8393] kcm_ioctl+0x34e/0x1090 [ 2338.499751][ T8393] ? __kmem_cache_free+0xb6/0x1f0 [ 2338.505190][ T8393] ? tomoyo_path_number_perm+0x205/0x650 [ 2338.510973][ T8393] ? kcm_release+0x5b0/0x5b0 [ 2338.515617][ T8393] ? tomoyo_path_number_perm+0x5a4/0x650 [ 2338.521402][ T8393] ? tomoyo_path_number_perm+0x205/0x650 [ 2338.527099][ T8393] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2338.532674][ T8393] sock_do_ioctl+0xfb/0x320 [ 2338.537276][ T8393] ? sock_show_fdinfo+0xb0/0xb0 [ 2338.542259][ T8393] sock_ioctl+0x4d2/0x710 [ 2338.546676][ T8393] ? sock_poll+0x410/0x410 [ 2338.551286][ T8393] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2338.556295][ T8393] ? security_file_ioctl+0x7c/0xa0 [ 2338.561486][ T8393] ? sock_poll+0x410/0x410 [ 2338.565973][ T8393] __se_sys_ioctl+0xfa/0x170 [ 2338.570637][ T8393] do_syscall_64+0x4c/0xa0 [ 2338.575108][ T8393] ? clear_bhb_loop+0x60/0xb0 [ 2338.579840][ T8393] ? clear_bhb_loop+0x60/0xb0 [ 2338.584585][ T8393] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2338.590535][ T8393] RIP: 0033:0x7f7d5879aeb9 [ 2338.595043][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2338.614702][ T8393] RSP: 002b:00007f7d59729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2338.623182][ T8393] RAX: ffffffffffffffda RBX: 00007f7d58a16090 RCX: 00007f7d5879aeb9 [ 2338.631209][ T8393] RDX: 0000200000000040 RSI: 00000000000089e0 RDI: 0000000000000005 [ 2338.639231][ T8393] RBP: 00007f7d59729090 R08: 0000000000000000 R09: 0000000000000000 [ 2338.647249][ T8393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2338.655272][ T8393] R13: 00007f7d58a16128 R14: 00007f7d58a16090 R15: 00007ffdb77affd8 [ 2338.663356][ T8393] [ 2338.789535][ T8395] netlink: 'syz.3.11142': attribute type 27 has an invalid length. [ 2338.913704][ T8395] netlink: 'syz.3.11142': attribute type 29 has an invalid length. [ 2338.941818][ T8395] netlink: 'syz.3.11142': attribute type 29 has an invalid length. [ 2339.027466][ T8399] netlink: 'syz.2.11144': attribute type 25 has an invalid length. [ 2339.313015][ T8406] netlink: 'syz.4.11148': attribute type 19 has an invalid length. [ 2339.599592][ T8417] FAULT_INJECTION: forcing a failure. [ 2339.599592][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.660485][ T8417] CPU: 0 PID: 8417 Comm: syz.1.11150 Not tainted syzkaller #0 [ 2339.668035][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2339.678220][ T8417] Call Trace: [ 2339.681540][ T8417] [ 2339.684506][ T8417] dump_stack_lvl+0x188/0x24e [ 2339.689229][ T8417] ? show_regs_print_info+0x12/0x12 [ 2339.694470][ T8417] ? load_image+0x400/0x400 [ 2339.699005][ T8417] ? __lock_acquire+0x7d10/0x7d10 [ 2339.704080][ T8417] ? verify_lock_unused+0x140/0x140 [ 2339.709331][ T8417] should_fail_ex+0x399/0x4d0 [ 2339.714072][ T8417] should_failslab+0x5/0x20 [ 2339.718616][ T8417] slab_pre_alloc_hook+0x59/0x310 [ 2339.723689][ T8417] kmem_cache_alloc_lru+0x49/0x2e0 [ 2339.728834][ T8417] ? __d_alloc+0x31/0x700 [ 2339.733200][ T8417] __d_alloc+0x31/0x700 [ 2339.737397][ T8417] d_alloc_pseudo+0x19/0x70 [ 2339.741932][ T8417] alloc_file_pseudo+0xe0/0x200 [ 2339.746831][ T8417] ? alloc_empty_file_noaccount+0x80/0x80 [ 2339.752680][ T8417] ? _raw_spin_unlock+0x24/0x40 [ 2339.757563][ T8417] ? alloc_fd+0x58f/0x630 [ 2339.761946][ T8417] anon_inode_getfd+0xc6/0x1c0 [ 2339.766751][ T8417] map_create+0xbe8/0x1000 [ 2339.771212][ T8417] __sys_bpf+0x38b/0x780 [ 2339.775494][ T8417] ? bpf_link_show_fdinfo+0x380/0x380 [ 2339.780905][ T8417] ? lock_chain_count+0x20/0x20 [ 2339.785791][ T8417] __x64_sys_bpf+0x78/0x90 [ 2339.790239][ T8417] do_syscall_64+0x4c/0xa0 [ 2339.794685][ T8417] ? clear_bhb_loop+0x60/0xb0 [ 2339.799385][ T8417] ? clear_bhb_loop+0x60/0xb0 [ 2339.804086][ T8417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2339.810003][ T8417] RIP: 0033:0x7f046b19aeb9 [ 2339.814443][ T8417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2339.834160][ T8417] RSP: 002b:00007f046c0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2339.842638][ T8417] RAX: ffffffffffffffda RBX: 00007f046b415fa0 RCX: 00007f046b19aeb9 [ 2339.850632][ T8417] RDX: 0000000000000048 RSI: 0000200000000340 RDI: 0000000000000000 [ 2339.858626][ T8417] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2339.866616][ T8417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2339.874607][ T8417] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2339.882618][ T8417] [ 2340.154972][ T8431] netlink: 'syz.1.11154': attribute type 15 has an invalid length. [ 2340.168289][ T8432] netlink: 'syz.4.11155': attribute type 2 has an invalid length. [ 2340.181892][ T8432] netlink: 'syz.4.11155': attribute type 1 has an invalid length. [ 2340.189905][ T8432] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.11155'. [ 2342.600880][ T8441] netlink: 'syz.0.11156': attribute type 27 has an invalid length. [ 2342.659555][ T8442] IPv6: Can't replace route, no match found [ 2342.716786][ T8442] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2342.852170][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11157'. [ 2344.005243][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.262582][ T8460] device bridge_slave_0 left promiscuous mode [ 2344.268886][ T8460] bridge0: port 1(bridge_slave_0) entered disabled state [ 2344.282326][ T8470] validate_nla: 3 callbacks suppressed [ 2344.282345][ T8470] netlink: 'syz.4.11166': attribute type 29 has an invalid length. [ 2344.310107][ T8465] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11162'. [ 2344.320613][ T8467] netlink: 'syz.4.11166': attribute type 27 has an invalid length. [ 2344.329624][ T8461] device wg2 entered promiscuous mode [ 2344.406699][ T8470] netlink: 'syz.4.11166': attribute type 29 has an invalid length. [ 2344.604377][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.610786][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2344.954848][ T8488] netlink: 'syz.3.11172': attribute type 27 has an invalid length. [ 2345.163859][ T8488] netlink: 'syz.3.11172': attribute type 29 has an invalid length. [ 2345.203866][ T8488] netlink: 'syz.3.11172': attribute type 29 has an invalid length. [ 2349.031245][ T8513] IPv6: Can't replace route, no match found [ 2349.055602][ T8513] mac80211_hwsim hwsim45 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2349.163776][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11179'. [ 2349.551437][ T8524] netlink: 'syz.1.11181': attribute type 29 has an invalid length. [ 2349.598247][ T8523] netlink: 'syz.1.11181': attribute type 27 has an invalid length. [ 2349.608006][ T8524] netlink: 'syz.1.11181': attribute type 29 has an invalid length. [ 2349.714281][ T8528] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11182'. [ 2349.802494][ T8532] netlink: 'syz.3.11184': attribute type 27 has an invalid length. [ 2349.844528][ T8527] device wg2 entered promiscuous mode [ 2349.883294][ T8532] netlink: 'syz.3.11184': attribute type 29 has an invalid length. [ 2349.900725][ T8532] netlink: 'syz.3.11184': attribute type 29 has an invalid length. [ 2353.863526][ T8570] FAULT_INJECTION: forcing a failure. [ 2353.863526][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 2353.894937][ T8575] netlink: 'syz.4.11198': attribute type 27 has an invalid length. [ 2353.933503][ T8572] FAULT_INJECTION: forcing a failure. [ 2353.933503][ T8572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2353.951830][ T8570] CPU: 1 PID: 8570 Comm: syz.2.11196 Not tainted syzkaller #0 [ 2353.959372][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2353.969470][ T8570] Call Trace: [ 2353.972785][ T8570] [ 2353.975790][ T8570] dump_stack_lvl+0x188/0x24e [ 2353.980604][ T8570] ? show_regs_print_info+0x12/0x12 [ 2353.985931][ T8570] ? load_image+0x400/0x400 [ 2353.990490][ T8570] ? __might_sleep+0xd0/0xd0 [ 2353.995118][ T8570] ? __lock_acquire+0x7d10/0x7d10 [ 2354.000198][ T8570] should_fail_ex+0x399/0x4d0 [ 2354.004931][ T8570] should_failslab+0x5/0x20 [ 2354.009477][ T8570] slab_pre_alloc_hook+0x59/0x310 [ 2354.014555][ T8570] kmem_cache_alloc_node+0x5a/0x320 [ 2354.019885][ T8570] ? __alloc_skb+0xfc/0x7e0 [ 2354.024530][ T8570] __alloc_skb+0xfc/0x7e0 [ 2354.029069][ T8570] ? netlink_autobind+0xda/0x300 [ 2354.034067][ T8570] netlink_sendmsg+0x654/0xbd0 [ 2354.038992][ T8570] ? netlink_getsockopt+0x550/0x550 [ 2354.044241][ T8570] ? aa_sock_msg_perm+0x94/0x150 [ 2354.049230][ T8570] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2354.054637][ T8570] ? security_socket_sendmsg+0x7c/0xa0 [ 2354.060239][ T8570] ? netlink_getsockopt+0x550/0x550 [ 2354.065584][ T8570] ____sys_sendmsg+0x5be/0x970 [ 2354.070469][ T8570] ? __sys_sendmsg_sock+0x30/0x30 [ 2354.075564][ T8570] ? __import_iovec+0x315/0x500 [ 2354.080504][ T8570] ? import_iovec+0x6f/0xa0 [ 2354.085072][ T8570] ___sys_sendmsg+0x2a2/0x360 [ 2354.089910][ T8570] ? __sys_sendmsg+0x290/0x290 [ 2354.094777][ T8570] ? __lock_acquire+0x7d10/0x7d10 [ 2354.099909][ T8570] __se_sys_sendmsg+0x1bb/0x2a0 [ 2354.104826][ T8570] ? __x64_sys_sendmsg+0x80/0x80 [ 2354.109853][ T8570] ? lockdep_hardirqs_on+0x94/0x140 [ 2354.115483][ T8570] do_syscall_64+0x4c/0xa0 [ 2354.119956][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 2354.124676][ T8570] ? clear_bhb_loop+0x60/0xb0 [ 2354.129432][ T8570] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2354.135474][ T8570] RIP: 0033:0x7efdf8d9aeb9 [ 2354.139940][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2354.159678][ T8570] RSP: 002b:00007efdf9c01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2354.168141][ T8570] RAX: ffffffffffffffda RBX: 00007efdf9015fa0 RCX: 00007efdf8d9aeb9 [ 2354.176146][ T8570] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 2354.184154][ T8570] RBP: 00007efdf9c01090 R08: 0000000000000000 R09: 0000000000000000 [ 2354.192156][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2354.200246][ T8570] R13: 00007efdf9016038 R14: 00007efdf9015fa0 R15: 00007ffce47f8958 [ 2354.208294][ T8570] [ 2354.215607][ T8575] netlink: 'syz.4.11198': attribute type 29 has an invalid length. [ 2354.233363][ T8572] CPU: 1 PID: 8572 Comm: syz.1.11195 Not tainted syzkaller #0 [ 2354.240893][ T8572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2354.250988][ T8572] Call Trace: [ 2354.254300][ T8572] [ 2354.257270][ T8572] dump_stack_lvl+0x188/0x24e [ 2354.262004][ T8572] ? show_regs_print_info+0x12/0x12 [ 2354.267249][ T8572] ? load_image+0x400/0x400 [ 2354.271817][ T8572] ? __lock_acquire+0x7d10/0x7d10 [ 2354.276903][ T8572] ? snprintf+0xe5/0x140 [ 2354.281188][ T8572] should_fail_ex+0x399/0x4d0 [ 2354.285907][ T8572] _copy_to_user+0x2c/0x130 [ 2354.290462][ T8572] simple_read_from_buffer+0xe3/0x150 [ 2354.295879][ T8572] proc_fail_nth_read+0x1a6/0x220 [ 2354.300934][ T8572] ? proc_fault_inject_write+0x310/0x310 [ 2354.301294][ T8575] netlink: 'syz.4.11198': attribute type 29 has an invalid length. [ 2354.306662][ T8572] ? fsnotify_perm+0x248/0x550 [ 2354.306698][ T8572] ? proc_fault_inject_write+0x310/0x310 [ 2354.306723][ T8572] vfs_read+0x2de/0xa00 [ 2354.329554][ T8572] ? kernel_read+0x1e0/0x1e0 [ 2354.334180][ T8572] ? __fget_files+0x28/0x4b0 [ 2354.338908][ T8572] ? __fget_files+0x28/0x4b0 [ 2354.343541][ T8572] ? __fget_files+0x43d/0x4b0 [ 2354.348271][ T8572] ? __fdget_pos+0x2ae/0x360 [ 2354.353090][ T8572] ? ksys_read+0x71/0x250 [ 2354.357556][ T8572] ksys_read+0x14c/0x250 [ 2354.361832][ T8572] ? vfs_write+0xa30/0xa30 [ 2354.366370][ T8572] ? lockdep_hardirqs_on+0x94/0x140 [ 2354.371604][ T8572] do_syscall_64+0x4c/0xa0 [ 2354.376036][ T8572] ? clear_bhb_loop+0x60/0xb0 [ 2354.380728][ T8572] ? clear_bhb_loop+0x60/0xb0 [ 2354.385513][ T8572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2354.391594][ T8572] RIP: 0033:0x7f046b15b78e [ 2354.396022][ T8572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2354.415731][ T8572] RSP: 002b:00007f046c0d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2354.424251][ T8572] RAX: ffffffffffffffda RBX: 00007f046c0d16c0 RCX: 00007f046b15b78e [ 2354.432237][ T8572] RDX: 000000000000000f RSI: 00007f046c0d10a0 RDI: 0000000000000006 [ 2354.440310][ T8572] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2354.448299][ T8572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2354.456287][ T8572] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2354.464308][ T8572] [ 2354.473575][ T8576] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2354.669896][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11197'. [ 2354.834569][ T8598] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11201'. [ 2355.065986][ T4272] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 2355.159692][ T8600] netlink: 'syz.4.11203': attribute type 25 has an invalid length. [ 2355.188370][ T4272] Bluetooth: hci0: unknown advertising packet type: 0x50 [ 2355.188443][ T4272] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2355.517705][ T8615] device wg2 entered promiscuous mode [ 2355.652936][ T8613] netlink: 188 bytes leftover after parsing attributes in process `syz.4.11207'. [ 2356.113021][ T8622] netlink: 'syz.1.11209': attribute type 27 has an invalid length. [ 2356.228323][ T8623] netlink: 'syz.1.11209': attribute type 29 has an invalid length. [ 2356.258354][ T8623] netlink: 'syz.1.11209': attribute type 29 has an invalid length. [ 2356.302380][ T8622] netlink: 'syz.1.11209': attribute type 29 has an invalid length. [ 2356.583496][ T8627] netlink: 'syz.1.11210': attribute type 12 has an invalid length. [ 2356.622505][ T8627] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11210'. [ 2358.436301][ T4272] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 2358.526642][ T8647] netlink: 'syz.4.11217': attribute type 25 has an invalid length. [ 2358.674148][ T4272] Bluetooth: hci4: unknown advertising packet type: 0x50 [ 2358.674193][ T4272] Bluetooth: hci4: Malformed LE Event: 0x02 [ 2359.077156][ T8662] netlink: 'syz.2.11220': attribute type 29 has an invalid length. [ 2359.738567][ T8659] netlink: 'syz.2.11220': attribute type 27 has an invalid length. [ 2361.478163][ T8662] netlink: 'syz.2.11220': attribute type 29 has an invalid length. [ 2361.489803][ T8651] syzkaller0: delete flow: hash 1353663890 index 1 [ 2364.323981][ T8676] IPv6: Can't replace route, no match found [ 2364.330274][ T8675] mac80211_hwsim hwsim49 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2364.339619][ T8680] netlink: 'syz.2.11226': attribute type 10 has an invalid length. [ 2364.349380][ T8680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11226'. [ 2364.360642][ T8680] device ipvlan1 entered promiscuous mode [ 2364.369695][ T8680] bridge0: port 1(ipvlan1) entered blocking state [ 2364.377237][ T8680] bridge0: port 1(ipvlan1) entered disabled state [ 2364.386019][ T8680] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2364.403627][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11224'. [ 2364.560126][ T4272] Bluetooth: hci4: ISO packet for unknown connection handle 2366 [ 2365.043728][ T4272] Bluetooth: hci0: unknown advertising packet type: 0x50 [ 2365.043776][ T4272] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2365.234999][ T8713] netlink: 'syz.0.11235': attribute type 27 has an invalid length. [ 2365.450882][ T8719] netlink: 'syz.0.11235': attribute type 29 has an invalid length. [ 2365.467267][ T8719] netlink: 'syz.0.11235': attribute type 29 has an invalid length. [ 2365.477871][ T8713] netlink: 'syz.0.11235': attribute type 29 has an invalid length. [ 2365.679468][ T8724] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.11238'. [ 2368.352991][ T4272] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 2368.628962][ T8747] netlink: 'syz.2.11244': attribute type 12 has an invalid length. [ 2368.657373][ T8747] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11244'. [ 2368.722241][ T8754] netlink: 'syz.1.11246': attribute type 25 has an invalid length. [ 2368.883831][ T4272] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 2368.883875][ T4272] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2368.976885][ T8761] netlink: 'syz.1.11248': attribute type 27 has an invalid length. [ 2369.018542][ T8761] netlink: 'syz.1.11248': attribute type 29 has an invalid length. [ 2369.071791][ T8761] netlink: 'syz.1.11248': attribute type 29 has an invalid length. [ 2369.901474][ T4272] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2372.459872][ T4272] Bluetooth: hci0: unknown advertising packet type: 0x50 [ 2372.459917][ T4272] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2372.567859][ T8800] netlink: 'syz.1.11262': attribute type 27 has an invalid length. [ 2372.583769][ T8800] netlink: 'syz.1.11262': attribute type 29 has an invalid length. [ 2372.592821][ T8800] netlink: 'syz.1.11262': attribute type 29 has an invalid length. [ 2373.003530][ T8813] FAULT_INJECTION: forcing a failure. [ 2373.003530][ T8813] name failslab, interval 1, probability 0, space 0, times 0 [ 2373.016666][ T8813] CPU: 0 PID: 8813 Comm: syz.0.11264 Not tainted syzkaller #0 [ 2373.024176][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2373.034280][ T8813] Call Trace: [ 2373.037608][ T8813] [ 2373.040573][ T8813] dump_stack_lvl+0x188/0x24e [ 2373.045304][ T8813] ? show_regs_print_info+0x12/0x12 [ 2373.050545][ T8813] ? load_image+0x400/0x400 [ 2373.055102][ T8813] ? __might_sleep+0xd0/0xd0 [ 2373.059729][ T8813] ? __lock_acquire+0x7d10/0x7d10 [ 2373.064804][ T8813] should_fail_ex+0x399/0x4d0 [ 2373.069536][ T8813] should_failslab+0x5/0x20 [ 2373.074102][ T8813] slab_pre_alloc_hook+0x59/0x310 [ 2373.079166][ T8813] kmem_cache_alloc_node+0x5a/0x320 [ 2373.084412][ T8813] ? __alloc_skb+0xfc/0x7e0 [ 2373.089046][ T8813] __alloc_skb+0xfc/0x7e0 [ 2373.093425][ T8813] ? netlink_autobind+0xda/0x300 [ 2373.098488][ T8813] netlink_sendmsg+0x654/0xbd0 [ 2373.103298][ T8813] ? netlink_getsockopt+0x550/0x550 [ 2373.108535][ T8813] ? aa_sock_msg_perm+0x94/0x150 [ 2373.113511][ T8813] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2373.118830][ T8813] ? security_socket_sendmsg+0x7c/0xa0 [ 2373.124341][ T8813] ? netlink_getsockopt+0x550/0x550 [ 2373.129583][ T8813] ____sys_sendmsg+0x5be/0x970 [ 2373.134399][ T8813] ? __sys_sendmsg_sock+0x30/0x30 [ 2373.139458][ T8813] ? __import_iovec+0x315/0x500 [ 2373.144350][ T8813] ? import_iovec+0x6f/0xa0 [ 2373.149070][ T8813] ___sys_sendmsg+0x2a2/0x360 [ 2373.153802][ T8813] ? __sys_sendmsg+0x290/0x290 [ 2373.158712][ T8813] ? trace_call_bpf+0xbf/0x6b0 [ 2373.163552][ T8813] __se_sys_sendmsg+0x1bb/0x2a0 [ 2373.168452][ T8813] ? __x64_sys_sendmsg+0x80/0x80 [ 2373.173452][ T8813] ? lockdep_hardirqs_on+0x94/0x140 [ 2373.178697][ T8813] do_syscall_64+0x4c/0xa0 [ 2373.183154][ T8813] ? clear_bhb_loop+0x60/0xb0 [ 2373.187870][ T8813] ? clear_bhb_loop+0x60/0xb0 [ 2373.192686][ T8813] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2373.198616][ T8813] RIP: 0033:0x7f7d5879aeb9 [ 2373.203063][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2373.222895][ T8813] RSP: 002b:00007f7d59729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2373.231443][ T8813] RAX: ffffffffffffffda RBX: 00007f7d58a16090 RCX: 00007f7d5879aeb9 [ 2373.239446][ T8813] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 000000000000000f [ 2373.247451][ T8813] RBP: 00007f7d59729090 R08: 0000000000000000 R09: 0000000000000000 [ 2373.255453][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2373.263456][ T8813] R13: 00007f7d58a16128 R14: 00007f7d58a16090 R15: 00007ffdb77affd8 [ 2373.271488][ T8813] [ 2373.783580][ T8826] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11266'. [ 2376.934148][ T8839] netlink: 'syz.4.11273': attribute type 27 has an invalid length. [ 2376.958902][ T4272] Bluetooth: hci0: ISO packet for unknown connection handle 2366 [ 2376.972329][ T8839] netlink: 'syz.4.11273': attribute type 29 has an invalid length. [ 2376.980574][ T8839] netlink: 'syz.4.11273': attribute type 29 has an invalid length. [ 2377.057274][ T4272] Bluetooth: hci3: unknown advertising packet type: 0x50 [ 2377.057320][ T4272] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2377.169148][ T8851] FAULT_INJECTION: forcing a failure. [ 2377.169148][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.183166][ T8851] CPU: 0 PID: 8851 Comm: syz.1.11275 Not tainted syzkaller #0 [ 2377.190687][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2377.200786][ T8851] Call Trace: [ 2377.204102][ T8851] [ 2377.207063][ T8851] dump_stack_lvl+0x188/0x24e [ 2377.211775][ T8851] ? show_regs_print_info+0x12/0x12 [ 2377.217024][ T8851] ? load_image+0x400/0x400 [ 2377.221552][ T8851] ? __might_sleep+0xd0/0xd0 [ 2377.226154][ T8851] ? __lock_acquire+0x7d10/0x7d10 [ 2377.231203][ T8851] should_fail_ex+0x399/0x4d0 [ 2377.235904][ T8851] should_failslab+0x5/0x20 [ 2377.240430][ T8851] slab_pre_alloc_hook+0x59/0x310 [ 2377.245472][ T8851] kmem_cache_alloc_node+0x5a/0x320 [ 2377.250679][ T8851] ? __alloc_skb+0xfc/0x7e0 [ 2377.255201][ T8851] __alloc_skb+0xfc/0x7e0 [ 2377.259548][ T8851] ? netlink_autobind+0xda/0x300 [ 2377.264507][ T8851] netlink_sendmsg+0x654/0xbd0 [ 2377.269293][ T8851] ? netlink_getsockopt+0x550/0x550 [ 2377.274508][ T8851] ? aa_sock_msg_perm+0x94/0x150 [ 2377.279462][ T8851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2377.284753][ T8851] ? security_socket_sendmsg+0x7c/0xa0 [ 2377.290408][ T8851] ? netlink_getsockopt+0x550/0x550 [ 2377.295620][ T8851] ____sys_sendmsg+0x5be/0x970 [ 2377.300406][ T8851] ? __sys_sendmsg_sock+0x30/0x30 [ 2377.305443][ T8851] ? __import_iovec+0x315/0x500 [ 2377.310396][ T8851] ? import_iovec+0x6f/0xa0 [ 2377.315051][ T8851] ___sys_sendmsg+0x2a2/0x360 [ 2377.319780][ T8851] ? __sys_sendmsg+0x290/0x290 [ 2377.324603][ T8851] ? __lock_acquire+0x7d10/0x7d10 [ 2377.329676][ T8851] __se_sys_sendmsg+0x1bb/0x2a0 [ 2377.334549][ T8851] ? __x64_sys_sendmsg+0x80/0x80 [ 2377.339516][ T8851] ? lockdep_hardirqs_on+0x94/0x140 [ 2377.344739][ T8851] do_syscall_64+0x4c/0xa0 [ 2377.349167][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 2377.353856][ T8851] ? clear_bhb_loop+0x60/0xb0 [ 2377.358551][ T8851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2377.364469][ T8851] RIP: 0033:0x7f046b19aeb9 [ 2377.368901][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2377.388520][ T8851] RSP: 002b:00007f046c0d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2377.396957][ T8851] RAX: ffffffffffffffda RBX: 00007f046b415fa0 RCX: 00007f046b19aeb9 [ 2377.405462][ T8851] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2377.413443][ T8851] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2377.421511][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2377.429491][ T8851] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2377.437574][ T8851] [ 2378.995016][ T4272] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2380.829769][ T4272] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2380.829813][ T4272] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2381.747593][ T8894] netlink: 'syz.4.11289': attribute type 27 has an invalid length. [ 2381.844844][ T8901] netlink: 'syz.0.11291': attribute type 10 has an invalid length. [ 2381.871527][ T8901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11291'. [ 2381.891099][ T8901] device virt_wifi0 entered promiscuous mode [ 2381.911301][ T8901] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2382.264171][ T4272] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2382.580026][ T8923] netlink: 'syz.0.11300': attribute type 25 has an invalid length. [ 2384.181315][ T8933] netlink: 'syz.4.11304': attribute type 27 has an invalid length. [ 2384.308313][ T4272] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 2384.308355][ T4272] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2385.468650][ T8953] netlink: 'syz.4.11308': attribute type 2 has an invalid length. [ 2385.510702][ T8953] netlink: 'syz.4.11308': attribute type 1 has an invalid length. [ 2385.644154][ T4272] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 2386.025719][ T8971] netlink: 'syz.4.11316': attribute type 27 has an invalid length. [ 2386.074999][ T8967] FAULT_INJECTION: forcing a failure. [ 2386.074999][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2386.099871][ T8967] CPU: 0 PID: 8967 Comm: syz.1.11315 Not tainted syzkaller #0 [ 2386.107397][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2386.117479][ T8967] Call Trace: [ 2386.120774][ T8967] [ 2386.123720][ T8967] dump_stack_lvl+0x188/0x24e [ 2386.128422][ T8967] ? show_regs_print_info+0x12/0x12 [ 2386.133638][ T8967] ? load_image+0x400/0x400 [ 2386.138160][ T8967] ? __lock_acquire+0x7d10/0x7d10 [ 2386.143295][ T8967] should_fail_ex+0x399/0x4d0 [ 2386.147999][ T8967] _copy_from_user+0x2c/0x170 [ 2386.152693][ T8967] get_user_ifreq+0x67/0x170 [ 2386.157301][ T8967] br_ioctl_stub+0x171/0xcf0 [ 2386.161912][ T8967] ? rcu_is_watching+0x11/0xa0 [ 2386.166693][ T8967] ? rcu_read_unlock+0xa0/0xa0 [ 2386.171558][ T8967] ? __mutex_lock+0x1ab/0xaf0 [ 2386.176259][ T8967] ? mutex_lock_nested+0x10/0x10 [ 2386.181234][ T8967] ? rcu_read_unlock+0xa0/0xa0 [ 2386.186018][ T8967] sock_ioctl+0x494/0x710 [ 2386.190373][ T8967] ? sock_poll+0x410/0x410 [ 2386.194814][ T8967] ? bpf_lsm_file_ioctl+0x5/0x10 [ 2386.199765][ T8967] ? security_file_ioctl+0x7c/0xa0 [ 2386.204898][ T8967] ? sock_poll+0x410/0x410 [ 2386.209331][ T8967] __se_sys_ioctl+0xfa/0x170 [ 2386.213943][ T8967] do_syscall_64+0x4c/0xa0 [ 2386.218377][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 2386.223065][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 2386.227753][ T8967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2386.233657][ T8967] RIP: 0033:0x7f046b19aeb9 [ 2386.238084][ T8967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2386.257700][ T8967] RSP: 002b:00007f046c0d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2386.266127][ T8967] RAX: ffffffffffffffda RBX: 00007f046b415fa0 RCX: 00007f046b19aeb9 [ 2386.274111][ T8967] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000009 [ 2386.282264][ T8967] RBP: 00007f046c0d1090 R08: 0000000000000000 R09: 0000000000000000 [ 2386.290241][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2386.298222][ T8967] R13: 00007f046b416038 R14: 00007f046b415fa0 R15: 00007ffe06673448 [ 2386.306227][ T8967] [ 2386.326398][ T8978] netlink: 'syz.3.11318': attribute type 25 has an invalid length. [ 2386.596146][ T4272] Bluetooth: hci0: unknown advertising packet type: 0x50 [ 2386.596193][ T4272] Bluetooth: hci0: Malformed LE Event: 0x02 [ 2386.940753][ T8995] TCP: TCP_TX_DELAY enabled [ 2387.100295][ T4272] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2387.234099][ T9004] netlink: 'syz.0.11331': attribute type 27 has an invalid length. [ 2387.334986][ T9004] netlink: 'syz.0.11331': attribute type 29 has an invalid length. [ 2387.365942][ T9004] netlink: 'syz.0.11331': attribute type 29 has an invalid length. [ 2387.529906][ T9014] netlink: 'syz.4.11333': attribute type 25 has an invalid length. [ 2387.793780][ T4272] Bluetooth: hci3: unknown advertising packet type: 0x50 [ 2387.793824][ T4272] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2390.264203][ T9025] FAULT_INJECTION: forcing a failure. [ 2390.264203][ T9025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.318575][ T9025] CPU: 1 PID: 9025 Comm: syz.4.11337 Not tainted syzkaller #0 [ 2390.326300][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2390.336398][ T9025] Call Trace: [ 2390.339705][ T9025] [ 2390.342675][ T9025] dump_stack_lvl+0x188/0x24e [ 2390.347487][ T9025] ? show_regs_print_info+0x12/0x12 [ 2390.352739][ T9025] ? load_image+0x400/0x400 [ 2390.357290][ T9025] ? __lock_acquire+0x7d10/0x7d10 [ 2390.362363][ T9025] ? __rcu_read_unlock+0x78/0xd0 [ 2390.367352][ T9025] should_fail_ex+0x399/0x4d0 [ 2390.372907][ T9025] _copy_to_user+0x2c/0x130 [ 2390.377465][ T9025] bpf_test_finish+0x266/0x600 [ 2390.382252][ T9025] ? convert___skb_to_skb+0x580/0x580 [ 2390.387629][ T9025] ? convert_skb_to___skb+0x420/0x420 [ 2390.393019][ T9025] ? __build_skb+0x257/0x3c0 [ 2390.397657][ T9025] bpf_prog_test_run_skb+0xc99/0x12a0 [ 2390.403089][ T9025] ? cpu_online+0xa0/0xa0 [ 2390.407459][ T9025] bpf_prog_test_run+0x31e/0x390 [ 2390.412451][ T9025] __sys_bpf+0x62b/0x780 [ 2390.416741][ T9025] ? bpf_link_show_fdinfo+0x380/0x380 [ 2390.422172][ T9025] ? lock_chain_count+0x20/0x20 [ 2390.427082][ T9025] __x64_sys_bpf+0x78/0x90 [ 2390.431532][ T9025] do_syscall_64+0x4c/0xa0 [ 2390.435996][ T9025] ? clear_bhb_loop+0x60/0xb0 [ 2390.440705][ T9025] ? clear_bhb_loop+0x60/0xb0 [ 2390.445421][ T9025] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2390.451371][ T9025] RIP: 0033:0x7fdd9279aeb9 [ 2390.455820][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2390.475562][ T9025] RSP: 002b:00007fdd935ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2390.484025][ T9025] RAX: ffffffffffffffda RBX: 00007fdd92a15fa0 RCX: 00007fdd9279aeb9 [ 2390.492040][ T9025] RDX: 0000000000000050 RSI: 0000200000000780 RDI: 000000000000000a [ 2390.500225][ T9025] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2390.508228][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2390.516235][ T9025] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2390.524271][ T9025] [ 2390.608324][ T4272] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2390.761825][ T9045] netlink: 'syz.1.11346': attribute type 27 has an invalid length. [ 2390.825499][ T9045] netlink: 'syz.1.11346': attribute type 29 has an invalid length. [ 2390.855160][ T9045] netlink: 'syz.1.11346': attribute type 29 has an invalid length. [ 2391.221494][ T4272] Bluetooth: hci3: unknown advertising packet type: 0x50 [ 2391.221539][ T4272] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2391.712655][ T9072] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.11353'. [ 2391.761282][ T9072] netlink: zone id is out of range [ 2391.789042][ T9072] netlink: 'syz.0.11353': attribute type 29 has an invalid length. [ 2392.003565][ T4272] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 2392.283724][ T9087] FAULT_INJECTION: forcing a failure. [ 2392.283724][ T9087] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.310306][ T9087] CPU: 0 PID: 9087 Comm: syz.3.11358 Not tainted syzkaller #0 [ 2392.317841][ T9087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2392.328070][ T9087] Call Trace: [ 2392.331390][ T9087] [ 2392.334352][ T9087] dump_stack_lvl+0x188/0x24e [ 2392.339077][ T9087] ? show_regs_print_info+0x12/0x12 [ 2392.344320][ T9087] ? load_image+0x400/0x400 [ 2392.348867][ T9087] ? __might_sleep+0xd0/0xd0 [ 2392.353507][ T9087] ? __lock_acquire+0x7d10/0x7d10 [ 2392.358680][ T9087] should_fail_ex+0x399/0x4d0 [ 2392.363404][ T9087] should_failslab+0x5/0x20 [ 2392.367921][ T9087] slab_pre_alloc_hook+0x59/0x310 [ 2392.372970][ T9087] ? allocate_cgrp_cset_links+0xc9/0x320 [ 2392.378635][ T9087] __kmem_cache_alloc_node+0x4f/0x260 [ 2392.384032][ T9087] ? allocate_cgrp_cset_links+0xc9/0x320 [ 2392.389677][ T9087] kmalloc_trace+0x26/0xe0 [ 2392.394144][ T9087] allocate_cgrp_cset_links+0xc9/0x320 [ 2392.399699][ T9087] find_css_set+0xa1a/0x15d0 [ 2392.404317][ T9087] ? cgroup_migrate_prepare_dst+0x6f0/0x6f0 [ 2392.410220][ T9087] ? mark_lock+0x94/0x320 [ 2392.414610][ T9087] cgroup_migrate_prepare_dst+0x12c/0x6f0 [ 2392.420363][ T9087] cgroup_attach_task+0x546/0x870 [ 2392.425391][ T9087] ? proc_nr_inodes+0x2f0/0x2f0 [ 2392.430333][ T9087] ? cgroup_attach_task+0x20f/0x870 [ 2392.435542][ T9087] ? cgroup_migrate_execute+0xf30/0xf30 [ 2392.441114][ T9087] ? cgroup_attach_permissions+0x4eb/0x9d0 [ 2392.446972][ T9087] ? revert_creds+0x17f/0x250 [ 2392.451656][ T9087] __cgroup_procs_write+0x239/0x350 [ 2392.456865][ T9087] cgroup_procs_write+0x23/0x40 [ 2392.461725][ T9087] ? cgroup_procs_next+0xa0/0xa0 [ 2392.466695][ T9087] cgroup_file_write+0x2c5/0x690 [ 2392.471640][ T9087] ? read_lock_is_recursive+0x10/0x10 [ 2392.477109][ T9087] ? cgroup_seqfile_stop+0xd0/0xd0 [ 2392.482365][ T9087] ? cgroup_seqfile_stop+0xd0/0xd0 [ 2392.487492][ T9087] kernfs_fop_write_iter+0x3b2/0x520 [ 2392.492802][ T9087] vfs_write+0x4b1/0xa30 [ 2392.497084][ T9087] ? file_end_write+0x250/0x250 [ 2392.501949][ T9087] ? __fget_files+0x43d/0x4b0 [ 2392.506751][ T9087] ? __fdget_pos+0x2ae/0x360 [ 2392.511360][ T9087] ? ksys_write+0x71/0x250 [ 2392.515992][ T9087] ksys_write+0x14c/0x250 [ 2392.520353][ T9087] ? __ia32_sys_read+0x80/0x80 [ 2392.525129][ T9087] ? lockdep_hardirqs_on+0x94/0x140 [ 2392.530335][ T9087] do_syscall_64+0x4c/0xa0 [ 2392.534779][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 2392.539460][ T9087] ? clear_bhb_loop+0x60/0xb0 [ 2392.544144][ T9087] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2392.550052][ T9087] RIP: 0033:0x7fb81eb9aeb9 [ 2392.554562][ T9087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2392.574451][ T9087] RSP: 002b:00007fb81f99c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2392.582916][ T9087] RAX: ffffffffffffffda RBX: 00007fb81ee15fa0 RCX: 00007fb81eb9aeb9 [ 2392.590896][ T9087] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000005 [ 2392.598905][ T9087] RBP: 00007fb81f99c090 R08: 0000000000000000 R09: 0000000000000000 [ 2392.606890][ T9087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2392.614890][ T9087] R13: 00007fb81ee16038 R14: 00007fb81ee15fa0 R15: 00007ffe96df68a8 [ 2392.622916][ T9087] [ 2392.671004][ T4272] Bluetooth: hci2: unknown advertising packet type: 0x50 [ 2392.671580][ T4272] Bluetooth: hci2: Malformed LE Event: 0x02 [ 2392.727853][ T9096] IPv6: Can't replace route, no match found [ 2392.736557][ T9096] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2392.808258][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11360'. [ 2393.346012][ T9114] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11369'. [ 2393.544023][ T9117] netlink: 'syz.0.11370': attribute type 2 has an invalid length. [ 2393.558887][ T9117] netlink: 'syz.0.11370': attribute type 8 has an invalid length. [ 2393.584170][ T9117] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11370'. [ 2393.790244][ T4272] Bluetooth: hci3: unknown advertising packet type: 0x50 [ 2393.790280][ T4272] Bluetooth: hci3: Malformed LE Event: 0x02 [ 2393.808760][ T4272] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 2394.055863][ T9137] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.11375'. [ 2394.932915][ T9157] IPv6: Can't replace route, no match found [ 2394.953353][ T9157] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2394.988285][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11380'. [ 2395.019651][ T9158] netlink: 'syz.4.11383': attribute type 3 has an invalid length. [ 2395.038938][ T9158] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.11383'. [ 2395.167037][ T9163] FAULT_INJECTION: forcing a failure. [ 2395.167037][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2395.301218][ T9163] CPU: 1 PID: 9163 Comm: syz.0.11384 Not tainted syzkaller #0 [ 2395.308850][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2395.318942][ T9163] Call Trace: [ 2395.322249][ T9163] [ 2395.325208][ T9163] dump_stack_lvl+0x188/0x24e [ 2395.329925][ T9163] ? show_regs_print_info+0x12/0x12 [ 2395.335163][ T9163] ? load_image+0x400/0x400 [ 2395.339708][ T9163] ? __lock_acquire+0x7d10/0x7d10 [ 2395.344863][ T9163] should_fail_ex+0x399/0x4d0 [ 2395.349580][ T9163] _copy_from_user+0x2c/0x170 [ 2395.354305][ T9163] __sys_bpf+0x2ea/0x780 [ 2395.358590][ T9163] ? bpf_link_show_fdinfo+0x380/0x380 [ 2395.364103][ T9163] ? lock_chain_count+0x20/0x20 [ 2395.369045][ T9163] __x64_sys_bpf+0x78/0x90 [ 2395.373489][ T9163] do_syscall_64+0x4c/0xa0 [ 2395.377923][ T9163] ? clear_bhb_loop+0x60/0xb0 [ 2395.382613][ T9163] ? clear_bhb_loop+0x60/0xb0 [ 2395.387314][ T9163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2395.393304][ T9163] RIP: 0033:0x7f7d5879aeb9 [ 2395.397732][ T9163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2395.417348][ T9163] RSP: 002b:00007f7d59729028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2395.425775][ T9163] RAX: ffffffffffffffda RBX: 00007f7d58a16090 RCX: 00007f7d5879aeb9 [ 2395.433755][ T9163] RDX: 0000000000000028 RSI: 0000200000000480 RDI: 0000000000000012 [ 2395.441732][ T9163] RBP: 00007f7d59729090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.449710][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.457695][ T9163] R13: 00007f7d58a16128 R14: 00007f7d58a16090 R15: 00007ffdb77affd8 [ 2395.465702][ T9163] [ 2395.492685][ T9169] FAULT_INJECTION: forcing a failure. [ 2395.492685][ T9169] name failslab, interval 1, probability 0, space 0, times 0 [ 2395.505577][ T9169] CPU: 0 PID: 9169 Comm: syz.3.11385 Not tainted syzkaller #0 [ 2395.513075][ T9169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2395.523169][ T9169] Call Trace: [ 2395.526482][ T9169] [ 2395.529439][ T9169] dump_stack_lvl+0x188/0x24e [ 2395.534161][ T9169] ? show_regs_print_info+0x12/0x12 [ 2395.539401][ T9169] ? load_image+0x400/0x400 [ 2395.543937][ T9169] ? verify_lock_unused+0x140/0x140 [ 2395.549188][ T9169] should_fail_ex+0x399/0x4d0 [ 2395.554057][ T9169] should_failslab+0x5/0x20 [ 2395.558613][ T9169] slab_pre_alloc_hook+0x59/0x310 [ 2395.563684][ T9169] kmem_cache_alloc+0x56/0x2f0 [ 2395.568487][ T9169] ? skb_clone+0x1e7/0x370 [ 2395.572949][ T9169] skb_clone+0x1e7/0x370 [ 2395.577234][ T9169] __netlink_deliver_tap+0x3ed/0x800 [ 2395.582574][ T9169] ? netlink_deliver_tap+0x2e/0x1b0 [ 2395.587821][ T9169] netlink_deliver_tap+0x19c/0x1b0 [ 2395.592979][ T9169] netlink_unicast+0x728/0x8d0 [ 2395.597810][ T9169] netlink_sendmsg+0x8ad/0xbd0 [ 2395.602647][ T9169] ? netlink_getsockopt+0x550/0x550 [ 2395.607892][ T9169] ? aa_sock_msg_perm+0x94/0x150 [ 2395.612872][ T9169] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2395.618196][ T9169] ? security_socket_sendmsg+0x7c/0xa0 [ 2395.623697][ T9169] ? netlink_getsockopt+0x550/0x550 [ 2395.628931][ T9169] ____sys_sendmsg+0x5be/0x970 [ 2395.633745][ T9169] ? __sys_sendmsg_sock+0x30/0x30 [ 2395.638810][ T9169] ? __import_iovec+0x315/0x500 [ 2395.643706][ T9169] ? import_iovec+0x6f/0xa0 [ 2395.648246][ T9169] ___sys_sendmsg+0x2a2/0x360 [ 2395.652970][ T9169] ? __sys_sendmsg+0x290/0x290 [ 2395.657802][ T9169] ? __lock_acquire+0x7d10/0x7d10 [ 2395.662888][ T9169] __se_sys_sendmsg+0x1bb/0x2a0 [ 2395.667780][ T9169] ? ct_nmi_exit+0x145/0x1c0 [ 2395.672411][ T9169] ? __x64_sys_sendmsg+0x80/0x80 [ 2395.677401][ T9169] ? lockdep_hardirqs_on+0x94/0x140 [ 2395.682654][ T9169] do_syscall_64+0x4c/0xa0 [ 2395.687382][ T9169] ? clear_bhb_loop+0x60/0xb0 [ 2395.692103][ T9169] ? clear_bhb_loop+0x60/0xb0 [ 2395.696821][ T9169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2395.702752][ T9169] RIP: 0033:0x7fb81eb9aeb9 [ 2395.707210][ T9169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2395.726869][ T9169] RSP: 002b:00007fb81f99c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2395.735318][ T9169] RAX: ffffffffffffffda RBX: 00007fb81ee15fa0 RCX: 00007fb81eb9aeb9 [ 2395.743320][ T9169] RDX: 0000000000000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2395.751320][ T9169] RBP: 00007fb81f99c090 R08: 0000000000000000 R09: 0000000000000000 [ 2395.759330][ T9169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2395.767336][ T9169] R13: 00007fb81ee16038 R14: 00007fb81ee15fa0 R15: 00007ffe96df68a8 [ 2395.775356][ T9169] [ 2395.881181][ T9130] Bluetooth: hci0: command 0x2016 tx timeout [ 2396.021581][ T9169] netlink: 144 bytes leftover after parsing attributes in process `syz.3.11385'. [ 2396.099791][ T9130] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2396.323372][ T9130] Bluetooth: hci1: unknown advertising packet type: 0x50 [ 2396.323418][ T9130] Bluetooth: hci1: Malformed LE Event: 0x02 [ 2396.740073][ T9196] FAULT_INJECTION: forcing a failure. [ 2396.740073][ T9196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2396.772269][ T9196] CPU: 0 PID: 9196 Comm: syz.4.11397 Not tainted syzkaller #0 [ 2396.779910][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2396.790016][ T9196] Call Trace: [ 2396.793323][ T9196] [ 2396.796278][ T9196] dump_stack_lvl+0x188/0x24e [ 2396.801092][ T9196] ? show_regs_print_info+0x12/0x12 [ 2396.806323][ T9196] ? load_image+0x400/0x400 [ 2396.810850][ T9196] ? __lock_acquire+0x7d10/0x7d10 [ 2396.815902][ T9196] ? snprintf+0xe5/0x140 [ 2396.820163][ T9196] should_fail_ex+0x399/0x4d0 [ 2396.824879][ T9196] _copy_to_user+0x2c/0x130 [ 2396.829408][ T9196] simple_read_from_buffer+0xe3/0x150 [ 2396.834827][ T9196] proc_fail_nth_read+0x1a6/0x220 [ 2396.839968][ T9196] ? proc_fault_inject_write+0x310/0x310 [ 2396.845624][ T9196] ? fsnotify_perm+0x248/0x550 [ 2396.850513][ T9196] ? proc_fault_inject_write+0x310/0x310 [ 2396.856167][ T9196] vfs_read+0x2de/0xa00 [ 2396.860355][ T9196] ? kernel_read+0x1e0/0x1e0 [ 2396.864967][ T9196] ? __fget_files+0x28/0x4b0 [ 2396.869575][ T9196] ? __fget_files+0x28/0x4b0 [ 2396.874185][ T9196] ? __fget_files+0x43d/0x4b0 [ 2396.878895][ T9196] ? __fdget_pos+0x2ae/0x360 [ 2396.883502][ T9196] ? ksys_read+0x71/0x250 [ 2396.887856][ T9196] ksys_read+0x14c/0x250 [ 2396.892221][ T9196] ? vfs_write+0xa30/0xa30 [ 2396.896676][ T9196] ? lockdep_hardirqs_on+0x94/0x140 [ 2396.901918][ T9196] do_syscall_64+0x4c/0xa0 [ 2396.906356][ T9196] ? clear_bhb_loop+0x60/0xb0 [ 2396.911246][ T9196] ? clear_bhb_loop+0x60/0xb0 [ 2396.916058][ T9196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2396.922006][ T9196] RIP: 0033:0x7fdd9275b78e [ 2396.926453][ T9196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2396.946102][ T9196] RSP: 002b:00007fdd935adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2396.954548][ T9196] RAX: ffffffffffffffda RBX: 00007fdd935ae6c0 RCX: 00007fdd9275b78e [ 2396.962542][ T9196] RDX: 000000000000000f RSI: 00007fdd935ae0a0 RDI: 0000000000000008 [ 2396.970533][ T9196] RBP: 00007fdd935ae090 R08: 0000000000000000 R09: 0000000000000000 [ 2396.978605][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2396.986596][ T9196] R13: 00007fdd92a16038 R14: 00007fdd92a15fa0 R15: 00007ffc515eb5b8 [ 2396.994702][ T9196] [ 2397.393690][ T9130] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 2406.034766][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.041198][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2412.699598][ T4272] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2412.708706][ T4272] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2412.719518][ T4272] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2412.727796][ T4272] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2412.736378][ T4272] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2412.744431][ T4272] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2412.754018][ T4272] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2412.773628][ T4272] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2412.801274][ T4272] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2412.809557][ T4272] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2412.817893][ T4272] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2412.825711][ T4272] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2414.092850][ T4272] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2414.111380][ T4272] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2414.119737][ T4272] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2414.128533][ T4272] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2414.136442][ T4272] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2414.144420][ T4272] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2414.461461][ T9130] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2414.471294][ T9130] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2414.486663][ T9130] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2414.494982][ T9130] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2414.503453][ T9130] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2414.510955][ T9130] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2414.552489][ T4272] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2414.570136][ T4272] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2414.578280][ T4272] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2414.587381][ T4272] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2414.595699][ T4272] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2414.603583][ T4272] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2414.831243][ T9221] Bluetooth: hci6: command 0x0409 tx timeout [ 2414.911263][ T9221] Bluetooth: hci5: command 0x0409 tx timeout [ 2416.191280][ T9221] Bluetooth: hci7: command 0x0409 tx timeout [ 2416.591183][ T9221] Bluetooth: hci9: command 0x0409 tx timeout [ 2416.671224][ T9221] Bluetooth: hci8: command 0x0409 tx timeout [ 2416.911107][ T9221] Bluetooth: hci6: command 0x041b tx timeout [ 2416.991122][ T9221] Bluetooth: hci5: command 0x041b tx timeout [ 2418.271204][ T9221] Bluetooth: hci7: command 0x041b tx timeout [ 2418.671189][ T9221] Bluetooth: hci9: command 0x041b tx timeout [ 2418.751263][ T9221] Bluetooth: hci8: command 0x041b tx timeout [ 2418.991141][ T9221] Bluetooth: hci6: command 0x040f tx timeout [ 2419.071161][ T9221] Bluetooth: hci5: command 0x040f tx timeout [ 2420.351164][ T9221] Bluetooth: hci7: command 0x040f tx timeout [ 2420.751731][ T9221] Bluetooth: hci9: command 0x040f tx timeout [ 2420.831169][ T9221] Bluetooth: hci8: command 0x040f tx timeout [ 2421.071131][ T9221] Bluetooth: hci6: command 0x0419 tx timeout [ 2421.151136][ T9221] Bluetooth: hci5: command 0x0419 tx timeout [ 2422.431173][ T9221] Bluetooth: hci7: command 0x0419 tx timeout [ 2422.831122][ T9221] Bluetooth: hci9: command 0x0419 tx timeout [ 2422.911139][ T9221] Bluetooth: hci8: command 0x0419 tx timeout [ 2423.951250][ T8591] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2654 jiffies s: 256981 root: 0x1/. [ 2423.970974][ T8591] rcu: blocking rcu_node structures (internal RCU debug): [ 2423.978461][ T8591] Sending NMI from CPU 1 to CPUs 0: [ 2423.984187][ C0] NMI backtrace for cpu 0 [ 2423.984200][ C0] CPU: 0 PID: 9186 Comm: syz.2.11391 Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2423.984217][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2423.984226][ C0] RIP: 0010:check_preemption_disabled+0x0/0x110 [ 2423.984250][ C0] Code: c7 60 9e bc 8c 4c 89 f6 e8 1d 39 0c fa e9 6e ff ff ff 00 00 cc cc 00 00 cc cc 48 c7 c7 c0 0b df 8a 48 c7 c6 00 0c df 8a eb 00 <55> 41 57 41 56 53 48 83 ec 10 65 48 8b 04 25 28 00 00 00 48 89 44 [ 2423.984263][ C0] RSP: 0000:ffffc90004d9f298 EFLAGS: 00000006 [ 2423.984277][ C0] RAX: 4000000000000000 RBX: 0000000000000000 RCX: 903522f1a855d900 [ 2423.984289][ C0] RDX: ffffc9001b2d5000 RSI: ffffffff8adf0c00 RDI: ffffffff8adf0bc0 [ 2423.984300][ C0] RBP: ffffc90004d9f368 R08: ffffffff8e1fc32f R09: 1ffffffff1c3f865 [ 2423.984311][ C0] R10: dffffc0000000000 R11: fffffbfff1c3f866 R12: dffffc0000000000 [ 2423.984322][ C0] R13: 0000000000000000 R14: ffff8880b8e35800 R15: 0000000000000000 [ 2423.984332][ C0] FS: 00007efdf9c016c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2423.984346][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2423.984357][ C0] CR2: 00007fdd935456b8 CR3: 000000007a812000 CR4: 00000000003506f0 [ 2423.984374][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2423.984384][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2423.984394][ C0] Call Trace: [ 2423.984399][ C0] [ 2423.984404][ C0] ct_nmi_enter+0x46/0x170 [ 2423.984420][ C0] ct_irq_enter_irqson+0xaf/0x170 [ 2423.984437][ C0] ? __jump_label_update+0x390/0x390 [ 2423.984451][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2423.984472][ C0] ? lock_chain_count+0x20/0x20 [ 2423.984492][ C0] ? rcu_is_watching+0x11/0xa0 [ 2423.984512][ C0] ? asm_sysvec_irq_work+0x16/0x20 [ 2423.984537][ C0] trace_irq_enable_rcuidle+0x9f/0x140 [ 2423.984559][ C0] trace_hardirqs_on+0x24/0x40 [ 2423.984576][ C0] asm_sysvec_irq_work+0x16/0x20 [ 2423.984592][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 2423.984608][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 92 30 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 2423.984620][ C0] RSP: 0000:ffffc90004d9f460 EFLAGS: 00000206 [ 2423.984632][ C0] RAX: 903522f1a855d900 RBX: 1ffff920009b3e94 RCX: 903522f1a855d900 [ 2423.984643][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c1220 RDI: ffffffff8adf0c20 [ 2423.984655][ C0] RBP: ffffc90004d9f550 R08: ffffffff90af3247 R09: 1ffffffff215e648 [ 2423.984666][ C0] R10: dffffc0000000000 R11: fffffbfff215e649 R12: 0000000000000246 [ 2423.984677][ C0] R13: dffffc0000000000 R14: ffff8880b8e3b900 R15: 0000000000000001 [ 2423.984696][ C0] ? lock_downgrade+0x7b0/0x830 [ 2423.984715][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 2423.984735][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 2423.984751][ C0] ? page_ext_get+0x1e/0x2a0 [ 2423.984771][ C0] ? page_ext_get+0x1de/0x2a0 [ 2423.984790][ C0] __rcu_read_unlock+0x78/0xd0 [ 2423.984806][ C0] page_ext_put+0x91/0xb0 [ 2423.984824][ C0] unmap_page_range+0x192d/0x2500 [ 2423.984859][ C0] unmap_vmas+0x260/0x390 [ 2423.984879][ C0] ? unmap_vmas+0x1bd/0x390 [ 2423.984899][ C0] ? unmap_page_range+0x2500/0x2500 [ 2423.984921][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 2423.984939][ C0] ? mas_next_entry+0xe27/0xed0 [ 2423.984963][ C0] exit_mmap+0x20d/0x960 [ 2423.984983][ C0] ? vm_brk+0x20/0x20 [ 2423.985000][ C0] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2423.985025][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2423.985050][ C0] ? uprobe_clear_state+0x274/0x290 [ 2423.985073][ C0] __mmput+0x118/0x3c0 [ 2423.985090][ C0] copy_process+0x2c31/0x4030 [ 2423.985105][ C0] ? plist_add+0x3d4/0x480 [ 2423.985129][ C0] ? copy_process+0x94d/0x4030 [ 2423.985145][ C0] ? futex_wait+0x4c8/0x5e0 [ 2423.985164][ C0] ? idle_dummy+0x10/0x10 [ 2423.985184][ C0] kernel_clone+0x24b/0x900 [ 2423.985202][ C0] ? create_io_thread+0x170/0x170 [ 2423.985221][ C0] ? do_futex+0x310/0x320 [ 2423.985238][ C0] __x64_sys_clone+0x1a7/0x220 [ 2423.985255][ C0] ? __ia32_sys_vfork+0x140/0x140 [ 2423.985277][ C0] ? lock_chain_count+0x20/0x20 [ 2423.985295][ C0] ? trace_irq_enable_rcuidle+0xb/0x140 [ 2423.985316][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 2423.985338][ C0] do_syscall_64+0x4c/0xa0 [ 2423.985354][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2423.985388][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2423.985404][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2423.985421][ C0] RIP: 0033:0x7efdf8d9aeb9 [ 2423.985434][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2423.985446][ C0] RSP: 002b:00007efdf9c00fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2423.985462][ C0] RAX: ffffffffffffffda RBX: 00007efdf9015fa0 RCX: 00007efdf8d9aeb9 [ 2423.985473][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006988b400 [ 2423.985483][ C0] RBP: 00007efdf8e08c1f R08: 0000000000000000 R09: 0000000000000000 [ 2423.985492][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2423.985502][ C0] R13: 00007efdf9016038 R14: 00007efdf9015fa0 R15: 00007ffce47f8958 [ 2423.985527][ C0]