last executing test programs: 6.662112924s ago: executing program 0 (id=1154): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="78eaefaf245fc51b7121efc432aabc40ac212f9dc4b54340a4704fdc7faa7e80a8328a87ac6a1cfd8cb98e9cd411959dc3ba504652e3554070d68d4f4827e961ef8a6e641e2513045b53523cf79b4601393fc3a756208319a5a8265534a238655bf5ae211ac07f9a1ca604e096ad228d8d464e552c6a7f1dc145744ec0", 0x7d}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x40000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 6.114255515s ago: executing program 3 (id=1157): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r9, 0x2f, 0x18, 0x4, @void, @value=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 5.989471507s ago: executing program 0 (id=1158): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x10, &(0x7f0000000000)=r3, 0x8) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000178dca2a3a2a20726d00"], 0x9) 5.682866333s ago: executing program 1 (id=1160): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000007000000070000000020000000400000000000002050000000300000005000093010000000a000000ffff00000600000002000000ff0f0000050000000400000040000000030000000a0000000300000081000000100000007304000001000000060000000000000e0400000000000000000000000000040d000000000000"], 0x0, 0x8a, 0x0, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x409fd}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/136, 0x88}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x48}], 0x1}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) 5.422073038s ago: executing program 2 (id=1161): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="2000000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 5.259511671s ago: executing program 1 (id=1162): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a5"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f00000003c0), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xff, 0x63, &(0x7f0000000380)=""/99, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0x18, 0x1, 0x2, 0x8000, 0xf3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x90, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x459c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x1, 0x0, 0x7, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 4.820735849s ago: executing program 0 (id=1163): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="78eaefaf245fc51b7121efc432aabc40ac212f9dc4b54340a4704fdc7faa7e80a8328a87ac6a1cfd8cb98e9cd411959dc3ba504652e3554070d68d4f4827e961ef8a6e641e2513045b53523cf79b4601393fc3a756208319a5a8265534a238655bf5ae211ac07f9a1ca604e096ad228d8d464e552c6a7f1dc145744ec0", 0x7d}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000001101000000000000a365290d00000000f8000000000000000701000017ffffff11ac39e481c7a2fd33a56beec1706f1ccd93ba9257574ecb3ef2e54097d4c32c74ee47e3046c441bbac5c110d5d8842e1437adf630627ccd1147e7308147928bdd4c2bf628900994900985817bcb081f6dec75dad18c5e4223c3bc36767ad6b1df41ea52e13fa1100f6699afeef44940b08c8db87b16ece2ae417c534b562a694b36ab27b230222f2fcb7a660ee23e5d4e63042535c364d5739db8c025861d3323423f4aeb98181c6d5f8e6b1da796a2e2d03481c4f86dc7873adae9aa82f374cf8ba58c3016c66b7492c7faf7950dd23607b15bbdb7fbfb5d01483329effed1485453960a000000d8000000000000000701000005000000fca2f26d550888b3b976c197997ed8e76191310258a3aee92bc37c41d545f3e8bf7068f0a93f9a7ac54afe58ae520af84708bcb1657eb955d3304f7abd08a1f93cfb44feb8d4ea1ea324e8bb4cda529beac9d00e9eae94de58a286d8281e6aa5c82f138a7f518fb100d61d079f9eab373cb3d2fa763b6efa1621c9405a7803dac405a9015958c74b1fd7581b79a9b9572d3a0d6aa039a63962282ad5e7625c76dbcb2e13172c64e60e1c807c2315df1c2878b14c3dadeb872a260e32fbc494e7bf8d67c895dd4f972172a98d29cbd97f0000000068000000000000001001000007000000709d449560491f70741dcd8da3abfbd96fb49e310f38c6bbceda7cafb5363849d414b750b6b0e3e6446465175b8d01c1c6c40f67e6180ee750d6d24a9c9f1a524f23ece604e1f8c36da6d9cd7b1ceaecbad082a7936a4100b0000000000000001001000005000000278bf8d6c4e55760b43b45e41afeb333a1a5699649f7b4d4e6c0524d11c0325661f6d4f792d5f04d23479d3d716d83dff60113d60d77da48c4e9e0bd4f969baf4fb67569f80c46f38de4a6420bc88790e60eed3295321b5375404b3d07e3f39a848f67f09d5b9a7f282565fbb70e3aad58ea1f0f53a63d47fb245f14946855ae0c5a7041d644b98245dd46336d02f62f2ea0e73a6fb84bebaaeb000000000000c80000000000000015010000090000002c61667d5d157f3d9cc5bca0b14dd02218c5355d56cc0e09f7f75203d800d5dd36ebf7ddfe0947291b451a8831621a55dce6a74b1ad702cf1bb288dff9e852a63003a7ff6d4332d808bcc2e8f106bd1b85a6f031352e14a764c76cdf2f9f0e4d1f9b58e2b6799b76d6197f096d5d93a932819c525b123c8e1844eeb104eafabd2c547ba4c942ef9712109cf75304e8414c9b5ea3069a0934d7ef466a408732162fb125c47487662192948a846fc01f651238a6c1b8d7000028000000000000000e010000ff7f0000eb7126a590c6fb0f84edd680"], 0x3f0}, 0x40000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 4.28179565s ago: executing program 2 (id=1164): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2c, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x11b, 0x6, &(0x7f0000000000)=r3, 0x4) close(0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000700142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x5}, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x9, 0x12) sendmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) sendmsg$kcm(r4, &(0x7f0000000500)={&(0x7f0000000180)=@caif=@dgm={0x25, 0x7f, 0x3}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000840)="14268f547ac9f11772dc188adfe3784c31efef932562c95dc0777296ffa99d210a087873f11e84ba532eee32110331bb803541d1efad20a17190502a07a11af176e5a36f9c73da11126f87a632d6400f785153da36d8e254230baadb064299a503aaff9c77f3d31dfd5bf21a4ea1d9837f4376cc8ed2f6365a35bad9224d06bfe13536c69018266348c41d3ca63f9b0e8f7daad7235b04cf19caf706f95c6ebe3d2a6dd41bbc62e5db5ae17e459406c92af9ba4778266ba48c5dd9b2a838729aa588", 0xc2}, {&(0x7f0000000280)="41164edd7341878cc187ebd1e2569422f1935b7570c45f277be60a6b5f4dd96311fdea3b5df8973d7fb69233729f2efe7b09", 0x32}], 0x2, &(0x7f0000000940)=[{0xe8, 0x119, 0xfffffffb, "cc26c107470e18500feec0617fd209ab247a5d3c02ee4b743b31c614720da1d129b6df434ec5ded80ed75044391dfd0fdf059990e95f0e7b8b1f686a88c6e9d11a373d5132ea12eaa7e7fdc0cf03b6fa532602d67954518a2d9caadda4e6e8f50038ab315d5de6c5ab437af566c18027d217dc64967580e0624e2b2c0e40ca87619cf0fbc0a457f3a1235801239b294758a1693d896fd88dba96f425bbe134ef381a8ac29d2e4a5443be01578cfbfcac197fcf598ee9a72ec12db963cfea5d0f9f1d4039c69edf452a870cac62912fddcb77248de168"}, {0xb0, 0x115, 0x24bb, "a6d5ec29652857389af0ca966b68fdf1e3acd409b2d8f681b75df2065ad7d4fbc6438467d4f346aaa07848b04e62dc0ab792f8fe57ccc943c8f870023d42f43e46e7dcc155af6a684ad1751ef3784725b0d8e4f6f8445ff6c88e547c81979947cd0b898ac79cff15a25dc35378310d51c4be3d1f3f6afc2350247e7fec6a99deee0334340379cd99cc380b4abf5ef822a3f35c9062cc4e826ddab39fab"}], 0x198}, 0x80) 3.790555849s ago: executing program 3 (id=1165): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="78eaefaf245fc51b7121efc432aabc40ac212f9dc4b54340a4704fdc7faa7e80a8328a87ac6a1cfd8cb98e9cd411959dc3ba504652e3554070d68d4f4827e961ef8a6e641e2513045b53523cf79b4601393fc3a756208319a5a8265534a238655bf5ae211ac07f9a1ca604e096ad228d8d464e552c6a7f1dc145744ec0", 0x7d}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x40000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 3.771501089s ago: executing program 1 (id=1173): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r9, 0x2f, 0x18, 0x4, @void, @value=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.645072111s ago: executing program 0 (id=1166): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$kcm(0xa, 0x6, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x9}, 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) openat$cgroup_procs(r6, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) recvmsg$kcm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f00000007c0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x828_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdc,]R\xcc\xb2O\xdb\xed-\x87$\xeb\xde\x10*\xd9\xc6\xe7\x10\xd9rY\x0f\xa1d\x96\x03\x99\xa6.o4g\xc9+j\xd5\x9a-\x90\xfc1\xa0|\xe5\xf2\xe99\xa8zJ\xdb\x1c\x0e\x8b\x1e\x96\xa5?\xffv\x1f\x00\xd4\xfc\x04\x95\xfb\r\"\x86\x0f\xc9d\xa2\xef\x16\x030\x8a\x18(\xca\xfc\x11O4\x9aZ\xf8\xf6\xfc*q\xff\x16\xfe{@W$H\x9d\xfe\v\x93\x04u\x93\x920e\x11\x0e\xe9\x06\xc2\xd7\xcc\x18U\xd5\x80\xef\xbda\x82\b\a\xd4\xefU\x92|\xcfX-\xddoSh\x81*\x03T\x87\xf3_Jp\x18cA\xccc\x9e\"\n\xc9\x17\xaf\xdd\xe8aa\xb0\xf5\'U\xb6 \xa0O\xab)\xe5Un\xcb\x95\xe4\xcb\xccX\xee\xa4\x81\xc6\xb7\xd0c\xfc[P\xe1\xa5\xd8\xf9u\xab\x91\xccT<\t\xe6\x1f\xc6\xf6\xd0\x18b\x9e\x8e\xe3\xe3\xa2\xe9/\xcb\x11u5~\'\xbb\x85\xd2\xaafTp^\x85\xdc\x1c\xe1d6\xf8e\xd8\xe1\xdcg\x1c \xb19\x1ey#>z\x9e') 3.553747023s ago: executing program 2 (id=1167): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000000020085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="78eaefaf245fc51b7121efc432aabc40ac212f9dc4b54340a4704fdc7faa7e80a8328a87ac6a1cfd8cb98e9cd411959dc3ba504652e3554070d68d4f4827e961ef8a6e641e2513045b53523cf79b4601393fc3a756208319a5a8265534a238655bf5ae211ac07f9a1ca604e096ad228d8d464e552c6a7f1dc145744ec0", 0x7d}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x40000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) 2.584548091s ago: executing program 3 (id=1168): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x3ea, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x7d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[], 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) close(0x3) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 2.377323595s ago: executing program 0 (id=1169): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000007c0)=0x1) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xa612, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r4, 0x0, &(0x7f0000001700)=""/29}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, 0x0, 0x0, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x89, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000001000000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000800000000000000000001801000020bd342100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={0x0, 0xf, 0x8}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xa, &(0x7f0000000040)=@raw=[@func, @ldst={0x0, 0x2, 0x1, 0x8, 0x3, 0xffffffffffffffc0, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x16, &(0x7f0000000100)=""/22, 0x40f00, 0x4, '\x00', r5, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0xe, 0xfffffff8, 0x7}, 0x10, r6, 0xffffffffffffffff, 0x8, &(0x7f0000000440)=[r8, r9, r10], &(0x7f0000000540)=[{0x1, 0x5, 0x4}, {0x0, 0x1, 0xf, 0x9}, {0x0, 0x3, 0x0, 0x5}, {0x3, 0x2, 0x10, 0x9}, {0x5, 0x2, 0x8, 0xa}, {0x2, 0x5, 0xa, 0x7}, {0x0, 0x3, 0x10, 0xa}, {0x0, 0x2, 0xe, 0x9}], 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d8000000fc580000000000", 0x0, 0x7fd, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) socket$kcm(0x2, 0x1000000000000002, 0x0) 2.302531007s ago: executing program 2 (id=1170): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x2000000, 0x1, 0x2, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4e}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x8, 0x11, &(0x7f0000000480)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7cd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8001, 0xc}, 0xec00, 0xc8, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)=[{0x2, 0x1, 0xd, 0x3}, {0x5, 0x5, 0xf, 0x3}], 0x10, 0x5}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x94) sendmsg$unix(r3, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x40000) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2003, 0x2, @perf_config_ext={0x2, 0x8}, 0x901, 0xd18, 0x0, 0x7, 0x0, 0x0, 0xf796, 0x0, 0xffffffff, 0x0, 0x4000000000000003}, 0x0, 0x1000000000000000, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0], 0xfdef) write$cgroup_subtree(r6, &(0x7f00000004c0)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006300fbff6500000000000000160000000000000038"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240)) ioctl$SIOCSIFHWADDR(r8, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) 2.059607052s ago: executing program 1 (id=1171): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0xffffff00, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 1.56614987s ago: executing program 3 (id=1172): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0x4, 0x12}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0xfffffe8000000000, 0x200}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x3ea, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x7d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000340)=ANY=[], 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r3, 0x8, 0x0, 0x0, 0x14, 0x0, 0xff3d}, 0x80) close(0x3) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90224fc602f1a99000a740100053582c137153e", 0x23}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) 1.510139362s ago: executing program 1 (id=1174): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a5"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f00000003c0), 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xff, 0x63, &(0x7f0000000380)=""/99, 0x41000, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000200)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, r4], 0x0, 0x10, 0x6}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x2000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@generic={0x18, 0x1, 0x2, 0x8000, 0xf3}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x90, 0x36, 0x1, 0x0, 0x0, 0x0, 0x8, 0x459c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x1, 0x0, 0x7, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.429935124s ago: executing program 2 (id=1175): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000e40)=""/267, 0x10b}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f00000007c0)=""/202, 0xca}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000002340)=""/4091, 0xffb}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000940)=""/198, 0xc6}, {&(0x7f0000000bc0)=""/117, 0x75}], 0xa}, 0x40012100) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x11ac, 0x18}, 0xc) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x80000002, 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, r1, 0xee26, '\x00', 0x0, r3, 0x4, 0x5, 0x5}, 0x50) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) recvmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x10101) 804.525325ms ago: executing program 0 (id=1176): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="78eaefaf245fc51b7121efc432aabc40ac212f9dc4b54340a4704fdc7faa7e80a8328a87ac6a1cfd8cb98e9cd411959dc3ba504652e3554070d68d4f4827e961ef8a6e641e2513045b53523cf79b4601393fc3a756208319a5a8265534a238655bf5ae211ac07f9a1ca604e096ad228d8d464e552c6a7f1dc145744ec0", 0x7d}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x3f0}, 0x40000) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="00000000030000000300"/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) 667.209528ms ago: executing program 1 (id=1177): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000007c0)=0x1) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x0, 0xa612, 0x3}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/29}, 0x20) 624.721329ms ago: executing program 3 (id=1178): bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800050000000000000000000400040071107a000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 292.701215ms ago: executing program 3 (id=1179): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4000000000000050, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], 0x0, 0x59, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000040)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}, 0x80, 0x0}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e8030000a80016000a", 0x35}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe5538250015000600149b0000001208000313eba96240a8002b", 0x33}], 0x1}, 0x80) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYRESDEC=r0, @ANYRES16=r2, @ANYRES8=r5, @ANYRESDEC=r1, @ANYRESOCT=r2, @ANYRESHEX=r2, @ANYRES16=r3], 0xfe33) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000f0ffffffffff030000000035"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0202000902", 0x5}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x1, 0x0, &(0x7f0000000580)="349711940aa9185367d65852ef45930215abb3a4d35c506df04d77e4b1cddeaaca33d8487b87c4803944a7c266e408a5c0a9b2ce97d98f3add6cf037615d11d82ed05ad5ab44", 0x0, 0x2, 0x88be, 0x0, 0xffffff9c, 0x0, 0x0, 0x1}, 0x50) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}, {&(0x7f0000000980)="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"/434, 0x1b2}], 0x2}, 0x4000) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) 0s ago: executing program 2 (id=1180): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020"], 0xfe33) openat$tun(0xffffffffffffff9c, 0x0, 0x701a00, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r4 = perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r3) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000004000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='mm_page_alloc\x00', r6}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x703, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000010000b0fd25a806c8c6f94f90a24fc60", 0x33fe0}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r9, r8, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r9, 0x2f, 0x18, 0x4, @void, @value=r8}, 0x20) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.1' (ED25519) to the list of known hosts. syzkaller login: [ 94.605561][ T5780] cgroup: Unknown subsys name 'net' [ 94.777460][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 96.595025][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.308210][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.317419][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.325793][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.330528][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.335057][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.343306][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.358883][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.366996][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.380280][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.387981][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.398612][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.405767][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.421231][ T5108] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.430375][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.445889][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.455187][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.463566][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.474499][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.483376][ T5108] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.491859][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.505982][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.515280][ T5108] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.527143][ T5108] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.536677][ T5108] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.911228][ T5809] modprobe (5809) used greatest stack depth: 20784 bytes left [ 98.934456][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 99.183797][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 99.277655][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.286759][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.295154][ T5796] bridge_slave_0: entered allmulticast mode [ 99.303580][ T5796] bridge_slave_0: entered promiscuous mode [ 99.334246][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 99.347759][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.356785][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.365259][ T5796] bridge_slave_1: entered allmulticast mode [ 99.373849][ T5796] bridge_slave_1: entered promiscuous mode [ 99.459635][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.467823][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.476539][ T5791] bridge_slave_0: entered allmulticast mode [ 99.484974][ T5791] bridge_slave_0: entered promiscuous mode [ 99.494058][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 99.520572][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.533316][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.543178][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.550568][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.558893][ T5791] bridge_slave_1: entered allmulticast mode [ 99.566334][ T5791] bridge_slave_1: entered promiscuous mode [ 99.670186][ T5796] team0: Port device team_slave_0 added [ 99.679851][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.692977][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.717102][ T5796] team0: Port device team_slave_1 added [ 99.809071][ T5791] team0: Port device team_slave_0 added [ 99.833762][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.841478][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.869751][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.915106][ T5791] team0: Port device team_slave_1 added [ 99.921424][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.929067][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.937616][ T5795] bridge_slave_0: entered allmulticast mode [ 99.945475][ T5795] bridge_slave_0: entered promiscuous mode [ 99.963955][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.971809][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.001868][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.021951][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.031497][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.040833][ T5790] bridge_slave_0: entered allmulticast mode [ 100.050167][ T5790] bridge_slave_0: entered promiscuous mode [ 100.091264][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.099128][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.106932][ T5795] bridge_slave_1: entered allmulticast mode [ 100.114884][ T5795] bridge_slave_1: entered promiscuous mode [ 100.156785][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.164715][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.172611][ T5790] bridge_slave_1: entered allmulticast mode [ 100.180565][ T5790] bridge_slave_1: entered promiscuous mode [ 100.202132][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.210034][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.236895][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.250933][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.259289][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.288458][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.351287][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.365569][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.381612][ T5796] hsr_slave_0: entered promiscuous mode [ 100.390140][ T5796] hsr_slave_1: entered promiscuous mode [ 100.401212][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.415336][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.486414][ T5795] team0: Port device team_slave_0 added [ 100.519117][ T5802] Bluetooth: hci2: command tx timeout [ 100.519315][ T5108] Bluetooth: hci0: command tx timeout [ 100.541072][ T5791] hsr_slave_0: entered promiscuous mode [ 100.548720][ T5791] hsr_slave_1: entered promiscuous mode [ 100.555590][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.564020][ T5791] Cannot create hsr debugfs directory [ 100.584601][ T5795] team0: Port device team_slave_1 added [ 100.599112][ T5108] Bluetooth: hci1: command tx timeout [ 100.599137][ T5802] Bluetooth: hci3: command tx timeout [ 100.619855][ T5790] team0: Port device team_slave_0 added [ 100.631708][ T5790] team0: Port device team_slave_1 added [ 100.738602][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.747846][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.779578][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.799961][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.807506][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.836993][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.871465][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.880056][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.913150][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.935535][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.943838][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.974330][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.142145][ T5790] hsr_slave_0: entered promiscuous mode [ 101.151432][ T5790] hsr_slave_1: entered promiscuous mode [ 101.160412][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.173573][ T5790] Cannot create hsr debugfs directory [ 101.215190][ T5795] hsr_slave_0: entered promiscuous mode [ 101.223404][ T5795] hsr_slave_1: entered promiscuous mode [ 101.232780][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.243043][ T5795] Cannot create hsr debugfs directory [ 101.535602][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.550862][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.569941][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.611241][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.696192][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.717794][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.738289][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.750530][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.853940][ T5795] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.866382][ T5795] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.891798][ T5795] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.904213][ T5795] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.986457][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.999014][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.010396][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.025129][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.161953][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.234771][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.292834][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.312333][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.320318][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.371886][ T3002] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.380881][ T3002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.402422][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.447772][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.461318][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.496392][ T2979] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.504457][ T2979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.533281][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.553248][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.561074][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.577107][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.598287][ T5108] Bluetooth: hci0: command tx timeout [ 102.598296][ T5802] Bluetooth: hci2: command tx timeout [ 102.622719][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.630971][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.649177][ T5796] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 102.678550][ T5802] Bluetooth: hci1: command tx timeout [ 102.678900][ T5108] Bluetooth: hci3: command tx timeout [ 102.700630][ T2992] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.709167][ T2992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.725251][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.733002][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.758718][ T2992] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.766218][ T2992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.116563][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.170042][ T8] cfg80211: failed to load regulatory.db [ 103.257195][ T5796] veth0_vlan: entered promiscuous mode [ 103.312667][ T5796] veth1_vlan: entered promiscuous mode [ 103.422488][ T5796] veth0_macvtap: entered promiscuous mode [ 103.451707][ T5796] veth1_macvtap: entered promiscuous mode [ 103.542096][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.557835][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.572634][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.599068][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.624044][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.633386][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.643688][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.652689][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.688531][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.841117][ T5791] veth0_vlan: entered promiscuous mode [ 103.855477][ T5790] veth0_vlan: entered promiscuous mode [ 103.862453][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.883863][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.923077][ T5791] veth1_vlan: entered promiscuous mode [ 103.936646][ T5790] veth1_vlan: entered promiscuous mode [ 103.955919][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.966208][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.035803][ T5795] veth0_vlan: entered promiscuous mode [ 104.091647][ T5795] veth1_vlan: entered promiscuous mode [ 104.107147][ T5791] veth0_macvtap: entered promiscuous mode [ 104.121230][ T5790] veth0_macvtap: entered promiscuous mode [ 104.146806][ T5790] veth1_macvtap: entered promiscuous mode [ 104.194080][ T5791] veth1_macvtap: entered promiscuous mode [ 104.224292][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.242495][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.256414][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.307786][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.319222][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.330370][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.346624][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.360960][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.377941][ C0] hrtimer: interrupt took 51623 ns [ 104.382805][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.397376][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.419482][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.435567][ T5795] veth0_macvtap: entered promiscuous mode [ 104.459252][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.470203][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.481548][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.493613][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.506271][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.539654][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.549389][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.563109][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.572377][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.589692][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.604770][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.619963][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.636660][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.672975][ T5795] veth1_macvtap: entered promiscuous mode [ 104.685421][ T5108] Bluetooth: hci0: command tx timeout [ 104.685433][ T5802] Bluetooth: hci2: command tx timeout [ 104.762493][ T5108] Bluetooth: hci3: command tx timeout [ 104.763388][ T5802] Bluetooth: hci1: command tx timeout [ 104.879610][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.887801][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.887811][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.887835][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.935963][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.947042][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.958493][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.969365][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.981673][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.131615][ T5886] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 105.146434][ T5886] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 105.196518][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.211911][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.222800][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.234462][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.246020][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.257554][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.270908][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.306385][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.327114][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.340684][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.356039][ T5795] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.369318][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.377322][ T5795] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.386869][ T5795] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405940][ T5795] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.499616][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.507614][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.687554][ T2979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.778323][ T2979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.866126][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.917731][ T5895] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7'. [ 105.918283][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.386639][ T5900] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4'. [ 106.431666][ T5897] delete_channel: no stack [ 106.788095][ T5802] Bluetooth: hci0: command tx timeout [ 106.794108][ T5802] Bluetooth: hci2: command tx timeout [ 106.838988][ T5802] Bluetooth: hci1: command tx timeout [ 106.845404][ T5802] Bluetooth: hci3: command tx timeout [ 107.214540][ T5895] netlink: 'syz.1.7': attribute type 10 has an invalid length. [ 107.374540][ T5895] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7'. [ 107.549410][ T5895] batman_adv: batadv0: Adding interface: vlan1 [ 107.591274][ T5895] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.617354][ T5895] batman_adv: batadv0: Interface activated: vlan1 [ 107.644497][ T5895] syz.1.7 (5895) used greatest stack depth: 18920 bytes left [ 107.963646][ T5915] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.13'. [ 107.981155][ T5907] Zero length message leads to an empty skb [ 108.007658][ T5900] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 108.059130][ T5919] syz.2.14 uses obsolete (PF_INET,SOCK_PACKET) [ 108.069810][ T5900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'. [ 108.137660][ T5900] batman_adv: batadv0: Adding interface: vlan1 [ 108.146279][ T5900] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.179706][ T5900] batman_adv: batadv0: Interface activated: vlan1 [ 108.266991][ T5924] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 108.275150][ T5924] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14'. [ 108.509897][ T5907] netlink: 'syz.0.11': attribute type 10 has an invalid length. [ 108.545738][ T5907] veth1_vlan: entered allmulticast mode [ 108.615681][ T5907] team0: Device veth1_vlan failed to register rx_handler [ 109.097367][ T5930] syzkaller0: entered promiscuous mode [ 109.166381][ T5915] netlink: 'syz.1.13': attribute type 10 has an invalid length. [ 109.208477][ T5915] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13'. [ 109.319991][ T5935] bridge0: port 3(gretap0) entered blocking state [ 109.328925][ T5935] bridge0: port 3(gretap0) entered disabled state [ 109.336223][ T5935] gretap0: entered allmulticast mode [ 109.346068][ T5935] gretap0: entered promiscuous mode [ 109.361561][ T5935] bridge0: port 3(gretap0) entered blocking state [ 109.368716][ T5935] bridge0: port 3(gretap0) entered forwarding state [ 109.732796][ T5943] netlink: 'syz.2.22': attribute type 39 has an invalid length. [ 109.984989][ T5944] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.021517][ T5949] FAULT_INJECTION: forcing a failure. [ 110.021517][ T5949] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.109913][ T5949] CPU: 0 PID: 5949 Comm: syz.3.24 Not tainted syzkaller #0 [ 110.117947][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 110.128642][ T5949] Call Trace: [ 110.132120][ T5949] [ 110.135231][ T5949] dump_stack_lvl+0x16c/0x230 [ 110.140333][ T5949] ? show_regs_print_info+0x20/0x20 [ 110.146171][ T5949] ? load_image+0x3b0/0x3b0 [ 110.150869][ T5949] ? __might_fault+0xaa/0x120 [ 110.155632][ T5949] ? __lock_acquire+0x7c80/0x7c80 [ 110.160773][ T5949] should_fail_ex+0x39d/0x4d0 [ 110.165579][ T5949] _copy_from_user+0x2f/0xe0 [ 110.170609][ T5949] ___sys_sendmsg+0x159/0x290 [ 110.175479][ T5949] ? __sys_sendmsg+0x270/0x270 [ 110.180531][ T5949] ? __lock_acquire+0x7c80/0x7c80 [ 110.185835][ T5949] __se_sys_sendmsg+0x1a5/0x270 [ 110.190887][ T5949] ? __x64_sys_sendmsg+0x80/0x80 [ 110.195979][ T5949] ? lockdep_hardirqs_on+0x98/0x150 [ 110.201047][ T5950] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.23'. [ 110.201366][ T5949] do_syscall_64+0x55/0xb0 [ 110.201402][ T5949] ? clear_bhb_loop+0x40/0x90 [ 110.201428][ T5949] ? clear_bhb_loop+0x40/0x90 [ 110.201464][ T5949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.201502][ T5949] RIP: 0033:0x7f7caa38eba9 [ 110.201531][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.201553][ T5949] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.201585][ T5949] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 110.201605][ T5949] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 110.201628][ T5949] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 110.201645][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.201662][ T5949] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 110.201739][ T5949] [ 110.641022][ T5960] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.27'. [ 111.022597][ T5964] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.29'. [ 111.574828][ T5960] netlink: 'syz.3.27': attribute type 10 has an invalid length. [ 111.592462][ T5960] netlink: 40 bytes leftover after parsing attributes in process `syz.3.27'. [ 111.850950][ T5976] syzkaller0: refused to change device tx_queue_len [ 112.362943][ T5994] netlink: 'syz.0.40': attribute type 39 has an invalid length. [ 112.893863][ T6006] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.44'. [ 113.091741][ T6010] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.45'. [ 113.491912][ T6019] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.48'. [ 113.505491][ T6010] netlink: 'syz.0.45': attribute type 10 has an invalid length. [ 113.517875][ T6010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.45'. [ 113.545937][ T6010] batman_adv: batadv0: Adding interface: vlan1 [ 113.561938][ T6010] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.606262][ T6010] batman_adv: batadv0: Interface activated: vlan1 [ 113.749847][ T6023] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.49'. [ 113.879931][ T6025] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.57'. [ 115.432555][ T6043] netlink: 'syz.0.52': attribute type 39 has an invalid length. [ 115.496102][ T6027] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 115.527327][ T6027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 115.586749][ T6027] batman_adv: batadv0: Adding interface: vlan1 [ 115.620436][ T6027] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.655130][ T6027] batman_adv: batadv0: Interface activated: vlan1 [ 116.312156][ T6054] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.59'. [ 116.347098][ T6056] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.60'. [ 116.453938][ T6054] netlink: 'syz.3.59': attribute type 10 has an invalid length. [ 116.472586][ T6054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.59'. [ 116.563201][ T6069] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.62'. [ 116.868447][ T6076] bridge0: port 3(gretap0) entered blocking state [ 116.901687][ T6076] bridge0: port 3(gretap0) entered disabled state [ 117.016478][ T6076] gretap0: entered allmulticast mode [ 117.062216][ T6076] gretap0: entered promiscuous mode [ 117.119341][ T6076] bridge0: port 3(gretap0) entered blocking state [ 117.126700][ T6076] bridge0: port 3(gretap0) entered forwarding state [ 117.162490][ T6077] netlink: 'syz.3.65': attribute type 39 has an invalid length. [ 117.872233][ T6094] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.70'. [ 118.026073][ T6097] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.72'. [ 118.143113][ T6102] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.74'. [ 118.846908][ T6112] netlink: 'syz.0.70': attribute type 10 has an invalid length. [ 118.856122][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'. [ 118.872826][ T6110] netlink: 'syz.2.74': attribute type 10 has an invalid length. [ 118.881898][ T6110] netlink: 40 bytes leftover after parsing attributes in process `syz.2.74'. [ 119.142415][ T6118] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.78'. [ 120.130099][ T6120] netlink: 'syz.2.79': attribute type 39 has an invalid length. [ 120.142785][ T6131] syzkaller0: entered promiscuous mode [ 120.889646][ T6154] netlink: 'syz.3.87': attribute type 10 has an invalid length. [ 121.428349][ T6164] netlink: 'syz.3.91': attribute type 39 has an invalid length. [ 122.751663][ T6179] __nla_validate_parse: 4 callbacks suppressed [ 122.751733][ T6179] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.103'. [ 122.946971][ T6178] syzkaller0: entered promiscuous mode [ 123.029384][ T6188] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.99'. [ 123.103771][ T6187] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.98'. [ 123.489447][ T6195] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 123.498415][ T6195] netlink: 40 bytes leftover after parsing attributes in process `syz.3.99'. [ 123.597572][ T6194] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.610262][ T6194] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.758275][ T6202] netlink: 'syz.1.100': attribute type 10 has an invalid length. [ 123.766390][ T6202] netlink: 55 bytes leftover after parsing attributes in process `syz.1.100'. [ 124.024418][ T6204] netlink: 'syz.0.104': attribute type 39 has an invalid length. [ 124.469608][ T6217] bridge0: port 3(gretap0) entered blocking state [ 124.486908][ T6217] bridge0: port 3(gretap0) entered disabled state [ 124.495543][ T6217] gretap0: entered allmulticast mode [ 124.504212][ T6217] gretap0: entered promiscuous mode [ 124.528793][ T6217] bridge0: port 3(gretap0) entered blocking state [ 124.535744][ T6217] bridge0: port 3(gretap0) entered forwarding state [ 124.752807][ T6223] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.110'. [ 124.807204][ T6224] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.111'. [ 125.157511][ T6229] syzkaller0: entered promiscuous mode [ 125.328161][ T6236] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.115'. [ 125.445823][ T6236] netlink: 'syz.3.115': attribute type 10 has an invalid length. [ 125.468411][ T6236] netlink: 40 bytes leftover after parsing attributes in process `syz.3.115'. [ 125.574358][ T6241] netlink: 'syz.2.116': attribute type 39 has an invalid length. [ 126.097733][ T6255] bridge0: port 3(gretap0) entered disabled state [ 126.107253][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.123972][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.627437][ T6258] netlink: 'syz.2.130': attribute type 39 has an invalid length. [ 126.679444][ T6260] netlink: 'syz.3.122': attribute type 10 has an invalid length. [ 126.718109][ T6260] netlink: 55 bytes leftover after parsing attributes in process `syz.3.122'. [ 127.129002][ T6273] syzkaller0: entered promiscuous mode [ 127.704853][ T6291] bridge0: port 3(gretap0) entered blocking state [ 127.745608][ T6291] bridge0: port 3(gretap0) entered disabled state [ 127.755843][ T6291] gretap0: entered allmulticast mode [ 127.909124][ T6291] gretap0: entered promiscuous mode [ 127.932542][ T6285] netlink: 'syz.3.129': attribute type 10 has an invalid length. [ 127.957418][ T6285] __nla_validate_parse: 3 callbacks suppressed [ 127.957437][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.129'. [ 128.856526][ T6303] netlink: 'syz.3.134': attribute type 39 has an invalid length. [ 129.171288][ T6307] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.136'. [ 129.358666][ T6313] syzkaller0: entered promiscuous mode [ 129.436924][ T6315] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.140'. [ 130.020799][ T6324] bridge0: port 3(gretap0) entered disabled state [ 130.029082][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.039680][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.120353][ T6329] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.143'. [ 130.144319][ T6332] netlink: 'syz.0.141': attribute type 10 has an invalid length. [ 130.340917][ T6332] netlink: 55 bytes leftover after parsing attributes in process `syz.0.141'. [ 131.018243][ T6340] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 131.055983][ T6340] netlink: 40 bytes leftover after parsing attributes in process `syz.2.143'. [ 131.075680][ T6342] netlink: 'syz.1.147': attribute type 39 has an invalid length. [ 131.509479][ T6349] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.149'. [ 131.770489][ T6357] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.152'. [ 132.410384][ T6377] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.159'. [ 132.566965][ T6383] netlink: 'syz.0.161': attribute type 39 has an invalid length. [ 132.799700][ T6384] netlink: 'syz.1.159': attribute type 10 has an invalid length. [ 132.884006][ T6384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.159'. [ 132.930955][ T6386] netlink: 'syz.2.160': attribute type 10 has an invalid length. [ 132.942291][ T6386] veth1_vlan: entered allmulticast mode [ 133.083229][ T6386] team0: Device veth1_vlan failed to register rx_handler [ 133.227809][ T6395] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.165'. [ 133.525506][ T6406] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.167'. [ 134.198893][ T6422] netlink: 'syz.1.171': attribute type 39 has an invalid length. [ 134.396598][ T6427] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.173'. [ 134.942682][ T6427] netlink: 'syz.0.173': attribute type 10 has an invalid length. [ 134.979226][ T6427] netlink: 40 bytes leftover after parsing attributes in process `syz.0.173'. [ 135.330009][ T6441] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.179'. [ 135.728251][ T6459] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.184'. [ 135.974672][ T6461] netlink: 'syz.2.185': attribute type 39 has an invalid length. [ 136.321499][ T6473] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.190'. [ 136.711405][ T6469] netlink: 'syz.1.188': attribute type 10 has an invalid length. [ 136.728675][ T6469] veth1_vlan: entered allmulticast mode [ 136.761909][ T6469] team0: Device veth1_vlan failed to register rx_handler [ 136.837807][ T6477] netlink: 'syz.3.190': attribute type 10 has an invalid length. [ 136.853333][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.3.190'. [ 137.092199][ T6489] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.195'. [ 137.347234][ T6497] netlink: 'syz.2.198': attribute type 39 has an invalid length. [ 137.866755][ T6506] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.203'. [ 138.708768][ T6517] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 138.727068][ T6517] veth1_vlan: entered allmulticast mode [ 138.781641][ T6517] team0: Device veth1_vlan failed to register rx_handler [ 138.925808][ T6527] __nla_validate_parse: 1 callbacks suppressed [ 138.925827][ T6527] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.206'. [ 139.024593][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.031532][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.187492][ T6530] netlink: 'syz.1.206': attribute type 10 has an invalid length. [ 139.201680][ T6530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.206'. [ 139.476074][ T6537] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.217'. [ 139.732084][ T6545] netlink: 'syz.3.213': attribute type 39 has an invalid length. [ 140.214259][ T6559] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.218'. [ 140.371721][ T6562] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.219'. [ 140.531907][ T6561] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 140.628445][ T6561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.218'. [ 140.675577][ T6564] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.220'. [ 140.938303][ T6576] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.224'. [ 140.976271][ T6577] delete_channel: no stack [ 141.161986][ T6582] netlink: 'syz.1.225': attribute type 39 has an invalid length. [ 141.782353][ T6591] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.229'. [ 141.973429][ T6597] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.231'. [ 142.464145][ T6600] netlink: 'syz.0.231': attribute type 10 has an invalid length. [ 142.699820][ T6606] delete_channel: no stack [ 142.853569][ T6613] netlink: 'syz.1.236': attribute type 39 has an invalid length. [ 144.630009][ T6631] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 144.637837][ T6631] __nla_validate_parse: 6 callbacks suppressed [ 144.637852][ T6631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.241'. [ 144.745180][ T6646] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.245'. [ 145.202231][ T6647] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 145.263543][ T6647] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 145.284744][ T6651] netlink: 'syz.1.248': attribute type 39 has an invalid length. [ 145.744147][ T6661] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.252'. [ 145.914101][ T6648] netlink: 'syz.0.245': attribute type 10 has an invalid length. [ 145.954805][ T6648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.245'. [ 146.031063][ T6668] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.253'. [ 146.744437][ T6683] netlink: 'syz.0.259': attribute type 39 has an invalid length. [ 146.783485][ T6685] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.187614][ T6688] netlink: 'syz.2.257': attribute type 10 has an invalid length. [ 147.227022][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.257'. [ 147.453675][ T6696] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.264'. [ 148.042311][ T6699] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 148.060400][ T6699] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 148.079752][ T6709] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.266'. [ 148.197608][ T6709] netlink: 'syz.2.266': attribute type 10 has an invalid length. [ 148.216258][ T6709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.266'. [ 148.828559][ T6719] netlink: 'syz.0.270': attribute type 39 has an invalid length. [ 149.964469][ T6730] netlink: 'syz.3.273': attribute type 10 has an invalid length. [ 149.973857][ T6730] __nla_validate_parse: 3 callbacks suppressed [ 149.973871][ T6730] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 150.709155][ T6755] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 150.722255][ T6755] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 150.766559][ T6762] netlink: 'syz.2.282': attribute type 39 has an invalid length. [ 151.036785][ T6770] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.284'. [ 151.115217][ T6769] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.285'. [ 151.373999][ T6779] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.288'. [ 151.608655][ T6773] netlink: 'syz.1.284': attribute type 10 has an invalid length. [ 151.668272][ T6773] netlink: 40 bytes leftover after parsing attributes in process `syz.1.284'. [ 152.094734][ T6786] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.290'. [ 152.429390][ T6784] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 152.465561][ T6784] netlink: 40 bytes leftover after parsing attributes in process `syz.0.288'. [ 152.862537][ T6804] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.302'. [ 152.893270][ T6801] netlink: 'syz.2.295': attribute type 39 has an invalid length. [ 153.381208][ T6807] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 153.453961][ T6807] netlink: 40 bytes leftover after parsing attributes in process `syz.0.302'. [ 153.472208][ T6819] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.300'. [ 154.354351][ T6840] netlink: 'syz.1.307': attribute type 39 has an invalid length. [ 155.036450][ T6854] __nla_validate_parse: 2 callbacks suppressed [ 155.036469][ T6854] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.311'. [ 155.317457][ T6856] netlink: 'syz.0.306': attribute type 10 has an invalid length. [ 155.464042][ T6856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.306'. [ 156.101255][ T6854] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 156.128296][ T6854] netlink: 40 bytes leftover after parsing attributes in process `syz.3.311'. [ 156.217335][ T6864] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.314'. [ 156.586121][ T6878] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.317'. [ 156.913230][ T6884] netlink: 'syz.0.318': attribute type 39 has an invalid length. [ 157.306963][ T6895] FAULT_INJECTION: forcing a failure. [ 157.306963][ T6895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.332109][ T6895] CPU: 0 PID: 6895 Comm: syz.0.323 Not tainted syzkaller #0 [ 157.339478][ T6895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.349593][ T6895] Call Trace: [ 157.352918][ T6895] [ 157.355926][ T6895] dump_stack_lvl+0x16c/0x230 [ 157.360690][ T6895] ? show_regs_print_info+0x20/0x20 [ 157.365923][ T6895] ? load_image+0x3b0/0x3b0 [ 157.370459][ T6895] ? __lock_acquire+0x7c80/0x7c80 [ 157.375542][ T6895] should_fail_ex+0x39d/0x4d0 [ 157.380279][ T6895] _copy_from_user+0x2f/0xe0 [ 157.384902][ T6895] __copy_msghdr+0x3bb/0x580 [ 157.389529][ T6895] ___sys_sendmsg+0x1a6/0x290 [ 157.394271][ T6895] ? __sys_sendmsg+0x270/0x270 [ 157.399078][ T6895] ? __lock_acquire+0x7c80/0x7c80 [ 157.404193][ T6895] __se_sys_sendmsg+0x1a5/0x270 [ 157.409094][ T6895] ? __x64_sys_sendmsg+0x80/0x80 [ 157.414122][ T6895] ? lockdep_hardirqs_on+0x98/0x150 [ 157.419360][ T6895] do_syscall_64+0x55/0xb0 [ 157.423805][ T6895] ? clear_bhb_loop+0x40/0x90 [ 157.428505][ T6895] ? clear_bhb_loop+0x40/0x90 [ 157.433323][ T6895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.439273][ T6895] RIP: 0033:0x7fe22c58eba9 [ 157.443732][ T6895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.463371][ T6895] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.471895][ T6895] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 157.479907][ T6895] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 157.487896][ T6895] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 157.496005][ T6895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.504005][ T6895] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 157.512090][ T6895] [ 157.576920][ T6902] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.325'. [ 158.066498][ T6897] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 158.153479][ T6897] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 158.693658][ T6912] netlink: 'syz.1.325': attribute type 10 has an invalid length. [ 158.756270][ T6912] netlink: 40 bytes leftover after parsing attributes in process `syz.1.325'. [ 158.828140][ T6911] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.328'. [ 159.692549][ T6917] netlink: 'syz.3.331': attribute type 39 has an invalid length. [ 159.736303][ T6924] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.332'. [ 160.660699][ T6950] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.342'. [ 161.084743][ T6952] netlink: 'syz.1.340': attribute type 10 has an invalid length. [ 161.109309][ T6952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.340'. [ 161.344243][ T6966] netlink: 'syz.0.344': attribute type 39 has an invalid length. [ 161.646810][ T6974] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.348'. [ 162.440457][ T6999] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.357'. [ 162.648444][ T7001] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 162.656267][ T7001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.354'. [ 162.923014][ T7007] netlink: 'syz.1.358': attribute type 39 has an invalid length. [ 163.533690][ T7025] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.364'. [ 164.056841][ T7043] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 164.072899][ T7043] netlink: 51 bytes leftover after parsing attributes in process `syz.0.371'. [ 164.139362][ T7041] netlink: 'syz.3.370': attribute type 39 has an invalid length. [ 164.610400][ T7050] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.373'. [ 164.659042][ T7053] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 164.707867][ T7053] netlink: 40 bytes leftover after parsing attributes in process `syz.2.369'. [ 164.921481][ T7056] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 164.949811][ T7056] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 164.971462][ T7062] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 165.106408][ T7060] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 165.115886][ T7060] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 165.129222][ T7062] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 165.169545][ T7062] mac80211_hwsim hwsim9 .3#c„±: renamed from wlan1 (while UP) [ 165.193866][ T7062] netlink: 'syz.3.376': attribute type 29 has an invalid length. [ 165.561877][ T7074] netlink: 'syz.2.382': attribute type 39 has an invalid length. [ 165.741661][ T7075] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.380'. [ 166.444289][ T7095] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.387'. [ 166.963433][ T7089] netlink: 'syz.0.385': attribute type 10 has an invalid length. [ 166.990407][ T7089] netlink: 40 bytes leftover after parsing attributes in process `syz.0.385'. [ 167.486306][ T7114] netlink: 'syz.2.392': attribute type 39 has an invalid length. [ 167.954842][ T7121] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.396'. [ 168.259565][ T7127] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 168.308112][ T7127] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 169.034684][ T7139] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.401'. [ 169.411823][ T7147] netlink: 'syz.1.399': attribute type 10 has an invalid length. [ 169.458105][ T7147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.399'. [ 169.866958][ T7153] netlink: 'syz.1.403': attribute type 39 has an invalid length. [ 170.398504][ T7163] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.409'. [ 171.024438][ T7178] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.413'. [ 171.080398][ T7168] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 171.136811][ T7168] netlink: 40 bytes leftover after parsing attributes in process `syz.1.411'. [ 171.770243][ T7190] netlink: 'syz.0.416': attribute type 39 has an invalid length. [ 172.559988][ T7208] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 172.566765][ T7208] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 173.136977][ T7213] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.425'. [ 173.728693][ T7223] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.426'. [ 174.055637][ T7211] netlink: 'syz.3.423': attribute type 10 has an invalid length. [ 174.162159][ T7211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.423'. [ 174.498442][ T7231] netlink: 'syz.1.428': attribute type 39 has an invalid length. [ 175.196121][ T7247] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.435'. [ 175.324229][ T7252] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 175.364135][ T7252] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 176.388112][ T7267] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.439'. [ 176.428323][ T7259] netlink: 'syz.0.437': attribute type 10 has an invalid length. [ 176.468459][ T7259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.437'. [ 177.335039][ T7275] netlink: 'syz.3.440': attribute type 39 has an invalid length. [ 177.715052][ T7286] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 177.778338][ T7286] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 178.005621][ T7290] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.447'. [ 178.086443][ T7294] netlink: 'syz.3.449': attribute type 21 has an invalid length. [ 178.691774][ T7304] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.451'. [ 179.215346][ T7301] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 179.263745][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.1.450'. [ 179.758765][ T7322] netlink: 'syz.1.457': attribute type 39 has an invalid length. [ 180.098500][ T7324] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 180.118498][ T7324] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 180.709193][ T7336] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 181.224373][ T7349] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.466'. [ 182.109354][ T7355] netlink: 'syz.1.469': attribute type 39 has an invalid length. [ 183.285548][ T7372] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 183.310049][ T7372] netlink: 40 bytes leftover after parsing attributes in process `syz.3.465'. [ 183.503417][ T7375] FAULT_INJECTION: forcing a failure. [ 183.503417][ T7375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.538547][ T7375] CPU: 0 PID: 7375 Comm: syz.3.473 Not tainted syzkaller #0 [ 183.545922][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.556028][ T7375] Call Trace: [ 183.559348][ T7375] [ 183.562838][ T7375] dump_stack_lvl+0x16c/0x230 [ 183.567563][ T7375] ? show_regs_print_info+0x20/0x20 [ 183.572817][ T7375] ? load_image+0x3b0/0x3b0 [ 183.577381][ T7375] ? __might_fault+0xaa/0x120 [ 183.582096][ T7375] ? __lock_acquire+0x7c80/0x7c80 [ 183.587157][ T7375] should_fail_ex+0x39d/0x4d0 [ 183.591885][ T7375] _copy_from_user+0x2f/0xe0 [ 183.596521][ T7375] __sys_bpf+0x1e9/0x800 [ 183.600803][ T7375] ? bpf_link_show_fdinfo+0x350/0x350 [ 183.606239][ T7375] ? lock_chain_count+0x20/0x20 [ 183.611149][ T7375] __x64_sys_bpf+0x7c/0x90 [ 183.615607][ T7375] do_syscall_64+0x55/0xb0 [ 183.620066][ T7375] ? clear_bhb_loop+0x40/0x90 [ 183.624781][ T7375] ? clear_bhb_loop+0x40/0x90 [ 183.629498][ T7375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.635436][ T7375] RIP: 0033:0x7f7caa38eba9 [ 183.639895][ T7375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.659539][ T7375] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 183.667976][ T7375] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 183.675963][ T7375] RDX: 0000000000000020 RSI: 0000200000000bc0 RDI: 0000000000000008 [ 183.683949][ T7375] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 183.691933][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.699915][ T7375] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 183.707922][ T7375] [ 184.549231][ T7392] netlink: 'syz.3.479': attribute type 39 has an invalid length. [ 185.776651][ T7399] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 185.843301][ T7399] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 185.899307][ T7408] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.485'. [ 186.130821][ T7423] FAULT_INJECTION: forcing a failure. [ 186.130821][ T7423] name failslab, interval 1, probability 0, space 0, times 0 [ 186.150446][ T7423] CPU: 1 PID: 7423 Comm: syz.1.487 Not tainted syzkaller #0 [ 186.157812][ T7423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.167918][ T7423] Call Trace: [ 186.171233][ T7423] [ 186.174206][ T7423] dump_stack_lvl+0x16c/0x230 [ 186.178948][ T7423] ? show_regs_print_info+0x20/0x20 [ 186.184192][ T7423] ? load_image+0x3b0/0x3b0 [ 186.188748][ T7423] ? __might_sleep+0xe0/0xe0 [ 186.193387][ T7423] ? __lock_acquire+0x7c80/0x7c80 [ 186.198476][ T7423] should_fail_ex+0x39d/0x4d0 [ 186.203238][ T7423] should_failslab+0x9/0x20 [ 186.207795][ T7423] slab_pre_alloc_hook+0x59/0x310 [ 186.212902][ T7423] ? __lock_acquire+0x7c80/0x7c80 [ 186.218012][ T7423] kmem_cache_alloc+0x5a/0x2e0 [ 186.222826][ T7423] ? security_file_alloc+0x34/0x120 [ 186.228091][ T7423] security_file_alloc+0x34/0x120 [ 186.233174][ T7423] init_file+0x94/0x1f0 [ 186.237387][ T7423] alloc_empty_file+0xb7/0x1d0 [ 186.242201][ T7423] path_openat+0x100/0x3190 [ 186.246775][ T7423] ? perf_trace_lock+0xf7/0x380 [ 186.251677][ T7423] ? __x64_sys_openat+0x139/0x160 [ 186.256782][ T7423] ? verify_lock_unused+0x140/0x140 [ 186.262034][ T7423] ? do_filp_open+0x3d0/0x3d0 [ 186.266755][ T7423] ? perf_trace_lock+0xf7/0x380 [ 186.271666][ T7423] ? trace_event_raw_event_lock+0x230/0x230 [ 186.277623][ T7423] do_filp_open+0x1c5/0x3d0 [ 186.282182][ T7423] ? vfs_tmpfile+0x490/0x490 [ 186.286845][ T7423] ? _raw_spin_unlock+0x28/0x40 [ 186.291734][ T7423] ? alloc_fd+0x58f/0x630 [ 186.296115][ T7423] do_sys_openat2+0x12c/0x1c0 [ 186.300832][ T7423] ? perf_trace_preemptirq_template+0x281/0x340 [ 186.307128][ T7423] ? do_sys_open+0xe0/0xe0 [ 186.311586][ T7423] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 186.317626][ T7423] ? lock_chain_count+0x20/0x20 [ 186.322518][ T7423] ? lock_chain_count+0x20/0x20 [ 186.327425][ T7423] __x64_sys_openat+0x139/0x160 [ 186.332337][ T7423] do_syscall_64+0x55/0xb0 [ 186.337150][ T7423] ? clear_bhb_loop+0x40/0x90 [ 186.341871][ T7423] ? clear_bhb_loop+0x40/0x90 [ 186.346600][ T7423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 186.352546][ T7423] RIP: 0033:0x7f9eeff8d510 [ 186.356997][ T7423] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 186.376657][ T7423] RSP: 002b:00007f9ef0dfbf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 186.385126][ T7423] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9eeff8d510 [ 186.393144][ T7423] RDX: 0000000000000002 RSI: 00007f9ef0dfbfa0 RDI: 00000000ffffff9c [ 186.401180][ T7423] RBP: 00007f9ef0dfbfa0 R08: 0000000000000000 R09: 0000000000000000 [ 186.409197][ T7423] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 186.417205][ T7423] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 186.425239][ T7423] [ 186.903443][ T7432] netlink: 'syz.1.491': attribute type 39 has an invalid length. [ 187.438414][ T7450] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.497'. [ 187.686853][ T7453] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.498'. [ 187.897118][ T7455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.904874][ T7455] IPv6: NLM_F_CREATE should be set when creating new route [ 187.912345][ T7455] IPv6: NLM_F_CREATE should be set when creating new route [ 187.919650][ T7455] IPv6: NLM_F_CREATE should be set when creating new route [ 188.333556][ T7451] netlink: 'syz.3.495': attribute type 10 has an invalid length. [ 188.355297][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.495'. [ 188.488053][ T7467] netlink: 'syz.0.502': attribute type 39 has an invalid length. [ 188.759043][ T7475] FAULT_INJECTION: forcing a failure. [ 188.759043][ T7475] name failslab, interval 1, probability 0, space 0, times 0 [ 188.782536][ T7475] CPU: 1 PID: 7475 Comm: syz.3.504 Not tainted syzkaller #0 [ 188.789901][ T7475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 188.800000][ T7475] Call Trace: [ 188.803309][ T7475] [ 188.806273][ T7475] dump_stack_lvl+0x16c/0x230 [ 188.811009][ T7475] ? show_regs_print_info+0x20/0x20 [ 188.816255][ T7475] ? load_image+0x3b0/0x3b0 [ 188.820822][ T7475] ? __might_sleep+0xe0/0xe0 [ 188.825461][ T7475] ? __lock_acquire+0x7c80/0x7c80 [ 188.830559][ T7475] should_fail_ex+0x39d/0x4d0 [ 188.835334][ T7475] should_failslab+0x9/0x20 [ 188.839892][ T7475] slab_pre_alloc_hook+0x59/0x310 [ 188.844983][ T7475] kmem_cache_alloc_node+0x60/0x330 [ 188.850327][ T7475] ? __alloc_skb+0x108/0x2c0 [ 188.854977][ T7475] __alloc_skb+0x108/0x2c0 [ 188.859455][ T7475] netlink_dump+0x1cf/0xde0 [ 188.864015][ T7475] ? rcu_is_watching+0x15/0xb0 [ 188.868836][ T7475] ? trace_contention_end+0x39/0xe0 [ 188.874301][ T7475] ? netlink_lookup+0x200/0x200 [ 188.879213][ T7475] ? netlink_autobind+0x300/0x300 [ 188.884280][ T7475] ? netlink_lookup+0x30/0x200 [ 188.889079][ T7475] ? netlink_lookup+0x30/0x200 [ 188.893890][ T7475] __netlink_dump_start+0x5f1/0x810 [ 188.899135][ T7475] rtnetlink_rcv_msg+0xba1/0xf10 [ 188.904118][ T7475] ? __dev_queue_xmit+0x245/0x35a0 [ 188.909268][ T7475] ? rtnl_fdb_get+0xc60/0xc60 [ 188.913989][ T7475] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 188.919158][ T7475] ? rtnetlink_bind+0x80/0x80 [ 188.923885][ T7475] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 188.929898][ T7475] ? __dev_queue_xmit+0x245/0x35a0 [ 188.935053][ T7475] ? lock_chain_count+0x20/0x20 [ 188.939949][ T7475] ? __local_bh_enable_ip+0x12e/0x1c0 [ 188.945369][ T7475] ? lockdep_hardirqs_on+0x98/0x150 [ 188.950614][ T7475] ? __local_bh_enable_ip+0x12e/0x1c0 [ 188.956022][ T7475] ? _local_bh_enable+0xa0/0xa0 [ 188.960928][ T7475] ? __dev_queue_xmit+0x245/0x35a0 [ 188.966098][ T7475] ? __dev_queue_xmit+0x1449/0x35a0 [ 188.971377][ T7475] ? __dev_queue_xmit+0x245/0x35a0 [ 188.976539][ T7475] ? rtnl_fdb_get+0xc60/0xc60 [ 188.981276][ T7475] ? perf_trace_lock+0xf7/0x380 [ 188.986178][ T7475] ? __copy_skb_header+0xa7/0x550 [ 188.991294][ T7475] netlink_rcv_skb+0x216/0x480 [ 188.996110][ T7475] ? rtnetlink_bind+0x80/0x80 [ 189.000839][ T7475] ? netlink_ack+0x1110/0x1110 [ 189.005673][ T7475] ? __lock_acquire+0x7c80/0x7c80 [ 189.010768][ T7475] ? netlink_deliver_tap+0x2e/0x1b0 [ 189.016036][ T7475] netlink_unicast+0x751/0x8d0 [ 189.020858][ T7475] netlink_sendmsg+0x8c1/0xbe0 [ 189.025681][ T7475] ? netlink_getsockopt+0x580/0x580 [ 189.030921][ T7475] ? aa_sock_msg_perm+0x94/0x150 [ 189.035901][ T7475] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.041239][ T7475] ? security_socket_sendmsg+0x80/0xa0 [ 189.046774][ T7475] ? netlink_getsockopt+0x580/0x580 [ 189.052030][ T7475] ____sys_sendmsg+0x5bf/0x950 [ 189.056859][ T7475] ? __asan_memset+0x22/0x40 [ 189.061489][ T7475] ? __sys_sendmsg_sock+0x30/0x30 [ 189.066550][ T7475] ? __import_iovec+0x5f2/0x860 [ 189.071472][ T7475] ? import_iovec+0x73/0xa0 [ 189.076028][ T7475] ___sys_sendmsg+0x220/0x290 [ 189.080816][ T7475] ? __sys_sendmsg+0x270/0x270 [ 189.085710][ T7475] ? __lock_acquire+0x7c80/0x7c80 [ 189.090803][ T7475] __se_sys_sendmsg+0x1a5/0x270 [ 189.095702][ T7475] ? __x64_sys_sendmsg+0x80/0x80 [ 189.100708][ T7475] ? lockdep_hardirqs_on+0x98/0x150 [ 189.105960][ T7475] do_syscall_64+0x55/0xb0 [ 189.110416][ T7475] ? clear_bhb_loop+0x40/0x90 [ 189.115128][ T7475] ? clear_bhb_loop+0x40/0x90 [ 189.119843][ T7475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.125783][ T7475] RIP: 0033:0x7f7caa38eba9 [ 189.130241][ T7475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.150015][ T7475] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.158467][ T7475] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 189.166470][ T7475] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 189.174473][ T7475] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 189.182475][ T7475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.190485][ T7475] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 189.198528][ T7475] [ 189.509244][ T7489] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 189.528311][ T7489] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 189.744370][ T7493] FAULT_INJECTION: forcing a failure. [ 189.744370][ T7493] name failslab, interval 1, probability 0, space 0, times 0 [ 189.763321][ T7493] CPU: 0 PID: 7493 Comm: syz.2.510 Not tainted syzkaller #0 [ 189.770688][ T7493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.780786][ T7493] Call Trace: [ 189.784103][ T7493] [ 189.787061][ T7493] dump_stack_lvl+0x16c/0x230 [ 189.791792][ T7493] ? show_regs_print_info+0x20/0x20 [ 189.797047][ T7493] ? load_image+0x3b0/0x3b0 [ 189.801605][ T7493] ? __might_sleep+0xe0/0xe0 [ 189.806261][ T7493] ? __lock_acquire+0x7c80/0x7c80 [ 189.811332][ T7493] should_fail_ex+0x39d/0x4d0 [ 189.816063][ T7493] should_failslab+0x9/0x20 [ 189.820611][ T7493] slab_pre_alloc_hook+0x59/0x310 [ 189.825785][ T7493] ? fib6_get_table+0x39/0x260 [ 189.830599][ T7493] ? fib6_info_alloc+0x32/0xe0 [ 189.835414][ T7493] ? fib6_info_alloc+0x32/0xe0 [ 189.840233][ T7493] __kmem_cache_alloc_node+0x53/0x260 [ 189.845665][ T7493] ? fib6_info_alloc+0x32/0xe0 [ 189.850440][ T7493] __kmalloc+0xa4/0x240 [ 189.854640][ T7493] fib6_info_alloc+0x32/0xe0 [ 189.859242][ T7493] ip6_route_info_create+0x44f/0x1200 [ 189.864622][ T7493] ? nla_memcpy+0x59/0xb0 [ 189.868967][ T7493] ? nla_find+0x138/0x150 [ 189.873322][ T7493] inet6_rtm_newroute+0x4e6/0x1b40 [ 189.878457][ T7493] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 189.884465][ T7493] ? rcu_is_watching+0x15/0xb0 [ 189.889240][ T7493] ? trace_contention_end+0x39/0xe0 [ 189.894506][ T7493] ? ipv6_route_sysctl_table_size+0x50/0x50 [ 189.900448][ T7493] rtnetlink_rcv_msg+0x7c7/0xf10 [ 189.905447][ T7493] ? rtnetlink_rcv_msg+0x1eb/0xf10 [ 189.910642][ T7493] ? lockdep_hardirqs_on+0x98/0x150 [ 189.915892][ T7493] ? rtnetlink_bind+0x80/0x80 [ 189.920634][ T7493] ? perf_trace_preemptirq_template+0xa4/0x340 [ 189.926910][ T7493] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 189.932926][ T7493] ? lock_chain_count+0x20/0x20 [ 189.937801][ T7493] ? __local_bh_enable_ip+0x12e/0x1c0 [ 189.943210][ T7493] ? lockdep_hardirqs_on+0x98/0x150 [ 189.948436][ T7493] ? __local_bh_enable_ip+0x12e/0x1c0 [ 189.953819][ T7493] ? _local_bh_enable+0xa0/0xa0 [ 189.958691][ T7493] ? __dev_queue_xmit+0x245/0x35a0 [ 189.963814][ T7493] ? __dev_queue_xmit+0x1449/0x35a0 [ 189.969054][ T7493] ? __dev_queue_xmit+0x245/0x35a0 [ 189.974211][ T7493] ? ref_tracker_free+0x634/0x7d0 [ 189.979248][ T7493] ? __copy_skb_header+0xa7/0x550 [ 189.984317][ T7493] netlink_rcv_skb+0x216/0x480 [ 189.989310][ T7493] ? rtnetlink_bind+0x80/0x80 [ 189.994031][ T7493] ? netlink_ack+0x1110/0x1110 [ 189.998840][ T7493] ? __lock_acquire+0x7c80/0x7c80 [ 190.003909][ T7493] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.009128][ T7493] netlink_unicast+0x751/0x8d0 [ 190.013921][ T7493] netlink_sendmsg+0x8c1/0xbe0 [ 190.018712][ T7493] ? netlink_getsockopt+0x580/0x580 [ 190.023945][ T7493] ? aa_sock_msg_perm+0x94/0x150 [ 190.028935][ T7493] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.034257][ T7493] ? security_socket_sendmsg+0x80/0xa0 [ 190.039753][ T7493] ? netlink_getsockopt+0x580/0x580 [ 190.044991][ T7493] ____sys_sendmsg+0x5bf/0x950 [ 190.049804][ T7493] ? __asan_memset+0x22/0x40 [ 190.054418][ T7493] ? __sys_sendmsg_sock+0x30/0x30 [ 190.059471][ T7493] ? __import_iovec+0x3fa/0x860 [ 190.064382][ T7493] ? import_iovec+0x73/0xa0 [ 190.068928][ T7493] ___sys_sendmsg+0x220/0x290 [ 190.073635][ T7493] ? __sys_sendmsg+0x270/0x270 [ 190.078662][ T7493] ? __lock_acquire+0x7c80/0x7c80 [ 190.083752][ T7493] __se_sys_sendmsg+0x1a5/0x270 [ 190.088715][ T7493] ? __x64_sys_sendmsg+0x80/0x80 [ 190.093724][ T7493] ? lockdep_hardirqs_on+0x98/0x150 [ 190.098960][ T7493] do_syscall_64+0x55/0xb0 [ 190.103398][ T7493] ? clear_bhb_loop+0x40/0x90 [ 190.108185][ T7493] ? clear_bhb_loop+0x40/0x90 [ 190.112987][ T7493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.119002][ T7493] RIP: 0033:0x7f7d1a58eba9 [ 190.123444][ T7493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.143084][ T7493] RSP: 002b:00007f7d1b47e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.151518][ T7493] RAX: ffffffffffffffda RBX: 00007f7d1a7d5fa0 RCX: 00007f7d1a58eba9 [ 190.159504][ T7493] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 190.167495][ T7493] RBP: 00007f7d1b47e090 R08: 0000000000000000 R09: 0000000000000000 [ 190.175602][ T7493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.183601][ T7493] R13: 00007f7d1a7d6038 R14: 00007f7d1a7d5fa0 R15: 00007fffe0e2f9e8 [ 190.191693][ T7493] [ 190.638399][ T7511] netlink: 'syz.0.515': attribute type 39 has an invalid length. [ 190.719114][ T7503] netlink: 'syz.3.512': attribute type 10 has an invalid length. [ 190.727427][ T7503] netlink: 40 bytes leftover after parsing attributes in process `syz.3.512'. [ 190.792876][ T7509] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.514'. [ 191.805078][ T7529] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 191.827760][ T7529] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 191.973829][ T7536] FAULT_INJECTION: forcing a failure. [ 191.973829][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 192.052607][ T7536] CPU: 0 PID: 7536 Comm: syz.1.522 Not tainted syzkaller #0 [ 192.060033][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 192.070163][ T7536] Call Trace: [ 192.073509][ T7536] [ 192.076507][ T7536] dump_stack_lvl+0x16c/0x230 [ 192.081287][ T7536] ? show_regs_print_info+0x20/0x20 [ 192.086564][ T7536] ? load_image+0x3b0/0x3b0 [ 192.091154][ T7536] ? __might_sleep+0xe0/0xe0 [ 192.095816][ T7536] ? __lock_acquire+0x7c80/0x7c80 [ 192.100941][ T7536] should_fail_ex+0x39d/0x4d0 [ 192.105726][ T7536] should_failslab+0x9/0x20 [ 192.110326][ T7536] slab_pre_alloc_hook+0x59/0x310 [ 192.115451][ T7536] ? vmemdup_user+0x49/0x1e0 [ 192.120128][ T7536] ? vmemdup_user+0x49/0x1e0 [ 192.124822][ T7536] __kmem_cache_alloc_node+0x53/0x260 [ 192.130485][ T7536] ? vmemdup_user+0x49/0x1e0 [ 192.135149][ T7536] __kmalloc_node+0xa4/0x230 [ 192.139836][ T7536] vmemdup_user+0x49/0x1e0 [ 192.144343][ T7536] map_lookup_and_delete_elem+0x395/0xa50 [ 192.150197][ T7536] ? __might_fault+0xaa/0x120 [ 192.154990][ T7536] __sys_bpf+0x4ca/0x800 [ 192.159323][ T7536] ? bpf_link_show_fdinfo+0x350/0x350 [ 192.164836][ T7536] ? lock_chain_count+0x20/0x20 [ 192.169794][ T7536] __x64_sys_bpf+0x7c/0x90 [ 192.174283][ T7536] do_syscall_64+0x55/0xb0 [ 192.178774][ T7536] ? clear_bhb_loop+0x40/0x90 [ 192.183548][ T7536] ? clear_bhb_loop+0x40/0x90 [ 192.188299][ T7536] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 192.194295][ T7536] RIP: 0033:0x7f9eeff8eba9 [ 192.198785][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.218455][ T7536] RSP: 002b:00007f9ef0ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 192.227015][ T7536] RAX: ffffffffffffffda RBX: 00007f9ef01d6090 RCX: 00007f9eeff8eba9 [ 192.235028][ T7536] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000015 [ 192.243046][ T7536] RBP: 00007f9ef0ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 192.251058][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.259061][ T7536] R13: 00007f9ef01d6128 R14: 00007f9ef01d6090 R15: 00007fffeb97f9b8 [ 192.267199][ T7536] [ 192.768964][ T7543] netlink: 'syz.2.524': attribute type 39 has an invalid length. [ 193.136143][ T7551] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.527'. [ 193.390096][ T7554] netlink: 'syz.3.525': attribute type 10 has an invalid length. [ 193.430557][ T7554] netlink: 40 bytes leftover after parsing attributes in process `syz.3.525'. [ 193.644522][ T7561] IPv6: Can't replace route, no match found [ 194.094728][ T7570] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 194.126558][ T7570] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 194.634313][ T7581] netlink: 'syz.3.536': attribute type 39 has an invalid length. [ 195.018004][ T7595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 195.025326][ T7595] IPv6: NLM_F_CREATE should be set when creating new route [ 195.032686][ T7595] IPv6: NLM_F_CREATE should be set when creating new route [ 195.039986][ T7595] IPv6: NLM_F_CREATE should be set when creating new route [ 195.479623][ T7602] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.543'. [ 195.879899][ T7600] netlink: 'syz.3.541': attribute type 10 has an invalid length. [ 195.962853][ T7600] netlink: 40 bytes leftover after parsing attributes in process `syz.3.541'. [ 196.003717][ T7614] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.545'. [ 196.352149][ T7621] netlink: 'syz.3.549': attribute type 39 has an invalid length. [ 196.400058][ T7619] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 196.417343][ T7619] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 196.517292][ T7623] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.548'. [ 196.628342][ T7628] netlink: 'syz.0.548': attribute type 3 has an invalid length. [ 196.668107][ T7628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.548'. [ 196.999390][ T7641] FAULT_INJECTION: forcing a failure. [ 196.999390][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.040228][ T7641] CPU: 0 PID: 7641 Comm: syz.0.554 Not tainted syzkaller #0 [ 197.047640][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.057854][ T7641] Call Trace: [ 197.061185][ T7641] [ 197.064157][ T7641] dump_stack_lvl+0x16c/0x230 [ 197.068897][ T7641] ? show_regs_print_info+0x20/0x20 [ 197.074135][ T7641] ? load_image+0x3b0/0x3b0 [ 197.078684][ T7641] ? __lock_acquire+0x7c80/0x7c80 [ 197.083753][ T7641] ? __virt_addr_valid+0x18c/0x540 [ 197.088918][ T7641] should_fail_ex+0x39d/0x4d0 [ 197.093659][ T7641] _copy_from_user+0x2f/0xe0 [ 197.098301][ T7641] map_update_elem+0x4e8/0x700 [ 197.103129][ T7641] __sys_bpf+0x652/0x800 [ 197.107441][ T7641] ? bpf_link_show_fdinfo+0x350/0x350 [ 197.112896][ T7641] ? lock_chain_count+0x20/0x20 [ 197.117813][ T7641] __x64_sys_bpf+0x7c/0x90 [ 197.122275][ T7641] do_syscall_64+0x55/0xb0 [ 197.126731][ T7641] ? clear_bhb_loop+0x40/0x90 [ 197.131441][ T7641] ? clear_bhb_loop+0x40/0x90 [ 197.136162][ T7641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.142097][ T7641] RIP: 0033:0x7fe22c58eba9 [ 197.146653][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.166303][ T7641] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 197.174763][ T7641] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 197.182775][ T7641] RDX: 0000000000000020 RSI: 00002000000002c0 RDI: 0000000000000002 [ 197.190803][ T7641] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 197.198838][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.206875][ T7641] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 197.214952][ T7641] [ 197.426391][ T7644] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.556'. [ 197.649471][ T7647] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 197.698956][ T7647] netlink: 40 bytes leftover after parsing attributes in process `syz.3.557'. [ 197.741845][ T7656] netlink: 'syz.2.559': attribute type 39 has an invalid length. [ 198.272941][ T7670] netlink: 'syz.2.563': attribute type 1 has an invalid length. [ 198.288447][ T7670] netlink: 5 bytes leftover after parsing attributes in process `syz.2.563'. [ 198.437008][ T7669] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 198.458546][ T7669] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 198.819692][ T7688] netlink: 'syz.2.569': attribute type 39 has an invalid length. [ 199.450920][ T7697] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.571'. [ 199.796584][ T7701] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.573'. [ 199.975450][ T7706] netlink: 'syz.1.568': attribute type 10 has an invalid length. [ 199.997995][ T7706] netlink: 40 bytes leftover after parsing attributes in process `syz.1.568'. [ 200.442839][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.451608][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.786495][ T7726] netlink: 'syz.2.580': attribute type 39 has an invalid length. [ 201.396346][ T7739] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.585'. [ 201.919442][ T7740] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 201.927266][ T7740] netlink: 40 bytes leftover after parsing attributes in process `syz.2.584'. [ 202.381641][ T7754] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.596'. [ 202.819437][ T7754] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 202.865748][ T7754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.596'. [ 203.347547][ T7768] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 203.513115][ T7768] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 203.558645][ T7774] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 203.587394][ T7774] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 203.653316][ T7771] netlink: 'syz.1.592': attribute type 39 has an invalid length. [ 203.796405][ T7759] netlink: 'syz.2.588': attribute type 10 has an invalid length. [ 203.820387][ T7759] netlink: 40 bytes leftover after parsing attributes in process `syz.2.588'. [ 204.121638][ T7778] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.594'. [ 204.465426][ T7786] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.598'. [ 204.883547][ T7793] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.599'. [ 205.255827][ T7801] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.601'. [ 205.550969][ T7805] netlink: 'syz.1.603': attribute type 39 has an invalid length. [ 206.045254][ T7801] netlink: 'syz.0.601': attribute type 10 has an invalid length. [ 206.065133][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 206.163319][ T7808] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 206.204426][ T7808] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 206.384660][ T7802] netlink: 'syz.3.602': attribute type 10 has an invalid length. [ 206.401805][ T7802] netlink: 40 bytes leftover after parsing attributes in process `syz.3.602'. [ 206.865387][ T7826] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.610'. [ 207.377431][ T7835] netlink: 'syz.0.613': attribute type 39 has an invalid length. [ 207.502310][ T7836] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.612'. [ 207.633251][ T7840] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.615'. [ 207.907532][ T7843] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 207.932177][ T7843] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 208.008378][ T7845] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 208.099427][ T7845] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 208.211199][ T7840] netlink: 'syz.2.615': attribute type 10 has an invalid length. [ 208.251376][ T7840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.615'. [ 208.861702][ T7854] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.618'. [ 209.801758][ T7869] __nla_validate_parse: 1 callbacks suppressed [ 209.801779][ T7869] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.622'. [ 210.304155][ T7877] netlink: 'syz.2.624': attribute type 39 has an invalid length. [ 210.779447][ T7882] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.626'. [ 210.906438][ T7889] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 210.947087][ T7889] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 210.963075][ T7890] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.627'. [ 211.031737][ T7887] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 211.070007][ T7887] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 211.709420][ T7901] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.631'. [ 212.241435][ T7893] netlink: 'syz.0.626': attribute type 10 has an invalid length. [ 212.363350][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.0.626'. [ 212.392147][ T7902] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 212.411600][ T7902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.631'. [ 212.651881][ T7912] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.633'. [ 212.841093][ T7916] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.635'. [ 213.289210][ T7919] netlink: 'syz.2.636': attribute type 39 has an invalid length. [ 213.423997][ T7915] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.634'. [ 213.693961][ T7928] netlink: 'syz.3.646': attribute type 39 has an invalid length. [ 213.829279][ T7932] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.638'. [ 214.283721][ T7942] netlink: 'syz.0.651': attribute type 39 has an invalid length. [ 215.091024][ T7958] __nla_validate_parse: 2 callbacks suppressed [ 215.091062][ T7958] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.648'. [ 215.219408][ T7949] netlink: 'syz.0.643': attribute type 10 has an invalid length. [ 215.227423][ T7949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 215.469639][ T7966] netlink: 'syz.3.653': attribute type 39 has an invalid length. [ 215.652487][ T7970] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.654'. [ 216.038378][ T7977] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 216.078083][ T7977] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 216.343619][ T7973] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 216.529929][ T7973] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 217.276286][ T7998] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.662'. [ 217.474010][ T7997] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 217.549311][ T7997] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 217.997077][ T8003] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 218.008970][ T8003] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 218.052904][ T8007] netlink: 'syz.1.660': attribute type 10 has an invalid length. [ 218.066333][ T8007] netlink: 40 bytes leftover after parsing attributes in process `syz.1.660'. [ 218.306831][ T8011] netlink: 'syz.3.664': attribute type 39 has an invalid length. [ 218.366721][ T8017] FAULT_INJECTION: forcing a failure. [ 218.366721][ T8017] name failslab, interval 1, probability 0, space 0, times 0 [ 218.398538][ T8017] CPU: 0 PID: 8017 Comm: syz.1.666 Not tainted syzkaller #0 [ 218.405903][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.416005][ T8017] Call Trace: [ 218.419329][ T8017] [ 218.422292][ T8017] dump_stack_lvl+0x16c/0x230 [ 218.427112][ T8017] ? show_regs_print_info+0x20/0x20 [ 218.432359][ T8017] ? load_image+0x3b0/0x3b0 [ 218.436887][ T8017] ? __might_sleep+0xe0/0xe0 [ 218.441518][ T8017] ? __lock_acquire+0x7c80/0x7c80 [ 218.446563][ T8017] ? __rwlock_init+0x150/0x150 [ 218.451354][ T8017] should_fail_ex+0x39d/0x4d0 [ 218.456056][ T8017] should_failslab+0x9/0x20 [ 218.460587][ T8017] slab_pre_alloc_hook+0x59/0x310 [ 218.465646][ T8017] kmem_cache_alloc_lru+0x4d/0x2e0 [ 218.470777][ T8017] ? __d_alloc+0x31/0x730 [ 218.475133][ T8017] __d_alloc+0x31/0x730 [ 218.479310][ T8017] ? __lock_acquire+0x7c80/0x7c80 [ 218.484354][ T8017] ? do_raw_spin_lock+0x121/0x2c0 [ 218.489398][ T8017] d_alloc_pseudo+0x1d/0x70 [ 218.493939][ T8017] alloc_file_pseudo+0xcc/0x200 [ 218.498811][ T8017] ? alloc_empty_backing_file+0xe0/0xe0 [ 218.504382][ T8017] ? alloc_fd+0x58f/0x630 [ 218.508739][ T8017] anon_inode_getfd+0xca/0x1c0 [ 218.513528][ T8017] map_create+0xf14/0x12f0 [ 218.518176][ T8017] __sys_bpf+0x5f0/0x800 [ 218.522439][ T8017] ? bpf_link_show_fdinfo+0x350/0x350 [ 218.527837][ T8017] ? lock_chain_count+0x20/0x20 [ 218.532733][ T8017] __x64_sys_bpf+0x7c/0x90 [ 218.537161][ T8017] do_syscall_64+0x55/0xb0 [ 218.541593][ T8017] ? clear_bhb_loop+0x40/0x90 [ 218.546282][ T8017] ? clear_bhb_loop+0x40/0x90 [ 218.550980][ T8017] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 218.556981][ T8017] RIP: 0033:0x7f9eeff8eba9 [ 218.561416][ T8017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.581149][ T8017] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 218.589754][ T8017] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 218.597738][ T8017] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 218.605729][ T8017] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 218.613713][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.621695][ T8017] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 218.629694][ T8017] [ 218.821615][ T8022] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.668'. [ 219.160879][ T8033] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.680'. [ 219.233968][ T8031] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 219.279954][ T8031] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 219.472736][ T8038] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 219.480139][ T8038] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 219.772427][ T8047] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.675'. [ 219.919561][ T8044] netlink: 'syz.2.674': attribute type 10 has an invalid length. [ 219.927366][ T8044] netlink: 40 bytes leftover after parsing attributes in process `syz.2.674'. [ 220.104843][ T8053] netlink: 'syz.3.678': attribute type 39 has an invalid length. [ 220.516036][ T8056] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 220.530111][ T8056] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 220.615704][ T8059] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 220.664195][ T8059] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 221.170600][ T8071] FAULT_INJECTION: forcing a failure. [ 221.170600][ T8071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.207539][ T8071] CPU: 0 PID: 8071 Comm: syz.2.683 Not tainted syzkaller #0 [ 221.214937][ T8071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 221.225028][ T8071] Call Trace: [ 221.228344][ T8071] [ 221.231302][ T8071] dump_stack_lvl+0x16c/0x230 [ 221.236135][ T8071] ? show_regs_print_info+0x20/0x20 [ 221.241388][ T8071] ? load_image+0x3b0/0x3b0 [ 221.245941][ T8071] ? __might_fault+0xaa/0x120 [ 221.250666][ T8071] ? __lock_acquire+0x7c80/0x7c80 [ 221.255745][ T8071] should_fail_ex+0x39d/0x4d0 [ 221.260478][ T8071] _copy_from_user+0x2f/0xe0 [ 221.265112][ T8071] smc_setsockopt+0x3c5/0xab0 [ 221.269841][ T8071] ? smc_shutdown+0x9b0/0x9b0 [ 221.274552][ T8071] ? __fget_files+0x28/0x4d0 [ 221.279188][ T8071] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 221.284782][ T8071] ? security_socket_setsockopt+0x7e/0xa0 [ 221.290538][ T8071] ? smc_shutdown+0x9b0/0x9b0 [ 221.295265][ T8071] do_sock_setsockopt+0x175/0x1a0 [ 221.300329][ T8071] ? __fdget+0x180/0x210 [ 221.304616][ T8071] __x64_sys_setsockopt+0x184/0x200 [ 221.309866][ T8071] do_syscall_64+0x55/0xb0 [ 221.314326][ T8071] ? clear_bhb_loop+0x40/0x90 [ 221.319047][ T8071] ? clear_bhb_loop+0x40/0x90 [ 221.323778][ T8071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.329731][ T8071] RIP: 0033:0x7f7d1a58eba9 [ 221.334200][ T8071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.353861][ T8071] RSP: 002b:00007f7d1b47e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 221.362340][ T8071] RAX: ffffffffffffffda RBX: 00007f7d1a7d5fa0 RCX: 00007f7d1a58eba9 [ 221.370368][ T8071] RDX: 0000000000000010 RSI: 0000000000000006 RDI: 0000000000000005 [ 221.378384][ T8071] RBP: 00007f7d1b47e090 R08: 0000000000000004 R09: 0000000000000000 [ 221.386397][ T8071] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 221.394416][ T8071] R13: 00007f7d1a7d6038 R14: 00007f7d1a7d5fa0 R15: 00007fffe0e2f9e8 [ 221.402456][ T8071] [ 221.468861][ T8077] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 221.488870][ T8077] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 221.582286][ T8068] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 221.601717][ T8068] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 221.853418][ T8082] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.686'. [ 222.562658][ T8095] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 222.592785][ T8095] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 222.791446][ T8099] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 222.868152][ T8099] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 222.901214][ T8090] netlink: 'syz.3.688': attribute type 10 has an invalid length. [ 222.937675][ T8090] netlink: 40 bytes leftover after parsing attributes in process `syz.3.688'. [ 223.050503][ T8114] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.696'. [ 223.084543][ T5805] Bluetooth: hci2: command 0x0406 tx timeout [ 223.088128][ T5794] Bluetooth: hci0: command 0x0406 tx timeout [ 223.096658][ T5794] Bluetooth: hci1: command 0x0406 tx timeout [ 223.099158][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 223.372993][ T8113] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 223.388564][ T8113] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 223.455683][ T8116] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 223.462862][ T8116] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 223.864129][ T8125] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.701'. [ 223.898815][ T8130] netlink: 'syz.0.703': attribute type 10 has an invalid length. [ 223.906722][ T8130] netlink: 152 bytes leftover after parsing attributes in process `syz.0.703'. [ 223.992976][ T8137] FAULT_INJECTION: forcing a failure. [ 223.992976][ T8137] name failslab, interval 1, probability 0, space 0, times 0 [ 224.015268][ T8137] CPU: 1 PID: 8137 Comm: syz.3.704 Not tainted syzkaller #0 [ 224.022630][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.032722][ T8137] Call Trace: [ 224.036039][ T8137] [ 224.039001][ T8137] dump_stack_lvl+0x16c/0x230 [ 224.043729][ T8137] ? show_regs_print_info+0x20/0x20 [ 224.048979][ T8137] ? load_image+0x3b0/0x3b0 [ 224.053523][ T8137] ? __might_sleep+0xe0/0xe0 [ 224.058170][ T8137] ? __lock_acquire+0x7c80/0x7c80 [ 224.063244][ T8137] should_fail_ex+0x39d/0x4d0 [ 224.067986][ T8137] should_failslab+0x9/0x20 [ 224.072541][ T8137] slab_pre_alloc_hook+0x59/0x310 [ 224.077641][ T8137] kmem_cache_alloc_lru+0x4d/0x2e0 [ 224.082813][ T8137] ? __d_alloc+0x31/0x730 [ 224.087190][ T8137] __d_alloc+0x31/0x730 [ 224.091383][ T8137] ? __lock_acquire+0x7c80/0x7c80 [ 224.096436][ T8137] ? do_raw_spin_lock+0x121/0x2c0 [ 224.101503][ T8137] d_alloc_pseudo+0x1d/0x70 [ 224.106047][ T8137] alloc_file_pseudo+0xcc/0x200 [ 224.110939][ T8137] ? alloc_empty_backing_file+0xe0/0xe0 [ 224.116528][ T8137] ? alloc_fd+0x58f/0x630 [ 224.120909][ T8137] anon_inode_getfd+0xca/0x1c0 [ 224.125715][ T8137] map_create+0xf14/0x12f0 [ 224.130173][ T8137] __sys_bpf+0x5f0/0x800 [ 224.134452][ T8137] ? bpf_link_show_fdinfo+0x350/0x350 [ 224.139875][ T8137] ? lock_chain_count+0x20/0x20 [ 224.144779][ T8137] __x64_sys_bpf+0x7c/0x90 [ 224.149231][ T8137] do_syscall_64+0x55/0xb0 [ 224.153683][ T8137] ? clear_bhb_loop+0x40/0x90 [ 224.158395][ T8137] ? clear_bhb_loop+0x40/0x90 [ 224.163102][ T8137] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.169035][ T8137] RIP: 0033:0x7f7caa38eba9 [ 224.173479][ T8137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.193121][ T8137] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.201570][ T8137] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 224.209573][ T8137] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 0000000000000000 [ 224.217592][ T8137] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 224.225603][ T8137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.233607][ T8137] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 224.241641][ T8137] [ 224.618644][ T8147] FAULT_INJECTION: forcing a failure. [ 224.618644][ T8147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.639832][ T8147] CPU: 0 PID: 8147 Comm: syz.1.708 Not tainted syzkaller #0 [ 224.643394][ T8145] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 224.647165][ T8147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.647181][ T8147] Call Trace: [ 224.647191][ T8147] [ 224.647200][ T8147] dump_stack_lvl+0x16c/0x230 [ 224.647233][ T8147] ? show_regs_print_info+0x20/0x20 [ 224.647258][ T8147] ? load_image+0x3b0/0x3b0 [ 224.647280][ T8147] ? __might_fault+0xaa/0x120 [ 224.647301][ T8147] ? __lock_acquire+0x7c80/0x7c80 [ 224.647350][ T8147] should_fail_ex+0x39d/0x4d0 [ 224.647384][ T8147] _copy_from_user+0x2f/0xe0 [ 224.647409][ T8147] __sys_bpf+0x1e9/0x800 [ 224.647433][ T8147] ? bpf_link_show_fdinfo+0x350/0x350 [ 224.647477][ T8147] ? lock_chain_count+0x20/0x20 [ 224.647509][ T8147] __x64_sys_bpf+0x7c/0x90 [ 224.647530][ T8147] do_syscall_64+0x55/0xb0 [ 224.647553][ T8147] ? clear_bhb_loop+0x40/0x90 [ 224.647572][ T8147] ? clear_bhb_loop+0x40/0x90 [ 224.647594][ T8147] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 224.647645][ T8147] RIP: 0033:0x7f9eeff8eba9 [ 224.647670][ T8147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.647687][ T8147] RSP: 002b:00007f9ef0ddb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 224.647711][ T8147] RAX: ffffffffffffffda RBX: 00007f9ef01d6090 RCX: 00007f9eeff8eba9 [ 224.647726][ T8147] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 224.647751][ T8147] RBP: 00007f9ef0ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 224.647765][ T8147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.647777][ T8147] R13: 00007f9ef01d6128 R14: 00007f9ef01d6090 R15: 00007fffeb97f9b8 [ 224.647807][ T8147] [ 224.879499][ T8145] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 225.073787][ T8153] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 225.107228][ T8153] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 225.195796][ T8156] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 225.208300][ T8156] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 225.273571][ T8157] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 225.281960][ T8157] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 225.625239][ T8170] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.717'. [ 226.329898][ T8195] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 226.355250][ T8195] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 226.407394][ T8192] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 226.428676][ T8192] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 226.682662][ T8201] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 226.706247][ T8201] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 226.767078][ T8207] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 226.838263][ T8207] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 227.221999][ T8211] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.729'. [ 227.402585][ T8211] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 227.541284][ T8215] netlink: 40 bytes leftover after parsing attributes in process `syz.2.731'. [ 227.639933][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.702532][ T8225] tipc: Withdrawal distribution failure [ 227.750646][ T8215] bridge_slave_0 (unregistering): left allmulticast mode [ 227.760997][ T8215] bridge_slave_0 (unregistering): left promiscuous mode [ 227.770445][ T8215] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.572564][ T8244] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 228.588958][ T8244] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 228.684439][ T8246] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.742'. [ 228.700218][ T8247] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 228.738682][ T8247] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 229.083988][ T8263] netlink: 188 bytes leftover after parsing attributes in process `syz.0.747'. [ 229.144210][ T8263] netlink: 208064 bytes leftover after parsing attributes in process `syz.0.747'. [ 229.190924][ T8263] netlink: zone id is out of range [ 229.196279][ T8263] netlink: zone id is out of range [ 229.226798][ T8263] netlink: zone id is out of range [ 229.232639][ T8263] netlink: zone id is out of range [ 229.259858][ T8263] netlink: zone id is out of range [ 229.265064][ T8263] netlink: zone id is out of range [ 229.313131][ T8260] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 229.315586][ T8263] netlink: zone id is out of range [ 229.322315][ T8260] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 229.469560][ T8263] netlink: zone id is out of range [ 229.558640][ T8262] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 229.566196][ T8262] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 229.573976][ T8263] netlink: zone id is out of range [ 229.600501][ T8263] netlink: zone id is out of range [ 230.633911][ T8274] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 230.641852][ T8274] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 230.656265][ T8280] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 230.663635][ T8280] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 230.673542][ T8279] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.753'. [ 230.709800][ T8285] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 230.727809][ T8285] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 230.778533][ T8288] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 230.785580][ T8288] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 231.011255][ T8295] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 231.058574][ T8295] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 231.136961][ T8298] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 231.333192][ T8298] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 231.568171][ T8302] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 231.574962][ T8302] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 231.637709][ T8302] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 231.660229][ T8302] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 231.840881][ T8304] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 231.860309][ T8304] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 232.080557][ T8308] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 232.106177][ T8308] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 232.237442][ T8313] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 232.273678][ T8313] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 232.502992][ T8316] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 232.518340][ T8316] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 232.536279][ T8317] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.762'. [ 232.899952][ T8331] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.765'. [ 233.388860][ T8341] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 233.395661][ T8341] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 233.443485][ T8338] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.769'. [ 233.474617][ T8342] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 233.484522][ T8342] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 233.506122][ T8343] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 233.520983][ T8343] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 233.629179][ T8339] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 233.658935][ T8339] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 234.321226][ T8357] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 234.334060][ T8357] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 234.570982][ T8359] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 234.584570][ T8359] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 234.596091][ T8358] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 234.603661][ T8358] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 234.626106][ T8355] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 234.634936][ T8355] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 234.719487][ T8361] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 234.727105][ T8361] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 234.786065][ T8363] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 234.808157][ T8363] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 234.842568][ T8370] Driver unsupported XDP return value 0 on prog (id 842) dev N/A, expect packet loss! [ 235.052079][ T8378] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.778'. [ 235.064318][ T8377] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.777'. [ 236.104200][ T8389] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 236.111200][ T8389] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 236.136427][ T8392] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 236.149972][ T8392] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 237.098728][ T8398] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 237.118678][ T8398] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 237.158980][ T8407] netlink: 14 bytes leftover after parsing attributes in process `syz.2.784'. [ 237.189074][ T8407] net_ratelimit: 2 callbacks suppressed [ 237.189092][ T8407] netlink: get zone limit has 4 unknown bytes [ 237.377568][ T8399] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 237.385540][ T8399] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 237.394374][ T8408] netlink: 'syz.2.784': attribute type 10 has an invalid length. [ 237.789502][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.810856][ T8408] team0: Port device batadv0 added [ 237.835327][ T8411] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 237.852676][ T8411] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 237.982663][ T8413] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 238.011114][ T8413] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 238.124632][ T8421] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.789'. [ 238.414558][ T8429] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.792'. [ 238.437583][ T8429] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.792'. [ 238.465580][ T8429] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.792'. [ 238.633687][ T8432] netlink: 'syz.3.793': attribute type 39 has an invalid length. [ 239.112487][ T8440] netlink: 'syz.2.796': attribute type 39 has an invalid length. [ 239.355429][ T8447] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 239.398363][ T8447] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 239.444227][ T8449] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 239.566836][ T8449] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 240.060306][ T8462] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 240.082100][ T8462] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 240.207755][ T8463] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 240.220683][ T8463] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 240.236809][ T8466] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.803'. [ 240.332385][ T8473] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.806'. [ 241.249519][ T8503] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.813'. [ 241.291711][ T8503] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.576462][ T8511] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.815'. [ 241.726840][ T8511] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 241.785738][ T8509] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 241.804149][ T8509] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 241.867812][ T8512] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 241.875725][ T8512] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 241.884466][ T8514] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.817'. [ 242.001984][ T8517] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.818'. [ 242.333293][ T5108] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 242.944299][ T8527] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 242.979212][ T8527] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 243.386445][ T8544] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.826'. [ 243.848112][ T8544] netlink: 'syz.1.826': attribute type 10 has an invalid length. [ 243.867892][ T8544] netlink: 40 bytes leftover after parsing attributes in process `syz.1.826'. [ 244.161893][ T8562] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.832'. [ 244.679740][ T8585] FAULT_INJECTION: forcing a failure. [ 244.679740][ T8585] name failslab, interval 1, probability 0, space 0, times 0 [ 244.693605][ T8585] CPU: 1 PID: 8585 Comm: syz.1.839 Not tainted syzkaller #0 [ 244.700942][ T8585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 244.711013][ T8585] Call Trace: [ 244.714299][ T8585] [ 244.717247][ T8585] dump_stack_lvl+0x16c/0x230 [ 244.721972][ T8585] ? show_regs_print_info+0x20/0x20 [ 244.727226][ T8585] ? load_image+0x3b0/0x3b0 [ 244.731786][ T8585] ? verify_lock_unused+0x140/0x140 [ 244.737050][ T8585] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 244.742732][ T8585] should_fail_ex+0x39d/0x4d0 [ 244.747454][ T8585] should_failslab+0x9/0x20 [ 244.751985][ T8585] slab_pre_alloc_hook+0x59/0x310 [ 244.757058][ T8585] kmem_cache_alloc+0x5a/0x2e0 [ 244.761850][ T8585] ? skb_clone+0x1eb/0x370 [ 244.766313][ T8585] skb_clone+0x1eb/0x370 [ 244.770593][ T8585] __netlink_deliver_tap+0x41c/0x830 [ 244.775935][ T8585] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.781166][ T8585] netlink_deliver_tap+0x19c/0x1b0 [ 244.786305][ T8585] netlink_unicast+0x72c/0x8d0 [ 244.791116][ T8585] netlink_sendmsg+0x8c1/0xbe0 [ 244.795930][ T8585] ? netlink_getsockopt+0x580/0x580 [ 244.801164][ T8585] ? aa_sock_msg_perm+0x94/0x150 [ 244.806128][ T8585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 244.811436][ T8585] ? security_socket_sendmsg+0x80/0xa0 [ 244.816914][ T8585] ? netlink_getsockopt+0x580/0x580 [ 244.822139][ T8585] ____sys_sendmsg+0x5bf/0x950 [ 244.826944][ T8585] ? __asan_memset+0x22/0x40 [ 244.831566][ T8585] ? __sys_sendmsg_sock+0x30/0x30 [ 244.836697][ T8585] ? __import_iovec+0x5f2/0x860 [ 244.841595][ T8585] ? import_iovec+0x73/0xa0 [ 244.846136][ T8585] ___sys_sendmsg+0x220/0x290 [ 244.850844][ T8585] ? __sys_sendmsg+0x270/0x270 [ 244.855671][ T8585] ? __lock_acquire+0x7c80/0x7c80 [ 244.860763][ T8585] __se_sys_sendmsg+0x1a5/0x270 [ 244.865663][ T8585] ? __x64_sys_sendmsg+0x80/0x80 [ 244.870655][ T8585] ? lockdep_hardirqs_on+0x98/0x150 [ 244.875893][ T8585] do_syscall_64+0x55/0xb0 [ 244.880332][ T8585] ? clear_bhb_loop+0x40/0x90 [ 244.885029][ T8585] ? clear_bhb_loop+0x40/0x90 [ 244.889729][ T8585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 244.895651][ T8585] RIP: 0033:0x7f9eeff8eba9 [ 244.900113][ T8585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.919747][ T8585] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.928192][ T8585] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 244.936187][ T8585] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 244.944176][ T8585] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 244.952172][ T8585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.960169][ T8585] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 244.968192][ T8585] [ 245.084113][ T8589] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.840'. [ 245.253502][ T8593] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.842'. [ 245.508253][ T8594] netlink: 'syz.1.842': attribute type 10 has an invalid length. [ 245.584293][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.842'. [ 245.684792][ T8599] netlink: 'syz.3.844': attribute type 9 has an invalid length. [ 245.717962][ T8599] netlink: 399 bytes leftover after parsing attributes in process `syz.3.844'. [ 245.771905][ T8603] netlink: 'syz.1.845': attribute type 17 has an invalid length. [ 245.786986][ T8603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 246.016704][ T8608] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 246.038505][ T8608] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 246.090788][ T8609] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.846'. [ 246.399454][ T8625] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.853'. [ 246.470098][ T8621] netlink: 'syz.0.851': attribute type 10 has an invalid length. [ 246.499206][ T8621] team0: entered promiscuous mode [ 246.504346][ T8621] team_slave_0: entered promiscuous mode [ 246.536820][ T8621] team_slave_1: entered promiscuous mode [ 246.588936][ T8621] team0: entered allmulticast mode [ 246.594154][ T8621] team_slave_0: entered allmulticast mode [ 246.631599][ T8621] team_slave_1: entered allmulticast mode [ 246.669997][ T8621] bridge0: port 4(team0) entered blocking state [ 246.688560][ T8621] bridge0: port 4(team0) entered disabled state [ 246.967315][ T8625] netlink: 'syz.3.853': attribute type 10 has an invalid length. [ 247.819489][ T8637] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.033561][ T8641] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 248.511304][ T8648] FAULT_INJECTION: forcing a failure. [ 248.511304][ T8648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.545019][ T8648] CPU: 1 PID: 8648 Comm: syz.1.860 Not tainted syzkaller #0 [ 248.552407][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 248.562512][ T8648] Call Trace: [ 248.565839][ T8648] [ 248.568810][ T8648] dump_stack_lvl+0x16c/0x230 [ 248.573548][ T8648] ? show_regs_print_info+0x20/0x20 [ 248.578800][ T8648] ? load_image+0x3b0/0x3b0 [ 248.583360][ T8648] ? __might_fault+0xaa/0x120 [ 248.588086][ T8648] ? __lock_acquire+0x7c80/0x7c80 [ 248.593260][ T8648] should_fail_ex+0x39d/0x4d0 [ 248.598003][ T8648] _copy_from_user+0x2f/0xe0 [ 248.602646][ T8648] kstrtouint_from_user+0xc2/0x150 [ 248.607834][ T8648] ? kstrtol_from_user+0x150/0x150 [ 248.613010][ T8648] proc_fail_nth_write+0x89/0x240 [ 248.618063][ T8648] ? proc_fail_nth_read+0x250/0x250 [ 248.623300][ T8648] ? proc_fail_nth_read+0x250/0x250 [ 248.628522][ T8648] vfs_write+0x288/0x940 [ 248.632812][ T8648] ? file_end_write+0x250/0x250 [ 248.637693][ T8648] ? __fget_files+0x28/0x4d0 [ 248.642319][ T8648] ? __fget_files+0x44a/0x4d0 [ 248.647039][ T8648] ? __fdget_pos+0x2a3/0x330 [ 248.651655][ T8648] ? ksys_write+0x75/0x250 [ 248.656098][ T8648] ksys_write+0x147/0x250 [ 248.660453][ T8648] ? __ia32_sys_read+0x90/0x90 [ 248.665246][ T8648] ? lockdep_hardirqs_on+0x98/0x150 [ 248.670473][ T8648] do_syscall_64+0x55/0xb0 [ 248.674921][ T8648] ? clear_bhb_loop+0x40/0x90 [ 248.679611][ T8648] ? clear_bhb_loop+0x40/0x90 [ 248.684305][ T8648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 248.690227][ T8648] RIP: 0033:0x7f9eeff8d65f [ 248.694664][ T8648] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 248.714294][ T8648] RSP: 002b:00007f9ef0ddb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 248.722756][ T8648] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9eeff8d65f [ 248.730746][ T8648] RDX: 0000000000000001 RSI: 00007f9ef0ddb0a0 RDI: 0000000000000008 [ 248.738734][ T8648] RBP: 00007f9ef0ddb090 R08: 0000000000000000 R09: 0000000000000000 [ 248.746723][ T8648] R10: 0000200000000040 R11: 0000000000000293 R12: 0000000000000001 [ 248.754710][ T8648] R13: 00007f9ef01d6128 R14: 00007f9ef01d6090 R15: 00007fffeb97f9b8 [ 248.762726][ T8648] [ 249.044319][ T8654] __nla_validate_parse: 4 callbacks suppressed [ 249.044359][ T8654] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.862'. [ 249.316702][ T8660] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 249.340474][ T8660] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 249.373179][ T8656] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 249.403153][ T8656] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 249.749851][ T8675] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.870'. [ 250.278437][ T8680] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 250.285476][ T8680] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 250.382659][ T8682] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.873'. [ 250.560005][ T8687] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 250.588296][ T8687] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 250.691922][ T8675] netlink: 'syz.2.870': attribute type 10 has an invalid length. [ 250.722577][ T8675] netlink: 40 bytes leftover after parsing attributes in process `syz.2.870'. [ 250.957493][ T8695] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.877'. [ 251.137719][ T8696] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 251.147605][ T8696] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 251.270787][ T8699] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 251.350574][ T8699] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 251.390201][ T8705] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 251.396994][ T8705] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 251.481006][ T8701] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 251.508491][ T8701] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 251.531816][ T8710] FAULT_INJECTION: forcing a failure. [ 251.531816][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 251.546302][ T8710] CPU: 1 PID: 8710 Comm: syz.2.881 Not tainted syzkaller #0 [ 251.553660][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 251.563768][ T8710] Call Trace: [ 251.567100][ T8710] [ 251.570087][ T8710] dump_stack_lvl+0x16c/0x230 [ 251.574837][ T8710] ? show_regs_print_info+0x20/0x20 [ 251.580106][ T8710] ? load_image+0x3b0/0x3b0 [ 251.584674][ T8710] ? __might_sleep+0xe0/0xe0 [ 251.589313][ T8710] ? __lock_acquire+0x7c80/0x7c80 [ 251.594398][ T8710] should_fail_ex+0x39d/0x4d0 [ 251.599147][ T8710] should_failslab+0x9/0x20 [ 251.603712][ T8710] slab_pre_alloc_hook+0x59/0x310 [ 251.608796][ T8710] ? __lock_acquire+0x7c80/0x7c80 [ 251.613884][ T8710] kmem_cache_alloc_node+0x60/0x330 [ 251.619230][ T8710] ? __alloc_skb+0x108/0x2c0 [ 251.623896][ T8710] __alloc_skb+0x108/0x2c0 [ 251.628376][ T8710] netlink_sendmsg+0x65b/0xbe0 [ 251.633229][ T8710] ? netlink_getsockopt+0x580/0x580 [ 251.638485][ T8710] ? aa_sock_msg_perm+0x94/0x150 [ 251.643475][ T8710] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.648805][ T8710] ? security_socket_sendmsg+0x80/0xa0 [ 251.654317][ T8710] ? netlink_getsockopt+0x580/0x580 [ 251.659569][ T8710] ____sys_sendmsg+0x5bf/0x950 [ 251.664409][ T8710] ? __asan_memset+0x22/0x40 [ 251.669062][ T8710] ? __sys_sendmsg_sock+0x30/0x30 [ 251.674133][ T8710] ? __import_iovec+0x3fa/0x860 [ 251.679065][ T8710] ? import_iovec+0x73/0xa0 [ 251.683636][ T8710] ___sys_sendmsg+0x220/0x290 [ 251.688375][ T8710] ? __sys_sendmsg+0x270/0x270 [ 251.693235][ T8710] ? __lock_acquire+0x7c80/0x7c80 [ 251.698363][ T8710] __se_sys_sendmsg+0x1a5/0x270 [ 251.703271][ T8710] ? perf_trace_preemptirq_template+0x281/0x340 [ 251.709575][ T8710] ? __x64_sys_sendmsg+0x80/0x80 [ 251.714603][ T8710] ? lockdep_hardirqs_on+0x98/0x150 [ 251.719868][ T8710] do_syscall_64+0x55/0xb0 [ 251.724340][ T8710] ? clear_bhb_loop+0x40/0x90 [ 251.729074][ T8710] ? clear_bhb_loop+0x40/0x90 [ 251.733806][ T8710] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 251.739765][ T8710] RIP: 0033:0x7f7d1a58eba9 [ 251.744231][ T8710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.763892][ T8710] RSP: 002b:00007f7d1b47e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.772362][ T8710] RAX: ffffffffffffffda RBX: 00007f7d1a7d5fa0 RCX: 00007f7d1a58eba9 [ 251.780382][ T8710] RDX: 0000000000004080 RSI: 0000200000000180 RDI: 0000000000000005 [ 251.788401][ T8710] RBP: 00007f7d1b47e090 R08: 0000000000000000 R09: 0000000000000000 [ 251.796417][ T8710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.804429][ T8710] R13: 00007f7d1a7d6038 R14: 00007f7d1a7d5fa0 R15: 00007fffe0e2f9e8 [ 251.812481][ T8710] [ 251.947578][ T8713] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.882'. [ 252.180300][ T8715] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 252.187087][ T8715] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 252.253929][ T8714] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 252.263949][ T8714] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 252.424364][ T8720] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.886'. [ 252.507367][ T8722] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.885'. [ 252.678566][ T8720] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 252.728073][ T8720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.886'. [ 252.972805][ T8739] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.891'. [ 253.053169][ T8744] netlink: 'syz.3.889': attribute type 2 has an invalid length. [ 253.104911][ T8744] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 253.786597][ T8759] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 253.795285][ T8759] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 253.863103][ T8762] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 253.881113][ T8762] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 254.632303][ T8765] netlink: 'syz.0.897': attribute type 10 has an invalid length. [ 254.896921][ T8765] geneve1: entered promiscuous mode [ 254.913256][ T8765] geneve1: entered allmulticast mode [ 254.969382][ T8765] team0: Port device geneve1 added [ 254.999166][ T8783] FAULT_INJECTION: forcing a failure. [ 254.999166][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 255.012236][ T8783] CPU: 0 PID: 8783 Comm: syz.3.903 Not tainted syzkaller #0 [ 255.019561][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 255.029651][ T8783] Call Trace: [ 255.031232][ T8771] __nla_validate_parse: 4 callbacks suppressed [ 255.031251][ T8771] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.899'. [ 255.032942][ T8783] [ 255.032979][ T8783] dump_stack_lvl+0x16c/0x230 [ 255.055927][ T8783] ? show_regs_print_info+0x20/0x20 [ 255.061171][ T8783] ? load_image+0x3b0/0x3b0 [ 255.065728][ T8783] ? __might_sleep+0xe0/0xe0 [ 255.070364][ T8783] ? __lock_acquire+0x7c80/0x7c80 [ 255.075423][ T8783] ? rcu_is_watching+0x15/0xb0 [ 255.080221][ T8783] should_fail_ex+0x39d/0x4d0 [ 255.084928][ T8783] should_failslab+0x9/0x20 [ 255.089459][ T8783] slab_pre_alloc_hook+0x59/0x310 [ 255.094497][ T8783] ? netlink_dump+0xcc/0xde0 [ 255.099102][ T8783] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.105193][ T8783] kmem_cache_alloc_node+0x60/0x330 [ 255.110437][ T8783] ? __alloc_skb+0x108/0x2c0 [ 255.115047][ T8783] __alloc_skb+0x108/0x2c0 [ 255.119481][ T8783] netlink_dump+0x1cf/0xde0 [ 255.124002][ T8783] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 255.130000][ T8783] ? lock_chain_count+0x20/0x20 [ 255.134867][ T8783] ? netlink_lookup+0x200/0x200 [ 255.139749][ T8783] ? slab_free_freelist_hook+0x130/0x1b0 [ 255.145407][ T8783] ? netlink_recvmsg+0x5cf/0xdf0 [ 255.150368][ T8783] ? kmem_cache_free+0xf8/0x280 [ 255.155245][ T8783] netlink_recvmsg+0x677/0xdf0 [ 255.160033][ T8783] ? netlink_sendmsg+0xbe0/0xbe0 [ 255.164997][ T8783] ? aa_sk_perm+0x7fc/0x930 [ 255.169530][ T8783] ? aa_af_perm+0x2b0/0x2b0 [ 255.174047][ T8783] ? __lock_acquire+0x1260/0x7c80 [ 255.179162][ T8783] ? verify_lock_unused+0x140/0x140 [ 255.184405][ T8783] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 255.189763][ T8783] ? security_socket_recvmsg+0x89/0xb0 [ 255.195260][ T8783] ? netlink_sendmsg+0xbe0/0xbe0 [ 255.200228][ T8783] ____sys_recvmsg+0x29e/0x5b0 [ 255.205033][ T8783] ? __sys_recvmsg_sock+0x50/0x50 [ 255.210099][ T8783] ? import_iovec+0x73/0xa0 [ 255.214628][ T8783] ___sys_recvmsg+0x1b6/0x510 [ 255.219347][ T8783] ? __sys_recvmsg+0x270/0x270 [ 255.224152][ T8783] ? ksys_write+0x1c1/0x250 [ 255.228682][ T8783] ? __fget_files+0x44a/0x4d0 [ 255.233391][ T8783] __x64_sys_recvmsg+0x1f2/0x2c0 [ 255.238353][ T8783] ? ___sys_recvmsg+0x510/0x510 [ 255.243262][ T8783] ? lockdep_hardirqs_on+0x98/0x150 [ 255.248486][ T8783] do_syscall_64+0x55/0xb0 [ 255.253007][ T8783] ? clear_bhb_loop+0x40/0x90 [ 255.257708][ T8783] ? clear_bhb_loop+0x40/0x90 [ 255.262418][ T8783] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 255.268332][ T8783] RIP: 0033:0x7f7caa38eba9 [ 255.272766][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.292391][ T8783] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 255.300816][ T8783] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 255.308804][ T8783] RDX: 0000000040000040 RSI: 0000200000001040 RDI: 0000000000000004 [ 255.316782][ T8783] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 255.324770][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.332759][ T8783] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 255.340763][ T8783] [ 255.368914][ T8785] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 255.376944][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.2.899'. [ 255.571841][ T8788] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.904'. [ 255.687276][ T8791] netlink: 'syz.0.905': attribute type 39 has an invalid length. [ 256.110537][ T8800] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 256.118649][ T8800] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 256.166762][ T8806] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 256.187536][ T8806] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 256.395528][ T8808] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.911'. [ 256.726776][ T8819] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.914'. [ 256.787654][ T8823] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 256.811558][ T8823] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 256.849067][ T8824] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 256.856352][ T8824] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 256.865793][ T8819] netlink: 'syz.0.914': attribute type 10 has an invalid length. [ 256.891005][ T8819] netlink: 40 bytes leftover after parsing attributes in process `syz.0.914'. [ 257.013148][ T8827] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.916'. [ 257.048890][ T8830] FAULT_INJECTION: forcing a failure. [ 257.048890][ T8830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.090163][ T8830] CPU: 0 PID: 8830 Comm: syz.0.917 Not tainted syzkaller #0 [ 257.097550][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.107653][ T8830] Call Trace: [ 257.110971][ T8830] [ 257.113928][ T8830] dump_stack_lvl+0x16c/0x230 [ 257.118652][ T8830] ? show_regs_print_info+0x20/0x20 [ 257.123894][ T8830] ? load_image+0x3b0/0x3b0 [ 257.128440][ T8830] ? __lock_acquire+0x7c80/0x7c80 [ 257.133519][ T8830] ? snprintf+0xdb/0x120 [ 257.137809][ T8830] should_fail_ex+0x39d/0x4d0 [ 257.142538][ T8830] _copy_to_user+0x2f/0xa0 [ 257.146995][ T8830] simple_read_from_buffer+0xe7/0x150 [ 257.152414][ T8830] proc_fail_nth_read+0x1e3/0x250 [ 257.157497][ T8830] ? proc_fault_inject_write+0x340/0x340 [ 257.163174][ T8830] ? fsnotify_perm+0x271/0x5e0 [ 257.168012][ T8830] ? proc_fault_inject_write+0x340/0x340 [ 257.173698][ T8830] vfs_read+0x27e/0x920 [ 257.178013][ T8830] ? kernel_read+0x1e0/0x1e0 [ 257.182671][ T8830] ? __fget_files+0x28/0x4d0 [ 257.187315][ T8830] ? __fget_files+0x44a/0x4d0 [ 257.192049][ T8830] ? __fdget_pos+0x2a3/0x330 [ 257.196679][ T8830] ? ksys_read+0x75/0x250 [ 257.201170][ T8830] ksys_read+0x147/0x250 [ 257.205473][ T8830] ? vfs_write+0x940/0x940 [ 257.209949][ T8830] ? lockdep_hardirqs_on+0x98/0x150 [ 257.215213][ T8830] do_syscall_64+0x55/0xb0 [ 257.219676][ T8830] ? clear_bhb_loop+0x40/0x90 [ 257.224414][ T8830] ? clear_bhb_loop+0x40/0x90 [ 257.229138][ T8830] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.235078][ T8830] RIP: 0033:0x7fe22c58d5bc [ 257.239537][ T8830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.259184][ T8830] RSP: 002b:00007fe22d451030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.267647][ T8830] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58d5bc [ 257.275749][ T8830] RDX: 000000000000000f RSI: 00007fe22d4510a0 RDI: 0000000000000005 [ 257.280533][ T8840] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.919'. [ 257.283734][ T8830] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 257.283777][ T8830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.283792][ T8830] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 257.283823][ T8830] [ 257.349144][ T8832] netlink: 'syz.3.918': attribute type 39 has an invalid length. [ 257.717450][ T8855] syz.1.924: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 257.736056][ T8855] CPU: 0 PID: 8855 Comm: syz.1.924 Not tainted syzkaller #0 [ 257.743429][ T8855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.753555][ T8855] Call Trace: [ 257.756900][ T8855] [ 257.759896][ T8855] dump_stack_lvl+0x16c/0x230 [ 257.764665][ T8855] ? show_regs_print_info+0x20/0x20 [ 257.769951][ T8855] ? load_image+0x3b0/0x3b0 [ 257.774550][ T8855] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 257.781087][ T8855] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 257.787695][ T8855] warn_alloc+0x210/0x300 [ 257.792116][ T8855] ? stack_trace_save+0x9c/0xe0 [ 257.797193][ T8855] ? zone_watermark_ok_safe+0x230/0x230 [ 257.802817][ T8855] ? kasan_set_track+0x5f/0x70 [ 257.807622][ T8855] ? kasan_set_track+0x4e/0x70 [ 257.812426][ T8855] ? __kasan_kmalloc+0x8f/0xa0 [ 257.817230][ T8855] ? xsk_init_queue+0xb0/0x110 [ 257.822029][ T8855] ? xsk_setsockopt+0x4db/0x6f0 [ 257.826926][ T8855] ? do_sock_setsockopt+0x175/0x1a0 [ 257.832170][ T8855] ? __x64_sys_setsockopt+0x184/0x200 [ 257.837597][ T8855] __vmalloc_node_range+0x126/0x1320 [ 257.843012][ T8855] ? free_vm_area+0x50/0x50 [ 257.847604][ T8855] vmalloc_user+0x74/0x80 [ 257.851997][ T8855] ? xskq_create+0xbf/0x170 [ 257.856557][ T8855] xskq_create+0xbf/0x170 [ 257.860934][ T8855] xsk_init_queue+0xb0/0x110 [ 257.865578][ T8855] xsk_setsockopt+0x4db/0x6f0 [ 257.870304][ T8855] ? xsk_poll+0x670/0x670 [ 257.874696][ T8855] ? __fget_files+0x28/0x4d0 [ 257.879345][ T8855] ? aa_sock_opt_perm+0x74/0x100 [ 257.884351][ T8855] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 257.889956][ T8855] ? security_socket_setsockopt+0x7e/0xa0 [ 257.895715][ T8855] ? xsk_poll+0x670/0x670 [ 257.900087][ T8855] do_sock_setsockopt+0x175/0x1a0 [ 257.905153][ T8855] ? __fdget+0x180/0x210 [ 257.911007][ T8855] __x64_sys_setsockopt+0x184/0x200 [ 257.916350][ T8855] do_syscall_64+0x55/0xb0 [ 257.920821][ T8855] ? clear_bhb_loop+0x40/0x90 [ 257.925549][ T8855] ? clear_bhb_loop+0x40/0x90 [ 257.930306][ T8855] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.936275][ T8855] RIP: 0033:0x7f9eeff8eba9 [ 257.940745][ T8855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.960407][ T8855] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 257.968960][ T8855] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 257.976963][ T8855] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 257.984966][ T8855] RBP: 00007f9ef0011e19 R08: 0000000000000004 R09: 0000000000000000 [ 257.992974][ T8855] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 258.000984][ T8855] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 258.009039][ T8855] [ 258.018669][ T8855] Mem-Info: [ 258.021880][ T8855] active_anon:5362 inactive_anon:0 isolated_anon:0 [ 258.021880][ T8855] active_file:15355 inactive_file:39919 isolated_file:0 [ 258.021880][ T8855] unevictable:768 dirty:360 writeback:0 [ 258.021880][ T8855] slab_reclaimable:10112 slab_unreclaimable:90848 [ 258.021880][ T8855] mapped:26690 shmem:1361 pagetables:558 [ 258.021880][ T8855] sec_pagetables:0 bounce:0 [ 258.021880][ T8855] kernel_misc_reclaimable:0 [ 258.021880][ T8855] free:1354442 free_pcp:8611 free_cma:0 [ 258.086732][ T8855] Node 0 active_anon:21536kB inactive_anon:0kB active_file:61420kB inactive_file:159476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106756kB dirty:1440kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11564kB pagetables:2316kB sec_pagetables:0kB all_unreclaimable? no [ 258.121064][ T8855] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 258.163953][ T8855] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.216635][ T8855] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 258.223664][ T8855] Node 0 DMA32 free:1504368kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21788kB inactive_anon:0kB active_file:61420kB inactive_file:158156kB unevictable:1536kB writepending:1440kB present:3129332kB managed:2589592kB mlocked:0kB bounce:0kB free_pcp:13756kB local_pcp:8604kB free_cma:0kB [ 258.277520][ T8855] lowmem_reserve[]: 0 0 1 1 1 [ 258.306408][ T8855] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 258.380092][ T8855] lowmem_reserve[]: 0 0 0 0 0 [ 258.385002][ T8855] Node 1 Normal free:3898088kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20620kB local_pcp:12556kB free_cma:0kB [ 258.467931][ T8855] lowmem_reserve[]: 0 0 0 0 0 [ 258.472831][ T8855] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 258.527941][ T8855] Node 0 DMA32: 312*4kB (UM) 1461*8kB (UM) 1364*16kB (UME) 698*32kB (UME) 460*64kB (UME) 159*128kB (UME) 67*256kB (ME) 25*512kB (ME) 8*1024kB (UME) 3*2048kB (UM) 330*4096kB (M) = 1502856kB [ 258.588029][ T8855] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 258.658019][ T8855] Node 1 Normal: 252*4kB (UM) 63*8kB (UME) 40*16kB (UME) 78*32kB (UME) 23*64kB (UE) 4*128kB (UME) 1*256kB (E) 2*512kB (UM) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898088kB [ 258.730226][ T8855] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.749026][ T8855] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.762437][ T8860] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.925'. [ 258.773180][ T8855] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 258.782945][ T8855] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 258.792787][ T8855] 57310 total pagecache pages [ 258.797637][ T8855] 0 pages in swap cache [ 258.802667][ T8855] Free swap = 124996kB [ 258.806896][ T8855] Total swap = 124996kB [ 258.811295][ T8855] 2097051 pages RAM [ 258.815131][ T8855] 0 pages HighMem/MovableOnly [ 258.820040][ T8855] 416139 pages reserved [ 258.825104][ T8855] 0 pages cma reserved [ 258.899791][ T8860] netlink: 'syz.2.925': attribute type 10 has an invalid length. [ 258.907586][ T8860] netlink: 40 bytes leftover after parsing attributes in process `syz.2.925'. [ 259.612650][ T8882] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 259.636848][ T8882] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 259.702581][ T8885] netlink: 'syz.1.935': attribute type 39 has an invalid length. [ 259.717308][ T8886] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 259.758301][ T8886] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 260.280108][ T8897] FAULT_INJECTION: forcing a failure. [ 260.280108][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.302006][ T8899] __nla_validate_parse: 1 callbacks suppressed [ 260.302026][ T8899] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.939'. [ 260.330338][ T8897] CPU: 0 PID: 8897 Comm: syz.2.938 Not tainted syzkaller #0 [ 260.337699][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.347793][ T8897] Call Trace: [ 260.351105][ T8897] [ 260.354068][ T8897] dump_stack_lvl+0x16c/0x230 [ 260.358790][ T8897] ? show_regs_print_info+0x20/0x20 [ 260.364036][ T8897] ? load_image+0x3b0/0x3b0 [ 260.368608][ T8897] ? __might_fault+0xaa/0x120 [ 260.373328][ T8897] ? __lock_acquire+0x7c80/0x7c80 [ 260.378403][ T8897] should_fail_ex+0x39d/0x4d0 [ 260.383137][ T8897] _copy_from_user+0x2f/0xe0 [ 260.387777][ T8897] bpf_obj_get_info_by_fd+0x419/0x2d90 [ 260.393296][ T8897] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 260.399436][ T8897] ? bpf_map_get_fd_by_id+0x310/0x310 [ 260.404862][ T8897] ? perf_trace_lock+0x2ed/0x380 [ 260.409858][ T8897] ? trace_event_raw_event_lock+0x230/0x230 [ 260.415866][ T8897] ? __might_fault+0xaa/0x120 [ 260.420591][ T8897] ? __might_fault+0xc6/0x120 [ 260.425301][ T8897] ? __might_fault+0xaa/0x120 [ 260.430020][ T8897] ? bpf_lsm_bpf+0x9/0x10 [ 260.434389][ T8897] ? security_bpf+0x7e/0xa0 [ 260.438941][ T8897] __sys_bpf+0x781/0x800 [ 260.443230][ T8897] ? bpf_link_show_fdinfo+0x350/0x350 [ 260.448660][ T8897] ? lock_chain_count+0x20/0x20 [ 260.453565][ T8897] __x64_sys_bpf+0x7c/0x90 [ 260.458024][ T8897] do_syscall_64+0x55/0xb0 [ 260.462492][ T8897] ? clear_bhb_loop+0x40/0x90 [ 260.467218][ T8897] ? clear_bhb_loop+0x40/0x90 [ 260.471938][ T8897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 260.477883][ T8897] RIP: 0033:0x7f7d1a58eba9 [ 260.482336][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.502075][ T8897] RSP: 002b:00007f7d1b47e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.510554][ T8897] RAX: ffffffffffffffda RBX: 00007f7d1a7d5fa0 RCX: 00007f7d1a58eba9 [ 260.518562][ T8897] RDX: 0000000000000010 RSI: 0000200000000380 RDI: 000000000000000f [ 260.526573][ T8897] RBP: 00007f7d1b47e090 R08: 0000000000000000 R09: 0000000000000000 [ 260.534596][ T8897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.542606][ T8897] R13: 00007f7d1a7d6038 R14: 00007f7d1a7d5fa0 R15: 00007fffe0e2f9e8 [ 260.550647][ T8897] [ 261.066638][ T8899] netlink: 'syz.3.939': attribute type 10 has an invalid length. [ 261.080991][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz.3.939'. [ 261.183241][ T8916] FAULT_INJECTION: forcing a failure. [ 261.183241][ T8916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.207215][ T8916] CPU: 1 PID: 8916 Comm: syz.1.944 Not tainted syzkaller #0 [ 261.214583][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.224685][ T8916] Call Trace: [ 261.227999][ T8916] [ 261.230973][ T8916] dump_stack_lvl+0x16c/0x230 [ 261.235695][ T8916] ? show_regs_print_info+0x20/0x20 [ 261.240934][ T8916] ? load_image+0x3b0/0x3b0 [ 261.245480][ T8916] ? __lock_acquire+0x7c80/0x7c80 [ 261.250558][ T8916] should_fail_ex+0x39d/0x4d0 [ 261.255287][ T8916] _copy_from_user+0x2f/0xe0 [ 261.259922][ T8916] __copy_msghdr+0x3bb/0x580 [ 261.264565][ T8916] ___sys_sendmsg+0x1a6/0x290 [ 261.269296][ T8916] ? __sys_sendmsg+0x270/0x270 [ 261.274145][ T8916] ? __lock_acquire+0x7c80/0x7c80 [ 261.279243][ T8916] __se_sys_sendmsg+0x1a5/0x270 [ 261.284143][ T8916] ? perf_trace_preemptirq_template+0x281/0x340 [ 261.290437][ T8916] ? __x64_sys_sendmsg+0x80/0x80 [ 261.295418][ T8916] ? lockdep_hardirqs_on+0x98/0x150 [ 261.300647][ T8916] do_syscall_64+0x55/0xb0 [ 261.305090][ T8916] ? clear_bhb_loop+0x40/0x90 [ 261.309792][ T8916] ? clear_bhb_loop+0x40/0x90 [ 261.314486][ T8916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 261.320407][ T8916] RIP: 0033:0x7f9eeff8eba9 [ 261.324848][ T8916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.344487][ T8916] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.352922][ T8916] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 261.360995][ T8916] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000003 [ 261.368984][ T8916] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 261.376965][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.384946][ T8916] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 261.392954][ T8916] [ 261.508926][ T8926] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.945'. [ 261.635593][ T8928] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.948'. [ 261.886517][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.893147][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.036353][ T8941] netlink: 'syz.3.951': attribute type 39 has an invalid length. [ 262.426432][ T8947] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.955'. [ 262.465253][ T8948] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.954'. [ 262.656671][ T8950] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 262.669993][ T8950] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 262.739276][ T8951] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 262.757644][ T8951] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 263.218519][ T8956] netlink: 'syz.2.954': attribute type 10 has an invalid length. [ 263.252347][ T8956] netlink: 40 bytes leftover after parsing attributes in process `syz.2.954'. [ 263.295423][ T8963] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 263.450154][ T8969] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.961'. [ 263.648212][ T8973] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.962'. [ 264.213381][ T8985] netlink: 'syz.2.966': attribute type 39 has an invalid length. [ 264.235063][ T8987] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 264.250103][ T8987] batman_adv: batadv0: Adding interface: wlan0 [ 264.258952][ T8987] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.307514][ T8987] batman_adv: batadv0: Interface activated: wlan0 [ 264.420142][ T8992] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 264.438238][ T8992] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 264.461216][ T8987] netlink: 60 bytes leftover after parsing attributes in process `syz.0.968'. [ 264.487505][ T8989] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 264.507712][ T8989] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 264.576848][ T8991] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 264.654225][ T8991] netlink: 'syz.0.968': attribute type 29 has an invalid length. [ 264.900526][ T9000] syz.3.971[9000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.905810][ T9000] syz.3.971[9000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.641531][ T9012] netlink: 'syz.2.970': attribute type 10 has an invalid length. [ 265.727960][ T9012] __nla_validate_parse: 7 callbacks suppressed [ 265.727979][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz.2.970'. [ 265.945255][ T9020] netlink: 'syz.2.979': attribute type 21 has an invalid length. [ 265.971931][ T9020] IPv6: NLM_F_CREATE should be specified when creating new route [ 265.989937][ T9020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.997274][ T9020] IPv6: NLM_F_CREATE should be set when creating new route [ 266.004661][ T9020] IPv6: NLM_F_CREATE should be set when creating new route [ 266.012012][ T9020] IPv6: NLM_F_CREATE should be set when creating new route [ 266.150179][ T9024] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 266.165589][ T9024] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 266.226645][ T9022] batman_adv: batadv0: Interface deactivated: wlan0 [ 266.326585][ T9022] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 266.369918][ T9022] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 266.447366][ T9026] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 266.461010][ T9026] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 266.670025][ T9036] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.984'. [ 266.708278][ T9040] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.992'. [ 266.814492][ T9038] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.992'. [ 266.824272][ T9043] FAULT_INJECTION: forcing a failure. [ 266.824272][ T9043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.838097][ T9043] CPU: 0 PID: 9043 Comm: syz.1.986 Not tainted syzkaller #0 [ 266.845433][ T9043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 266.855517][ T9043] Call Trace: [ 266.858814][ T9043] [ 266.861762][ T9043] dump_stack_lvl+0x16c/0x230 [ 266.866464][ T9043] ? show_regs_print_info+0x20/0x20 [ 266.871682][ T9043] ? load_image+0x3b0/0x3b0 [ 266.876204][ T9043] ? __might_fault+0xaa/0x120 [ 266.880912][ T9043] ? __lock_acquire+0x7c80/0x7c80 [ 266.885962][ T9043] should_fail_ex+0x39d/0x4d0 [ 266.890665][ T9043] _copy_from_user+0x2f/0xe0 [ 266.895274][ T9043] ip6_tnl_siocdevprivate+0x1af/0xac0 [ 266.900667][ T9043] ? __mutex_lock+0x953/0xcc0 [ 266.905369][ T9043] ? __lock_acquire+0x7c80/0x7c80 [ 266.910418][ T9043] ? do_raw_spin_lock+0x121/0x2c0 [ 266.915472][ T9043] ? ip6_tnl_start_xmit+0x1140/0x1140 [ 266.920873][ T9043] ? do_raw_spin_unlock+0x121/0x230 [ 266.926094][ T9043] ? __mutex_lock+0x4e8/0xcc0 [ 266.930786][ T9043] ? full_name_hash+0x92/0xe0 [ 266.935484][ T9043] dev_ifsioc+0xae6/0xe20 [ 266.939830][ T9043] ? dev_ioctl+0x1170/0x1170 [ 266.944430][ T9043] ? dev_load+0x21/0x1f0 [ 266.948683][ T9043] ? dev_load+0x21/0x1f0 [ 266.952944][ T9043] dev_ioctl+0x87a/0x1170 [ 266.957290][ T9043] sock_ioctl+0x726/0x7a0 [ 266.961673][ T9043] ? sock_poll+0x3d0/0x3d0 [ 266.966143][ T9043] ? bpf_lsm_file_ioctl+0x9/0x10 [ 266.971103][ T9043] ? security_file_ioctl+0x80/0xa0 [ 266.976250][ T9043] ? sock_poll+0x3d0/0x3d0 [ 266.980727][ T9043] __se_sys_ioctl+0xfd/0x170 [ 266.985346][ T9043] do_syscall_64+0x55/0xb0 [ 266.989784][ T9043] ? clear_bhb_loop+0x40/0x90 [ 266.994480][ T9043] ? clear_bhb_loop+0x40/0x90 [ 266.999176][ T9043] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.005107][ T9043] RIP: 0033:0x7f9eeff8eba9 [ 267.009536][ T9043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.029174][ T9043] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.037631][ T9043] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 267.045723][ T9043] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 267.053732][ T9043] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 267.061722][ T9043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.069738][ T9043] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 267.077756][ T9043] [ 267.118280][ T9041] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.985'. [ 267.261150][ T9049] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.987'. [ 267.345688][ T9052] pim6reg: tun_chr_ioctl cmd 1074812118 [ 268.463147][ T9062] netlink: 'syz.1.987': attribute type 10 has an invalid length. [ 268.520732][ T9062] netlink: 40 bytes leftover after parsing attributes in process `syz.1.987'. [ 268.563123][ T9065] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 268.588533][ T9065] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 268.765501][ T9069] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 268.854501][ T9069] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 269.211490][ T9080] netlink: 'syz.1.996': attribute type 21 has an invalid length. [ 269.342948][ T9086] netlink: 'syz.3.999': attribute type 39 has an invalid length. [ 269.375755][ T9084] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.998'. [ 269.926279][ T9103] netlink: 192440 bytes leftover after parsing attributes in process `syz.2.1003'. [ 269.936450][ T9103] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 270.125107][ T9104] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 270.137659][ T9103] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 270.147497][ T9103] netlink: 'syz.2.1003': attribute type 29 has an invalid length. [ 270.248848][ T9103] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 270.298398][ T9103] team0: Device hsr_slave_0 failed to register rx_handler [ 270.723182][ T9120] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 270.760748][ T9120] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 270.995074][ T9127] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1008'. [ 271.003209][ T9121] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 271.011833][ T9121] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 271.028846][ T9127] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 271.039791][ T9131] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 271.050176][ T9131] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 271.058871][ T9131] batman_adv: batadv0: Interface activated: wlan0 [ 271.130066][ T9134] netlink: 'syz.3.1009': attribute type 39 has an invalid length. [ 271.249672][ T9138] FAULT_INJECTION: forcing a failure. [ 271.249672][ T9138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.263625][ T9138] CPU: 0 PID: 9138 Comm: syz.0.1012 Not tainted syzkaller #0 [ 271.271047][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 271.281172][ T9138] Call Trace: [ 271.284494][ T9138] [ 271.287452][ T9138] dump_stack_lvl+0x16c/0x230 [ 271.292190][ T9138] ? show_regs_print_info+0x20/0x20 [ 271.297438][ T9138] ? load_image+0x3b0/0x3b0 [ 271.302008][ T9138] ? __might_fault+0xaa/0x120 [ 271.306724][ T9138] ? __lock_acquire+0x7c80/0x7c80 [ 271.311815][ T9138] should_fail_ex+0x39d/0x4d0 [ 271.316562][ T9138] _copy_from_iter+0x1d3/0x1290 [ 271.321463][ T9138] ? slab_post_alloc_hook+0x8a/0x4d0 [ 271.326808][ T9138] ? __virt_addr_valid+0x18c/0x540 [ 271.331966][ T9138] ? __lock_acquire+0x7c80/0x7c80 [ 271.337029][ T9138] ? rcu_is_watching+0x15/0xb0 [ 271.341848][ T9138] ? copyout_mc+0x70/0x70 [ 271.346217][ T9138] ? __virt_addr_valid+0x18c/0x540 [ 271.351369][ T9138] ? __virt_addr_valid+0x18c/0x540 [ 271.356529][ T9138] ? __virt_addr_valid+0x469/0x540 [ 271.361705][ T9138] ? __check_object_size+0x506/0xa30 [ 271.367033][ T9138] netlink_sendmsg+0x75c/0xbe0 [ 271.371850][ T9138] ? netlink_getsockopt+0x580/0x580 [ 271.377100][ T9138] ? aa_sock_msg_perm+0x94/0x150 [ 271.382090][ T9138] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.387425][ T9138] ? security_socket_sendmsg+0x80/0xa0 [ 271.392923][ T9138] ? netlink_getsockopt+0x580/0x580 [ 271.398166][ T9138] ____sys_sendmsg+0x5bf/0x950 [ 271.403011][ T9138] ? __asan_memset+0x22/0x40 [ 271.407666][ T9138] ? __sys_sendmsg_sock+0x30/0x30 [ 271.412751][ T9138] ? __import_iovec+0x5f2/0x860 [ 271.417659][ T9138] ? import_iovec+0x73/0xa0 [ 271.422216][ T9138] ___sys_sendmsg+0x220/0x290 [ 271.426746][ T9140] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1013'. [ 271.426970][ T9138] ? __sys_sendmsg+0x270/0x270 [ 271.427057][ T9138] __se_sys_sendmsg+0x1a5/0x270 [ 271.427092][ T9138] ? __x64_sys_sendmsg+0x80/0x80 [ 271.450963][ T9138] ? lockdep_hardirqs_on+0x98/0x150 [ 271.456232][ T9138] do_syscall_64+0x55/0xb0 [ 271.460695][ T9138] ? clear_bhb_loop+0x40/0x90 [ 271.465408][ T9138] ? clear_bhb_loop+0x40/0x90 [ 271.470129][ T9138] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 271.476082][ T9138] RIP: 0033:0x7fe22c58eba9 [ 271.480529][ T9138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.500176][ T9138] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.508640][ T9138] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 271.516649][ T9138] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 271.524689][ T9138] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 271.532697][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.540706][ T9138] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 271.548733][ T9138] [ 271.645137][ T9137] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1011'. [ 271.804131][ T9145] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1014'. [ 271.991828][ T9154] FAULT_INJECTION: forcing a failure. [ 271.991828][ T9154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.046126][ T9154] CPU: 1 PID: 9154 Comm: syz.3.1017 Not tainted syzkaller #0 [ 272.048222][ T9156] pim6reg: tun_chr_ioctl cmd 1074812118 [ 272.053642][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.053659][ T9154] Call Trace: [ 272.053669][ T9154] [ 272.053678][ T9154] dump_stack_lvl+0x16c/0x230 [ 272.080307][ T9154] ? show_regs_print_info+0x20/0x20 [ 272.085555][ T9154] ? load_image+0x3b0/0x3b0 [ 272.090097][ T9154] ? __might_fault+0xaa/0x120 [ 272.094821][ T9154] ? __lock_acquire+0x7c80/0x7c80 [ 272.099887][ T9154] should_fail_ex+0x39d/0x4d0 [ 272.104634][ T9154] _copy_from_iter+0x1d3/0x1290 [ 272.109544][ T9154] ? slab_post_alloc_hook+0x8a/0x4d0 [ 272.114875][ T9154] ? __virt_addr_valid+0x18c/0x540 [ 272.120029][ T9154] ? __lock_acquire+0x7c80/0x7c80 [ 272.125090][ T9154] ? rcu_is_watching+0x15/0xb0 [ 272.129904][ T9154] ? copyout_mc+0x70/0x70 [ 272.134274][ T9154] ? __virt_addr_valid+0x18c/0x540 [ 272.139427][ T9154] ? __virt_addr_valid+0x18c/0x540 [ 272.144587][ T9154] ? __virt_addr_valid+0x469/0x540 [ 272.149759][ T9154] ? __check_object_size+0x506/0xa30 [ 272.155105][ T9154] netlink_sendmsg+0x75c/0xbe0 [ 272.159975][ T9154] ? netlink_getsockopt+0x580/0x580 [ 272.165222][ T9154] ? aa_sock_msg_perm+0x94/0x150 [ 272.170192][ T9154] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.175502][ T9154] ? security_socket_sendmsg+0x80/0xa0 [ 272.180998][ T9154] ? netlink_getsockopt+0x580/0x580 [ 272.186250][ T9154] ____sys_sendmsg+0x5bf/0x950 [ 272.191045][ T9154] ? __asan_memset+0x22/0x40 [ 272.195656][ T9154] ? __sys_sendmsg_sock+0x30/0x30 [ 272.200704][ T9154] ? __import_iovec+0x5f2/0x860 [ 272.205581][ T9154] ? import_iovec+0x73/0xa0 [ 272.210107][ T9154] ___sys_sendmsg+0x220/0x290 [ 272.214808][ T9154] ? __sys_sendmsg+0x270/0x270 [ 272.219606][ T9154] ? __lock_acquire+0x7c80/0x7c80 [ 272.224665][ T9154] __se_sys_sendmsg+0x1a5/0x270 [ 272.229534][ T9154] ? __x64_sys_sendmsg+0x80/0x80 [ 272.234500][ T9154] ? lockdep_hardirqs_on+0x98/0x150 [ 272.239726][ T9154] do_syscall_64+0x55/0xb0 [ 272.244160][ T9154] ? clear_bhb_loop+0x40/0x90 [ 272.248852][ T9154] ? clear_bhb_loop+0x40/0x90 [ 272.253545][ T9154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.259461][ T9154] RIP: 0033:0x7f7caa38eba9 [ 272.263901][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.283549][ T9154] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.292070][ T9154] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 272.300058][ T9154] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 272.308043][ T9154] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 272.316026][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.324012][ T9154] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 272.332009][ T9154] [ 272.526973][ T9163] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 272.544641][ T9163] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 272.610071][ T9160] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 272.626414][ T9160] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 273.099115][ T9173] netlink: 'syz.3.1024': attribute type 12 has an invalid length. [ 273.111122][ T9173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1024'. [ 273.252847][ T9179] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1026'. [ 273.635873][ T9181] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 273.661176][ T9181] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 273.818989][ T9182] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 273.835974][ T9182] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 274.338731][ T5108] Bluetooth: hci3: ISO packet for unknown connection handle 1648 [ 274.725292][ T9215] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 274.741072][ T9215] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 274.798637][ T9220] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 274.855022][ T9220] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 275.017888][ T9226] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 275.032564][ T9226] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 275.177097][ T9230] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 275.203361][ T9230] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 275.304337][ T9228] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1041'. [ 275.354461][ T9236] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 275.380770][ T9236] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 275.405897][ T9234] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 275.416307][ T9234] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 275.637246][ T9245] FAULT_INJECTION: forcing a failure. [ 275.637246][ T9245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.704550][ T9245] CPU: 1 PID: 9245 Comm: syz.0.1045 Not tainted syzkaller #0 [ 275.712000][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 275.722092][ T9245] Call Trace: [ 275.725397][ T9245] [ 275.728358][ T9245] dump_stack_lvl+0x16c/0x230 [ 275.733080][ T9245] ? show_regs_print_info+0x20/0x20 [ 275.738324][ T9245] ? load_image+0x3b0/0x3b0 [ 275.742876][ T9245] ? __might_fault+0xaa/0x120 [ 275.747699][ T9245] ? __lock_acquire+0x7c80/0x7c80 [ 275.752776][ T9245] should_fail_ex+0x39d/0x4d0 [ 275.757569][ T9245] _copy_from_user+0x2f/0xe0 [ 275.762460][ T9245] vmemdup_user+0xac/0x1e0 [ 275.767477][ T9245] map_get_next_key+0x228/0x620 [ 275.772373][ T9245] ? __might_fault+0xc6/0x120 [ 275.777097][ T9245] ? __might_fault+0xaa/0x120 [ 275.781828][ T9245] ? bpf_lsm_bpf+0x9/0x10 [ 275.786205][ T9245] __sys_bpf+0x6b0/0x800 [ 275.790488][ T9245] ? bpf_link_show_fdinfo+0x350/0x350 [ 275.795912][ T9245] ? lock_chain_count+0x20/0x20 [ 275.800810][ T9245] __x64_sys_bpf+0x7c/0x90 [ 275.805292][ T9245] do_syscall_64+0x55/0xb0 [ 275.809739][ T9245] ? clear_bhb_loop+0x40/0x90 [ 275.814453][ T9245] ? clear_bhb_loop+0x40/0x90 [ 275.819161][ T9245] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.825099][ T9245] RIP: 0033:0x7fe22c58eba9 [ 275.829544][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.849188][ T9245] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 275.857637][ T9245] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 275.865633][ T9245] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000004 [ 275.873633][ T9245] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 275.881633][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.889626][ T9245] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 275.897644][ T9245] [ 276.823932][ T9265] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 276.920774][ T9265] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 277.172785][ T9270] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 277.180133][ T9270] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 277.189656][ T9279] netlink: 'syz.0.1051': attribute type 21 has an invalid length. [ 277.255007][ T9281] FAULT_INJECTION: forcing a failure. [ 277.255007][ T9281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.311212][ T9281] CPU: 1 PID: 9281 Comm: syz.1.1055 Not tainted syzkaller #0 [ 277.318730][ T9281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 277.328829][ T9281] Call Trace: [ 277.332147][ T9281] [ 277.335113][ T9281] dump_stack_lvl+0x16c/0x230 [ 277.339950][ T9281] ? show_regs_print_info+0x20/0x20 [ 277.345182][ T9281] ? load_image+0x3b0/0x3b0 [ 277.349711][ T9281] ? __lock_acquire+0x7c80/0x7c80 [ 277.354770][ T9281] ? snprintf+0xdb/0x120 [ 277.359048][ T9281] should_fail_ex+0x39d/0x4d0 [ 277.363796][ T9281] _copy_to_user+0x2f/0xa0 [ 277.368258][ T9281] simple_read_from_buffer+0xe7/0x150 [ 277.373680][ T9281] proc_fail_nth_read+0x1e3/0x250 [ 277.378739][ T9281] ? proc_fault_inject_write+0x340/0x340 [ 277.384406][ T9281] ? fsnotify_perm+0x271/0x5e0 [ 277.389198][ T9281] ? proc_fault_inject_write+0x340/0x340 [ 277.394868][ T9281] vfs_read+0x27e/0x920 [ 277.399078][ T9281] ? kernel_read+0x1e0/0x1e0 [ 277.403703][ T9281] ? __fget_files+0x28/0x4d0 [ 277.408338][ T9281] ? __fget_files+0x44a/0x4d0 [ 277.413054][ T9281] ? __fdget_pos+0x2a3/0x330 [ 277.417678][ T9281] ? ksys_read+0x75/0x250 [ 277.422043][ T9281] ksys_read+0x147/0x250 [ 277.426317][ T9281] ? vfs_write+0x940/0x940 [ 277.430781][ T9281] ? lockdep_hardirqs_on+0x98/0x150 [ 277.436018][ T9281] do_syscall_64+0x55/0xb0 [ 277.440461][ T9281] ? clear_bhb_loop+0x40/0x90 [ 277.445157][ T9281] ? clear_bhb_loop+0x40/0x90 [ 277.449857][ T9281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.455812][ T9281] RIP: 0033:0x7f9eeff8d5bc [ 277.460250][ T9281] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 277.479874][ T9281] RSP: 002b:00007f9ef0dfc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 277.488319][ T9281] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8d5bc [ 277.496309][ T9281] RDX: 000000000000000f RSI: 00007f9ef0dfc0a0 RDI: 0000000000000004 [ 277.504297][ T9281] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 277.512284][ T9281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.520296][ T9281] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 277.528348][ T9281] [ 277.793455][ T9284] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 277.801827][ T9284] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 277.885028][ T9285] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 277.941440][ T9285] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 277.968577][ T9289] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1057'. [ 278.176032][ T9295] netlink: 'syz.2.1059': attribute type 10 has an invalid length. [ 278.202120][ T9295] batman_adv: batadv0: Adding interface: wlan0 [ 278.227434][ T9295] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.333751][ T9295] batman_adv: batadv0: Interface activated: wlan0 [ 278.385706][ T9295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 278.547151][ T9300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.580471][ T9295] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 278.600391][ T9296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1059'. [ 278.624721][ T9303] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1061'. [ 278.637781][ T9295] netlink: 'syz.2.1059': attribute type 29 has an invalid length. [ 278.685663][ T9295] netlink: 'syz.2.1059': attribute type 29 has an invalid length. [ 279.098319][ T9312] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 279.138179][ T9312] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 279.194483][ T9316] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 279.231887][ T9319] netlink: zone id is out of range [ 279.237094][ T9319] netlink: set zone limit has 8 unknown bytes [ 279.248727][ T9316] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 279.592169][ T9327] netlink: 'syz.2.1069': attribute type 39 has an invalid length. [ 279.782371][ T9331] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 279.794798][ T9331] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 280.015196][ T9332] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 280.025930][ T9332] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 280.104607][ T9329] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 280.139713][ T9329] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 280.275049][ T9335] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 280.299984][ T9335] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 280.313924][ T9337] batman_adv: batadv0: Interface deactivated: wlan0 [ 280.332279][ T9337] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 280.356580][ T9337] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 280.391884][ T9340] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1073'. [ 280.415374][ T9334] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 280.468705][ T9334] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 280.515992][ T9334] batman_adv: batadv0: Interface activated: wlan0 [ 280.697527][ T9346] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1076'. [ 281.468819][ T9353] batman_adv: batadv0: Interface deactivated: wlan0 [ 281.507158][ T9353] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 281.518236][ T9353] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 281.678570][ T9346] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 281.740084][ T9346] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1076'. [ 281.958938][ T9363] netlink: 'syz.3.1080': attribute type 39 has an invalid length. [ 282.146727][ T9368] FAULT_INJECTION: forcing a failure. [ 282.146727][ T9368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.216675][ T9368] CPU: 1 PID: 9368 Comm: syz.1.1082 Not tainted syzkaller #0 [ 282.224155][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.234276][ T9368] Call Trace: [ 282.237617][ T9368] [ 282.240609][ T9368] dump_stack_lvl+0x16c/0x230 [ 282.245377][ T9368] ? show_regs_print_info+0x20/0x20 [ 282.250654][ T9368] ? load_image+0x3b0/0x3b0 [ 282.255239][ T9368] ? __might_fault+0xaa/0x120 [ 282.260003][ T9368] ? __lock_acquire+0x7c80/0x7c80 [ 282.265120][ T9368] should_fail_ex+0x39d/0x4d0 [ 282.269892][ T9368] _copy_from_user+0x2f/0xe0 [ 282.274567][ T9368] ____sys_sendmsg+0x30d/0x950 [ 282.279451][ T9368] ? __sys_sendmsg_sock+0x30/0x30 [ 282.284572][ T9368] ? __import_iovec+0x3fa/0x860 [ 282.289541][ T9368] ? import_iovec+0x73/0xa0 [ 282.294151][ T9368] ___sys_sendmsg+0x220/0x290 [ 282.298919][ T9368] ? __sys_sendmsg+0x270/0x270 [ 282.303833][ T9368] ? __lock_acquire+0x7c80/0x7c80 [ 282.309013][ T9368] __se_sys_sendmsg+0x1a5/0x270 [ 282.313946][ T9368] ? __x64_sys_sendmsg+0x80/0x80 [ 282.319021][ T9368] ? lockdep_hardirqs_on+0x98/0x150 [ 282.324338][ T9368] do_syscall_64+0x55/0xb0 [ 282.328820][ T9368] ? clear_bhb_loop+0x40/0x90 [ 282.333562][ T9368] ? clear_bhb_loop+0x40/0x90 [ 282.338315][ T9368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.344281][ T9368] RIP: 0033:0x7f9eeff8eba9 [ 282.348763][ T9368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.368455][ T9368] RSP: 002b:00007f9ef0dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.376950][ T9368] RAX: ffffffffffffffda RBX: 00007f9ef01d5fa0 RCX: 00007f9eeff8eba9 [ 282.384987][ T9368] RDX: 0000000000040880 RSI: 0000200000000140 RDI: 0000000000000004 [ 282.393041][ T9368] RBP: 00007f9ef0dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 282.401077][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.409111][ T9368] R13: 00007f9ef01d6038 R14: 00007f9ef01d5fa0 R15: 00007fffeb97f9b8 [ 282.417197][ T9368] [ 282.965670][ T9370] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 283.059266][ T9370] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 283.129525][ T9381] batman_adv: batadv0: Interface deactivated: wlan0 [ 283.318338][ T9381] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 283.398507][ T9381] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 283.456074][ T9378] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 283.484216][ T9378] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode Stopping sshd: [ 283.768825][ T9377] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 283.789632][ T9377] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 283.809352][ T9377] batman_adv: batadv0: Interface activated: wlan0 [ 283.816606][ T9385] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1086'. stopped /usr/sbin/sshd (pid 5551) OK [ 284.032611][ T9395] FAULT_INJECTION: forcing a failure. [ 284.032611][ T9395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.082994][ T9395] CPU: 0 PID: 9395 Comm: syz.3.1087 Not tainted syzkaller #0 [ 284.090486][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.100618][ T9395] Call Trace: [ 284.103970][ T9395] [ 284.106966][ T9395] dump_stack_lvl+0x16c/0x230 [ 284.111753][ T9395] ? show_regs_print_info+0x20/0x20 [ 284.117050][ T9395] ? load_image+0x3b0/0x3b0 [ 284.121666][ T9395] ? __might_fault+0xaa/0x120 [ 284.126447][ T9395] ? __lock_acquire+0x7c80/0x7c80 [ 284.131597][ T9395] should_fail_ex+0x39d/0x4d0 [ 284.136384][ T9395] _copy_from_iter+0x1d3/0x1290 [ 284.141329][ T9395] ? slab_post_alloc_hook+0x8a/0x4d0 [ 284.146694][ T9395] ? __virt_addr_valid+0x18c/0x540 [ 284.151896][ T9395] ? __lock_acquire+0x7c80/0x7c80 [ 284.157012][ T9395] ? rcu_is_watching+0x15/0xb0 [ 284.161893][ T9395] ? copyout_mc+0x70/0x70 [ 284.166328][ T9395] ? __virt_addr_valid+0x18c/0x540 [ 284.171525][ T9395] ? __virt_addr_valid+0x18c/0x540 [ 284.176723][ T9395] ? __virt_addr_valid+0x469/0x540 [ 284.181951][ T9395] ? __check_object_size+0x506/0xa30 [ 284.187355][ T9395] netlink_sendmsg+0x75c/0xbe0 [ 284.192272][ T9395] ? netlink_getsockopt+0x580/0x580 [ 284.197559][ T9395] ? aa_sock_msg_perm+0x94/0x150 [ 284.202586][ T9395] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.207954][ T9395] ? security_socket_sendmsg+0x80/0xa0 [ 284.213493][ T9395] ? netlink_getsockopt+0x580/0x580 [ 284.218770][ T9395] ____sys_sendmsg+0x5bf/0x950 [ 284.223652][ T9395] ? __asan_memset+0x22/0x40 [ 284.228334][ T9395] ? __sys_sendmsg_sock+0x30/0x30 [ 284.233441][ T9395] ? __import_iovec+0x5f2/0x860 [ 284.238420][ T9395] ? import_iovec+0x73/0xa0 [ 284.243040][ T9395] ___sys_sendmsg+0x220/0x290 [ 284.247841][ T9395] ? __sys_sendmsg+0x270/0x270 [ 284.252796][ T9395] ? __lock_acquire+0x7c80/0x7c80 [ 284.258022][ T9395] __se_sys_sendmsg+0x1a5/0x270 [ 284.262981][ T9395] ? __x64_sys_sendmsg+0x80/0x80 [ 284.268136][ T9395] ? lockdep_hardirqs_on+0x98/0x150 [ 284.273444][ T9395] do_syscall_64+0x55/0xb0 [ 284.277936][ T9395] ? clear_bhb_loop+0x40/0x90 [ 284.282687][ T9395] ? clear_bhb_loop+0x40/0x90 [ 284.287454][ T9395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 284.293435][ T9395] RIP: 0033:0x7f7caa38eba9 [ 284.297932][ T9395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 Stopping crond: [ 284.303680][ T9390] netlink: 'syz.2.1085': attribute type 21 has an invalid length. [ 284.317590][ T9395] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.317632][ T9395] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 284.317653][ T9395] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 284.317672][ T9395] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 284.317689][ T9395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 284.317705][ T9395] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 284.317809][ T9395] stopped /usr/sbin/crond (pid 5536) OK [ 284.779798][ T9404] FAULT_INJECTION: forcing a failure. [ 284.779798][ T9404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.832580][ T9404] CPU: 1 PID: 9404 Comm: syz.0.1089 Not tainted syzkaller #0 [ 284.840031][ T9404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 284.850134][ T9404] Call Trace: [ 284.853450][ T9404] [ 284.856414][ T9404] dump_stack_lvl+0x16c/0x230 [ 284.861136][ T9404] ? show_regs_print_info+0x20/0x20 [ 284.866384][ T9404] ? load_image+0x3b0/0x3b0 [ 284.870923][ T9404] ? __might_fault+0xaa/0x120 [ 284.875634][ T9404] ? __lock_acquire+0x7c80/0x7c80 [ 284.880702][ T9404] should_fail_ex+0x39d/0x4d0 [ 284.885418][ T9404] _copy_from_iter+0x1d3/0x1290 [ 284.890303][ T9404] ? slab_post_alloc_hook+0x8a/0x4d0 [ 284.895623][ T9404] ? __virt_addr_valid+0x18c/0x540 [ 284.900763][ T9404] ? __lock_acquire+0x7c80/0x7c80 [ 284.905807][ T9404] ? rcu_is_watching+0x15/0xb0 [ 284.910599][ T9404] ? copyout_mc+0x70/0x70 [ 284.914950][ T9404] ? __virt_addr_valid+0x18c/0x540 [ 284.920089][ T9404] ? __virt_addr_valid+0x18c/0x540 [ 284.925225][ T9404] ? __virt_addr_valid+0x469/0x540 [ 284.930452][ T9404] ? __check_object_size+0x506/0xa30 [ 284.935768][ T9404] netlink_sendmsg+0x75c/0xbe0 [ 284.940563][ T9404] ? netlink_getsockopt+0x580/0x580 [ 284.945784][ T9404] ? aa_sock_msg_perm+0x94/0x150 [ 284.950757][ T9404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 284.956077][ T9404] ? security_socket_sendmsg+0x80/0xa0 [ 284.961559][ T9404] ? netlink_getsockopt+0x580/0x580 [ 284.966787][ T9404] ____sys_sendmsg+0x5bf/0x950 [ 284.971667][ T9404] ? __asan_memset+0x22/0x40 [ 284.976286][ T9404] ? __sys_sendmsg_sock+0x30/0x30 [ 284.981361][ T9404] ? __import_iovec+0x5f2/0x860 [ 284.986256][ T9404] ? import_iovec+0x73/0xa0 [ 284.990787][ T9404] ___sys_sendmsg+0x220/0x290 [ 284.995503][ T9404] ? __sys_sendmsg+0x270/0x270 [ 285.000305][ T9404] ? __lock_acquire+0x7c80/0x7c80 [ 285.005371][ T9404] __se_sys_sendmsg+0x1a5/0x270 [ 285.010253][ T9404] ? __x64_sys_sendmsg+0x80/0x80 [ 285.015224][ T9404] ? lockdep_hardirqs_on+0x98/0x150 [ 285.020468][ T9404] do_syscall_64+0x55/0xb0 [ 285.024902][ T9404] ? clear_bhb_loop+0x40/0x90 [ 285.029613][ T9404] ? clear_bhb_loop+0x40/0x90 [ 285.034309][ T9404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.040246][ T9404] RIP: 0033:0x7fe22c58eba9 [ 285.044682][ T9404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.064305][ T9404] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.072731][ T9404] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 285.080717][ T9404] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000003 [ 285.088695][ T9404] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 285.096701][ T9404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.104689][ T9404] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 285.112697][ T9404] [ 285.224204][ T9407] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1090'. Stopping dhcpcd... [ 285.380064][ T9411] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1092'. [ 285.619352][ T9415] netlink: 'syz.1.1090': attribute type 10 has an invalid length. [ 285.627299][ T9415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1090'. stopped /sbin/dhcpcd (pid 5457) [ 286.263716][ T9428] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 286.292212][ T9428] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 286.353945][ T9440] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1095'. Stopping network: [ 286.439568][ T9431] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 286.452911][ T9431] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 286.768701][ T9450] netlink: 'syz.2.1098': attribute type 39 has an invalid length. [ 286.835721][ T9456] FAULT_INJECTION: forcing a failure. [ 286.835721][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 286.862536][ T9456] CPU: 1 PID: 9456 Comm: syz.3.1102 Not tainted syzkaller #0 [ 286.869974][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.880066][ T9456] Call Trace: [ 286.883387][ T9456] [ 286.886382][ T9456] dump_stack_lvl+0x16c/0x230 [ 286.891111][ T9456] ? show_regs_print_info+0x20/0x20 [ 286.896349][ T9456] ? load_image+0x3b0/0x3b0 [ 286.900888][ T9456] ? __lock_acquire+0x7c80/0x7c80 [ 286.905963][ T9456] should_fail_ex+0x39d/0x4d0 [ 286.910696][ T9456] should_failslab+0x9/0x20 [ 286.915248][ T9456] slab_pre_alloc_hook+0x59/0x310 [ 286.920321][ T9456] ? sk_prot_alloc+0xe7/0x210 [ 286.925030][ T9456] ? sk_prot_alloc+0xe7/0x210 [ 286.929719][ T9456] __kmem_cache_alloc_node+0x53/0x260 [ 286.935119][ T9456] ? sk_prot_alloc+0xe7/0x210 [ 286.939823][ T9456] __kmalloc+0xa4/0x240 [ 286.944001][ T9456] sk_prot_alloc+0xe7/0x210 [ 286.948518][ T9456] ? sk_alloc+0x24/0x360 [ 286.952770][ T9456] sk_alloc+0x3a/0x360 [ 286.956853][ T9456] ? bpf_ctx_init+0x163/0x1a0 [ 286.961544][ T9456] ? bpf_prog_test_run_skb+0x268/0x11c0 [ 286.967109][ T9456] bpf_prog_test_run_skb+0x39a/0x11c0 [ 286.972514][ T9456] ? __fget_files+0x28/0x4d0 [ 286.977139][ T9456] ? cpu_online+0x60/0x60 [ 286.981486][ T9456] bpf_prog_test_run+0x321/0x390 [ 286.986444][ T9456] __sys_bpf+0x440/0x800 [ 286.990703][ T9456] ? bpf_link_show_fdinfo+0x350/0x350 [ 286.996095][ T9456] ? lock_chain_count+0x20/0x20 [ 287.000968][ T9456] __x64_sys_bpf+0x7c/0x90 [ 287.005393][ T9456] do_syscall_64+0x55/0xb0 [ 287.009845][ T9456] ? clear_bhb_loop+0x40/0x90 [ 287.014529][ T9456] ? clear_bhb_loop+0x40/0x90 [ 287.019220][ T9456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.025134][ T9456] RIP: 0033:0x7f7caa38eba9 [ 287.029559][ T9456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.049264][ T9456] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.057693][ T9456] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 287.065678][ T9456] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 287.073658][ T9456] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 287.081639][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.089656][ T9456] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 287.097648][ T9456] [ 287.304142][ T9452] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1099'. [ 287.454061][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'. [ 287.509720][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'. [ 287.588053][ T9469] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'. [ 287.619935][ T9467] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'. [ 287.977577][ T9473] batman_adv: batadv0: Interface deactivated: wlan0 [ 288.022282][ T9473] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 288.085741][ T9473] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 288.243096][ T9475] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 288.268388][ T9475] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 288.299404][ T9475] batman_adv: batadv0: Interface activated: wlan0 [ 288.315895][ T9481] netlink: 'syz.1.1106': attribute type 39 has an invalid length. [ 288.345272][ T9478] netlink: 'syz.2.1104': attribute type 10 has an invalid length. OK Stopping iptables: [ 288.765014][ T9499] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 288.824350][ T9499] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 288.870639][ T9498] __nla_validate_parse: 3 callbacks suppressed [ 288.870657][ T9498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. OK [ 288.927232][ T9501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. [ 288.986876][ T9492] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 289.008885][ T9492] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 289.053236][ T9504] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1110'. [ 289.077778][ T9507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1111'. [ 289.098830][ T9507] FAULT_INJECTION: forcing a failure. [ 289.098830][ T9507] name failslab, interval 1, probability 0, space 0, times 0 [ 289.124218][ T9507] CPU: 1 PID: 9507 Comm: syz.1.1111 Not tainted syzkaller #0 [ 289.131684][ T9507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 289.141830][ T9507] Call Trace: [ 289.145179][ T9507] [ 289.148176][ T9507] dump_stack_lvl+0x16c/0x230 [ 289.152926][ T9507] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 289.158845][ T9507] ? show_regs_print_info+0x20/0x20 [ 289.164147][ T9507] ? load_image+0x3b0/0x3b0 [ 289.168758][ T9507] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 289.174824][ T9507] should_fail_ex+0x39d/0x4d0 [ 289.179613][ T9507] should_failslab+0x9/0x20 [ 289.184195][ T9507] slab_pre_alloc_hook+0x59/0x310 [ 289.189314][ T9507] ? lockdep_hardirqs_on+0x98/0x150 [ 289.194590][ T9507] kmem_cache_alloc+0x5a/0x2e0 [ 289.199402][ T9507] ? skb_clone+0x1eb/0x370 [ 289.203880][ T9507] skb_clone+0x1eb/0x370 [ 289.208195][ T9507] __netlink_deliver_tap+0x41c/0x830 [ 289.213556][ T9507] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.218799][ T9507] netlink_deliver_tap+0x19c/0x1b0 [ 289.223970][ T9507] netlink_dump+0x8df/0xde0 [ 289.228544][ T9507] ? netlink_lookup+0x200/0x200 [ 289.233471][ T9507] ? slab_free_freelist_hook+0x130/0x1b0 [ 289.239158][ T9507] ? netlink_recvmsg+0x5cf/0xdf0 [ 289.244129][ T9507] ? kmem_cache_free+0xf8/0x280 [ 289.249031][ T9507] netlink_recvmsg+0x677/0xdf0 [ 289.253863][ T9507] ? netlink_sendmsg+0xbe0/0xbe0 [ 289.258837][ T9507] ? aa_sk_perm+0x7fc/0x930 [ 289.263434][ T9507] ? aa_af_perm+0x2b0/0x2b0 [ 289.268008][ T9507] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 289.273323][ T9507] ? security_socket_recvmsg+0x89/0xb0 [ 289.278813][ T9507] ? netlink_sendmsg+0xbe0/0xbe0 [ 289.283793][ T9507] ____sys_recvmsg+0x29e/0x5b0 [ 289.288629][ T9507] ? __sys_recvmsg_sock+0x50/0x50 [ 289.293767][ T9507] ? import_iovec+0x73/0xa0 [ 289.298350][ T9507] ___sys_recvmsg+0x1b6/0x510 [ 289.303195][ T9507] ? __sys_recvmsg+0x270/0x270 [ 289.308034][ T9507] ? trace_call_bpf+0xc3/0x690 [ 289.312857][ T9507] ? trace_call_bpf+0x5ba/0x690 [ 289.317791][ T9507] ? __fget_files+0x44a/0x4d0 [ 289.322565][ T9507] __x64_sys_recvmsg+0x1f2/0x2c0 [ 289.327558][ T9507] ? perf_trace_preemptirq_template+0x281/0x340 [ 289.333856][ T9507] ? ___sys_recvmsg+0x510/0x510 [ 289.338838][ T9507] ? lockdep_hardirqs_on+0x98/0x150 [ 289.344094][ T9507] do_syscall_64+0x55/0xb0 [ 289.348550][ T9507] ? clear_bhb_loop+0x40/0x90 [ 289.353256][ T9507] ? clear_bhb_loop+0x40/0x90 [ 289.357981][ T9507] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.363928][ T9507] RIP: 0033:0x7f9eeff8eba9 [ 289.368386][ T9507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.388068][ T9507] RSP: 002b:00007f9ef0dba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 289.396527][ T9507] RAX: ffffffffffffffda RBX: 00007f9ef01d6180 RCX: 00007f9eeff8eba9 [ 289.404538][ T9507] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 289.412560][ T9507] RBP: 00007f9ef0dba090 R08: 0000000000000000 R09: 0000000000000000 [ 289.420609][ T9507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.428631][ T9507] R13: 00007f9ef01d6218 R14: 00007f9ef01d6180 R15: 00007fffeb97f9b8 [ 289.436759][ T9507] Stopping system message bus: [ 289.844884][ T9515] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.1114'. [ 289.927022][ T9520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1115'. [ 289.948434][ T9524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1123'. [ 289.954797][ T9520] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1115'. [ 290.010026][ T9527] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1115'. [ 290.055382][ T9522] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.1113'. done [ 290.982856][ T9542] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 291.011336][ T9542] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 291.133985][ T9545] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 291.189129][ T9545] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 291.226266][ T9549] netlink: 'syz.2.1120': attribute type 39 has an invalid length. [ 291.254320][ T9540] netlink: 'syz.1.1118': attribute type 10 has an invalid length. [ 291.739489][ T9559] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 291.783423][ T9559] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 291.854288][ T9559] batman_adv: batadv0: Interface activated: wlan0 [ 292.537020][ T9582] netlink: 'syz.1.1131': attribute type 21 has an invalid length. [ 292.749399][ T9587] batman_adv: batadv0: Interface deactivated: wlan0 [ 292.901067][ T9587] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 292.930782][ T9587] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 293.056192][ T9589] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 293.064452][ T9593] FAULT_INJECTION: forcing a failure. [ 293.064452][ T9593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.079669][ T9589] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 293.090680][ T9589] batman_adv: batadv0: Interface activated: wlan0 [ 293.119235][ T9590] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 293.169425][ T9593] CPU: 1 PID: 9593 Comm: syz.2.1134 Not tainted syzkaller #0 [ 293.176877][ T9593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.186969][ T9593] Call Trace: [ 293.190291][ T9593] [ 293.193357][ T9593] dump_stack_lvl+0x16c/0x230 [ 293.198091][ T9593] ? show_regs_print_info+0x20/0x20 [ 293.203338][ T9593] ? load_image+0x3b0/0x3b0 [ 293.207885][ T9593] ? __lock_acquire+0x7c80/0x7c80 [ 293.212957][ T9593] should_fail_ex+0x39d/0x4d0 [ 293.217688][ T9593] _copy_from_user+0x2f/0xe0 [ 293.222327][ T9593] __copy_msghdr+0x3bb/0x580 [ 293.226963][ T9593] ___sys_sendmsg+0x1a6/0x290 [ 293.231687][ T9593] ? __sys_sendmsg+0x270/0x270 [ 293.236593][ T9593] ? __lock_acquire+0x7c80/0x7c80 [ 293.241665][ T9593] __se_sys_sendmsg+0x1a5/0x270 [ 293.246541][ T9593] ? perf_trace_preemptirq_template+0x281/0x340 [ 293.252809][ T9593] ? __x64_sys_sendmsg+0x80/0x80 [ 293.257798][ T9593] ? lockdep_hardirqs_on+0x98/0x150 [ 293.263020][ T9593] do_syscall_64+0x55/0xb0 [ 293.267454][ T9593] ? clear_bhb_loop+0x40/0x90 [ 293.272147][ T9593] ? clear_bhb_loop+0x40/0x90 [ 293.276842][ T9593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.282761][ T9593] RIP: 0033:0x7f7d1a58eba9 [ 293.287187][ T9593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.306808][ T9593] RSP: 002b:00007f7d1b47e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.315246][ T9593] RAX: ffffffffffffffda RBX: 00007f7d1a7d5fa0 RCX: 00007f7d1a58eba9 [ 293.323251][ T9593] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 293.331260][ T9593] RBP: 00007f7d1b47e090 R08: 0000000000000000 R09: 0000000000000000 [ 293.339252][ T9593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.347254][ T9593] R13: 00007f7d1a7d6038 R14: 00007f7d1a7d5fa0 R15: 00007fffe0e2f9e8 [ 293.355269][ T9593] Stopping klogd: [ 293.549106][ T9603] FAULT_INJECTION: forcing a failure. [ 293.549106][ T9603] name failslab, interval 1, probability 0, space 0, times 0 [ 293.568268][ T9603] CPU: 1 PID: 9603 Comm: syz.0.1138 Not tainted syzkaller #0 [ 293.575706][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 293.585800][ T9603] Call Trace: [ 293.589127][ T9603] [ 293.592089][ T9603] dump_stack_lvl+0x16c/0x230 [ 293.596824][ T9603] ? show_regs_print_info+0x20/0x20 [ 293.602073][ T9603] ? load_image+0x3b0/0x3b0 [ 293.606625][ T9603] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 293.612233][ T9603] should_fail_ex+0x39d/0x4d0 [ 293.616970][ T9603] should_failslab+0x9/0x20 [ 293.621522][ T9603] slab_pre_alloc_hook+0x59/0x310 [ 293.626615][ T9603] kmem_cache_alloc+0x5a/0x2e0 [ 293.631431][ T9603] ? skb_clone+0x1eb/0x370 [ 293.635895][ T9603] skb_clone+0x1eb/0x370 [ 293.640184][ T9603] __netlink_deliver_tap+0x41c/0x830 [ 293.645536][ T9603] ? netlink_deliver_tap+0x2e/0x1b0 [ 293.650782][ T9603] netlink_deliver_tap+0x19c/0x1b0 [ 293.655941][ T9603] netlink_dump+0x8df/0xde0 [ 293.660523][ T9603] ? netlink_lookup+0x200/0x200 [ 293.665432][ T9603] ? slab_free_freelist_hook+0x130/0x1b0 [ 293.671119][ T9603] ? netlink_recvmsg+0x5cf/0xdf0 [ 293.676098][ T9603] ? kmem_cache_free+0xf8/0x280 [ 293.681011][ T9603] netlink_recvmsg+0x677/0xdf0 [ 293.685844][ T9603] ? netlink_sendmsg+0xbe0/0xbe0 [ 293.690827][ T9603] ? aa_sk_perm+0x7fc/0x930 [ 293.695380][ T9603] ? aa_af_perm+0x2b0/0x2b0 [ 293.699940][ T9603] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 293.705280][ T9603] ? security_socket_recvmsg+0x89/0xb0 [ 293.710786][ T9603] ? netlink_sendmsg+0xbe0/0xbe0 [ 293.715768][ T9603] ____sys_recvmsg+0x29e/0x5b0 [ 293.720590][ T9603] ? __sys_recvmsg_sock+0x50/0x50 [ 293.725679][ T9603] ? import_iovec+0x73/0xa0 [ 293.730247][ T9603] ___sys_recvmsg+0x1b6/0x510 [ 293.734982][ T9603] ? __sys_recvmsg+0x270/0x270 [ 293.739800][ T9603] ? ksys_write+0x1c1/0x250 [ 293.744360][ T9603] ? __fget_files+0x44a/0x4d0 [ 293.749099][ T9603] __x64_sys_recvmsg+0x1f2/0x2c0 [ 293.754089][ T9603] ? ___sys_recvmsg+0x510/0x510 [ 293.759008][ T9603] ? lockdep_hardirqs_on+0x98/0x150 [ 293.764272][ T9603] do_syscall_64+0x55/0xb0 [ 293.768729][ T9603] ? clear_bhb_loop+0x40/0x90 [ 293.773444][ T9603] ? clear_bhb_loop+0x40/0x90 [ 293.778159][ T9603] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 293.784103][ T9603] RIP: 0033:0x7fe22c58eba9 [ 293.788552][ T9603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.808209][ T9603] RSP: 002b:00007fe22d451038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 293.816665][ T9603] RAX: ffffffffffffffda RBX: 00007fe22c7d5fa0 RCX: 00007fe22c58eba9 [ 293.824674][ T9603] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000003 [ 293.832679][ T9603] RBP: 00007fe22d451090 R08: 0000000000000000 R09: 0000000000000000 [ 293.840692][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.848699][ T9603] R13: 00007fe22c7d6038 R14: 00007fe22c7d5fa0 R15: 00007ffe2552b2c8 [ 293.856745][ T9603] [ 293.891578][ T9604] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 293.918037][ T9604] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 294.017613][ T9606] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode OK [ 294.032335][ T9606] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 294.095302][ T9617] netlink: 'syz.1.1141': attribute type 39 has an invalid length. [ 294.221154][ T9613] __nla_validate_parse: 16 callbacks suppressed [ 294.221204][ T9613] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.1140'. Stopping acpid: [ 294.514289][ T9625] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1142'. [ 295.047953][ T9640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1145'. [ 295.114825][ T9640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1145'. [ 295.150773][ T9641] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1145'. [ 295.180444][ T9628] netlink: 'syz.2.1143': attribute type 21 has an invalid length. [ 295.267664][ T9643] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1146'. [ 295.469312][ T9643] netlink: 'syz.1.1146': attribute type 10 has an invalid length. [ 295.477219][ T9643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1146'. [ 295.519358][ T9646] netlink: 'syz.0.1147': attribute type 39 has an invalid length. [ 295.580156][ T9649] FAULT_INJECTION: forcing a failure. [ 295.580156][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 295.638067][ T9649] CPU: 1 PID: 9649 Comm: syz.3.1148 Not tainted syzkaller #0 [ 295.645559][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 295.655676][ T9649] Call Trace: [ 295.659012][ T9649] [ 295.662000][ T9649] dump_stack_lvl+0x16c/0x230 [ 295.666762][ T9649] ? show_regs_print_info+0x20/0x20 [ 295.672033][ T9649] ? load_image+0x3b0/0x3b0 [ 295.676605][ T9649] ? __might_sleep+0xe0/0xe0 [ 295.681274][ T9649] ? __lock_acquire+0x7c80/0x7c80 [ 295.686387][ T9649] should_fail_ex+0x39d/0x4d0 [ 295.691133][ T9649] should_failslab+0x9/0x20 [ 295.695673][ T9649] slab_pre_alloc_hook+0x59/0x310 [ 295.700750][ T9649] kmem_cache_alloc_node+0x60/0x330 [ 295.705984][ T9649] ? __alloc_skb+0x108/0x2c0 [ 295.710638][ T9649] __alloc_skb+0x108/0x2c0 [ 295.715115][ T9649] alloc_skb_with_frags+0xca/0x7c0 [ 295.720276][ T9649] ? __lock_acquire+0x7c80/0x7c80 [ 295.725333][ T9649] ? perf_trace_lock_acquire+0x19c/0x3e0 [ 295.731053][ T9649] sock_alloc_send_pskb+0x857/0x990 [ 295.736341][ T9649] ? sock_kzfree_s+0x50/0x50 [ 295.740995][ T9649] ? dev_get_by_index+0x22/0x2d0 [ 295.745972][ T9649] ? dev_get_by_index+0x22/0x2d0 [ 295.750978][ T9649] packet_sendmsg+0x313f/0x4d30 [ 295.755927][ T9649] ? __might_sleep+0xe0/0xe0 [ 295.760574][ T9649] ? perf_trace_lock_acquire+0x32a/0x3e0 [ 295.766242][ T9649] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 295.772099][ T9649] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 295.778754][ T9649] ? aa_sk_perm+0x7fc/0x930 [ 295.783326][ T9649] ? packet_getsockopt+0xa20/0xa20 [ 295.788490][ T9649] ? aa_sock_msg_perm+0x94/0x150 [ 295.793466][ T9649] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.798781][ T9649] ? security_socket_sendmsg+0x80/0xa0 [ 295.804272][ T9649] ? packet_getsockopt+0xa20/0xa20 [ 295.809419][ T9649] ____sys_sendmsg+0x5bf/0x950 [ 295.814237][ T9649] ? __asan_memset+0x22/0x40 [ 295.818867][ T9649] ? __sys_sendmsg_sock+0x30/0x30 [ 295.823923][ T9649] ? __import_iovec+0x3fa/0x860 [ 295.828837][ T9649] ? import_iovec+0x73/0xa0 [ 295.833391][ T9649] ___sys_sendmsg+0x220/0x290 [ 295.838118][ T9649] ? __sys_sendmsg+0x270/0x270 [ 295.842979][ T9649] ? __lock_acquire+0x7c80/0x7c80 [ 295.848148][ T9649] __se_sys_sendmsg+0x1a5/0x270 [ 295.853044][ T9649] ? __x64_sys_sendmsg+0x80/0x80 [ 295.858064][ T9649] ? lockdep_hardirqs_on+0x98/0x150 [ 295.863312][ T9649] do_syscall_64+0x55/0xb0 [ 295.867758][ T9649] ? clear_bhb_loop+0x40/0x90 [ 295.872463][ T9649] ? clear_bhb_loop+0x40/0x90 [ 295.877176][ T9649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.883116][ T9649] RIP: 0033:0x7f7caa38eba9 [ 295.887566][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.907210][ T9649] RSP: 002b:00007f7cab151038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.915680][ T9649] RAX: ffffffffffffffda RBX: 00007f7caa5d5fa0 RCX: 00007f7caa38eba9 [ 295.923696][ T9649] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 295.931697][ T9649] RBP: 00007f7cab151090 R08: 0000000000000000 R09: 0000000000000000 [ 295.939704][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.947709][ T9649] R13: 00007f7caa5d6038 R14: 00007f7caa5d5fa0 R15: 00007ffdec76c388 [ 295.955760][ T9649] OK [ 296.260263][ T9653] batman_adv: batadv0: Interface deactivated: wlan0 Stopping syslogd: [ 296.432678][ T9653] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 296.467447][ T9653] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 296.576413][ T9658] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 296.585511][ T9658] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 296.593762][ T9658] batman_adv: batadv0: Interface activated: wlan0 [ 296.614825][ T9657] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 296.628440][ T9657] mac80211_hwsim hwsim2 wlan0: left allmulticast mode stopped /sbin/syslogd (pid 5145) OK [ 296.716711][ T9663] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 296.758132][ T9663] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 296.973741][ T9672] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.1153'. [ 297.076461][ T9674] batman_adv: batadv0: Interface deactivated: wlan0 [ 297.130950][ T9674] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 297.162239][ T9674] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 297.320999][ T9679] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 297.346091][ T9679] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 297.366579][ T9679] batman_adv: batadv0: Interface activated: wlan0 [ 297.422679][ T9677] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 297.469289][ T9677] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 297.582712][ T9683] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 297.598339][ T9683] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode umount: can't remount debugfs read-only [ 297.650468][ T9687] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1157'. [ 297.789225][ T9690] sctp: [Deprecated]: syz.0.1158 (pid 9690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.789225][ T9690] Use struct sctp_sack_info instead [ 297.876732][ T9692] netlink: 'syz.2.1159': attribute type 39 has an invalid length. [ 298.564255][ T9687] netlink: 'syz.3.1157': attribute type 10 has an invalid length. [ 298.614751][ T9687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1157'. [ 298.672156][ T9699] ipvlan1: entered promiscuous mode [ 298.696754][ T9699] ipvlan1: entered allmulticast mode [ 298.704463][ T9699] veth0_vlan: entered allmulticast mode [ 299.929800][ T9719] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1173'. [ 300.195759][ T9720] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 300.236773][ T9720] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 300.413747][ T9721] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 300.462630][ T9721] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 300.562765][ T9727] batman_adv: batadv0: Interface deactivated: wlan0 [ 300.692256][ T9727] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 300.784697][ T9727] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 300.988213][ T9730] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 300.996627][ T9730] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 301.039192][ T9730] batman_adv: batadv0: Interface activated: wlan0 [ 301.161999][ T9733] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1168'. [ 301.208122][ T9719] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 301.257567][ T9719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1173'. [ 301.803982][ T9746] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1171'. [ 301.827984][ T9740] netlink: 'syz.2.1170': attribute type 39 has an invalid length. [ 301.987514][ T9741] netlink: 'syz.0.1169': attribute type 21 has an invalid length. [ 302.484251][ T9753] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.1172'. [ 302.500807][ T9757] netlink: 'syz.2.1175': attribute type 29 has an invalid length. [ 302.575304][ T9757] netlink: 'syz.2.1175': attribute type 29 has an invalid length. [ 302.614035][ T9760] netlink: 'syz.2.1175': attribute type 29 has an invalid length. [ 302.685946][ T9757] netlink: 'syz.2.1175': attribute type 29 has an invalid length. [ 303.005552][ T9763] batman_adv: batadv0: Interface deactivated: wlan0 [ 303.041363][ T9763] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 303.056107][ T9763] mac80211_hwsim hwsim6 wlan0: left allmulticast mode umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! [ 303.889585][ T9766] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 303.896614][ T9766] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode Sent SIGTERM to all processes [ 304.048616][ T9766] batman_adv: batadv0: Interface activated: wlan0 Connection to 10.128.10.1 closed by remote host. [ 304.157929][ T9773] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1179'. Sent SIGKILL to all processes Requesting system poweroff [ 305.433966][ T2979] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.572876][ T2979] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.682936][ T2979] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.822564][ T2979] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.285699][ T9778] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 306.297329][ T9778] ACPI: PM: Preparing to enter system sleep state S5 [ 306.305571][ T9778] kvm: exiting hardware virtualization [ 306.311405][ T9778] reboot: Power down serialport: VM disconnected.