last executing test programs: 10.82599839s ago: executing program 2 (id=1482): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x4480, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='memory.swap.current\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b33, &(0x7f0000000000)={'wlan1\x00', @dev}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=ANY=[], 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11}, 0x11) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)}], 0x1}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2000021a, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29}, 0x94) 9.692749947s ago: executing program 0 (id=1487): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x8, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.387503152s ago: executing program 2 (id=1490): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 9.369696942s ago: executing program 0 (id=1491): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$cgroup_devices(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4, 0x9}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) 8.548249095s ago: executing program 2 (id=1495): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfff7fff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0x7b000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x4, 0xe, 0x10, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002080000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 8.367114978s ago: executing program 2 (id=1497): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xb9, 0x5, 0x0, 0x0, 0x0, 0x10, 0x81420, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x8001}, 0x300, 0x103, 0x200001, 0x5, 0x29e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000001040)="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", 0x5a9}], 0x1}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34040851}, 0x40) sendmsg$tipc(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8884}, 0x40041d0) 7.936997895s ago: executing program 2 (id=1499): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x100220, 0x0, 0x80000000, 0x3, 0x2, 0x72a0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a20fe000000007303000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c3f000000315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b47623028271722fb515f31e0dd115a292f1e68481a62cd15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x43001000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0x1, 0x58, &(0x7f0000000500)}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x18, 0xf8, 0x9, 0x5, 0x10000, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x1d0, 0x4, 0x0, 0x4, 0xffffffffffffffff, 0x6de8f710, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3000000, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x22}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x2000000, 0x20, 0x0, &(0x7f0000000400)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48788a8", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.896928525s ago: executing program 0 (id=1500): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000003c0)) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x15, 0x0, 0x3, 0x6, 0x10000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) 6.37628354s ago: executing program 0 (id=1505): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x40000003, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x4000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x1121, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x1d72b053}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000030000000400000008"], 0x50) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.998224806s ago: executing program 0 (id=1506): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5e0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 5.764208099s ago: executing program 0 (id=1508): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000", @ANYRES32, @ANYRES64], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xd68, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000c80)="fb1cd6", 0x3}], 0x1}, 0x20000000) recvmsg(r4, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001040)=""/190, 0xbe}], 0x1, &(0x7f0000001480)=""/103, 0x67}, 0x120) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000000000001152027b8445ff2bb9509bb5328e8a052cc411325440773d65c92dbab2c10729128a2f44303b966006032911b625c05000c3e6c9c0956debd5446010b1b213b25677362835ae7167400dfbf5a8c47adebdca8efa16e7cce1bceb53c66c3a3858", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r5, 0x0, 0x0}, 0x20) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000c00)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="080935bde916"}) 4.346060862s ago: executing program 2 (id=1511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, r2, 0x2}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0)="ad", &(0x7f0000000000)=""/3, 0x2}, 0x20) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 4.122103125s ago: executing program 3 (id=1513): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r1, 0x0, 0x0}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x0, 0xa, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x28264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x2, @perf_config_ext={0x1eb, 0x10001}, 0x2018, 0x0, 0x0, 0x2, 0x0, 0x7, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x0, 0x1, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 2.56842007s ago: executing program 3 (id=1518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="15000000080000003c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x13}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.493386621s ago: executing program 3 (id=1519): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400c8fbffffffe0ffff47000000000061"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0xfffffe51) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40305829, &(0x7f0000000040)) 2.447403371s ago: executing program 1 (id=1520): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xecc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='N,N'], 0x6a) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f0000000100)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1.86837424s ago: executing program 1 (id=1521): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x16, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000003000000bfa300000000000007030000f0ffffff7a0a00fe1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000800)="d2ffdd934517f3e145fa02e086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.746998423s ago: executing program 1 (id=1522): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x300, 0xd1, 0x0, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 1.422440918s ago: executing program 3 (id=1523): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe", 0x6}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 1.352276409s ago: executing program 1 (id=1524): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f00000005c0)=""/258, 0x26, 0x102, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x5}, 0x10}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/N'], 0x6a) 1.226456881s ago: executing program 3 (id=1525): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x5d6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 795.296488ms ago: executing program 1 (id=1526): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 362.07µs ago: executing program 1 (id=1527): bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff0000000000000000851000000200000085000000070000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 3 (id=1528): perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x2400}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x8a, 0x3, 0x0, 0x13, 0x0, 0x4, 0x44809, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0x6}, 0x4108, 0x3, 0x2, 0x3129b7164949479, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff}, 0x0, 0x7, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): t of range [ 230.354980][ T7479] netlink: zone id is out of range [ 230.364903][ T7479] netlink: zone id is out of range [ 230.373376][ T7479] netlink: zone id is out of range [ 230.387616][ T7479] netlink: zone id is out of range [ 230.393348][ T7479] netlink: zone id is out of range [ 230.400106][ T7479] netlink: zone id is out of range [ 230.885654][ T7492] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.485'. [ 230.953707][ T7494] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 233.973680][ T7512] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.495'. [ 234.102968][ T7514] bridge0: port 3(batadv0) entered blocking state [ 234.125805][ T7514] bridge0: port 3(batadv0) entered disabled state [ 234.137426][ T7514] batadv0: entered allmulticast mode [ 234.180415][ T7519] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.492'. [ 234.221005][ T7514] batadv0: entered promiscuous mode [ 234.370885][ T6236] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 234.380307][ T6236] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 234.390878][ T7514] bridge0: port 3(batadv0) entered blocking state [ 234.399518][ T7514] bridge0: port 3(batadv0) entered forwarding state [ 234.529120][ T7526] Q6`Ҙ: renamed from lo (while UP) [ 238.817824][ T7548] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.504'. [ 239.464138][ T7567] netlink: 'syz.2.510': attribute type 10 has an invalid length. [ 239.475267][ T7567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.510'. [ 239.502494][ T7567] ipvlan1: entered promiscuous mode [ 239.513141][ T7567] ipvlan1: entered allmulticast mode [ 239.528816][ T7567] veth0_vlan: entered allmulticast mode [ 239.649844][ T7567] bridge0: port 4(ipvlan1) entered blocking state [ 239.661883][ T7567] bridge0: port 4(ipvlan1) entered disabled state [ 239.740289][ T7567] net_ratelimit: 41 callbacks suppressed [ 239.740344][ T7567] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 239.927838][ T7573] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.509'. [ 239.958515][ T7571] bridge0: port 3(batadv0) entered blocking state [ 239.966292][ T7573] netlink: zone id is out of range [ 239.971672][ T7571] bridge0: port 3(batadv0) entered disabled state [ 239.979594][ T7573] netlink: zone id is out of range [ 239.992529][ T7571] batadv0: entered allmulticast mode [ 240.000512][ T7573] netlink: zone id is out of range [ 240.007854][ T7571] batadv0: entered promiscuous mode [ 240.022227][ T7573] netlink: zone id is out of range [ 240.062486][ T7571] bridge0: port 3(batadv0) entered blocking state [ 240.069192][ T7571] bridge0: port 3(batadv0) entered forwarding state [ 240.077106][ T7573] netlink: zone id is out of range [ 240.082360][ T7573] netlink: zone id is out of range [ 240.089376][ T7573] netlink: zone id is out of range [ 240.095618][ T7573] netlink: zone id is out of range [ 240.101195][ T6232] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 240.101213][ T6232] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 240.122290][ T7570] syzkaller0: entered promiscuous mode [ 240.129174][ T7570] syzkaller0: entered allmulticast mode [ 240.155431][ T7573] netlink: zone id is out of range [ 240.591635][ T7584] netlink: 'syz.1.513': attribute type 8 has an invalid length. [ 240.613635][ T7584] netlink: 'syz.1.513': attribute type 3 has an invalid length. [ 240.627820][ T7584] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.513'. [ 240.865776][ T7583] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.515'. [ 245.390995][ T7614] netlink: 'syz.3.523': attribute type 2 has an invalid length. [ 245.456200][ T7614] netlink: 'syz.3.523': attribute type 4 has an invalid length. [ 245.463928][ T7614] netlink: 132 bytes leftover after parsing attributes in process `syz.3.523'. [ 245.552712][ T7619] netlink: 'syz.0.521': attribute type 10 has an invalid length. [ 245.587638][ T7619] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 245.610097][ T7619] ipvlan1: entered promiscuous mode [ 245.620539][ T7619] ipvlan1: entered allmulticast mode [ 245.626396][ T7619] veth0_vlan: entered allmulticast mode [ 245.642899][ T7619] bridge0: port 3(ipvlan1) entered blocking state [ 245.650934][ T7619] bridge0: port 3(ipvlan1) entered disabled state [ 245.746643][ T7619] net_ratelimit: 15 callbacks suppressed [ 245.746664][ T7619] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 245.846163][ T7623] netlink: 'syz.2.524': attribute type 21 has an invalid length. [ 245.854049][ T7623] netlink: 'syz.2.524': attribute type 1 has an invalid length. [ 246.346298][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.107349][ T7642] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.530'. [ 247.185823][ T7645] FAULT_INJECTION: forcing a failure. [ 247.185823][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.199427][ T7645] CPU: 0 PID: 7645 Comm: syz.0.532 Not tainted syzkaller #0 [ 247.206771][ T7645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 247.216873][ T7645] Call Trace: [ 247.220191][ T7645] [ 247.223153][ T7645] dump_stack_lvl+0x18c/0x250 [ 247.227914][ T7645] ? show_regs_print_info+0x20/0x20 [ 247.233162][ T7645] ? load_image+0x420/0x420 [ 247.237714][ T7645] ? __might_fault+0xaa/0x120 [ 247.242433][ T7645] ? __lock_acquire+0x7d80/0x7d80 [ 247.247500][ T7645] ? __se_sys_ioctl+0x48/0x170 [ 247.252311][ T7645] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.258440][ T7645] should_fail_ex+0x394/0x4c0 [ 247.263214][ T7645] _copy_from_user+0x2f/0xe0 [ 247.267869][ T7645] arp_ioctl+0x159/0x530 [ 247.272177][ T7645] ? neigh_release+0x80/0x80 [ 247.276831][ T7645] ? do_vfs_ioctl+0x156c/0x1cc0 [ 247.281751][ T7645] inet_ioctl+0x3c5/0x560 [ 247.286136][ T7645] ? tomoyo_path_number_perm+0x217/0x5e0 [ 247.291826][ T7645] ? inet_shutdown+0x370/0x370 [ 247.296664][ T7645] ? slab_free_freelist_hook+0x130/0x1a0 [ 247.302346][ T7645] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 247.308033][ T7645] ? __kmem_cache_free+0xba/0x1f0 [ 247.313148][ T7645] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 247.318673][ T7645] ? packet_ioctl+0x28e/0x350 [ 247.323400][ T7645] sock_do_ioctl+0xfc/0x310 [ 247.327959][ T7645] ? sock_show_fdinfo+0xb0/0xb0 [ 247.332886][ T7645] sock_ioctl+0x5be/0x7e0 [ 247.337271][ T7645] ? sock_poll+0x3e0/0x3e0 [ 247.341757][ T7645] ? bpf_lsm_file_ioctl+0x9/0x10 [ 247.346735][ T7645] ? security_file_ioctl+0x80/0xa0 [ 247.351895][ T7645] ? sock_poll+0x3e0/0x3e0 [ 247.356402][ T7645] __se_sys_ioctl+0xfd/0x170 [ 247.361049][ T7645] do_syscall_64+0x55/0xb0 [ 247.365524][ T7645] ? clear_bhb_loop+0x40/0x90 [ 247.370246][ T7645] ? clear_bhb_loop+0x40/0x90 [ 247.374982][ T7645] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.380934][ T7645] RIP: 0033:0x7fcf7299ce59 [ 247.385394][ T7645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.405138][ T7645] RSP: 002b:00007fcf73868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.413613][ T7645] RAX: ffffffffffffffda RBX: 00007fcf72c15fa0 RCX: 00007fcf7299ce59 [ 247.421633][ T7645] RDX: 0000200000000040 RSI: 0000000000008954 RDI: 0000000000000003 [ 247.429685][ T7645] RBP: 00007fcf73868090 R08: 0000000000000000 R09: 0000000000000000 [ 247.437704][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.445725][ T7645] R13: 00007fcf72c16038 R14: 00007fcf72c15fa0 R15: 00007ffcb1edcf28 [ 247.453759][ T7645] [ 247.612753][ T7651] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 247.687513][ T7651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.541'. [ 247.755139][ T7651] ipvlan1: entered promiscuous mode [ 247.776189][ T7651] ipvlan1: entered allmulticast mode [ 247.852849][ T7651] veth0_vlan: entered allmulticast mode [ 247.941263][ T7651] bridge0: port 4(ipvlan1) entered blocking state [ 248.060065][ T7651] bridge0: port 4(ipvlan1) entered disabled state [ 248.200989][ T7651] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 248.569517][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.799001][ T7677] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.538'. [ 251.144231][ T7689] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.542'. [ 251.664361][ T7692] netlink: 'syz.0.544': attribute type 10 has an invalid length. [ 251.716030][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.745114][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.772498][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.800337][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.826267][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.852939][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.906687][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.931916][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 251.958199][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 252.003877][ T7692] netlink: 'syz.0.544': attribute type 11 has an invalid length. [ 252.023513][ T7692] netlink: 'syz.0.544': attribute type 4 has an invalid length. [ 252.053886][ T7692] netlink: 'syz.0.544': attribute type 5 has an invalid length. [ 252.074463][ T7692] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.544'. [ 252.438262][ T7702] netlink: 'syz.1.547': attribute type 46 has an invalid length. [ 255.819192][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825812][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.633222][ T7717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.058138][ T7723] netlink: 'syz.2.550': attribute type 10 has an invalid length. [ 257.088504][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.2.550'. [ 257.104041][ T7723] bridge0: port 4(ipvlan1) entered blocking state [ 257.111162][ T7723] bridge0: port 4(ipvlan1) entered disabled state [ 257.137995][ T7723] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 257.296137][ T7727] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.552'. [ 257.414000][ T7729] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 257.422063][ T7729] IPv6: NLM_F_CREATE should be set when creating new route [ 257.430031][ T7729] IPv6: NLM_F_CREATE should be set when creating new route [ 257.437672][ T7729] IPv6: NLM_F_CREATE should be set when creating new route [ 257.440576][ T7730] netlink: 'syz.0.562': attribute type 9 has an invalid length. [ 257.465406][ T7730] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.562'. [ 257.553432][ T7729] netlink: 'syz.0.562': attribute type 9 has an invalid length. [ 257.592715][ T7729] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.562'. [ 258.629424][ T7747] netlink: 'syz.0.558': attribute type 17 has an invalid length. [ 258.645092][ T7747] netlink: 152 bytes leftover after parsing attributes in process `syz.0.558'. [ 258.669450][ T7747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 261.907892][ T7757] FAULT_INJECTION: forcing a failure. [ 261.907892][ T7757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.930585][ T7757] CPU: 1 PID: 7757 Comm: syz.3.564 Not tainted syzkaller #0 [ 261.937954][ T7757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 261.948058][ T7757] Call Trace: [ 261.951391][ T7757] [ 261.954367][ T7757] dump_stack_lvl+0x18c/0x250 [ 261.959115][ T7757] ? show_regs_print_info+0x20/0x20 [ 261.964366][ T7757] ? load_image+0x420/0x420 [ 261.968925][ T7757] ? __lock_acquire+0x7d80/0x7d80 [ 261.974000][ T7757] ? snprintf+0xe9/0x140 [ 261.978297][ T7757] should_fail_ex+0x394/0x4c0 [ 261.983073][ T7757] _copy_to_user+0x2f/0xa0 [ 261.987553][ T7757] simple_read_from_buffer+0xe7/0x150 [ 261.992994][ T7757] proc_fail_nth_read+0x1e8/0x260 [ 261.998085][ T7757] ? proc_fault_inject_write+0x360/0x360 [ 262.003816][ T7757] ? fsnotify_perm+0x271/0x5e0 [ 262.008637][ T7757] ? proc_fault_inject_write+0x360/0x360 [ 262.014348][ T7757] vfs_read+0x298/0x990 [ 262.018588][ T7757] ? kernel_read+0x1e0/0x1e0 [ 262.023234][ T7757] ? __fget_files+0x28/0x460 [ 262.027864][ T7757] ? __fget_files+0x3fc/0x460 [ 262.032587][ T7757] ? __fdget_pos+0x2a3/0x330 [ 262.037215][ T7757] ? ksys_read+0x74/0x260 [ 262.041619][ T7757] ksys_read+0x151/0x260 [ 262.045899][ T7757] ? vfs_write+0x9a0/0x9a0 [ 262.050349][ T7757] ? lockdep_hardirqs_on+0x98/0x150 [ 262.055595][ T7757] do_syscall_64+0x55/0xb0 [ 262.060043][ T7757] ? clear_bhb_loop+0x40/0x90 [ 262.064760][ T7757] ? clear_bhb_loop+0x40/0x90 [ 262.069499][ T7757] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 262.075444][ T7757] RIP: 0033:0x7f9668b5d68e [ 262.079893][ T7757] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 262.099623][ T7757] RSP: 002b:00007f9669ac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 262.108073][ T7757] RAX: ffffffffffffffda RBX: 00007f9669ac66c0 RCX: 00007f9668b5d68e [ 262.116081][ T7757] RDX: 000000000000000f RSI: 00007f9669ac60a0 RDI: 0000000000000003 [ 262.124076][ T7757] RBP: 00007f9669ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.132108][ T7757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.140109][ T7757] R13: 00007f9668e16038 R14: 00007f9668e15fa0 R15: 00007ffea1d7b358 [ 262.148159][ T7757] [ 262.549122][ T7773] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.568'. [ 263.172224][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 263.223051][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 263.347804][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 263.395597][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 263.421381][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 263.613470][ T7782] netlink: 'syz.2.572': attribute type 29 has an invalid length. [ 267.748631][ T7823] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.583'. [ 267.797765][ T7824] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 267.833929][ T7824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.582'. [ 267.898002][ T7824] bridge0: port 4(ipvlan1) entered blocking state [ 267.950127][ T7824] bridge0: port 4(ipvlan1) entered disabled state [ 268.036703][ T7824] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 268.640477][ T7816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.655085][ T7818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 269.905275][ T7838] netlink: 'syz.3.590': attribute type 4 has an invalid length. [ 269.913398][ T7838] netlink: 152 bytes leftover after parsing attributes in process `syz.3.590'. [ 269.924917][ T7838] .`: renamed from bond0 (while UP) [ 273.027519][ T7853] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.594'. [ 273.052146][ T7852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 273.059805][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 273.067723][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 273.075550][ T7852] IPv6: NLM_F_CREATE should be set when creating new route [ 273.102852][ T7856] netlink: 'syz.3.595': attribute type 9 has an invalid length. [ 273.137354][ T7856] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.595'. [ 273.252791][ T7862] netlink: 'syz.2.596': attribute type 10 has an invalid length. [ 273.315079][ T7862] netlink: 40 bytes leftover after parsing attributes in process `syz.2.596'. [ 273.369073][ T7862] bridge0: port 4(ipvlan1) entered blocking state [ 273.435009][ T7862] bridge0: port 4(ipvlan1) entered disabled state [ 273.542434][ T7862] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 273.676829][ T7852] netlink: 'syz.3.595': attribute type 9 has an invalid length. [ 273.716963][ T7852] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.595'. [ 273.892599][ T7873] netlink: 2 bytes leftover after parsing attributes in process `syz.0.601'. [ 274.082594][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.963072][ T7868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.058127][ T7876] netlink: 140 bytes leftover after parsing attributes in process `syz.0.602'. [ 275.231946][ T5779] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 275.237716][ T7884] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.606'. [ 275.914023][ T7898] bridge0: port 4(syz_tun) entered blocking state [ 275.920989][ T7898] bridge0: port 4(syz_tun) entered disabled state [ 275.928460][ T7898] syz_tun: entered allmulticast mode [ 275.935634][ T7898] syz_tun: entered promiscuous mode [ 276.045831][ T7900] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 276.053536][ T7900] IPv6: NLM_F_CREATE should be set when creating new route [ 276.100082][ T7900] netlink: 'syz.0.612': attribute type 9 has an invalid length. [ 276.109906][ T7900] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.612'. [ 276.331730][ T7901] netlink: 'syz.0.612': attribute type 9 has an invalid length. [ 276.345021][ T7901] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.612'. [ 276.489659][ T7912] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 276.563965][ T7912] netlink: 40 bytes leftover after parsing attributes in process `syz.3.613'. [ 276.672770][ T7912] ipvlan1: entered promiscuous mode [ 276.744690][ T7912] ipvlan1: entered allmulticast mode [ 276.809911][ T7912] veth0_vlan: entered allmulticast mode [ 276.936639][ T7912] bridge0: port 5(ipvlan1) entered blocking state [ 277.040259][ T7912] bridge0: port 5(ipvlan1) entered disabled state [ 277.140478][ T7912] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 277.970360][ T7907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.980904][ T7908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.006158][ T7906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.266335][ T7918] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.616'. [ 278.380383][ T5779] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 278.680754][ T7933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.779326][ T7936] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 278.787008][ T7936] IPv6: NLM_F_CREATE should be set when creating new route [ 278.794859][ T7936] IPv6: NLM_F_CREATE should be set when creating new route [ 278.802563][ T7936] IPv6: NLM_F_CREATE should be set when creating new route [ 278.839620][ T7937] netlink: 'syz.2.626': attribute type 9 has an invalid length. [ 278.866911][ T7937] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.626'. [ 278.921785][ T7936] netlink: 'syz.2.626': attribute type 9 has an invalid length. [ 278.933150][ T7936] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.626'. [ 279.047889][ T7939] netlink: 'syz.0.627': attribute type 10 has an invalid length. [ 279.057315][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.0.627'. [ 279.078806][ T7939] bridge0: port 3(ipvlan1) entered blocking state [ 279.086834][ T7939] bridge0: port 3(ipvlan1) entered disabled state [ 279.126111][ T7939] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 279.162486][ T7938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.402222][ T7945] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.630'. [ 279.480119][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.772347][ T5779] Bluetooth: hci2: unexpected event 0x16 length: 151 > 6 [ 280.482645][ T7946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.622888][ T7953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.216231][ T7963] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.401558][ T7969] netlink: 'syz.0.637': attribute type 3 has an invalid length. [ 281.413098][ T7969] netlink: 70352 bytes leftover after parsing attributes in process `syz.0.637'. [ 281.556321][ T7973] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.641'. [ 281.876999][ T7981] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.049922][ T7986] IPv6: pim6reg1: Disabled Multicast RS [ 282.077783][ T7986] FAULT_INJECTION: forcing a failure. [ 282.077783][ T7986] name failslab, interval 1, probability 0, space 0, times 0 [ 282.106742][ T7986] CPU: 1 PID: 7986 Comm: syz.1.646 Not tainted syzkaller #0 [ 282.114130][ T7986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 282.124231][ T7986] Call Trace: [ 282.127551][ T7986] [ 282.130534][ T7986] dump_stack_lvl+0x18c/0x250 [ 282.135277][ T7986] ? show_regs_print_info+0x20/0x20 [ 282.140545][ T7986] ? load_image+0x420/0x420 [ 282.145105][ T7986] ? mark_lock+0x94/0x320 [ 282.149516][ T7986] should_fail_ex+0x394/0x4c0 [ 282.154264][ T7986] should_failslab+0x9/0x20 [ 282.158833][ T7986] slab_pre_alloc_hook+0x59/0x300 [ 282.163934][ T7986] kmem_cache_alloc_node+0x5e/0x310 [ 282.169202][ T7986] ? __alloc_skb+0x103/0x2c0 [ 282.173859][ T7986] __alloc_skb+0x103/0x2c0 [ 282.178311][ T7986] rtmsg_ifinfo_build_skb+0x83/0x260 [ 282.183636][ T7986] rtmsg_ifinfo+0x8c/0x1a0 [ 282.188092][ T7986] __dev_notify_flags+0xf3/0x310 [ 282.193065][ T7986] ? __dev_change_flags+0x6a0/0x6a0 [ 282.198315][ T7986] ? __dev_change_flags+0x4d2/0x6a0 [ 282.203540][ T7986] ? dev_load+0x21/0x1f0 [ 282.207822][ T7986] ? __lock_acquire+0x7d80/0x7d80 [ 282.212874][ T7986] ? dev_get_flags+0x1c0/0x1c0 [ 282.217702][ T7986] ? full_name_hash+0xb0/0xe0 [ 282.222421][ T7986] dev_change_flags+0xde/0x1a0 [ 282.227256][ T7986] dev_ioctl+0x7b4/0x1140 [ 282.231630][ T7986] sock_do_ioctl+0x239/0x310 [ 282.236255][ T7986] ? sock_show_fdinfo+0xb0/0xb0 [ 282.241176][ T7986] sock_ioctl+0x5be/0x7e0 [ 282.245538][ T7986] ? sock_poll+0x3e0/0x3e0 [ 282.249996][ T7986] ? bpf_lsm_file_ioctl+0x9/0x10 [ 282.254960][ T7986] ? security_file_ioctl+0x80/0xa0 [ 282.260108][ T7986] ? sock_poll+0x3e0/0x3e0 [ 282.264556][ T7986] __se_sys_ioctl+0xfd/0x170 [ 282.269191][ T7986] do_syscall_64+0x55/0xb0 [ 282.273641][ T7986] ? clear_bhb_loop+0x40/0x90 [ 282.278340][ T7986] ? clear_bhb_loop+0x40/0x90 [ 282.283053][ T7986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 282.288989][ T7986] RIP: 0033:0x7f15dbb9ce59 [ 282.293468][ T7986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.313113][ T7986] RSP: 002b:00007f15dca27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 282.321562][ T7986] RAX: ffffffffffffffda RBX: 00007f15dbe15fa0 RCX: 00007f15dbb9ce59 [ 282.329649][ T7986] RDX: 0000200000000100 RSI: 0000000000008914 RDI: 0000000000000009 [ 282.337738][ T7986] RBP: 00007f15dca27090 R08: 0000000000000000 R09: 0000000000000000 [ 282.345756][ T7986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.353748][ T7986] R13: 00007f15dbe16038 R14: 00007f15dbe15fa0 R15: 00007ffe5777a018 [ 282.361757][ T7986] [ 283.008585][ T7988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.650065][ T8004] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.652'. [ 284.089112][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.124112][ T8015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.656'. [ 285.195006][ T8041] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.662'. [ 286.407447][ T8046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.650588][ T8051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.592498][ T8075] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.671'. [ 287.794073][ T8079] FAULT_INJECTION: forcing a failure. [ 287.794073][ T8079] name failslab, interval 1, probability 0, space 0, times 0 [ 287.845332][ T8079] CPU: 1 PID: 8079 Comm: syz.0.674 Not tainted syzkaller #0 [ 287.852804][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 287.862920][ T8079] Call Trace: [ 287.866246][ T8079] [ 287.869226][ T8079] dump_stack_lvl+0x18c/0x250 [ 287.873967][ T8079] ? show_regs_print_info+0x20/0x20 [ 287.879241][ T8079] ? load_image+0x420/0x420 [ 287.883803][ T8079] ? __might_sleep+0xe0/0xe0 [ 287.888475][ T8079] ? __lock_acquire+0x7d80/0x7d80 [ 287.893570][ T8079] should_fail_ex+0x394/0x4c0 [ 287.898325][ T8079] should_failslab+0x9/0x20 [ 287.902886][ T8079] slab_pre_alloc_hook+0x59/0x300 [ 287.907983][ T8079] kmem_cache_alloc_node+0x5e/0x310 [ 287.913234][ T8079] ? __alloc_skb+0x103/0x2c0 [ 287.917888][ T8079] __alloc_skb+0x103/0x2c0 [ 287.922370][ T8079] alloc_skb_with_frags+0xcd/0x7a0 [ 287.927550][ T8079] ? __lock_acquire+0x7d80/0x7d80 [ 287.932655][ T8079] sock_alloc_send_pskb+0x883/0x9a0 [ 287.937950][ T8079] ? sock_kzfree_s+0x50/0x50 [ 287.942603][ T8079] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 287.948482][ T8079] tun_get_user+0xa53/0x3d40 [ 287.953151][ T8079] ? aa_file_perm+0x11b/0xee0 [ 287.957887][ T8079] ? aa_file_perm+0x3e3/0xee0 [ 287.962627][ T8079] ? rcu_read_unlock+0xa0/0xa0 [ 287.967478][ T8079] ? tun_get+0x1c/0x2e0 [ 287.971691][ T8079] ? __lock_acquire+0x7d80/0x7d80 [ 287.976781][ T8079] ? tun_get+0x1c/0x2e0 [ 287.981035][ T8079] tun_chr_write_iter+0x119/0x200 [ 287.986151][ T8079] vfs_write+0x474/0x9a0 [ 287.990485][ T8079] ? file_end_write+0x250/0x250 [ 287.995415][ T8079] ? __fget_files+0x3fc/0x460 [ 288.000186][ T8079] ? __fdget_pos+0x1d8/0x330 [ 288.004859][ T8079] ? ksys_write+0x74/0x260 [ 288.009388][ T8079] ksys_write+0x151/0x260 [ 288.013793][ T8079] ? __ia32_sys_read+0x90/0x90 [ 288.018631][ T8079] ? lockdep_hardirqs_on+0x98/0x150 [ 288.023929][ T8079] do_syscall_64+0x55/0xb0 [ 288.028409][ T8079] ? clear_bhb_loop+0x40/0x90 [ 288.033147][ T8079] ? clear_bhb_loop+0x40/0x90 [ 288.037871][ T8079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.043906][ T8079] RIP: 0033:0x7fcf7299ce59 [ 288.048466][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.068154][ T8079] RSP: 002b:00007fcf73868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 288.076644][ T8079] RAX: ffffffffffffffda RBX: 00007fcf72c15fa0 RCX: 00007fcf7299ce59 [ 288.084690][ T8079] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 288.092727][ T8079] RBP: 00007fcf73868090 R08: 0000000000000000 R09: 0000000000000000 [ 288.100758][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.108777][ T8079] R13: 00007fcf72c16038 R14: 00007fcf72c15fa0 R15: 00007ffcb1edcf28 [ 288.116845][ T8079] [ 290.094349][ T8104] delete_channel: no stack [ 290.102549][ T8103] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.682'. [ 290.296298][ T8110] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.685'. [ 290.486351][ T8118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.685'. [ 291.473794][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.694'. [ 291.515416][ T8127] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 291.529641][ T8127] netlink: 'syz.1.694': attribute type 4 has an invalid length. [ 291.540453][ T8127] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.694'. [ 291.565905][ T8132] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.695'. [ 294.899998][ T8145] FAULT_INJECTION: forcing a failure. [ 294.899998][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 294.975582][ T8145] CPU: 0 PID: 8145 Comm: syz.2.700 Not tainted syzkaller #0 [ 294.982966][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.993078][ T8145] Call Trace: [ 294.996407][ T8145] [ 294.999474][ T8145] dump_stack_lvl+0x18c/0x250 [ 295.004302][ T8145] ? show_regs_print_info+0x20/0x20 [ 295.009566][ T8145] ? load_image+0x420/0x420 [ 295.014129][ T8145] ? __might_sleep+0xe0/0xe0 [ 295.018789][ T8145] ? __lock_acquire+0x7d80/0x7d80 [ 295.023893][ T8145] should_fail_ex+0x394/0x4c0 [ 295.028726][ T8145] should_failslab+0x9/0x20 [ 295.033303][ T8145] slab_pre_alloc_hook+0x59/0x300 [ 295.038418][ T8145] kmem_cache_alloc_node+0x5e/0x310 [ 295.043682][ T8145] ? __alloc_skb+0x103/0x2c0 [ 295.048345][ T8145] __alloc_skb+0x103/0x2c0 [ 295.052939][ T8145] alloc_skb_with_frags+0xcd/0x7a0 [ 295.058240][ T8145] ? __fget_files+0x28/0x460 [ 295.062892][ T8145] ? __fget_files+0x3fc/0x460 [ 295.067640][ T8145] sock_alloc_send_pskb+0x883/0x9a0 [ 295.072904][ T8145] ? sock_kzfree_s+0x50/0x50 [ 295.077549][ T8145] ? __scm_destroy+0x160/0x160 [ 295.082381][ T8145] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x10 [ 295.088611][ T8145] ? security_socket_getpeersec_dgram+0x83/0xa0 [ 295.094962][ T8145] unix_stream_sendmsg+0x48b/0xbf0 [ 295.100155][ T8145] ? unix_show_fdinfo+0x280/0x280 [ 295.105259][ T8145] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 295.111768][ T8145] ? __might_fault+0xaa/0x120 [ 295.116503][ T8145] ? aa_sock_msg_perm+0x94/0x150 [ 295.121500][ T8145] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 295.126835][ T8145] ? security_socket_sendmsg+0x80/0xa0 [ 295.132351][ T8145] ? unix_show_fdinfo+0x280/0x280 [ 295.137439][ T8145] ____sys_sendmsg+0x61b/0x980 [ 295.142270][ T8145] ? __sys_sendmsg_sock+0x30/0x30 [ 295.147344][ T8145] ? __import_iovec+0x3fa/0x850 [ 295.152272][ T8145] ? import_iovec+0x73/0xa0 [ 295.156824][ T8145] ___sys_sendmsg+0x2a6/0x360 [ 295.161562][ T8145] ? __sys_sendmsg+0x2b0/0x2b0 [ 295.166426][ T8145] ? trace_call_bpf+0xc3/0x6c0 [ 295.171287][ T8145] __se_sys_sendmsg+0x1d0/0x2c0 [ 295.176287][ T8145] ? __x64_sys_sendmsg+0x80/0x80 [ 295.181412][ T8145] ? lockdep_hardirqs_on+0x98/0x150 [ 295.186684][ T8145] do_syscall_64+0x55/0xb0 [ 295.191158][ T8145] ? clear_bhb_loop+0x40/0x90 [ 295.195876][ T8145] ? clear_bhb_loop+0x40/0x90 [ 295.200692][ T8145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 295.206649][ T8145] RIP: 0033:0x7f251bb9ce59 [ 295.211441][ T8145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.231099][ T8145] RSP: 002b:00007f2519df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.239574][ T8145] RAX: ffffffffffffffda RBX: 00007f251be15fa0 RCX: 00007f251bb9ce59 [ 295.247591][ T8145] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 295.255697][ T8145] RBP: 00007f2519df6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.263710][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.271827][ T8145] R13: 00007f251be16038 R14: 00007f251be15fa0 R15: 00007ffd156b85e8 [ 295.279877][ T8145] [ 295.776479][ T8155] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.705'. [ 298.460838][ T8181] can: request_module (can-proto-0) failed. [ 300.344219][ T8187] netlink: 'syz.0.716': attribute type 4 has an invalid length. [ 300.359627][ T8188] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.715'. [ 300.521170][ T8194] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.718'. [ 301.757851][ T8200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.718'. [ 302.949230][ T8212] netlink: 'syz.1.724': attribute type 9 has an invalid length. [ 302.957290][ T8212] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.724'. [ 303.320021][ T8220] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.726'. [ 303.329750][ T8222] netlink: 'syz.1.728': attribute type 12 has an invalid length. [ 303.354139][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.728'. [ 304.748927][ T8233] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.732'. [ 305.264099][ T8236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.732'. [ 305.457516][ T8246] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.737'. [ 307.487250][ T8258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.772556][ T8273] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.749'. [ 308.168280][ T8283] FAULT_INJECTION: forcing a failure. [ 308.168280][ T8283] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.182914][ T8283] CPU: 0 PID: 8283 Comm: syz.3.750 Not tainted syzkaller #0 [ 308.190272][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.200816][ T8283] Call Trace: [ 308.204145][ T8283] [ 308.207121][ T8283] dump_stack_lvl+0x18c/0x250 [ 308.211858][ T8283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.218089][ T8283] ? show_regs_print_info+0x20/0x20 [ 308.223354][ T8283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.229589][ T8283] should_fail_ex+0x394/0x4c0 [ 308.234337][ T8283] _copy_from_user+0x2f/0xe0 [ 308.238985][ T8283] __sys_bpf+0x23e/0x890 [ 308.243294][ T8283] ? bpf_link_show_fdinfo+0x390/0x390 [ 308.248730][ T8283] ? lock_chain_count+0x20/0x20 [ 308.253648][ T8283] __x64_sys_bpf+0x7c/0x90 [ 308.258119][ T8283] do_syscall_64+0x55/0xb0 [ 308.262587][ T8283] ? clear_bhb_loop+0x40/0x90 [ 308.267314][ T8283] ? clear_bhb_loop+0x40/0x90 [ 308.272029][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.277977][ T8283] RIP: 0033:0x7f9668b9ce59 [ 308.282523][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.302187][ T8283] RSP: 002b:00007f9669aa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.310669][ T8283] RAX: ffffffffffffffda RBX: 00007f9668e16090 RCX: 00007f9668b9ce59 [ 308.318691][ T8283] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 308.326705][ T8283] RBP: 00007f9669aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 308.334900][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.342920][ T8283] R13: 00007f9668e16128 R14: 00007f9668e16090 R15: 00007ffea1d7b358 [ 308.350993][ T8283] [ 308.872829][ T8296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.155587][ T8307] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.760'. [ 310.367602][ T8328] netlink: 128 bytes leftover after parsing attributes in process `syz.2.764'. [ 310.490029][ T8328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 311.325100][ T8333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.606454][ T8344] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.771'. [ 312.677262][ T8362] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.780'. [ 314.684822][ T8381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.010722][ T8396] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.790'. [ 316.916059][ T8421] syz.1.798: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 316.965185][ T8421] CPU: 1 PID: 8421 Comm: syz.1.798 Not tainted syzkaller #0 [ 316.972571][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.982682][ T8421] Call Trace: [ 316.986011][ T8421] [ 316.988996][ T8421] dump_stack_lvl+0x18c/0x250 [ 316.993749][ T8421] ? show_regs_print_info+0x20/0x20 [ 316.999020][ T8421] ? load_image+0x420/0x420 [ 317.003591][ T8421] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 317.010092][ T8421] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 317.016658][ T8421] warn_alloc+0x246/0x340 [ 317.021046][ T8421] ? stack_trace_save+0xaa/0x100 [ 317.026048][ T8421] ? zone_watermark_ok_safe+0x230/0x230 [ 317.031672][ T8421] ? kasan_set_track+0x5f/0x70 [ 317.036587][ T8421] ? kasan_set_track+0x4e/0x70 [ 317.041418][ T8421] ? __kasan_kmalloc+0x8f/0xa0 [ 317.046243][ T8421] ? xsk_init_queue+0xad/0x100 [ 317.051064][ T8421] ? xsk_setsockopt+0x4c9/0x750 [ 317.055970][ T8421] ? do_sock_setsockopt+0x175/0x1a0 [ 317.061221][ T8421] ? __x64_sys_setsockopt+0x182/0x200 [ 317.066651][ T8421] __vmalloc_node_range+0x129/0x1320 [ 317.072028][ T8421] ? free_vm_area+0x50/0x50 [ 317.076615][ T8421] vmalloc_user+0x74/0x80 [ 317.081012][ T8421] ? xskq_create+0xbf/0x170 [ 317.085570][ T8421] xskq_create+0xbf/0x170 [ 317.089960][ T8421] xsk_init_queue+0xad/0x100 [ 317.094599][ T8421] xsk_setsockopt+0x4c9/0x750 [ 317.099356][ T8421] ? xsk_poll+0x670/0x670 [ 317.103740][ T8421] ? __fget_files+0x28/0x460 [ 317.108408][ T8421] ? aa_sock_opt_perm+0x74/0x100 [ 317.113414][ T8421] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 317.119017][ T8421] ? security_socket_setsockopt+0x7e/0xa0 [ 317.124795][ T8421] ? xsk_poll+0x670/0x670 [ 317.128047][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.129182][ T8421] do_sock_setsockopt+0x175/0x1a0 [ 317.143997][ T8421] ? __fdget+0x180/0x210 [ 317.148305][ T8421] __x64_sys_setsockopt+0x182/0x200 [ 317.153587][ T8421] do_syscall_64+0x55/0xb0 [ 317.158083][ T8421] ? clear_bhb_loop+0x40/0x90 [ 317.162823][ T8421] ? clear_bhb_loop+0x40/0x90 [ 317.167552][ T8421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.173508][ T8421] RIP: 0033:0x7f15dbb9ce59 [ 317.177983][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.197699][ T8421] RSP: 002b:00007f15dca27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.206189][ T8421] RAX: ffffffffffffffda RBX: 00007f15dbe15fa0 RCX: 00007f15dbb9ce59 [ 317.214226][ T8421] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 317.222263][ T8421] RBP: 00007f15dbc32e6f R08: 0000000000000004 R09: 0000000000000000 [ 317.230346][ T8421] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 317.238384][ T8421] R13: 00007f15dbe16038 R14: 00007f15dbe15fa0 R15: 00007ffe5777a018 [ 317.246441][ T8421] [ 317.265113][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.269904][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.271603][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.293439][ T8421] Mem-Info: [ 317.296750][ T8421] active_anon:5328 inactive_anon:0 isolated_anon:0 [ 317.296750][ T8421] active_file:11157 inactive_file:40039 isolated_file:0 [ 317.296750][ T8421] unevictable:768 dirty:242 writeback:3 [ 317.296750][ T8421] slab_reclaimable:10006 slab_unreclaimable:91902 [ 317.296750][ T8421] mapped:24321 shmem:1361 pagetables:545 [ 317.296750][ T8421] sec_pagetables:0 bounce:0 [ 317.296750][ T8421] kernel_misc_reclaimable:0 [ 317.296750][ T8421] free:1353041 free_pcp:10287 free_cma:0 [ 317.333988][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.349761][ T8421] Node 0 active_anon:21312kB inactive_anon:0kB active_file:44628kB inactive_file:159952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97284kB dirty:968kB writeback:12kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no [ 317.349833][ T8421] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 317.349894][ T8421] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.349980][ T8421] lowmem_reserve[]: 0 2521 2522 [ 317.449921][ T8425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.486558][ T8425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.509286][ T8421] 2522 2522 [ 317.513194][ T8421] Node 0 DMA32 free:1504496kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21276kB inactive_anon:0kB active_file:44628kB inactive_file:159124kB unevictable:1536kB writepending:980kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:22436kB local_pcp:8056kB free_cma:0kB [ 317.546517][ T8421] lowmem_reserve[]: 0 0 0 0 0 [ 317.551485][ T8421] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.609328][ T8425] bridge0: port 3(batadv0) entered disabled state [ 317.618405][ T8421] lowmem_reserve[]: 0 0 0 0 0 [ 317.630713][ T8421] Node 1 Normal free:3892300kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18336kB local_pcp:12064kB free_cma:0kB [ 317.663394][ T8421] lowmem_reserve[]: 0 0 0 0 0 [ 317.668403][ T8421] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.684592][ T8421] Node 0 DMA32: 3281*4kB (UME) 2440*8kB (UM) 1423*16kB (UME) 1386*32kB (UME) 1059*64kB (UM) 487*128kB (UME) 280*256kB (UME) 201*512kB (UME) 138*1024kB (UME) 6*2048kB (ME) 230*4096kB (M) = 1500148kB [ 317.709322][ T8421] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 317.726035][ T8421] Node 1 Normal: 229*4kB (UME) 57*8kB (UME) 39*16kB (UME) 90*32kB (UME) 27*64kB (UME) 9*128kB (UME) 2*256kB (ME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3892300kB [ 317.749415][ T8421] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.759618][ T8421] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.769703][ T8421] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.779974][ T8421] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.790872][ T8421] 52557 total pagecache pages [ 317.796299][ T8421] 0 pages in swap cache [ 317.801684][ T8421] Free swap = 124996kB [ 317.806452][ T8421] Total swap = 124996kB [ 317.810805][ T8421] 2097051 pages RAM [ 317.816954][ T8421] 0 pages HighMem/MovableOnly [ 317.823082][ T8421] 416931 pages reserved [ 317.830359][ T8421] 0 pages cma reserved [ 317.846616][ T8425] batadv0 (unregistering): left allmulticast mode [ 317.853224][ T8425] batadv0 (unregistering): left promiscuous mode [ 317.863182][ T8425] bridge0: port 3(batadv0) entered disabled state [ 317.880115][ T8429] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.802'. [ 318.173271][ T8441] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.808'. [ 318.183790][ T8441] netlink: del zone limit has 8 unknown bytes [ 318.329690][ T8447] FAULT_INJECTION: forcing a failure. [ 318.329690][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 318.345781][ T8447] CPU: 0 PID: 8447 Comm: syz.3.809 Not tainted syzkaller #0 [ 318.353377][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.363490][ T8447] Call Trace: [ 318.366813][ T8447] [ 318.369790][ T8447] dump_stack_lvl+0x18c/0x250 [ 318.374530][ T8447] ? show_regs_print_info+0x20/0x20 [ 318.379770][ T8447] ? load_image+0x420/0x420 [ 318.384396][ T8447] ? __might_sleep+0xe0/0xe0 [ 318.389022][ T8447] ? __lock_acquire+0x7d80/0x7d80 [ 318.394079][ T8447] should_fail_ex+0x394/0x4c0 [ 318.398811][ T8447] should_failslab+0x9/0x20 [ 318.403356][ T8447] slab_pre_alloc_hook+0x59/0x300 [ 318.408422][ T8447] ? tomoyo_encode+0x2ad/0x570 [ 318.413219][ T8447] ? tomoyo_encode+0x2ad/0x570 [ 318.418011][ T8447] __kmem_cache_alloc_node+0x53/0x250 [ 318.423515][ T8447] ? tomoyo_encode+0x2ad/0x570 [ 318.428314][ T8447] __kmalloc+0xa7/0x240 [ 318.432518][ T8447] tomoyo_encode+0x2ad/0x570 [ 318.437152][ T8447] tomoyo_realpath_from_path+0x57c/0x5c0 [ 318.442820][ T8447] ? tomoyo_domain+0xd6/0x120 [ 318.447535][ T8447] tomoyo_path_number_perm+0x248/0x5e0 [ 318.453019][ T8447] ? tomoyo_path_number_perm+0x217/0x5e0 [ 318.458690][ T8447] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 318.464180][ T8447] ? ksys_write+0x1d2/0x260 [ 318.468749][ T8447] ? __fget_files+0x28/0x460 [ 318.473381][ T8447] security_file_ioctl+0x70/0xa0 [ 318.478349][ T8447] __se_sys_ioctl+0x48/0x170 [ 318.482975][ T8447] do_syscall_64+0x55/0xb0 [ 318.487421][ T8447] ? clear_bhb_loop+0x40/0x90 [ 318.492128][ T8447] ? clear_bhb_loop+0x40/0x90 [ 318.496842][ T8447] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 318.502782][ T8447] RIP: 0033:0x7f9668b9ce59 [ 318.507227][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.526871][ T8447] RSP: 002b:00007f9669ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.535333][ T8447] RAX: ffffffffffffffda RBX: 00007f9668e15fa0 RCX: 00007f9668b9ce59 [ 318.543345][ T8447] RDX: 0000000000000000 RSI: 00000000000089e1 RDI: 0000000000000003 [ 318.551343][ T8447] RBP: 00007f9669ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.559359][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.567362][ T8447] R13: 00007f9668e16038 R14: 00007f9668e15fa0 R15: 00007ffea1d7b358 [ 318.575374][ T8447] [ 318.593431][ T8447] ERROR: Out of memory at tomoyo_realpath_from_path. [ 318.824062][ T8450] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.871403][ T8455] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.813'. [ 319.018527][ T8457] netlink: 128 bytes leftover after parsing attributes in process `syz.3.814'. [ 319.068870][ T8457] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 319.128314][ T8461] netlink: 'syz.2.816': attribute type 46 has an invalid length. [ 319.411293][ T8471] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.821'. [ 319.432126][ T8471] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.821'. [ 319.589849][ T8477] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.824'. [ 319.657648][ T8474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.937133][ T8493] FAULT_INJECTION: forcing a failure. [ 319.937133][ T8493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.982430][ T8493] CPU: 1 PID: 8493 Comm: syz.0.828 Not tainted syzkaller #0 [ 319.989817][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.999959][ T8493] Call Trace: [ 320.003298][ T8493] [ 320.006268][ T8493] dump_stack_lvl+0x18c/0x250 [ 320.011058][ T8493] ? show_regs_print_info+0x20/0x20 [ 320.016325][ T8493] ? load_image+0x420/0x420 [ 320.020871][ T8493] ? __might_fault+0xaa/0x120 [ 320.025625][ T8493] ? __lock_acquire+0x7d80/0x7d80 [ 320.030707][ T8493] should_fail_ex+0x394/0x4c0 [ 320.035452][ T8493] _copy_to_iter+0x1ce/0x1110 [ 320.040196][ T8493] ? __lock_acquire+0x7d80/0x7d80 [ 320.045266][ T8493] ? __mutex_trylock_common+0x160/0x270 [ 320.050859][ T8493] ? trace_raw_output_contention_end+0xd0/0xd0 [ 320.057063][ T8493] ? iov_iter_init+0x1e0/0x1e0 [ 320.061878][ T8493] ? __virt_addr_valid+0x10c/0x380 [ 320.067043][ T8493] ? __check_object_size+0x4fc/0xa40 [ 320.072380][ T8493] __skb_datagram_iter+0x2ff/0x780 [ 320.077548][ T8493] ? skb_copy_datagram_iter+0x200/0x200 [ 320.083142][ T8493] skb_copy_datagram_iter+0xb1/0x200 [ 320.088512][ T8493] unix_stream_read_actor+0x6c/0xa0 [ 320.093765][ T8493] unix_stream_read_generic+0xcf1/0x1ea0 [ 320.099509][ T8493] ? unix_stream_read_actor+0xa0/0xa0 [ 320.104934][ T8493] ? wake_bit_function+0x200/0x200 [ 320.110113][ T8493] ? aa_sk_perm+0x83c/0x970 [ 320.114661][ T8493] unix_stream_recvmsg+0x169/0x1c0 [ 320.119826][ T8493] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 320.125159][ T8493] ? __lock_acquire+0x1262/0x7d80 [ 320.130234][ T8493] ? __unix_stream_recvmsg+0x150/0x150 [ 320.135741][ T8493] ? aa_sock_msg_perm+0x94/0x150 [ 320.140728][ T8493] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 320.146065][ T8493] ? security_socket_recvmsg+0x89/0xb0 [ 320.151577][ T8493] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 320.156913][ T8493] ____sys_recvmsg+0x2bd/0x5d0 [ 320.161759][ T8493] ? __sys_recvmsg_sock+0x50/0x50 [ 320.166881][ T8493] ? import_iovec+0x73/0xa0 [ 320.171431][ T8493] ___sys_recvmsg+0x214/0x590 [ 320.176164][ T8493] ? __sys_recvmsg+0x2a0/0x2a0 [ 320.180980][ T8493] ? ksys_write+0x1d2/0x260 [ 320.185557][ T8493] ? __fget_files+0x3fc/0x460 [ 320.190311][ T8493] __x64_sys_recvmsg+0x21e/0x2f0 [ 320.195319][ T8493] ? ___sys_recvmsg+0x590/0x590 [ 320.200235][ T8493] ? lockdep_hardirqs_on+0x98/0x150 [ 320.205520][ T8493] do_syscall_64+0x55/0xb0 [ 320.210016][ T8493] ? clear_bhb_loop+0x40/0x90 [ 320.214732][ T8493] ? clear_bhb_loop+0x40/0x90 [ 320.219460][ T8493] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.225403][ T8493] RIP: 0033:0x7fcf7299ce59 [ 320.229863][ T8493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.249520][ T8493] RSP: 002b:00007fcf73847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 320.257994][ T8493] RAX: ffffffffffffffda RBX: 00007fcf72c16090 RCX: 00007fcf7299ce59 [ 320.266018][ T8493] RDX: 0000000040000100 RSI: 0000200000001140 RDI: 0000000000000006 [ 320.274033][ T8493] RBP: 00007fcf73847090 R08: 0000000000000000 R09: 0000000000000000 [ 320.282094][ T8493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.290109][ T8493] R13: 00007fcf72c16128 R14: 00007fcf72c16090 R15: 00007ffcb1edcf28 [ 320.298146][ T8493] [ 320.909639][ T8508] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.833'. [ 320.919650][ T8508] tc_dump_action: action bad kind [ 321.162803][ T8512] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.835'. [ 322.051475][ T8513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.774300][ T8544] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.845'. [ 323.042737][ T8550] IPv6: Can't replace route, no match found [ 323.152531][ T8556] Illegal XDP return value 4294967294 on prog (id 565) dev N/A, expect packet loss! [ 324.237655][ T8561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.739840][ T8580] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.855'. [ 325.783775][ T8585] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 325.852435][ T8589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.527305][ T8591] netlink: 'syz.1.858': attribute type 10 has an invalid length. [ 326.539953][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.858'. [ 326.566650][ T8591] bridge0: port 3(ipvlan1) entered blocking state [ 326.588457][ T8591] bridge0: port 3(ipvlan1) entered disabled state [ 326.607608][ T8591] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 327.258010][ T8618] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.868'. [ 328.804906][ T8626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.607715][ T8651] netlink: 'syz.3.875': attribute type 10 has an invalid length. [ 329.616855][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.3.875'. [ 329.627712][ T8651] bridge0: port 5(ipvlan1) entered blocking state [ 329.635230][ T8651] bridge0: port 5(ipvlan1) entered disabled state [ 329.647673][ T8651] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 329.688879][ T8656] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.877'. [ 330.356981][ T8645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 331.081445][ T8680] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.883'. [ 331.115805][ T8680] netlink: del zone limit has 8 unknown bytes [ 334.370056][ T8692] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.887'. [ 334.687376][ T8704] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 334.704942][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 334.733591][ T8704] bridge0: port 3(ipvlan1) entered blocking state [ 334.753454][ T8704] bridge0: port 3(ipvlan1) entered disabled state [ 334.855343][ T8704] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 334.945739][ T8703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 334.959993][ T8708] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.893'. [ 335.004755][ T8709] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.893'. [ 335.325045][ T8715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.895'. [ 335.562542][ T8723] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.897'. [ 336.367160][ T8719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.525655][ T8743] netlink: 'syz.3.903': attribute type 10 has an invalid length. [ 337.533519][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz.3.903'. [ 337.565154][ T8743] bridge0: port 5(ipvlan1) entered blocking state [ 337.571924][ T8743] bridge0: port 5(ipvlan1) entered disabled state [ 337.628009][ T8743] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 338.916892][ T8753] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.907'. [ 339.869967][ T8766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.752046][ T8788] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.916'. [ 340.839900][ T8786] FAULT_INJECTION: forcing a failure. [ 340.839900][ T8786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.873558][ T8786] CPU: 1 PID: 8786 Comm: syz.0.915 Not tainted syzkaller #0 [ 340.880934][ T8786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 340.891218][ T8786] Call Trace: [ 340.894539][ T8786] [ 340.897508][ T8786] dump_stack_lvl+0x18c/0x250 [ 340.902247][ T8786] ? show_regs_print_info+0x20/0x20 [ 340.907502][ T8786] ? load_image+0x420/0x420 [ 340.912061][ T8786] ? __might_fault+0xaa/0x120 [ 340.916797][ T8786] ? __lock_acquire+0x7d80/0x7d80 [ 340.921878][ T8786] ? __virt_addr_valid+0x10c/0x380 [ 340.927050][ T8786] should_fail_ex+0x394/0x4c0 [ 340.931800][ T8786] _copy_to_user+0x2f/0xa0 [ 340.936274][ T8786] bpf_test_finish+0x19f/0x650 [ 340.941096][ T8786] ? bpf_test_run+0x174/0x870 [ 340.945826][ T8786] ? convert_skb_to___skb+0x420/0x420 [ 340.951242][ T8786] bpf_prog_test_run_skb+0x1135/0x18f0 [ 340.956749][ T8786] ? cpu_online+0x60/0x60 [ 340.961109][ T8786] bpf_prog_test_run+0x31f/0x390 [ 340.966523][ T8786] __sys_bpf+0x49d/0x890 [ 340.970812][ T8786] ? bpf_link_show_fdinfo+0x390/0x390 [ 340.976242][ T8786] ? lock_chain_count+0x20/0x20 [ 340.981200][ T8786] __x64_sys_bpf+0x7c/0x90 [ 340.985742][ T8786] do_syscall_64+0x55/0xb0 [ 340.990208][ T8786] ? clear_bhb_loop+0x40/0x90 [ 340.994944][ T8786] ? clear_bhb_loop+0x40/0x90 [ 340.999652][ T8786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 341.005583][ T8786] RIP: 0033:0x7fcf7299ce59 [ 341.010023][ T8786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.029658][ T8786] RSP: 002b:00007fcf73868028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.038122][ T8786] RAX: ffffffffffffffda RBX: 00007fcf72c15fa0 RCX: 00007fcf7299ce59 [ 341.046137][ T8786] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 341.054138][ T8786] RBP: 00007fcf73868090 R08: 0000000000000000 R09: 0000000000000000 [ 341.062141][ T8786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.070145][ T8786] R13: 00007fcf72c16038 R14: 00007fcf72c15fa0 R15: 00007ffcb1edcf28 [ 341.078170][ T8786] [ 341.256826][ T8797] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.919'. [ 342.980116][ T8791] netlink: 'syz.2.917': attribute type 10 has an invalid length. [ 342.989518][ T8791] netlink: 40 bytes leftover after parsing attributes in process `syz.2.917'. [ 343.005344][ T8791] bridge0: port 4(ipvlan1) entered blocking state [ 343.013906][ T8791] bridge0: port 4(ipvlan1) entered disabled state [ 343.037432][ T8791] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 344.039158][ T8802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.566665][ T8819] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.926'. [ 344.911821][ T8834] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 344.982996][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 345.042643][ T8834] bridge0: port 4(ipvlan1) entered blocking state [ 345.102929][ T8834] bridge0: port 4(ipvlan1) entered disabled state [ 345.168130][ T8834] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 348.181412][ T8859] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.937'. [ 349.044396][ T8880] FAULT_INJECTION: forcing a failure. [ 349.044396][ T8880] name failslab, interval 1, probability 0, space 0, times 0 [ 349.074010][ T8880] CPU: 1 PID: 8880 Comm: syz.3.943 Not tainted syzkaller #0 [ 349.081430][ T8880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.091539][ T8880] Call Trace: [ 349.094950][ T8880] [ 349.098005][ T8880] dump_stack_lvl+0x18c/0x250 [ 349.102878][ T8880] ? show_regs_print_info+0x20/0x20 [ 349.108186][ T8880] ? load_image+0x420/0x420 [ 349.112764][ T8880] ? __might_sleep+0xe0/0xe0 [ 349.117465][ T8880] ? __lock_acquire+0x7d80/0x7d80 [ 349.122584][ T8880] should_fail_ex+0x394/0x4c0 [ 349.127355][ T8880] should_failslab+0x9/0x20 [ 349.131938][ T8880] slab_pre_alloc_hook+0x59/0x300 [ 349.137055][ T8880] kmem_cache_alloc+0x5a/0x2c0 [ 349.141880][ T8880] ? skb_clone+0x1eb/0x370 [ 349.146475][ T8880] skb_clone+0x1eb/0x370 [ 349.150778][ T8880] ? pfkey_broadcast_one+0x7d/0x340 [ 349.156070][ T8880] pfkey_broadcast_one+0x9b/0x340 [ 349.161152][ T8880] ? pfkey_broadcast+0x39b/0x3e0 [ 349.166143][ T8880] pfkey_broadcast+0x3a8/0x3e0 [ 349.170961][ T8880] ? pfkey_broadcast+0x48/0x3e0 [ 349.176045][ T8880] pfkey_sendmsg+0xef6/0x11a0 [ 349.180794][ T8880] ? pfkey_release+0x340/0x340 [ 349.185687][ T8880] ? aa_sock_msg_perm+0x94/0x150 [ 349.190902][ T8880] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.196348][ T8880] ? security_socket_sendmsg+0x80/0xa0 [ 349.201861][ T8880] ? pfkey_release+0x340/0x340 [ 349.206684][ T8880] ____sys_sendmsg+0x61b/0x980 [ 349.211520][ T8880] ? __asan_memset+0x22/0x40 [ 349.216165][ T8880] ? __sys_sendmsg_sock+0x30/0x30 [ 349.221242][ T8880] ? __import_iovec+0x5f2/0x850 [ 349.226181][ T8880] ? import_iovec+0x73/0xa0 [ 349.230735][ T8880] ___sys_sendmsg+0x2a6/0x360 [ 349.235474][ T8880] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.240313][ T8880] ? trace_call_bpf+0xc3/0x6c0 [ 349.245199][ T8880] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.250107][ T8880] ? perf_trace_preemptirq_template+0x269/0x330 [ 349.256405][ T8880] ? __x64_sys_sendmsg+0x80/0x80 [ 349.261412][ T8880] ? lockdep_hardirqs_on+0x98/0x150 [ 349.266667][ T8880] do_syscall_64+0x55/0xb0 [ 349.271138][ T8880] ? clear_bhb_loop+0x40/0x90 [ 349.275955][ T8880] ? clear_bhb_loop+0x40/0x90 [ 349.280690][ T8880] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.286704][ T8880] RIP: 0033:0x7f9668b9ce59 [ 349.291226][ T8880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.310972][ T8880] RSP: 002b:00007f9669ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.319521][ T8880] RAX: ffffffffffffffda RBX: 00007f9668e15fa0 RCX: 00007f9668b9ce59 [ 349.327542][ T8880] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 349.335560][ T8880] RBP: 00007f9669ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.343586][ T8880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.351617][ T8880] R13: 00007f9668e16038 R14: 00007f9668e15fa0 R15: 00007ffea1d7b358 [ 349.359657][ T8880] [ 349.372119][ T8884] netlink: 'syz.2.944': attribute type 10 has an invalid length. [ 349.381549][ T8884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.944'. [ 349.391388][ T8884] bridge0: port 4(ipvlan1) entered blocking state [ 349.399805][ T8884] bridge0: port 4(ipvlan1) entered disabled state [ 349.412815][ T8884] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 349.890139][ T8893] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.947'. [ 351.664143][ T8920] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.956'. [ 351.971875][ T8933] netlink: 'syz.1.961': attribute type 10 has an invalid length. [ 352.013765][ T8933] netlink: 40 bytes leftover after parsing attributes in process `syz.1.961'. [ 352.062602][ T8933] bridge0: port 3(ipvlan1) entered blocking state [ 352.103738][ T8933] bridge0: port 3(ipvlan1) entered disabled state [ 352.160408][ T8933] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 353.549392][ T8959] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.969'. [ 353.716437][ T8966] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 353.750333][ T8966] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.972'. [ 354.312111][ T8978] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 354.379572][ T8978] netlink: 40 bytes leftover after parsing attributes in process `syz.2.975'. [ 354.415305][ T8978] bridge0: port 4(ipvlan1) entered blocking state [ 354.424077][ T8978] bridge0: port 4(ipvlan1) entered disabled state [ 354.441703][ T8978] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 355.589888][ T9001] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.982'. [ 355.807483][ T9004] syzkaller0: entered promiscuous mode [ 355.844433][ T9004] syzkaller0: entered allmulticast mode [ 357.226667][ T9006] : renamed from vlan0 [ 362.228842][ T9040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.343906][ T9042] netlink: 'syz.2.990': attribute type 10 has an invalid length. [ 363.354707][ T9042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.990'. [ 363.363935][ T9042] bridge0: port 4(ipvlan1) entered blocking state [ 363.376862][ T9042] bridge0: port 4(ipvlan1) entered disabled state [ 363.389799][ T9042] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 363.570815][ T9048] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.992'. [ 363.763445][ T9059] FAULT_INJECTION: forcing a failure. [ 363.763445][ T9059] name failslab, interval 1, probability 0, space 0, times 0 [ 363.778599][ T9059] CPU: 1 PID: 9059 Comm: syz.0.997 Not tainted syzkaller #0 [ 363.785958][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.796065][ T9059] Call Trace: [ 363.799381][ T9059] [ 363.802347][ T9059] dump_stack_lvl+0x18c/0x250 [ 363.807075][ T9059] ? show_regs_print_info+0x20/0x20 [ 363.812313][ T9059] ? load_image+0x420/0x420 [ 363.816842][ T9059] ? __might_sleep+0xe0/0xe0 [ 363.821469][ T9059] ? __lock_acquire+0x7d80/0x7d80 [ 363.826527][ T9059] should_fail_ex+0x394/0x4c0 [ 363.831248][ T9059] should_failslab+0x9/0x20 [ 363.835785][ T9059] slab_pre_alloc_hook+0x59/0x300 [ 363.840847][ T9059] kmem_cache_alloc+0x5a/0x2c0 [ 363.845643][ T9059] ? skb_clone+0x1eb/0x370 [ 363.850093][ T9059] skb_clone+0x1eb/0x370 [ 363.854360][ T9059] ? pfkey_broadcast_one+0x7d/0x340 [ 363.859587][ T9059] pfkey_broadcast_one+0x9b/0x340 [ 363.864729][ T9059] ? pfkey_broadcast+0x39b/0x3e0 [ 363.869726][ T9059] pfkey_broadcast+0x3a8/0x3e0 [ 363.874539][ T9059] ? pfkey_broadcast+0x48/0x3e0 [ 363.879431][ T9059] pfkey_sendmsg+0xef6/0x11a0 [ 363.884150][ T9059] ? pfkey_release+0x340/0x340 [ 363.888976][ T9059] ? aa_sock_msg_perm+0x94/0x150 [ 363.893949][ T9059] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.899263][ T9059] ? security_socket_sendmsg+0x80/0xa0 [ 363.904754][ T9059] ? pfkey_release+0x340/0x340 [ 363.909567][ T9059] ____sys_sendmsg+0x61b/0x980 [ 363.914379][ T9059] ? __asan_memset+0x22/0x40 [ 363.919005][ T9059] ? __sys_sendmsg_sock+0x30/0x30 [ 363.924157][ T9059] ? __import_iovec+0x5f2/0x850 [ 363.929068][ T9059] ? import_iovec+0x73/0xa0 [ 363.933609][ T9059] ___sys_sendmsg+0x2a6/0x360 [ 363.938337][ T9059] ? get_pid_task+0x20/0x1e0 [ 363.942992][ T9059] ? __sys_sendmsg+0x2b0/0x2b0 [ 363.947813][ T9059] ? __lock_acquire+0x7d80/0x7d80 [ 363.952895][ T9059] __se_sys_sendmsg+0x1d0/0x2c0 [ 363.957810][ T9059] ? __x64_sys_sendmsg+0x80/0x80 [ 363.962862][ T9059] ? lockdep_hardirqs_on+0x98/0x150 [ 363.968139][ T9059] do_syscall_64+0x55/0xb0 [ 363.972610][ T9059] ? clear_bhb_loop+0x40/0x90 [ 363.977316][ T9059] ? clear_bhb_loop+0x40/0x90 [ 363.982024][ T9059] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 363.987964][ T9059] RIP: 0033:0x7fcf7299ce59 [ 363.992501][ T9059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.012144][ T9059] RSP: 002b:00007fcf73868028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.020595][ T9059] RAX: ffffffffffffffda RBX: 00007fcf72c15fa0 RCX: 00007fcf7299ce59 [ 364.028595][ T9059] RDX: 0000000000000000 RSI: 0000200000003780 RDI: 0000000000000003 [ 364.036599][ T9059] RBP: 00007fcf73868090 R08: 0000000000000000 R09: 0000000000000000 [ 364.044603][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.052604][ T9059] R13: 00007fcf72c16038 R14: 00007fcf72c15fa0 R15: 00007ffcb1edcf28 [ 364.060617][ T9059] [ 365.094848][ T9084] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 365.184826][ T9084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'. [ 365.250931][ T9084] bridge0: port 4(ipvlan1) entered blocking state [ 365.296273][ T9084] bridge0: port 4(ipvlan1) entered disabled state [ 365.382922][ T9084] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 365.817783][ T9080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.571102][ T9091] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1005'. [ 367.813555][ T9101] mac80211_hwsim hwsim5 ..c: renamed from wlan1 (while UP) [ 368.462295][ T9114] FAULT_INJECTION: forcing a failure. [ 368.462295][ T9114] name failslab, interval 1, probability 0, space 0, times 0 [ 368.480224][ T9114] CPU: 0 PID: 9114 Comm: syz.1.1014 Not tainted syzkaller #0 [ 368.487682][ T9114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.497791][ T9114] Call Trace: [ 368.501115][ T9114] [ 368.504093][ T9114] dump_stack_lvl+0x18c/0x250 [ 368.508831][ T9114] ? show_regs_print_info+0x20/0x20 [ 368.514087][ T9114] ? load_image+0x420/0x420 [ 368.518649][ T9114] ? __might_sleep+0xe0/0xe0 [ 368.523297][ T9114] ? __lock_acquire+0x7d80/0x7d80 [ 368.528482][ T9114] should_fail_ex+0x394/0x4c0 [ 368.533229][ T9114] should_failslab+0x9/0x20 [ 368.537877][ T9114] slab_pre_alloc_hook+0x59/0x300 [ 368.542963][ T9114] ? apparmor_sk_alloc_security+0x77/0x100 [ 368.548816][ T9114] __kmem_cache_alloc_node+0x53/0x250 [ 368.554249][ T9114] ? apparmor_sk_alloc_security+0x77/0x100 [ 368.560126][ T9114] kmalloc_trace+0x2a/0xe0 [ 368.564600][ T9114] apparmor_sk_alloc_security+0x77/0x100 [ 368.570373][ T9114] security_sk_alloc+0x6e/0xa0 [ 368.575175][ T9114] sk_prot_alloc+0x101/0x210 [ 368.579799][ T9114] ? sk_alloc+0x24/0x350 [ 368.584079][ T9114] sk_alloc+0x3a/0x350 [ 368.588180][ T9114] ? bpf_ctx_init+0x154/0x190 [ 368.592980][ T9114] bpf_prog_test_run_skb+0x371/0x18f0 [ 368.598392][ T9114] ? __fget_files+0x28/0x460 [ 368.603032][ T9114] ? __fget_files+0x3fc/0x460 [ 368.607751][ T9114] ? cpu_online+0x60/0x60 [ 368.612112][ T9114] bpf_prog_test_run+0x31f/0x390 [ 368.617082][ T9114] __sys_bpf+0x49d/0x890 [ 368.621361][ T9114] ? bpf_link_show_fdinfo+0x390/0x390 [ 368.626820][ T9114] ? lock_chain_count+0x20/0x20 [ 368.631716][ T9114] __x64_sys_bpf+0x7c/0x90 [ 368.636163][ T9114] do_syscall_64+0x55/0xb0 [ 368.640608][ T9114] ? clear_bhb_loop+0x40/0x90 [ 368.645312][ T9114] ? clear_bhb_loop+0x40/0x90 [ 368.650014][ T9114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 368.655947][ T9114] RIP: 0033:0x7f15dbb9ce59 [ 368.660385][ T9114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.680014][ T9114] RSP: 002b:00007f15dca27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 368.688467][ T9114] RAX: ffffffffffffffda RBX: 00007f15dbe15fa0 RCX: 00007f15dbb9ce59 [ 368.696465][ T9114] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 368.704458][ T9114] RBP: 00007f15dca27090 R08: 0000000000000000 R09: 0000000000000000 [ 368.712459][ T9114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.720464][ T9114] R13: 00007f15dbe16038 R14: 00007f15dbe15fa0 R15: 00007ffe5777a018 [ 368.728473][ T9114] [ 368.993833][ T9122] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1016'. [ 369.525008][ T9132] netlink: 'syz.1.1017': attribute type 10 has an invalid length. [ 369.544681][ T9132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1017'. [ 369.571997][ T9132] bridge0: port 3(ipvlan1) entered blocking state [ 369.611787][ T9132] bridge0: port 3(ipvlan1) entered disabled state [ 369.676685][ T9132] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 370.190527][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.741818][ T9138] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1020'. [ 371.398517][ T9152] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1025'. [ 372.573256][ T9171] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 372.647567][ T9171] syzkaller0: entered promiscuous mode [ 372.692670][ T9171] syzkaller0: entered allmulticast mode [ 372.749993][ T9169] : renamed from vlan0 (while UP) [ 373.522166][ T9175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.141213][ T9177] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 374.150185][ T9177] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 374.162223][ T9177] bridge0: port 3(ipvlan1) entered blocking state [ 374.171988][ T9177] bridge0: port 3(ipvlan1) entered disabled state [ 374.196121][ T9177] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 376.172051][ T9195] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1034'. [ 376.345579][ T9201] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1036'. [ 378.718378][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.724951][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.570455][ T9243] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1046'. [ 380.932108][ T9254] FAULT_INJECTION: forcing a failure. [ 380.932108][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.012558][ T9254] CPU: 1 PID: 9254 Comm: syz.2.1051 Not tainted syzkaller #0 [ 381.020039][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.030238][ T9254] Call Trace: [ 381.033560][ T9254] [ 381.036540][ T9254] dump_stack_lvl+0x18c/0x250 [ 381.041356][ T9254] ? show_regs_print_info+0x20/0x20 [ 381.046593][ T9254] ? load_image+0x420/0x420 [ 381.051137][ T9254] ? __lock_acquire+0x7d80/0x7d80 [ 381.056217][ T9254] ? snprintf+0xe9/0x140 [ 381.060533][ T9254] should_fail_ex+0x394/0x4c0 [ 381.065353][ T9254] _copy_to_user+0x2f/0xa0 [ 381.069821][ T9254] simple_read_from_buffer+0xe7/0x150 [ 381.075249][ T9254] proc_fail_nth_read+0x1e8/0x260 [ 381.080352][ T9254] ? proc_fault_inject_write+0x360/0x360 [ 381.086041][ T9254] ? fsnotify_perm+0x271/0x5e0 [ 381.090845][ T9254] ? proc_fault_inject_write+0x360/0x360 [ 381.096611][ T9254] vfs_read+0x298/0x990 [ 381.100819][ T9254] ? kernel_read+0x1e0/0x1e0 [ 381.105453][ T9254] ? __fget_files+0x28/0x460 [ 381.110108][ T9254] ? __fget_files+0x3fc/0x460 [ 381.114842][ T9254] ? __fdget_pos+0x2a3/0x330 [ 381.119486][ T9254] ? ksys_read+0x74/0x260 [ 381.123857][ T9254] ksys_read+0x151/0x260 [ 381.128144][ T9254] ? vfs_write+0x9a0/0x9a0 [ 381.132604][ T9254] ? trace_sys_enter+0x1f/0x80 [ 381.137460][ T9254] do_syscall_64+0x55/0xb0 [ 381.141928][ T9254] ? clear_bhb_loop+0x40/0x90 [ 381.146647][ T9254] ? clear_bhb_loop+0x40/0x90 [ 381.151355][ T9254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.157300][ T9254] RIP: 0033:0x7f251bb5d68e [ 381.161748][ T9254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 381.181562][ T9254] RSP: 002b:00007f2519dd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 381.190004][ T9254] RAX: ffffffffffffffda RBX: 00007f2519dd56c0 RCX: 00007f251bb5d68e [ 381.198006][ T9254] RDX: 000000000000000f RSI: 00007f2519dd50a0 RDI: 000000000000000d [ 381.206019][ T9254] RBP: 00007f2519dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 381.214031][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.222038][ T9254] R13: 00007f251be16128 R14: 00007f251be16090 R15: 00007ffd156b85e8 [ 381.230061][ T9254] [ 381.338892][ T5779] Bluetooth: hci0: unexpected event 0x23 length: 15 > 13 [ 381.860686][ T9255] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 381.875895][ T9255] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 382.068439][ T9271] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1055'. [ 382.099368][ T9271] openvswitch: netlink: Key type 29 is not supported [ 382.177116][ T9278] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1058'. [ 387.205783][ T9314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.548250][ T9312] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 387.563376][ T9312] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 389.409259][ T9318] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 389.428362][ T9318] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1070'. [ 389.451649][ T9318] bridge0: port 5(ipvlan1) entered blocking state [ 389.464995][ T9318] bridge0: port 5(ipvlan1) entered disabled state [ 389.490195][ T9318] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 392.492630][ T9336] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 392.799905][ T9357] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1081'. [ 393.276294][ T9369] FAULT_INJECTION: forcing a failure. [ 393.276294][ T9369] name failslab, interval 1, probability 0, space 0, times 0 [ 393.316060][ T9369] CPU: 1 PID: 9369 Comm: syz.2.1083 Not tainted syzkaller #0 [ 393.323730][ T9369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.333836][ T9369] Call Trace: [ 393.337147][ T9369] [ 393.340110][ T9369] dump_stack_lvl+0x18c/0x250 [ 393.344829][ T9369] ? show_regs_print_info+0x20/0x20 [ 393.350066][ T9369] ? load_image+0x420/0x420 [ 393.354605][ T9369] ? __might_sleep+0xe0/0xe0 [ 393.359229][ T9369] ? __lock_acquire+0x7d80/0x7d80 [ 393.364305][ T9369] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 393.370398][ T9369] should_fail_ex+0x394/0x4c0 [ 393.375140][ T9369] should_failslab+0x9/0x20 [ 393.379706][ T9369] slab_pre_alloc_hook+0x59/0x300 [ 393.384785][ T9369] kmem_cache_alloc_node+0x5e/0x310 [ 393.390217][ T9369] ? __alloc_skb+0x103/0x2c0 [ 393.394876][ T9369] __alloc_skb+0x103/0x2c0 [ 393.399352][ T9369] __ip_append_data+0x2adc/0x3be0 [ 393.404525][ T9369] ? trace_call_bpf+0xc3/0x6c0 [ 393.409407][ T9369] ? raw_send_hdrinc+0x1150/0x1150 [ 393.414614][ T9369] ? ip_setup_cork+0x840/0x840 [ 393.419414][ T9369] ? ipv4_mtu+0x313/0x430 [ 393.423775][ T9369] ? ip_setup_cork+0x527/0x840 [ 393.428575][ T9369] ? lockdep_hardirqs_on+0x98/0x150 [ 393.433813][ T9369] ip_append_data+0x10d/0x180 [ 393.438542][ T9369] ? raw_send_hdrinc+0x1150/0x1150 [ 393.443700][ T9369] raw_sendmsg+0x155e/0x1ba0 [ 393.448339][ T9369] ? compat_raw_ioctl+0x70/0x70 [ 393.453233][ T9369] ? __lock_acquire+0x1262/0x7d80 [ 393.458305][ T9369] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 393.464782][ T9369] ? sock_rps_record_flow+0x19/0x3f0 [ 393.470124][ T9369] ? inet_sendmsg+0x7e/0x2a0 [ 393.474751][ T9369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.480083][ T9369] ? inet_send_prepare+0x250/0x250 [ 393.485237][ T9369] ____sys_sendmsg+0x61b/0x980 [ 393.490035][ T9369] ? __asan_memset+0x22/0x40 [ 393.494663][ T9369] ? __sys_sendmsg_sock+0x30/0x30 [ 393.499719][ T9369] ? __import_iovec+0x3fa/0x850 [ 393.504608][ T9369] ? import_iovec+0x73/0xa0 [ 393.509144][ T9369] ___sys_sendmsg+0x2a6/0x360 [ 393.513851][ T9369] ? __sys_sendmsg+0x2b0/0x2b0 [ 393.518670][ T9369] ? trace_call_bpf+0xc3/0x6c0 [ 393.523485][ T9369] __se_sys_sendmsg+0x1d0/0x2c0 [ 393.528370][ T9369] ? __x64_sys_sendmsg+0x80/0x80 [ 393.533607][ T9369] ? lockdep_hardirqs_on+0x98/0x150 [ 393.538839][ T9369] do_syscall_64+0x55/0xb0 [ 393.543283][ T9369] ? clear_bhb_loop+0x40/0x90 [ 393.547983][ T9369] ? clear_bhb_loop+0x40/0x90 [ 393.552711][ T9369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.558641][ T9369] RIP: 0033:0x7f251bb9ce59 [ 393.563102][ T9369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.582764][ T9369] RSP: 002b:00007f2519dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.591210][ T9369] RAX: ffffffffffffffda RBX: 00007f251be16090 RCX: 00007f251bb9ce59 [ 393.599204][ T9369] RDX: 2000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 393.607199][ T9369] RBP: 00007f2519dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 393.615200][ T9369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.623194][ T9369] R13: 00007f251be16128 R14: 00007f251be16090 R15: 00007ffd156b85e8 [ 393.631213][ T9369] [ 394.098479][ T9382] netlink: 'syz.2.1084': attribute type 10 has an invalid length. [ 394.141118][ T9382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1084'. [ 394.192118][ T9382] bridge0: port 4(ipvlan1) entered blocking state [ 394.252499][ T9382] bridge0: port 4(ipvlan1) entered disabled state [ 394.291451][ T9382] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 394.935718][ T9376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.740099][ T9410] netlink: 'syz.0.1095': attribute type 13 has an invalid length. [ 395.754777][ T9410] netlink: 'syz.0.1095': attribute type 58 has an invalid length. [ 395.765405][ T9410] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1095'. [ 395.869927][ T9412] netlink: 'syz.1.1096': attribute type 10 has an invalid length. [ 395.920392][ T9412] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.971774][ T9412] bond0: (slave team0): Enslaving as an active interface with an up link [ 397.141838][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.983484][ T9442] netlink: 'syz.0.1106': attribute type 10 has an invalid length. [ 397.991776][ T9442] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1106'. [ 399.781083][ T9460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.103312][ T9470] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1112'. [ 400.143380][ T9470] raw_sendmsg: syz.0.1112 forgot to set AF_INET. Fix it! [ 400.479064][ T9484] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1118'. [ 400.526258][ T9485] FAULT_INJECTION: forcing a failure. [ 400.526258][ T9485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.550169][ T9485] CPU: 0 PID: 9485 Comm: syz.1.1119 Not tainted syzkaller #0 [ 400.557685][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 400.567827][ T9485] Call Trace: [ 400.571181][ T9485] [ 400.574185][ T9485] dump_stack_lvl+0x18c/0x250 [ 400.579046][ T9485] ? show_regs_print_info+0x20/0x20 [ 400.584330][ T9485] ? load_image+0x420/0x420 [ 400.588934][ T9485] ? __might_fault+0xaa/0x120 [ 400.593724][ T9485] ? __lock_acquire+0x7d80/0x7d80 [ 400.598826][ T9485] ? bpf_percpu_hash_update+0x2b/0x200 [ 400.604369][ T9485] ? __virt_addr_valid+0x10c/0x380 [ 400.609628][ T9485] should_fail_ex+0x394/0x4c0 [ 400.614419][ T9485] _copy_from_user+0x2f/0xe0 [ 400.619101][ T9485] generic_map_update_batch+0x53e/0x800 [ 400.624761][ T9485] ? rcu_read_unlock+0xa0/0xa0 [ 400.629635][ T9485] ? __fdget+0x180/0x210 [ 400.633965][ T9485] ? rcu_read_unlock+0xa0/0xa0 [ 400.638805][ T9485] bpf_map_do_batch+0x3f2/0x600 [ 400.643737][ T9485] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 400.649301][ T9485] __sys_bpf+0x381/0x890 [ 400.653637][ T9485] ? bpf_link_show_fdinfo+0x390/0x390 [ 400.659146][ T9485] ? lock_chain_count+0x20/0x20 [ 400.664118][ T9485] __x64_sys_bpf+0x7c/0x90 [ 400.668620][ T9485] do_syscall_64+0x55/0xb0 [ 400.673109][ T9485] ? clear_bhb_loop+0x40/0x90 [ 400.677858][ T9485] ? clear_bhb_loop+0x40/0x90 [ 400.682616][ T9485] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.688597][ T9485] RIP: 0033:0x7f15dbb9ce59 [ 400.693099][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.712786][ T9485] RSP: 002b:00007f15dca27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 400.721294][ T9485] RAX: ffffffffffffffda RBX: 00007f15dbe15fa0 RCX: 00007f15dbb9ce59 [ 400.729349][ T9485] RDX: 0000000000000038 RSI: 0000200000000280 RDI: 000000000000001a [ 400.737400][ T9485] RBP: 00007f15dca27090 R08: 0000000000000000 R09: 0000000000000000 [ 400.745450][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 400.753492][ T9485] R13: 00007f15dbe16038 R14: 00007f15dbe15fa0 R15: 00007ffe5777a018 [ 400.761596][ T9485] [ 401.331240][ T9481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.824431][ T9496] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 401.831590][ T9496] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 401.860160][ T9498] netlink: 1772 bytes leftover after parsing attributes in process `syz.0.1124'. [ 402.313052][ T9514] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1130'. [ 403.529431][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.077400][ T9551] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1142'. [ 404.116113][ T9554] FAULT_INJECTION: forcing a failure. [ 404.116113][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 404.158746][ T9554] CPU: 0 PID: 9554 Comm: syz.3.1144 Not tainted syzkaller #0 [ 404.166222][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.176328][ T9554] Call Trace: [ 404.179642][ T9554] [ 404.182628][ T9554] dump_stack_lvl+0x18c/0x250 [ 404.187371][ T9554] ? show_regs_print_info+0x20/0x20 [ 404.192974][ T9554] ? load_image+0x420/0x420 [ 404.197530][ T9554] ? __might_sleep+0xe0/0xe0 [ 404.202176][ T9554] ? __lock_acquire+0x7d80/0x7d80 [ 404.207273][ T9554] should_fail_ex+0x394/0x4c0 [ 404.212037][ T9554] should_failslab+0x9/0x20 [ 404.216600][ T9554] slab_pre_alloc_hook+0x59/0x300 [ 404.221686][ T9554] ? __lock_acquire+0x7d80/0x7d80 [ 404.226850][ T9554] kmem_cache_alloc_node+0x5e/0x310 [ 404.232099][ T9554] ? __alloc_skb+0x103/0x2c0 [ 404.236840][ T9554] __alloc_skb+0x103/0x2c0 [ 404.241315][ T9554] netlink_sendmsg+0x66a/0xbf0 [ 404.246148][ T9554] ? netlink_getsockopt+0x590/0x590 [ 404.251402][ T9554] ? aa_sock_msg_perm+0x94/0x150 [ 404.256389][ T9554] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.261718][ T9554] ? security_socket_sendmsg+0x80/0xa0 [ 404.267221][ T9554] ? netlink_getsockopt+0x590/0x590 [ 404.272465][ T9554] ____sys_sendmsg+0x61b/0x980 [ 404.277283][ T9554] ? __asan_memset+0x22/0x40 [ 404.281907][ T9554] ? __sys_sendmsg_sock+0x30/0x30 [ 404.286958][ T9554] ? __import_iovec+0x5f2/0x850 [ 404.291928][ T9554] ? import_iovec+0x73/0xa0 [ 404.296459][ T9554] ___sys_sendmsg+0x2a6/0x360 [ 404.301179][ T9554] ? get_pid_task+0x20/0x1e0 [ 404.305802][ T9554] ? __sys_sendmsg+0x2b0/0x2b0 [ 404.310612][ T9554] ? __lock_acquire+0x7d80/0x7d80 [ 404.315686][ T9554] __se_sys_sendmsg+0x1d0/0x2c0 [ 404.320573][ T9554] ? __x64_sys_sendmsg+0x80/0x80 [ 404.325553][ T9554] ? lockdep_hardirqs_on+0x98/0x150 [ 404.330787][ T9554] do_syscall_64+0x55/0xb0 [ 404.335234][ T9554] ? clear_bhb_loop+0x40/0x90 [ 404.339943][ T9554] ? clear_bhb_loop+0x40/0x90 [ 404.344650][ T9554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.350582][ T9554] RIP: 0033:0x7f9668b9ce59 [ 404.355025][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.374667][ T9554] RSP: 002b:00007f9669ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.383123][ T9554] RAX: ffffffffffffffda RBX: 00007f9668e15fa0 RCX: 00007f9668b9ce59 [ 404.391125][ T9554] RDX: 0000000000040000 RSI: 0000200000000340 RDI: 0000000000000003 [ 404.399137][ T9554] RBP: 00007f9669ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.407145][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.415156][ T9554] R13: 00007f9668e16038 R14: 00007f9668e15fa0 R15: 00007ffea1d7b358 [ 404.423177][ T9554] [ 404.573419][ T9559] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1145'. [ 405.506347][ T9563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.747516][ T9577] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1152'. [ 406.170558][ T9598] netlink: 'syz.0.1165': attribute type 10 has an invalid length. [ 406.204923][ T9598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1165'. [ 406.235805][ T9598] bridge0: port 3(ipvlan1) entered blocking state [ 406.243358][ T9598] bridge0: port 3(ipvlan1) entered disabled state [ 406.306058][ T9598] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 406.364483][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.652893][ T9622] FAULT_INJECTION: forcing a failure. [ 407.652893][ T9622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.685808][ T9622] CPU: 0 PID: 9622 Comm: syz.1.1162 Not tainted syzkaller #0 [ 407.693272][ T9622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.703381][ T9622] Call Trace: [ 407.706701][ T9622] [ 407.709675][ T9622] dump_stack_lvl+0x18c/0x250 [ 407.714411][ T9622] ? show_regs_print_info+0x20/0x20 [ 407.719652][ T9622] ? load_image+0x420/0x420 [ 407.724205][ T9622] ? __might_fault+0xaa/0x120 [ 407.728945][ T9622] ? __lock_acquire+0x7d80/0x7d80 [ 407.734046][ T9622] should_fail_ex+0x394/0x4c0 [ 407.738780][ T9622] _copy_from_user+0x2f/0xe0 [ 407.743417][ T9622] do_tcp_setsockopt+0x58d/0x1c50 [ 407.748492][ T9622] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 407.753910][ T9622] ? aa_af_perm+0x330/0x330 [ 407.758485][ T9622] ? __fget_files+0x28/0x460 [ 407.763141][ T9622] ? aa_sock_opt_perm+0x74/0x100 [ 407.768124][ T9622] ? sock_common_setsockopt+0x36/0xc0 [ 407.773539][ T9622] ? tcp_setsockopt+0x3d/0xe0 [ 407.778262][ T9622] ? tcp_enable_tx_delay+0x70/0x70 [ 407.783411][ T9622] ? sock_common_recvmsg+0x190/0x190 [ 407.788765][ T9622] do_sock_setsockopt+0x175/0x1a0 [ 407.793836][ T9622] ? __fdget+0x180/0x210 [ 407.798128][ T9622] __x64_sys_setsockopt+0x182/0x200 [ 407.803380][ T9622] do_syscall_64+0x55/0xb0 [ 407.807842][ T9622] ? clear_bhb_loop+0x40/0x90 [ 407.812559][ T9622] ? clear_bhb_loop+0x40/0x90 [ 407.817300][ T9622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.823238][ T9622] RIP: 0033:0x7f15dbb9ce59 [ 407.827685][ T9622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.847335][ T9622] RSP: 002b:00007f15dca06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 407.855787][ T9622] RAX: ffffffffffffffda RBX: 00007f15dbe16090 RCX: 00007f15dbb9ce59 [ 407.863879][ T9622] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 407.871888][ T9622] RBP: 00007f15dca06090 R08: 0000000000000078 R09: 0000000000000000 [ 407.879926][ T9622] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 407.887935][ T9622] R13: 00007f15dbe16128 R14: 00007f15dbe16090 R15: 00007ffe5777a018 [ 407.895960][ T9622] [ 410.546034][ T9625] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1163'. [ 410.989461][ T9648] netlink: 'syz.2.1170': attribute type 10 has an invalid length. [ 411.033749][ T9648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1170'. [ 411.112694][ T9648] bridge0: port 4(ipvlan1) entered blocking state [ 411.135096][ T9648] bridge0: port 4(ipvlan1) entered disabled state [ 411.192234][ T9648] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 411.639431][ T9640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.764759][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.105916][ T9664] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1175'. [ 413.392325][ T9675] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1186'. [ 416.684285][ T9698] netlink: 'syz.3.1184': attribute type 10 has an invalid length. [ 416.730661][ T9698] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1184'. [ 416.777747][ T9698] bridge0: port 5(ipvlan1) entered blocking state [ 416.830914][ T9698] bridge0: port 5(ipvlan1) entered disabled state [ 416.907320][ T9698] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 417.193534][ T9689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.325511][ T9694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.578313][ T9708] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1189'. [ 421.946491][ T9737] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.112781][ T9747] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1199'. [ 422.225468][ T9750] netlink: 'syz.0.1198': attribute type 10 has an invalid length. [ 422.233404][ T9750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1198'. [ 422.268877][ T9750] bridge0: port 3(ipvlan1) entered blocking state [ 422.306742][ T9750] bridge0: port 3(ipvlan1) entered disabled state [ 422.331607][ T9750] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 422.354508][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.445654][ T9779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.710508][ T9786] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1210'. [ 426.922558][ T9795] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 426.953036][ T9795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1212'. [ 426.966301][ T9795] bridge0: port 3(ipvlan1) entered blocking state [ 426.976039][ T9795] bridge0: port 3(ipvlan1) entered disabled state [ 427.033631][ T9795] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 427.063642][ T9793] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.185647][ T9833] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1222'. [ 431.391458][ T9842] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 431.400555][ T9842] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1226'. [ 431.428881][ T9842] bridge0: port 3(ipvlan1) entered blocking state [ 431.447242][ T9842] bridge0: port 3(ipvlan1) entered disabled state [ 431.609211][ T9842] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 431.705113][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.153952][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.869957][ T9867] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1233'. [ 435.833953][ T9878] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 435.865728][ T9878] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 435.905095][ T9881] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 435.973347][ T9878] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 436.007536][ T9881] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 436.199260][ T9889] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1238'. [ 436.255011][ T9889] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 436.303869][ T9891] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1238'. [ 436.785754][ T9882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.119944][ T9899] syzkaller0: entered promiscuous mode [ 437.125794][ T9899] syzkaller0: entered allmulticast mode [ 437.811582][ T9894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.142601][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.150040][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.986678][ T9926] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1247'. [ 442.049862][ T9936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.420080][ T9952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.676552][ T9966] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1258'. [ 445.629946][ T9985] netlink: 'syz.2.1262': attribute type 9 has an invalid length. [ 445.658206][ T9985] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1262'. [ 445.955335][ T9978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.365143][T10001] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1268'. [ 449.943875][ T9996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.221032][T10017] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 450.302113][T10017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1272'. [ 450.345111][T10017] bridge0: port 3(ipvlan1) entered blocking state [ 450.504518][T10017] bridge0: port 3(ipvlan1) entered disabled state [ 450.584659][T10017] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 451.036179][T10011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 453.493383][T10040] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1278'. [ 454.621434][T10044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.131755][ T5779] Bluetooth: hci1: unexpected event 0x08 length: 151 > 4 [ 457.896373][T10055] netlink: 'syz.0.1284': attribute type 2 has an invalid length. [ 457.965017][T10055] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1284'. [ 458.909563][T10074] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 458.954952][T10074] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1287'. [ 459.008100][T10074] bridge0: port 5(ipvlan1) entered blocking state [ 459.044921][T10074] bridge0: port 5(ipvlan1) entered disabled state [ 459.082970][T10074] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 459.142317][T10080] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1289'. [ 459.642908][T10069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.926497][T10089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 463.268978][T10100] FAULT_INJECTION: forcing a failure. [ 463.268978][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.304788][T10100] CPU: 1 PID: 10100 Comm: syz.2.1297 Not tainted syzkaller #0 [ 463.312353][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 463.322548][T10100] Call Trace: [ 463.326297][T10100] [ 463.329284][T10100] dump_stack_lvl+0x18c/0x250 [ 463.334115][T10100] ? show_regs_print_info+0x20/0x20 [ 463.339543][T10100] ? load_image+0x420/0x420 [ 463.344119][T10100] ? __might_fault+0xaa/0x120 [ 463.348859][T10100] ? __lock_acquire+0x7d80/0x7d80 [ 463.354112][T10100] ? __virt_addr_valid+0x10c/0x380 [ 463.359290][T10100] should_fail_ex+0x394/0x4c0 [ 463.364050][T10100] _copy_from_user+0x2f/0xe0 [ 463.368704][T10100] ppp_write+0x18f/0x3e0 [ 463.373250][T10100] ? ppp_read+0x860/0x860 [ 463.377639][T10100] vfs_write+0x299/0x9a0 [ 463.381918][T10100] ? file_end_write+0x250/0x250 [ 463.386795][T10100] ? __fget_files+0x28/0x460 [ 463.391444][T10100] ? __fget_files+0x3fc/0x460 [ 463.396153][T10100] ? __fdget_pos+0x1d8/0x330 [ 463.400754][T10100] ? ksys_write+0x74/0x260 [ 463.405193][T10100] ksys_write+0x151/0x260 [ 463.409542][T10100] ? __ia32_sys_read+0x90/0x90 [ 463.414346][T10100] ? lockdep_hardirqs_on+0x98/0x150 [ 463.419609][T10100] do_syscall_64+0x55/0xb0 [ 463.424090][T10100] ? clear_bhb_loop+0x40/0x90 [ 463.428814][T10100] ? clear_bhb_loop+0x40/0x90 [ 463.433543][T10100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.439521][T10100] RIP: 0033:0x7f251bb9ce59 [ 463.444052][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.463804][T10100] RSP: 002b:00007f2519df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 463.472284][T10100] RAX: ffffffffffffffda RBX: 00007f251be15fa0 RCX: 00007f251bb9ce59 [ 463.480320][T10100] RDX: 0000000000000009 RSI: 0000200000000280 RDI: 0000000000000004 [ 463.488350][T10100] RBP: 00007f2519df6090 R08: 0000000000000000 R09: 0000000000000000 [ 463.496379][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.504401][T10100] R13: 00007f251be16038 R14: 00007f251be15fa0 R15: 00007ffd156b85e8 [ 463.512452][T10100] [ 463.546436][T10106] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1299'. [ 463.979553][T10115] netlink: 'syz.2.1301': attribute type 10 has an invalid length. [ 464.042742][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1301'. [ 464.125206][T10115] bridge0: port 4(ipvlan1) entered blocking state [ 464.194818][T10115] bridge0: port 4(ipvlan1) entered disabled state [ 464.285356][T10115] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 464.705940][T10111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.174189][T10136] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1308'. [ 465.894793][T10132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.455585][T10164] netlink: 'syz.0.1315': attribute type 10 has an invalid length. [ 468.490384][T10164] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1315'. [ 468.543082][T10164] bridge0: port 3(ipvlan1) entered blocking state [ 468.594813][T10164] bridge0: port 3(ipvlan1) entered disabled state [ 468.604402][T10164] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 468.721428][T10161] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.083602][T10169] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1317'. [ 470.107219][T10174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.539160][T10198] netlink: 'syz.2.1324': attribute type 10 has an invalid length. [ 472.624722][T10198] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1324'. [ 472.687602][T10198] bridge0: port 4(ipvlan1) entered blocking state [ 472.739941][T10198] bridge0: port 4(ipvlan1) entered disabled state [ 472.800320][T10198] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 472.879688][T10204] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1327'. [ 473.264755][T10189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.441231][T10237] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1336'. [ 475.048734][T10234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.455707][T10255] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 475.463710][T10255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1340'. [ 475.503442][T10255] bridge0: port 4(ipvlan1) entered blocking state [ 475.510676][T10255] bridge0: port 4(ipvlan1) entered disabled state [ 475.520553][T10255] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 476.041044][T10250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.234849][T10266] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1345'. [ 476.568890][T10268] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1346'. [ 477.280489][T10272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.335030][T10297] netlink: 'syz.2.1354': attribute type 10 has an invalid length. [ 478.365989][T10297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1354'. [ 478.410408][T10297] bridge0: port 4(ipvlan1) entered blocking state [ 478.447254][T10297] bridge0: port 4(ipvlan1) entered disabled state [ 478.479823][T10297] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 478.518657][T10301] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1355'. [ 479.069352][T10294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.001974][T10312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.613034][T10329] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1364'. [ 482.936733][T10342] netlink: 'syz.2.1367': attribute type 10 has an invalid length. [ 482.975102][T10342] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1367'. [ 483.009555][T10342] bridge0: port 4(ipvlan1) entered blocking state [ 483.056527][T10342] bridge0: port 4(ipvlan1) entered disabled state [ 483.101876][T10342] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 483.613638][T10334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.770128][T10358] nla_validate_range_unsigned: 25 callbacks suppressed [ 483.770186][T10358] netlink: 'syz.1.1371': attribute type 11 has an invalid length. [ 483.788692][T10358] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.1371'. [ 483.804307][T10358] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 484.845866][T10359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.031449][T10370] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1376'. [ 486.718053][T10386] netlink: 'syz.0.1382': attribute type 10 has an invalid length. [ 486.730979][T10386] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1382'. [ 486.743341][T10386] bridge0: port 3(ipvlan1) entered blocking state [ 486.751619][T10386] bridge0: port 3(ipvlan1) entered disabled state [ 486.804406][T10386] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 486.906035][T10385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.170713][T10401] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1387'. [ 487.870384][T10396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.235093][T10415] FAULT_INJECTION: forcing a failure. [ 490.235093][T10415] name failslab, interval 1, probability 0, space 0, times 0 [ 490.266314][T10415] CPU: 1 PID: 10415 Comm: syz.3.1391 Not tainted syzkaller #0 [ 490.274097][T10415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 490.284224][T10415] Call Trace: [ 490.287555][T10415] [ 490.290540][T10415] dump_stack_lvl+0x18c/0x250 [ 490.295293][T10415] ? show_regs_print_info+0x20/0x20 [ 490.300564][T10415] ? load_image+0x420/0x420 [ 490.305224][T10415] ? __might_sleep+0xe0/0xe0 [ 490.309888][T10415] ? __lock_acquire+0x7d80/0x7d80 [ 490.314977][T10415] should_fail_ex+0x394/0x4c0 [ 490.319721][T10415] should_failslab+0x9/0x20 [ 490.324284][T10415] slab_pre_alloc_hook+0x59/0x300 [ 490.329384][T10415] ? page_pool_create+0x71/0x5c0 [ 490.334577][T10415] __kmem_cache_alloc_node+0x53/0x250 [ 490.340460][T10415] ? page_pool_create+0x71/0x5c0 [ 490.345475][T10415] kmalloc_node_trace+0x26/0xe0 [ 490.350390][T10415] page_pool_create+0x71/0x5c0 [ 490.355225][T10415] bpf_test_run_xdp_live+0x203/0x1b30 [ 490.360667][T10415] ? 0xffffffffa00041c0 [ 490.364869][T10415] ? 0xffffffffa00041c0 [ 490.369085][T10415] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 490.375067][T10415] ? xdp_convert_md_to_buff+0x330/0x330 [ 490.380708][T10415] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 490.386996][T10415] ? bpf_prog_test_run_xdp+0x743/0x1140 [ 490.392585][T10415] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 490.398085][T10415] ? __lock_acquire+0x7d80/0x7d80 [ 490.403260][T10415] ? lockdep_hardirqs_on+0x98/0x150 [ 490.408603][T10415] ? dev_put+0x80/0x80 [ 490.412724][T10415] ? dev_put+0x80/0x80 [ 490.416862][T10415] bpf_prog_test_run+0x31f/0x390 [ 490.421840][T10415] __sys_bpf+0x49d/0x890 [ 490.426118][T10415] ? read_tsc+0x9/0x20 [ 490.430226][T10415] ? bpf_link_show_fdinfo+0x390/0x390 [ 490.435643][T10415] ? lock_chain_count+0x20/0x20 [ 490.440523][T10415] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 490.446552][T10415] __x64_sys_bpf+0x7c/0x90 [ 490.451004][T10415] do_syscall_64+0x55/0xb0 [ 490.455451][T10415] ? clear_bhb_loop+0x40/0x90 [ 490.460188][T10415] ? clear_bhb_loop+0x40/0x90 [ 490.464897][T10415] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 490.470833][T10415] RIP: 0033:0x7f9668b9ce59 [ 490.475286][T10415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.494932][T10415] RSP: 002b:00007f9669ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 490.503383][T10415] RAX: ffffffffffffffda RBX: 00007f9668e15fa0 RCX: 00007f9668b9ce59 [ 490.511384][T10415] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 490.519385][T10415] RBP: 00007f9669ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 490.527388][T10415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.535392][T10415] R13: 00007f9668e16038 R14: 00007f9668e15fa0 R15: 00007ffea1d7b358 [ 490.543407][T10415] [ 490.594763][T10418] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1392'. [ 490.965023][T10428] netlink: 'syz.3.1394': attribute type 10 has an invalid length. [ 490.972939][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1394'. [ 491.064987][T10428] bridge0: port 5(ipvlan1) entered blocking state [ 491.084673][T10428] bridge0: port 5(ipvlan1) entered disabled state [ 491.093918][T10428] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 491.562134][T10424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.722843][T10433] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1397'. [ 493.714872][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.294304][T10470] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1407'. [ 495.414047][T10476] netlink: 'syz.3.1406': attribute type 10 has an invalid length. [ 495.452645][T10476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1406'. [ 495.462373][T10476] bridge0: port 5(ipvlan1) entered blocking state [ 495.478394][T10476] bridge0: port 5(ipvlan1) entered disabled state [ 495.489685][T10476] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 496.150906][T10467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.335446][T10491] netlink: 'syz.1.1411': attribute type 3 has an invalid length. [ 496.343308][T10491] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 496.393913][T10491] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1411'. [ 497.421127][T10498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.543960][T10519] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1418'. [ 498.098797][T10525] netlink: 'syz.2.1420': attribute type 10 has an invalid length. [ 498.148931][T10525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1420'. [ 498.227998][T10525] bridge0: port 4(ipvlan1) entered blocking state [ 498.264963][T10525] bridge0: port 4(ipvlan1) entered disabled state [ 498.343547][T10525] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 498.784712][T10523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.379675][T10548] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1427'. [ 500.275176][T10549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.584493][T10567] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 500.592474][T10567] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1433'. [ 500.644849][T10567] bridge0: port 4(ipvlan1) entered blocking state [ 500.674861][T10567] bridge0: port 4(ipvlan1) entered disabled state [ 500.754522][T10567] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 501.304369][T10582] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1435'. [ 501.343990][T10563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.578595][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.599494][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.788276][T10586] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1437'. [ 502.794283][T10606] netlink: 'syz.1.1439': attribute type 21 has an invalid length. [ 502.847848][T10594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.265857][T10617] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 503.331234][T10617] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1444'. [ 503.362021][T10617] bridge0: port 3(ipvlan1) entered blocking state [ 503.407361][T10617] bridge0: port 3(ipvlan1) entered disabled state [ 503.464305][T10617] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 503.960675][T10610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.177482][T10635] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1448'. [ 506.288455][T10647] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1452'. [ 506.366300][T10652] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1453'. [ 506.551881][T10653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.132449][T10667] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1457'. [ 507.472844][T10667] syzkaller0: entered promiscuous mode [ 508.486372][T10673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.385259][T10674] netlink: 'syz.0.1459': attribute type 10 has an invalid length. [ 509.393235][T10674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1459'. [ 509.402524][T10674] bridge0: port 3(ipvlan1) entered blocking state [ 509.409281][T10674] bridge0: port 3(ipvlan1) entered disabled state [ 509.418897][T10674] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 509.439986][T10680] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.1460'. [ 509.460559][T10684] netlink: 'syz.2.1461': attribute type 21 has an invalid length. [ 509.498364][T10684] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1461'. [ 510.546440][T10702] FAULT_INJECTION: forcing a failure. [ 510.546440][T10702] name failslab, interval 1, probability 0, space 0, times 0 [ 510.560298][T10702] CPU: 0 PID: 10702 Comm: syz.2.1466 Not tainted syzkaller #0 [ 510.567819][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.577918][T10702] Call Trace: [ 510.581239][T10702] [ 510.584243][T10702] dump_stack_lvl+0x18c/0x250 [ 510.588985][T10702] ? show_regs_print_info+0x20/0x20 [ 510.594231][T10702] ? load_image+0x420/0x420 [ 510.598873][T10702] ? __might_sleep+0xe0/0xe0 [ 510.603509][T10702] ? __lock_acquire+0x7d80/0x7d80 [ 510.608593][T10702] should_fail_ex+0x394/0x4c0 [ 510.613956][T10702] should_failslab+0x9/0x20 [ 510.618512][T10702] slab_pre_alloc_hook+0x59/0x300 [ 510.623594][T10702] ? lockdep_hardirqs_on+0x98/0x150 [ 510.628862][T10702] kmem_cache_alloc_node+0x5e/0x310 [ 510.634112][T10702] ? __alloc_skb+0x103/0x2c0 [ 510.638769][T10702] __alloc_skb+0x103/0x2c0 [ 510.643250][T10702] netlink_dump+0x1ee/0xec0 [ 510.647802][T10702] ? ethnl_parse_header_dev_get+0x247/0x770 [ 510.653810][T10702] ? ethnl_ops_complete+0xc0/0xc0 [ 510.658891][T10702] ? netlink_lookup+0x200/0x200 [ 510.663799][T10702] ? genl_start+0x571/0x6c0 [ 510.668356][T10702] __netlink_dump_start+0x57c/0x7a0 [ 510.673603][T10702] genl_family_rcv_msg_dumpit+0x214/0x310 [ 510.679367][T10702] ? genl_rcv_msg+0x7a0/0x7a0 [ 510.684072][T10702] ? genl_get_cmd+0x693/0x930 [ 510.688808][T10702] ? genl_family_rcv_msg_doit+0x310/0x310 [ 510.694560][T10702] ? genl_start+0x6c0/0x6c0 [ 510.699102][T10702] ? genl_dumpit+0x1a0/0x1a0 [ 510.703908][T10702] genl_rcv_msg+0x5de/0x7a0 [ 510.708464][T10702] ? genl_bind+0x360/0x360 [ 510.712902][T10702] ? ethnl_default_doit+0xba0/0xba0 [ 510.718124][T10702] ? ethnl_default_start+0x560/0x560 [ 510.723436][T10702] ? ethnl_default_dumpit+0x8a0/0x8a0 [ 510.728847][T10702] netlink_rcv_skb+0x235/0x4c0 [ 510.733747][T10702] ? genl_bind+0x360/0x360 [ 510.738198][T10702] ? netlink_ack+0x1160/0x1160 [ 510.742993][T10702] ? __lock_acquire+0x7d80/0x7d80 [ 510.748042][T10702] ? net_generic+0x1e/0x240 [ 510.752611][T10702] ? down_read+0x1ac/0x2e0 [ 510.757162][T10702] genl_rcv+0x28/0x40 [ 510.761172][T10702] netlink_unicast+0x7b1/0x930 [ 510.765976][T10702] netlink_sendmsg+0x8d0/0xbf0 [ 510.770773][T10702] ? netlink_getsockopt+0x590/0x590 [ 510.776002][T10702] ? aa_sock_msg_perm+0x94/0x150 [ 510.780977][T10702] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 510.786306][T10702] ? security_socket_sendmsg+0x80/0xa0 [ 510.791793][T10702] ? netlink_getsockopt+0x590/0x590 [ 510.797025][T10702] ____sys_sendmsg+0x61b/0x980 [ 510.801828][T10702] ? __asan_memset+0x22/0x40 [ 510.806453][T10702] ? __sys_sendmsg_sock+0x30/0x30 [ 510.811505][T10702] ? __import_iovec+0x3fa/0x850 [ 510.816389][T10702] ? import_iovec+0x73/0xa0 [ 510.820922][T10702] ___sys_sendmsg+0x2a6/0x360 [ 510.825644][T10702] ? __sys_sendmsg+0x2b0/0x2b0 [ 510.830478][T10702] __se_sys_sendmsg+0x1d0/0x2c0 [ 510.835389][T10702] ? perf_trace_preemptirq_template+0x269/0x330 [ 510.841672][T10702] ? __x64_sys_sendmsg+0x80/0x80 [ 510.846664][T10702] ? trace_sys_enter+0x1f/0x80 [ 510.851469][T10702] do_syscall_64+0x55/0xb0 [ 510.855949][T10702] ? clear_bhb_loop+0x40/0x90 [ 510.860655][T10702] ? clear_bhb_loop+0x40/0x90 [ 510.865360][T10702] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 510.871296][T10702] RIP: 0033:0x7f251bb9ce59 [ 510.875738][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.895386][T10702] RSP: 002b:00007f2519df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.903864][T10702] RAX: ffffffffffffffda RBX: 00007f251be15fa0 RCX: 00007f251bb9ce59 [ 510.911863][T10702] RDX: 0000000000040050 RSI: 0000200000000000 RDI: 0000000000000005 [ 510.919871][T10702] RBP: 00007f2519df6090 R08: 0000000000000000 R09: 0000000000000000 [ 510.927868][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 510.935861][T10702] R13: 00007f251be16038 R14: 00007f251be15fa0 R15: 00007ffd156b85e8 [ 510.943871][T10702] [ 511.682962][T10713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.599795][T10728] netlink: 'syz.1.1471': attribute type 10 has an invalid length. [ 512.614027][T10728] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1471'. [ 512.630646][T10728] bridge0: port 3(ipvlan1) entered blocking state [ 512.642360][T10728] bridge0: port 3(ipvlan1) entered disabled state [ 512.657903][T10728] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 512.683567][T10730] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1473'. [ 513.330458][T10721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.624848][T10738] netlink: 'syz.0.1477': attribute type 10 has an invalid length. [ 513.659923][T10738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.699023][T10738] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 514.574145][T10744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.910021][T10768] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 515.921502][T10768] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 515.932324][T10768] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.1484'. [ 515.966812][T10768] netlink: 'syz.0.1484': attribute type 3 has an invalid length. [ 515.985196][T10768] netlink: 'syz.0.1484': attribute type 1 has an invalid length. [ 515.999336][T10768] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.1484'. [ 516.113665][T10764] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1483'. [ 521.018535][T10847] veth1_macvtap: left promiscuous mode [ 521.081468][T10847] macsec0: entered promiscuous mode [ 525.958392][T10908] [ 525.961247][T10908] ============================= [ 525.966832][T10908] WARNING: suspicious RCU usage [ 525.971793][T10908] syzkaller #0 Not tainted [ 525.976400][T10908] ----------------------------- [ 525.981459][T10908] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 525.990058][T10908] [ 525.990058][T10908] other info that might help us debug this: [ 525.990058][T10908] [ 526.000628][T10908] [ 526.000628][T10908] rcu_scheduler_active = 2, debug_locks = 1 [ 526.008911][T10908] 1 lock held by syz.1.1527/10908: [ 526.014254][T10908] #0: ffffffff8d131f80 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 526.024636][T10908] [ 526.024636][T10908] stack backtrace: [ 526.030589][T10908] CPU: 1 PID: 10908 Comm: syz.1.1527 Not tainted syzkaller #0 [ 526.038100][T10908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 526.048199][T10908] Call Trace: [ 526.051509][T10908] [ 526.054476][T10908] dump_stack_lvl+0x18c/0x250 [ 526.059206][T10908] ? show_regs_print_info+0x20/0x20 [ 526.064440][T10908] ? load_image+0x420/0x420 [ 526.068977][T10908] ? __lock_acquire+0x1262/0x7d80 [ 526.074131][T10908] lockdep_rcu_suspicious+0x1e1/0x300 [ 526.079548][T10908] get_callchain_entry+0x2a9/0x3c0 [ 526.084708][T10908] get_perf_callchain+0xc6/0x510 [ 526.089734][T10908] ? put_callchain_entry+0xb0/0xb0 [ 526.094883][T10908] ? preempt_schedule_common+0x82/0xc0 [ 526.100390][T10908] __bpf_get_stack+0x2e4/0x540 [ 526.105199][T10908] ? stack_map_get_build_id_offset+0x720/0x720 [ 526.111397][T10908] ? bpf_prog_939e3abb3850b85a_F+0x31/0x33 [ 526.117244][T10908] bpf_get_stack_raw_tp+0x1a4/0x210 [ 526.122478][T10908] bpf_prog_939e3abb3850b85a_F+0x31/0x33 [ 526.128142][T10908] bpf_prog_19484586d131c401+0x20/0x29 [ 526.133629][T10908] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 526.139047][T10908] bpf_prog_test_run_syscall+0x320/0x4b0 [ 526.144718][T10908] ? sock_gen_cookie+0x60/0x60 [ 526.149519][T10908] ? sock_gen_cookie+0x60/0x60 [ 526.154328][T10908] bpf_prog_test_run+0x31f/0x390 [ 526.159321][T10908] __sys_bpf+0x49d/0x890 [ 526.163772][T10908] ? bpf_link_show_fdinfo+0x390/0x390 [ 526.169228][T10908] ? lock_chain_count+0x20/0x20 [ 526.174230][T10908] __x64_sys_bpf+0x7c/0x90 [ 526.178793][T10908] do_syscall_64+0x55/0xb0 [ 526.183248][T10908] ? clear_bhb_loop+0x40/0x90 [ 526.187958][T10908] ? clear_bhb_loop+0x40/0x90 [ 526.192670][T10908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 526.198601][T10908] RIP: 0033:0x7f15dbb9ce59 [ 526.203074][T10908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.222893][T10908] RSP: 002b:00007f15dca27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 526.231343][T10908] RAX: ffffffffffffffda RBX: 00007f15dbe15fa0 RCX: 00007f15dbb9ce59 [ 526.239348][T10908] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 526.247349][T10908] RBP: 00007f15dbc32e6f R08: 0000000000000000 R09: 0000000000000000 [ 526.255344][T10908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.263346][T10908] R13: 00007f15dbe16038 R14: 00007f15dbe15fa0 R15: 00007ffe5777a018 [ 526.271454][T10908]