last executing test programs: 16m32.087436474s ago: executing program 0 (id=1458): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca, 0x0, 0xffffffffffffffff, 0x2e}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xd, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m31.485169802s ago: executing program 0 (id=1462): r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0xff, 0x7, 0x8, 0x0, 0x5, 0x80000, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x120b1, 0xd, 0x72f9b9d9, 0x7, 0x6, 0xfffffff8, 0x1, 0x0, 0xf, 0x0, 0x5}, r0, 0xe, r1, 0x6a24def228139b38) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r4}, 0xc) 16m28.652808809s ago: executing program 0 (id=1464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 16m25.602976762s ago: executing program 0 (id=1474): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8240c00, &(0x7f0000000780), 0x0, 0x0, &(0x7f00000003c0), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) recvmsg$unix(r3, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 16m25.400318221s ago: executing program 0 (id=1476): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f00000000c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x11, 0x4, 0x4, 0xc}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000380)=""/181, 0xb5, 0x0, &(0x7f0000000440)=""/39, 0x27}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085000000010000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={r3, &(0x7f0000000100)="744a34392d94fa72baa359616a328c04c58073c55a04707ab46b98b42e10fbbf8345f5f7e2d41d7bdf7866eab2cacc6ce70a75b14d8f53a3be", &(0x7f0000000140)=""/130}, 0x20) 16m25.230212787s ago: executing program 0 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (fail_nth: 2) 16m9.757493568s ago: executing program 32 (id=1477): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109500, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) (fail_nth: 2) 5.677552818s ago: executing program 1 (id=8379): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12008, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x2, 0x0, &(0x7f0000000c40)="63ec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743b, 0xf0ff1f00000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x200000000000019a, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffdc7, 0x0, 0xfffffffffffffd67, 0x0, 0x0, 0x300}, 0x40012062) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r4, @ANYRES32=0x1, @ANYRES16=r4, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES64=r4], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1fc, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x4, @perf_config_ext={0x8000000000000001, 0x2}, 0x1a4a, 0x100000000000005, 0x3, 0x0, 0x0, 0xa, 0x0, 0xfe, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x79, 0xa, 0x5, 0x1, 0x0, 0x4, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000580)}, 0x204, 0x5, 0xa585, 0x3, 0x4, 0x7fffffff, 0x80, 0x0, 0x5, 0x0, 0xd46}, r7, 0xa, r1, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 5.162753204s ago: executing program 1 (id=8386): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2500000004000000b90000000188ddbaee1de7ce75e2a91bb5f798e9454e67b52e0a0bc2f6512ea574f40ef0de4055d6c7be18466ed9b6ec027e4e0378bec4dedb8a6fdfaef18eaf3a26ad4bf0e5943c6034b35ec88883850834bd4c0597b850540d0912d987e1c1a1fb5958f2af2754828f2620cd89cfc2942bc8a2d64ff07d18448b620efed472410e55176ce1ed3cbed078f5b0e2967636111df03b42b080a482e1d9cfe5df1321000d2c15609d967f2742c86490ea22426f5b320592bbfe5af43f1b6a123626db066598f952a28f2952357536db11978461fdecfa58a8746baaea47776684d4f1", @ANYRES8=r0, @ANYRES8=r0], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f2c00000062feffff0900000001000005060000000a00000004000000070000000200000001000006040000000f0000000020000c0200000000612e30001452d1f7ffa97358ed35c66d470163b02752ae10bc64b1b739c4f873147e3e53b3fa176ff64b166ad8de23d426d1c592f721965d8144aec08fd8c9382f18c4"], &(0x7f0000000480)=""/2, 0x49, 0x2, 0x1, 0x4000006}, 0x28) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x3}, 0x2019, 0x0, 0x0, 0x9, 0xffb, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x19, 0x9, 0x40, 0x10e}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000600)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x496, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @alu={0x7, 0x0, 0x1, 0x4, 0x0, 0x30, 0xffffffffffffffff}, @generic={0xe, 0x8, 0x9, 0xffff, 0x1000}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x61, &(0x7f0000000340)=""/97, 0x41100, 0x44, '\x00', r8, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000680)=[r4, r1, r1, r2, r9, r1, r1, 0x1, r1, r2], &(0x7f00000006c0), 0x10, 0x40}, 0x94) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="44ebd606"], 0x31) 2.060955357s ago: executing program 2 (id=8389): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x74000000, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x82) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x3, 0x4, 0xc}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB='\b\x00'], 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffd}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r4, 0x0, 0xe, 0x0, &(0x7f0000000680)="00882bd0269cd8209319417b6ca6", 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000a40)="d580a67cd678", 0x0}, 0x50) unlink(&(0x7f0000000000)='./file0\x00') 1.788292471s ago: executing program 2 (id=8390): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180200"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="13000000100000000200"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x4000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) perf_event_open(0x0, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x2) 1.786044931s ago: executing program 1 (id=8391): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r1, 0x4000, r2}, 0x18) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.476562389s ago: executing program 1 (id=8392): r0 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffff22e, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_config_ext={0x0, 0x1}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000018c0)={r1}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x20) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000040)=r3, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180), 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000100)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call], &(0x7f00000001c0)='GPL\x00', 0x97, 0x82, &(0x7f0000000240)=""/130, 0x41100, 0x20, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xc, 0xf9, 0x76}, 0x10, 0x1da7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe89}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000003c0)=r5, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040004000000002000000000000000000000300000000030000000200000000000000000000000000000105000000200000000000000000000003000000000228000002000000"], 0x0, 0x5a}, 0x28) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40086602, &(0x7f0000000180)=0x20) bpf$ITER_CREATE(0x21, &(0x7f00000017c0)={r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001800)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) recvmsg$unix(r8, 0x0, 0x81) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000040000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRESDEC=r9, @ANYRESHEX=r9], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 1.316579697s ago: executing program 4 (id=8394): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x12008, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x2, 0x0, &(0x7f0000000c40)="63ec", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743b, 0xf0ff1f00000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x200000000000019a, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc6}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) recvmsg(r2, &(0x7f0000000380)={0x0, 0xfffffffffffffdc7, 0x0, 0xfffffffffffffd67, 0x0, 0x0, 0x300}, 0x40012062) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e03"], 0xffdd) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r4, @ANYRES32=0x1, @ANYRES16=r4, @ANYRES32=r4, @ANYRESOCT=r0, @ANYRES64=r4], 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1fc, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a04, 0x4, @perf_config_ext={0x8000000000000001, 0x2}, 0x1a4a, 0x100000000000005, 0x3, 0x0, 0x0, 0xa, 0x0, 0xfe, 0x6, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = gettid() perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x79, 0xa, 0x5, 0x1, 0x0, 0x4, 0x1000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x0, @perf_bp={&(0x7f0000000580)}, 0x204, 0x5, 0xa585, 0x3, 0x4, 0x7fffffff, 0x80, 0x0, 0x5, 0x0, 0xd46}, r7, 0xa, r1, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 1.215784976s ago: executing program 3 (id=8395): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 1.214655956s ago: executing program 2 (id=8404): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xb, 0x658b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x10190, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r3}) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) setsockopt$sock_attach_bpf(r4, 0x6, 0x24, &(0x7f0000000000)=r5, 0xff7b) 1.001284252s ago: executing program 2 (id=8396): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 975.576857ms ago: executing program 3 (id=8397): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20008001) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, 0x0, 0x20) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000500)) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, &(0x7f0000000040)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x24000044) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x0, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'cpu'}]}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 939.36314ms ago: executing program 1 (id=8399): socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001000000", @ANYRES32=0x1, @ANYBLOB="ec8b55fc8abb0342a06d8d96ec3ba7000000000000000000000000a4cf3ba763810900", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500), &(0x7f0000000280), 0x4, r0}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x8}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fa", 0x0, 0x0, 0x0}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x6, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2002}, 0x10902, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1200000004010000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000001d80), &(0x7f0000001d40)=r2}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r3, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000600)={'wlan1\x00', @local}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40003c22) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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", @ANYBLOB="1d139ea82bf95c2a5474d4a0d51d574c1e80c08468a1d0ffcaa5beda1d1e735401cddf133954ac1858a89458dfcc08fd460fd4095d862fefdd7b67249f863619a16200c3158d5c0f1d41e7e236a48ed97a83105f991550cd52d04afc5d4236e333c523630f55e3335db9f3008ffba8c0caf3b9cea8aa798e4b36b3cd801c9bb3c666bd5a41ea3c09e7583961eb53a6c5948b47502e0d4b2959fb217a2ea66fd7e4f5eaa78c31c69a1c9d5f"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f00000001c0)={0x3}, 0x10}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x51, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033c0000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 934.280239ms ago: executing program 2 (id=8400): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}], 0x40}, 0x122) (async) r3 = perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1fffffd, 0x0, 0x200000000}, 0x0, 0x9, r0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES16=r3], 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000081000000000000000400063018b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 802.907733ms ago: executing program 4 (id=8401): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 729.187998ms ago: executing program 2 (id=8402): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c00), 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="8000"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x4080, 0x0, 0x0, 0x0, 0x2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="850000000104000055dd0c116c36c35bb0bda5cb0eca9ccb3029a555aa84b2f9f932e4bd4546b20dc16e54f6753711b1424a486f235549d4e89abcd250707fb0e4f6fa6ecec3cd728ef6a5602b8e6d1676ea6057a62c997d55f8cb1aed8ddcaa452713f3949c74d2129c3e8c1698e03a45155ad863de27d2d41536681123"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000000010000000100000900000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0), 0x4) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0b0532950b0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x81) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/4, 0x4}, {&(0x7f0000000640)=""/223, 0xdf}, {&(0x7f0000000280)=""/69, 0x45}, {&(0x7f0000000740)=""/158, 0x9e}, {&(0x7f0000000800)=""/153, 0x99}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000900)=""/133, 0x85}, {&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000a40)=""/145, 0x91}], 0x9}, 0x22) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)=r6}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=r9, r6, 0xa, 0x0, r6, @void, @value=r6}, 0x20) 696.293411ms ago: executing program 3 (id=8403): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2500000004000000b90000000188ddbaee1de7ce75e2a91bb5f798e9454e67b52e0a0bc2f6512ea574f40ef0de4055d6c7be18466ed9b6ec027e4e0378bec4dedb8a6fdfaef18eaf3a26ad4bf0e5943c6034b35ec88883850834bd4c0597b850540d0912d987e1c1a1fb5958f2af2754828f2620cd89cfc2942bc8a2d64ff07d18448b620efed472410e55176ce1ed3cbed078f5b0e2967636111df03b42b080a482e1d9cfe5df1321000d2c15609d967f2742c86490ea22426f5b320592bbfe5af43f1b6a123626db066598f952a28f2952357536db11978461fdecfa58a8746baaea47776684d4f1", @ANYRES8=r0, @ANYRES8=r0], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9f2c00000062feffff0900000001000005060000000a00000004000000070000000200000001000006040000000f0000000020000c0200000000612e30001452d1f7ffa97358ed35c66d470163b02752ae10bc64b1b739c4f873147e3e53b3fa176ff64b166ad8de23d426d1c592f721965d8144aec08fd8c9382f18c4"], &(0x7f0000000480)=""/2, 0x49, 0x2, 0x1, 0x4000006}, 0x28) close(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmsg(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, 0x0}, 0x102) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x3}, 0x2019, 0x0, 0x0, 0x9, 0xffb, 0x3, 0x7, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x19, 0x9, 0x40, 0x10e}, 0x50) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r7, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000600)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x496, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query, @alu={0x7, 0x0, 0x1, 0x4, 0x0, 0x30, 0xffffffffffffffff}, @generic={0xe, 0x8, 0x9, 0xffff, 0x1000}]}, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x61, &(0x7f0000000340)=""/97, 0x41100, 0x44, '\x00', r8, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000680)=[r4, r1, r1, r2, r9, r1, r1, 0x1, r1, r2], &(0x7f00000006c0), 0x10, 0x40}, 0x94) write$cgroup_subtree(r6, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB="44ebd606"], 0x31) 526.900367ms ago: executing program 4 (id=8405): bpf$MAP_CREATE(0x1800, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 405.085332ms ago: executing program 4 (id=8406): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0xb, 0x658b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_bp={0x0, 0x3}, 0x10190, 0x7, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r3}) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$kcm(0x2, 0x922000000001, 0x106) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) setsockopt$sock_attach_bpf(r4, 0x6, 0x24, &(0x7f0000000000)=r5, 0xff7b) 309.614842ms ago: executing program 4 (id=8407): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'dvmrp0\x00', 0x2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000001c0)={0x0, 0x0}) (async) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8941, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x28080, 0x0) socket$kcm(0x2b, 0x2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x40, 0x1, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfefffffbffffffff, r3, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e37", 0x18}], 0x1}, 0x10049014) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0xffffffffffffffff}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a", 0x11}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r5 = socket$kcm(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0xfd, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x10000000}, 0x0, 0xf, 0xffffffffffffffff, 0x2) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) (async) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) 169.858244ms ago: executing program 3 (id=8408): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="0f0000000400000004000000020002"], 0x48) (fail_nth: 4) 77.127556ms ago: executing program 3 (id=8409): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f0000000080), 0x8101000000000000}, 0x205, 0x0, 0x0, 0x0, 0x4, 0xfffffffd, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r0, 0x0) 63.454343ms ago: executing program 1 (id=8410): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (fail_nth: 4) 51.97002ms ago: executing program 4 (id=8411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x1800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x1008b8, 0x0, 0x8, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x8, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x200, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair(0x27, 0x3, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xfff, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8914, &(0x7f0000000080)) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 0s ago: executing program 3 (id=8412): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x24}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20008001) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, 0x0, 0x20) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f0000000500)) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x13, &(0x7f0000000040)=r4, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xe9, 0x5, 0x0, 0x4, 0x0, 0x3, 0xd2dfc, 0x9, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0xe}, 0x2, 0x8000, 0x6, 0x8, 0x81, 0x4, 0x3, 0x0, 0xfffffffd, 0x0, 0x400000000002}, 0x0, 0xe, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a00100000000580607ee622", 0x2e}], 0x1}, 0x24000044) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x0, 'pids'}, {0x2b, 'rdma'}, {0x2d, 'cpu'}]}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61123400000000006113500000000000bf200000000000001500000008ffffffbd0301000000000095000000000000006916320000000000bf67000000000000a406000007ff07006706000002000000070600000ee60000bf050000000000002e720000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d4301000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a2aadfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf736f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d8b570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91f0eb18e21dfdab3c84ec11377fbbfd1e000000000000b542a536559eed87b58edcfee83a50077ee0e8fb6e787cb3076dfeeb79f55927fef9651e176b40e64740a01944577caea4ceb9e907cec36a8429445c833b9d24d53dc91f15af1f4a1db9fa452fa3f0b812355aab5b58659ffd56034fdbb169f3e86660acdc65dc699d3e6364a80f45e54d6efcb99b41a080494f842706f3c1716d2e252bf89663393356296d89fbf95aa7966fa700b710008311d6f25e05f77d68799e671d90cb04131742790941d83ffdfa857e9e085a59a78e7a17f008ce55866fcc4de388f270a1ba675f43481bd2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) kernel console output (not intermixed with test programs): ndmsg+0x2a0/0x2a0 [ 1388.448880][T28057] ? trace_call_bpf+0xc3/0x6c0 [ 1388.453963][T28057] __se_sys_sendmsg+0x1c2/0x2b0 [ 1388.458865][T28057] ? __x64_sys_sendmsg+0x80/0x80 [ 1388.463923][T28057] ? lockdep_hardirqs_on+0x98/0x150 [ 1388.469151][T28057] do_syscall_64+0x55/0xa0 [ 1388.473593][T28057] ? clear_bhb_loop+0x40/0x90 [ 1388.478288][T28057] ? clear_bhb_loop+0x40/0x90 [ 1388.483023][T28057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1388.488953][T28057] RIP: 0033:0x7f992ed9c629 [ 1388.493400][T28057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1388.513033][T28057] RSP: 002b:00007f992fbb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.521472][T28057] RAX: ffffffffffffffda RBX: 00007f992f015fa0 RCX: 00007f992ed9c629 [ 1388.529466][T28057] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 1388.537587][T28057] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.545586][T28057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.553580][T28057] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1388.561874][T28057] [ 1388.613887][T28056] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7682'. [ 1388.648731][T28058] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1388.655864][T28058] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1388.697778][T28049] sctp: [Deprecated]: syz.3.7681 (pid 28049) Use of int in max_burst socket option deprecated. [ 1388.697778][T28049] Use struct sctp_assoc_value instead [ 1388.875496][T28064] sctp: [Deprecated]: syz.4.7687 (pid 28064) Use of int in max_burst socket option deprecated. [ 1388.875496][T28064] Use struct sctp_assoc_value instead [ 1389.083972][T28070] netlink: 'syz.3.7690': attribute type 10 has an invalid length. [ 1389.119060][T28070] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7690'. [ 1389.149980][T28072] netlink: 'syz.2.7691': attribute type 10 has an invalid length. [ 1389.265852][T28075] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1389.279448][T28075] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1389.320578][T28075] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7692'. [ 1389.359604][T28075] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1389.379005][T28075] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1389.598296][T28085] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1389.606660][T28089] FAULT_INJECTION: forcing a failure. [ 1389.606660][T28089] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.617579][T28085] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1389.622667][T28089] CPU: 1 PID: 28089 Comm: syz.2.7698 Not tainted syzkaller #0 [ 1389.634209][T28089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1389.644297][T28089] Call Trace: [ 1389.647689][T28089] [ 1389.650646][T28089] dump_stack_lvl+0x18c/0x250 [ 1389.655365][T28089] ? show_regs_print_info+0x20/0x20 [ 1389.660685][T28089] ? load_image+0x400/0x400 [ 1389.665219][T28089] ? __might_sleep+0xe0/0xe0 [ 1389.669853][T28089] ? __lock_acquire+0x7d40/0x7d40 [ 1389.674904][T28089] ? __lock_acquire+0x1273/0x7d40 [ 1389.679994][T28089] should_fail_ex+0x39d/0x4d0 [ 1389.684708][T28089] should_failslab+0x9/0x20 [ 1389.689243][T28089] slab_pre_alloc_hook+0x59/0x310 [ 1389.694304][T28089] kmem_cache_alloc_node+0x60/0x320 [ 1389.699539][T28089] ? __alloc_skb+0x103/0x2c0 [ 1389.704189][T28089] __alloc_skb+0x103/0x2c0 [ 1389.708651][T28089] alloc_skb_with_frags+0xca/0x7b0 [ 1389.713892][T28089] ? __lock_acquire+0x7d40/0x7d40 [ 1389.718950][T28089] ? __lock_acquire+0x1273/0x7d40 [ 1389.724015][T28089] sock_alloc_send_pskb+0x883/0x9a0 [ 1389.729285][T28089] ? __might_fault+0xaa/0x120 [ 1389.734013][T28089] ? sock_kzfree_s+0x50/0x50 [ 1389.738632][T28089] ? verify_lock_unused+0x140/0x140 [ 1389.743908][T28089] ? dev_get_by_index+0x22/0x2d0 [ 1389.748871][T28089] ? dev_get_by_index+0x22/0x2d0 [ 1389.753869][T28089] packet_sendmsg+0x316e/0x4d70 [ 1389.758775][T28089] ? __might_sleep+0xe0/0xe0 [ 1389.763396][T28089] ? verify_lock_unused+0x140/0x140 [ 1389.768620][T28089] ? mark_lock+0x94/0x320 [ 1389.772987][T28089] ? __lock_acquire+0x1273/0x7d40 [ 1389.778124][T28089] ? verify_lock_unused+0x140/0x140 [ 1389.783351][T28089] ? aa_sk_perm+0x83c/0x970 [ 1389.787888][T28089] ? packet_getsockopt+0xad0/0xad0 [ 1389.794516][T28089] ? aa_sock_msg_perm+0x94/0x150 [ 1389.799691][T28089] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1389.805005][T28089] ? security_socket_sendmsg+0x80/0xa0 [ 1389.810488][T28089] ? packet_getsockopt+0xad0/0xad0 [ 1389.815629][T28089] ____sys_sendmsg+0x5ba/0x960 [ 1389.820418][T28089] ? __lock_acquire+0x7d40/0x7d40 [ 1389.825475][T28089] ? __asan_memset+0x22/0x40 [ 1389.830096][T28089] ? __sys_sendmsg_sock+0x30/0x30 [ 1389.835138][T28089] ? __import_iovec+0x5f2/0x850 [ 1389.840033][T28089] ? import_iovec+0x73/0xa0 [ 1389.844840][T28089] ___sys_sendmsg+0x2a6/0x360 [ 1389.849545][T28089] ? __sys_sendmsg+0x2a0/0x2a0 [ 1389.854349][T28089] ? trace_call_bpf+0xc3/0x6c0 [ 1389.859170][T28089] __se_sys_sendmsg+0x1c2/0x2b0 [ 1389.864055][T28089] ? __x64_sys_sendmsg+0x80/0x80 [ 1389.869038][T28089] ? lockdep_hardirqs_on+0x98/0x150 [ 1389.874273][T28089] do_syscall_64+0x55/0xa0 [ 1389.878723][T28089] ? clear_bhb_loop+0x40/0x90 [ 1389.883430][T28089] ? clear_bhb_loop+0x40/0x90 [ 1389.888136][T28089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1389.894058][T28089] RIP: 0033:0x7f58c019c629 [ 1389.898502][T28089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.918128][T28089] RSP: 002b:00007f58c10fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.926569][T28089] RAX: ffffffffffffffda RBX: 00007f58c0415fa0 RCX: 00007f58c019c629 [ 1389.934568][T28089] RDX: 0000000000004084 RSI: 0000200000000b00 RDI: 0000000000000003 [ 1389.942734][T28089] RBP: 00007f58c10fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.950727][T28089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1389.958730][T28089] R13: 00007f58c0416038 R14: 00007f58c0415fa0 R15: 00007ffc48cb13d8 [ 1389.966735][T28089] [ 1390.057003][T28087] netlink: 'syz.4.7696': attribute type 10 has an invalid length. [ 1390.072944][T28087] bridge0: port 3(macsec0) entered blocking state [ 1390.098259][T28087] bridge0: port 3(macsec0) entered disabled state [ 1390.105988][T28087] macsec0: entered allmulticast mode [ 1390.117202][T28087] veth1_macvtap: entered allmulticast mode [ 1390.125388][T28087] macsec0: entered promiscuous mode [ 1390.139299][T28090] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7697'. [ 1390.152969][T28085] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1390.162907][T28085] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1390.318361][T28093] sctp: [Deprecated]: syz.2.7699 (pid 28093) Use of int in max_burst socket option deprecated. [ 1390.318361][T28093] Use struct sctp_assoc_value instead [ 1390.348012][T28095] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1390.361028][T28095] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1390.565338][T28096] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7700'. [ 1390.630284][T28100] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1390.639660][T28100] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1390.659942][T28104] netlink: 'syz.3.7702': attribute type 10 has an invalid length. [ 1390.679096][T28104] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7702'. [ 1390.846362][T28108] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1390.867172][T28108] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1391.006478][T28112] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7703'. [ 1391.137356][T28111] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1391.149698][T28111] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1391.219777][T28116] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7705'. [ 1391.259058][T28108] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1391.267122][T28108] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1391.298068][T28117] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1391.308899][T28117] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1391.673410][T28128] netlink: 'syz.2.7711': attribute type 10 has an invalid length. [ 1391.817525][T28129] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1391.842785][T28129] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1391.869588][T28133] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1392.407992][T28139] sctp: [Deprecated]: syz.4.7713 (pid 28139) Use of int in max_burst socket option deprecated. [ 1392.407992][T28139] Use struct sctp_assoc_value instead [ 1392.775673][T28151] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1392.802044][T28151] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1392.847272][T28151] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7718'. [ 1392.882830][T28151] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1392.891180][T28151] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1392.924349][T28155] netlink: 'syz.3.7720': attribute type 10 has an invalid length. [ 1392.960477][T28155] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7720'. [ 1393.929934][T28155] team0: Port device macvlan0 removed [ 1393.977171][T28161] netlink: 'syz.4.7721': attribute type 10 has an invalid length. [ 1393.986036][T28168] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7724'. [ 1394.018400][T28169] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1394.096807][T28169] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1394.192705][T28174] netlink: 'syz.4.7726': attribute type 10 has an invalid length. [ 1394.216185][T28174] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7726'. [ 1394.714506][T28185] sctp: [Deprecated]: syz.1.7729 (pid 28185) Use of int in max_burst socket option deprecated. [ 1394.714506][T28185] Use struct sctp_assoc_value instead [ 1394.834843][T28190] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1394.844690][T28190] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1394.909330][T28190] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1394.928188][T28190] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1395.132424][T28201] netlink: 'syz.3.7734': attribute type 10 has an invalid length. [ 1395.335085][T28205] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1395.351234][T28205] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1395.507670][T28208] __nla_validate_parse: 1 callbacks suppressed [ 1395.507691][T28208] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7737'. [ 1395.535706][T28210] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1395.558000][T28210] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1395.642820][T28212] netlink: 'syz.3.7738': attribute type 10 has an invalid length. [ 1395.688523][T28212] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7738'. [ 1396.190434][T28225] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1396.197611][T28225] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1396.261826][T28225] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7742'. [ 1396.282621][T28225] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1396.303609][T28225] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1396.396365][T28227] sctp: [Deprecated]: syz.1.7744 (pid 28227) Use of int in max_burst socket option deprecated. [ 1396.396365][T28227] Use struct sctp_assoc_value instead [ 1396.436483][T28234] netlink: 'syz.2.7746': attribute type 10 has an invalid length. [ 1396.796024][T28244] netlink: 'syz.3.7750': attribute type 10 has an invalid length. [ 1396.817102][T28244] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7750'. [ 1396.984846][T28252] netlink: 'syz.4.7754': attribute type 23 has an invalid length. [ 1396.993645][T28253] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7753'. [ 1397.215167][T28262] netlink: 'syz.2.7757': attribute type 10 has an invalid length. [ 1397.562155][T28261] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1397.573970][T28261] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1397.595668][T28264] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7756'. [ 1397.624054][T28268] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1397.645640][T28268] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1397.931413][T28273] sctp: [Deprecated]: syz.4.7760 (pid 28273) Use of int in max_burst socket option deprecated. [ 1397.931413][T28273] Use struct sctp_assoc_value instead [ 1398.132361][T28284] netlink: 'syz.3.7763': attribute type 10 has an invalid length. [ 1398.148962][T28284] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7763'. [ 1398.623847][T28299] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1398.653707][T28299] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1398.720694][T28302] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7769'. [ 1398.731890][T28305] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1398.744103][T28305] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1398.773417][T28306] netlink: 'syz.2.7768': attribute type 10 has an invalid length. [ 1399.209438][T28311] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1399.242736][T28311] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1399.271338][T28316] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7780'. [ 1399.300581][T28317] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1399.307840][T28317] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1399.511705][T28327] netlink: 'syz.4.7776': attribute type 10 has an invalid length. [ 1399.529041][T28327] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7776'. [ 1399.604402][T28329] sctp: [Deprecated]: syz.3.7777 (pid 28329) Use of int in max_burst socket option deprecated. [ 1399.604402][T28329] Use struct sctp_assoc_value instead [ 1399.884590][T28339] netlink: 'syz.3.7782': attribute type 10 has an invalid length. [ 1400.242805][T28349] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1400.270031][T28349] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1400.332224][T28349] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1400.342699][T28349] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1400.486406][T28356] netlink: 'syz.1.7788': attribute type 10 has an invalid length. [ 1400.841084][T28360] sctp: [Deprecated]: syz.4.7790 (pid 28360) Use of int in max_burst socket option deprecated. [ 1400.841084][T28360] Use struct sctp_assoc_value instead [ 1401.092683][T28371] netlink: 'syz.2.7794': attribute type 10 has an invalid length. [ 1401.233792][T28371] veth0_vlan: left promiscuous mode [ 1401.243772][T28371] veth0_vlan: entered promiscuous mode [ 1401.290731][T28371] team0: Device veth0_vlan failed to register rx_handler [ 1401.378570][T28377] sit0: entered allmulticast mode [ 1401.452204][T28378] sit0: entered promiscuous mode [ 1402.114662][T28384] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1402.122493][T28384] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1402.136131][T28388] __nla_validate_parse: 2 callbacks suppressed [ 1402.136147][T28388] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7799'. [ 1402.158718][T28392] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1402.166931][T28392] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1402.176136][T28390] netlink: 'syz.3.7801': attribute type 10 has an invalid length. [ 1402.185097][T28390] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1402.340251][T28398] netlink: 'syz.4.7802': attribute type 23 has an invalid length. [ 1402.759013][T28404] sctp: [Deprecated]: syz.1.7804 (pid 28404) Use of int in max_burst socket option deprecated. [ 1402.759013][T28404] Use struct sctp_assoc_value instead [ 1402.981698][T28414] netlink: 'syz.3.7807': attribute type 10 has an invalid length. [ 1403.047769][T28418] netlink: 'syz.4.7808': attribute type 23 has an invalid length. [ 1403.324797][T28423] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1403.336582][T28423] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1403.441357][T28428] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7810'. [ 1403.459062][T28431] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1403.487312][T28431] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1403.530767][T28429] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1403.548971][T28429] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1403.581770][T28436] netlink: 'syz.4.7813': attribute type 23 has an invalid length. [ 1403.597502][T28437] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7812'. [ 1403.629054][T28432] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7811'. [ 1403.687787][T28427] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1403.734965][T28427] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1403.774343][T28434] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1403.785654][T28434] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1403.795656][T28437] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1403.807273][T28437] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1404.475484][T28464] netlink: 'syz.1.7820': attribute type 10 has an invalid length. [ 1404.804018][T28474] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1404.823549][T28474] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1404.895195][T28478] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7825'. [ 1404.911969][T28474] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1404.929052][T28474] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1405.694375][T28491] netlink: 'syz.2.7830': attribute type 10 has an invalid length. [ 1405.729015][T28491] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7830'. [ 1406.080440][T28504] netlink: 'syz.3.7832': attribute type 10 has an invalid length. [ 1406.301216][T28511] netlink: 'syz.1.7845': attribute type 10 has an invalid length. [ 1407.142671][T28529] netlink: 'syz.3.7843': attribute type 10 has an invalid length. [ 1407.158285][T28529] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1407.534818][T28540] netlink: 'syz.4.7844': attribute type 10 has an invalid length. [ 1407.558753][T28540] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7844'. [ 1407.945133][T28546] netlink: 'syz.4.7848': attribute type 10 has an invalid length. [ 1408.267519][T28555] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1408.276919][T28555] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1408.328202][T28555] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7855'. [ 1408.382887][T28555] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1408.399061][T28555] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1408.600510][T28553] sctp: [Deprecated]: syz.1.7854 (pid 28553) Use of int in max_burst socket option deprecated. [ 1408.600510][T28553] Use struct sctp_assoc_value instead [ 1408.674549][T28563] netlink: 'syz.4.7857': attribute type 10 has an invalid length. [ 1408.698076][T28563] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7857'. [ 1408.837085][T28566] netlink: 'syz.3.7859': attribute type 10 has an invalid length. [ 1408.854039][T28566] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7859'. [ 1409.007091][T28572] netlink: 'syz.2.7861': attribute type 10 has an invalid length. [ 1409.168151][T28577] netlink: 'syz.1.7872': attribute type 10 has an invalid length. [ 1409.396370][T28585] FAULT_INJECTION: forcing a failure. [ 1409.396370][T28585] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.444602][T28585] CPU: 0 PID: 28585 Comm: syz.1.7866 Not tainted syzkaller #0 [ 1409.452179][T28585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1409.462298][T28585] Call Trace: [ 1409.465619][T28585] [ 1409.468593][T28585] dump_stack_lvl+0x18c/0x250 [ 1409.473341][T28585] ? show_regs_print_info+0x20/0x20 [ 1409.478588][T28585] ? load_image+0x400/0x400 [ 1409.483150][T28585] ? __might_sleep+0xe0/0xe0 [ 1409.487787][T28585] ? __lock_acquire+0x7d40/0x7d40 [ 1409.492846][T28585] ? __lock_acquire+0x1273/0x7d40 [ 1409.497924][T28585] should_fail_ex+0x39d/0x4d0 [ 1409.502756][T28585] should_failslab+0x9/0x20 [ 1409.507301][T28585] slab_pre_alloc_hook+0x59/0x310 [ 1409.512392][T28585] kmem_cache_alloc_node+0x60/0x320 [ 1409.517642][T28585] ? __alloc_skb+0x103/0x2c0 [ 1409.522289][T28585] __alloc_skb+0x103/0x2c0 [ 1409.526767][T28585] alloc_skb_with_frags+0xca/0x7b0 [ 1409.531935][T28585] ? __lock_acquire+0x7d40/0x7d40 [ 1409.537000][T28585] ? __lock_acquire+0x1273/0x7d40 [ 1409.542072][T28585] sock_alloc_send_pskb+0x883/0x9a0 [ 1409.547369][T28585] ? sock_kzfree_s+0x50/0x50 [ 1409.552018][T28585] ? verify_lock_unused+0x140/0x140 [ 1409.557260][T28585] ? dev_get_by_index+0x22/0x2d0 [ 1409.562236][T28585] ? dev_get_by_index+0x22/0x2d0 [ 1409.567225][T28585] packet_sendmsg+0x316e/0x4d70 [ 1409.572175][T28585] ? __might_sleep+0xe0/0xe0 [ 1409.576825][T28585] ? verify_lock_unused+0x140/0x140 [ 1409.582061][T28585] ? mark_lock+0x94/0x320 [ 1409.586439][T28585] ? __lock_acquire+0x1273/0x7d40 [ 1409.591504][T28585] ? verify_lock_unused+0x140/0x140 [ 1409.596756][T28585] ? aa_sk_perm+0x83c/0x970 [ 1409.601320][T28585] ? packet_getsockopt+0xad0/0xad0 [ 1409.606501][T28585] ? aa_sock_msg_perm+0x94/0x150 [ 1409.611487][T28585] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1409.616806][T28585] ? security_socket_sendmsg+0x80/0xa0 [ 1409.622343][T28585] ? packet_getsockopt+0xad0/0xad0 [ 1409.627525][T28585] ____sys_sendmsg+0x5ba/0x960 [ 1409.632335][T28585] ? __lock_acquire+0x7d40/0x7d40 [ 1409.637416][T28585] ? __asan_memset+0x22/0x40 [ 1409.642057][T28585] ? __sys_sendmsg_sock+0x30/0x30 [ 1409.647120][T28585] ? __import_iovec+0x3fa/0x850 [ 1409.652037][T28585] ? import_iovec+0x73/0xa0 [ 1409.656592][T28585] ___sys_sendmsg+0x2a6/0x360 [ 1409.661298][T28585] ? get_pid_task+0x20/0x1e0 [ 1409.665942][T28585] ? __sys_sendmsg+0x2a0/0x2a0 [ 1409.670802][T28585] ? __lock_acquire+0x7d40/0x7d40 [ 1409.675943][T28585] __se_sys_sendmsg+0x1c2/0x2b0 [ 1409.680873][T28585] ? __x64_sys_sendmsg+0x80/0x80 [ 1409.685897][T28585] ? lockdep_hardirqs_on+0x98/0x150 [ 1409.691165][T28585] do_syscall_64+0x55/0xa0 [ 1409.695625][T28585] ? clear_bhb_loop+0x40/0x90 [ 1409.700364][T28585] ? clear_bhb_loop+0x40/0x90 [ 1409.705091][T28585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1409.711030][T28585] RIP: 0033:0x7fa223f9c629 [ 1409.715490][T28585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1409.735142][T28585] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1409.743606][T28585] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1409.751619][T28585] RDX: 0000000024000008 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1409.759629][T28585] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.767643][T28585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.775663][T28585] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1409.783736][T28585] [ 1410.610310][T28595] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1410.617360][T28595] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1410.656977][T28595] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7869'. [ 1410.681026][T28595] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1410.688470][T28595] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1410.802273][T28600] validate_nla: 3 callbacks suppressed [ 1410.802379][T28600] netlink: 'syz.2.7871': attribute type 10 has an invalid length. [ 1410.819167][T28600] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7871'. [ 1410.869082][T28598] sctp: [Deprecated]: syz.1.7870 (pid 28598) Use of int in max_burst socket option deprecated. [ 1410.869082][T28598] Use struct sctp_assoc_value instead [ 1411.064420][T28610] netlink: 'syz.4.7875': attribute type 4 has an invalid length. [ 1411.078837][T28610] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7875'. [ 1411.096879][T28610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1411.412653][T28622] FAULT_INJECTION: forcing a failure. [ 1411.412653][T28622] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.428828][T28622] CPU: 1 PID: 28622 Comm: syz.1.7880 Not tainted syzkaller #0 [ 1411.436355][T28622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.438014][T28623] netlink: 'syz.3.7881': attribute type 23 has an invalid length. [ 1411.446432][T28622] Call Trace: [ 1411.446444][T28622] [ 1411.446453][T28622] dump_stack_lvl+0x18c/0x250 [ 1411.446492][T28622] ? show_regs_print_info+0x20/0x20 [ 1411.446522][T28622] ? load_image+0x400/0x400 [ 1411.446550][T28622] ? __might_sleep+0xe0/0xe0 [ 1411.446577][T28622] ? __lock_acquire+0x7d40/0x7d40 [ 1411.446608][T28622] should_fail_ex+0x39d/0x4d0 [ 1411.446642][T28622] should_failslab+0x9/0x20 [ 1411.446673][T28622] slab_pre_alloc_hook+0x59/0x310 [ 1411.446707][T28622] ? __get_vm_area_node+0x125/0x370 [ 1411.446749][T28622] __kmem_cache_alloc_node+0x53/0x250 [ 1411.446781][T28622] ? __get_vm_area_node+0x125/0x370 [ 1411.446808][T28622] kmalloc_node_trace+0x26/0xe0 [ 1411.446842][T28622] __get_vm_area_node+0x125/0x370 [ 1411.446876][T28622] __vmalloc_node_range+0x36e/0x1330 [ 1411.446904][T28622] ? netlink_sendmsg+0x602/0xbf0 [ 1411.535148][T28622] ? netlink_insert+0x109f/0x13a0 [ 1411.540238][T28622] ? netlink_data_ready+0x10/0x10 [ 1411.545304][T28622] ? free_vm_area+0x50/0x50 [ 1411.549845][T28622] ? netlink_sendmsg+0x602/0xbf0 [ 1411.554811][T28622] vmalloc+0x79/0x90 [ 1411.558731][T28622] ? netlink_sendmsg+0x602/0xbf0 [ 1411.563700][T28622] netlink_sendmsg+0x602/0xbf0 [ 1411.568512][T28622] ? netlink_getsockopt+0x590/0x590 [ 1411.573755][T28622] ? aa_sock_msg_perm+0x94/0x150 [ 1411.578722][T28622] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1411.584037][T28622] ? security_socket_sendmsg+0x80/0xa0 [ 1411.589532][T28622] sock_write_iter+0x2df/0x420 [ 1411.594342][T28622] ? sock_read_iter+0x3e0/0x3e0 [ 1411.599227][T28622] ? common_file_perm+0x198/0x1f0 [ 1411.604285][T28622] vfs_write+0x46c/0x990 [ 1411.608559][T28622] ? file_end_write+0x250/0x250 [ 1411.613440][T28622] ? __fget_files+0x43d/0x4b0 [ 1411.618143][T28622] ? __fdget_pos+0x1d8/0x330 [ 1411.622762][T28622] ? ksys_write+0x75/0x260 [ 1411.627208][T28622] ksys_write+0x150/0x260 [ 1411.631567][T28622] ? __ia32_sys_read+0x90/0x90 [ 1411.636356][T28622] ? lockdep_hardirqs_on+0x98/0x150 [ 1411.641582][T28622] do_syscall_64+0x55/0xa0 [ 1411.646037][T28622] ? clear_bhb_loop+0x40/0x90 [ 1411.650742][T28622] ? clear_bhb_loop+0x40/0x90 [ 1411.655444][T28622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.661354][T28622] RIP: 0033:0x7fa223f9c629 [ 1411.665789][T28622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1411.685941][T28622] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1411.694405][T28622] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1411.702395][T28622] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 1411.710390][T28622] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.718387][T28622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.726409][T28622] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1411.734414][T28622] [ 1411.755122][T28622] syz.1.7880: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1411.784529][T28622] CPU: 1 PID: 28622 Comm: syz.1.7880 Not tainted syzkaller #0 [ 1411.792073][T28622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1411.802185][T28622] Call Trace: [ 1411.805550][T28622] [ 1411.808526][T28622] dump_stack_lvl+0x18c/0x250 [ 1411.813268][T28622] ? show_regs_print_info+0x20/0x20 [ 1411.818534][T28622] ? load_image+0x400/0x400 [ 1411.823093][T28622] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1411.829559][T28622] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1411.836113][T28622] warn_alloc+0x246/0x340 [ 1411.840503][T28622] ? __get_vm_area_node+0x125/0x370 [ 1411.845766][T28622] ? zone_watermark_ok_safe+0x230/0x230 [ 1411.851375][T28622] ? rcu_is_watching+0x15/0xb0 [ 1411.856193][T28622] ? __get_vm_area_node+0x356/0x370 [ 1411.861439][T28622] __vmalloc_node_range+0x393/0x1330 [ 1411.866766][T28622] ? netlink_insert+0x109f/0x13a0 [ 1411.871825][T28622] ? netlink_data_ready+0x10/0x10 [ 1411.876874][T28622] ? free_vm_area+0x50/0x50 [ 1411.881398][T28622] ? netlink_sendmsg+0x602/0xbf0 [ 1411.886359][T28622] vmalloc+0x79/0x90 [ 1411.890284][T28622] ? netlink_sendmsg+0x602/0xbf0 [ 1411.895283][T28622] netlink_sendmsg+0x602/0xbf0 [ 1411.900121][T28622] ? netlink_getsockopt+0x590/0x590 [ 1411.905382][T28622] ? aa_sock_msg_perm+0x94/0x150 [ 1411.910370][T28622] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1411.915703][T28622] ? security_socket_sendmsg+0x80/0xa0 [ 1411.921204][T28622] sock_write_iter+0x2df/0x420 [ 1411.926009][T28622] ? sock_read_iter+0x3e0/0x3e0 [ 1411.930880][T28622] ? common_file_perm+0x198/0x1f0 [ 1411.935933][T28622] vfs_write+0x46c/0x990 [ 1411.940217][T28622] ? file_end_write+0x250/0x250 [ 1411.945130][T28622] ? __fget_files+0x43d/0x4b0 [ 1411.949854][T28622] ? __fdget_pos+0x1d8/0x330 [ 1411.954472][T28622] ? ksys_write+0x75/0x260 [ 1411.958934][T28622] ksys_write+0x150/0x260 [ 1411.963287][T28622] ? __ia32_sys_read+0x90/0x90 [ 1411.968089][T28622] ? lockdep_hardirqs_on+0x98/0x150 [ 1411.973329][T28622] do_syscall_64+0x55/0xa0 [ 1411.977776][T28622] ? clear_bhb_loop+0x40/0x90 [ 1411.982529][T28622] ? clear_bhb_loop+0x40/0x90 [ 1411.987243][T28622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1411.993195][T28622] RIP: 0033:0x7fa223f9c629 [ 1411.997655][T28622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.017298][T28622] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1412.025745][T28622] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1412.033743][T28622] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000003 [ 1412.041743][T28622] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.049735][T28622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.057728][T28622] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1412.065736][T28622] [ 1412.079028][T28622] Mem-Info: [ 1412.082385][T28622] active_anon:11116 inactive_anon:0 isolated_anon:0 [ 1412.082385][T28622] active_file:21388 inactive_file:40455 isolated_file:0 [ 1412.082385][T28622] unevictable:768 dirty:100 writeback:0 [ 1412.082385][T28622] slab_reclaimable:10925 slab_unreclaimable:101254 [ 1412.082385][T28622] mapped:25208 shmem:1373 pagetables:592 [ 1412.082385][T28622] sec_pagetables:0 bounce:0 [ 1412.082385][T28622] kernel_misc_reclaimable:0 [ 1412.082385][T28622] free:1325544 free_pcp:4894 free_cma:0 [ 1412.144371][T28622] Node 0 active_anon:44464kB inactive_anon:0kB active_file:85552kB inactive_file:161616kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100832kB dirty:400kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10848kB pagetables:2368kB sec_pagetables:0kB all_unreclaimable? no [ 1412.179349][T28622] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1412.212490][T28622] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.259490][T28622] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1412.280626][T28622] Node 0 DMA32 free:1373204kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:44220kB inactive_anon:0kB active_file:85552kB inactive_file:160784kB unevictable:1536kB writepending:412kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:13880kB local_pcp:9624kB free_cma:0kB [ 1412.323751][T28622] lowmem_reserve[]: 0 0 0 0 0 [ 1412.329519][T28622] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1412.357985][T28622] lowmem_reserve[]: 0 0 0 0 0 [ 1412.363112][T28622] Node 1 Normal free:3912940kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6372kB local_pcp:0kB free_cma:0kB [ 1412.424436][T28622] lowmem_reserve[]: 0 0 0 0 0 [ 1412.452504][T28622] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1412.477699][T28622] Node 0 DMA32: 963*4kB (UME) 299*8kB (UME) 97*16kB (UME) 603*32kB (UME) 1342*64kB (UME) 954*128kB (UME) 178*256kB (UM) 129*512kB (UME) 84*1024kB (UME) 11*2048kB (UME) 224*4096kB (UM) = 1372756kB [ 1412.500720][T28633] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7883'. [ 1412.515380][T28622] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1412.529139][T28633] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7883'. [ 1412.539504][T28622] Node 1 Normal: 247*4kB (UME) 48*8kB (UME) 47*16kB (UME) 247*32kB (UME) 103*64kB (UE) 28*128kB (UME) 2*256kB (UE) 2*512kB (UM) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3912940kB [ 1412.576205][T28622] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.593079][T28622] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1412.610620][T28622] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1412.630615][T28622] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1412.645827][T28622] 63216 total pagecache pages [ 1412.654112][T28622] 0 pages in swap cache [ 1412.661992][T28622] Free swap = 124996kB [ 1412.669940][T28633] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7883'. [ 1412.679610][T28622] Total swap = 124996kB [ 1412.683921][T28622] 2097051 pages RAM [ 1412.687849][T28622] 0 pages HighMem/MovableOnly [ 1412.693734][T28622] 416922 pages reserved [ 1412.701426][T28622] 0 pages cma reserved [ 1412.893845][T28638] sctp: [Deprecated]: syz.2.7884 (pid 28638) Use of int in max_burst socket option deprecated. [ 1412.893845][T28638] Use struct sctp_assoc_value instead [ 1412.987341][T28643] netlink: 'syz.3.7886': attribute type 10 has an invalid length. [ 1413.018904][T28643] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7886'. [ 1413.346012][T28650] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7889'. [ 1413.410396][ T5085] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1413.425501][T28654] netlink: 'syz.2.7892': attribute type 23 has an invalid length. [ 1413.446551][T28656] FAULT_INJECTION: forcing a failure. [ 1413.446551][T28656] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1413.460809][T28656] CPU: 1 PID: 28656 Comm: syz.4.7893 Not tainted syzkaller #0 [ 1413.468325][T28656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1413.478421][T28656] Call Trace: [ 1413.481738][T28656] [ 1413.484702][T28656] dump_stack_lvl+0x18c/0x250 [ 1413.489442][T28656] ? show_regs_print_info+0x20/0x20 [ 1413.494681][T28656] ? load_image+0x400/0x400 [ 1413.499213][T28656] ? __might_fault+0xaa/0x120 [ 1413.503925][T28656] ? __lock_acquire+0x7d40/0x7d40 [ 1413.508992][T28656] should_fail_ex+0x39d/0x4d0 [ 1413.513703][T28656] _copy_from_user+0x2f/0xe0 [ 1413.518328][T28656] kstrtouint_from_user+0xde/0x170 [ 1413.523487][T28656] ? kstrtol_from_user+0x190/0x190 [ 1413.528648][T28656] proc_fail_nth_write+0x8f/0x250 [ 1413.533752][T28656] ? proc_fail_nth_read+0x260/0x260 [ 1413.539071][T28656] ? proc_fail_nth_read+0x260/0x260 [ 1413.544306][T28656] vfs_write+0x296/0x990 [ 1413.548587][T28656] ? file_end_write+0x250/0x250 [ 1413.553470][T28656] ? __fget_files+0x28/0x4b0 [ 1413.558086][T28656] ? __fget_files+0x28/0x4b0 [ 1413.562707][T28656] ? __fget_files+0x43d/0x4b0 [ 1413.567415][T28656] ? __fdget_pos+0x2a3/0x330 [ 1413.572046][T28656] ? ksys_write+0x75/0x260 [ 1413.576502][T28656] ksys_write+0x150/0x260 [ 1413.580864][T28656] ? __ia32_sys_read+0x90/0x90 [ 1413.585656][T28656] ? lockdep_hardirqs_on+0x98/0x150 [ 1413.590882][T28656] do_syscall_64+0x55/0xa0 [ 1413.595331][T28656] ? clear_bhb_loop+0x40/0x90 [ 1413.600036][T28656] ? clear_bhb_loop+0x40/0x90 [ 1413.604735][T28656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1413.610652][T28656] RIP: 0033:0x7f992ed5cece [ 1413.615087][T28656] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1413.634806][T28656] RSP: 002b:00007f992fbaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1413.643252][T28656] RAX: ffffffffffffffda RBX: 00007f992fbb06c0 RCX: 00007f992ed5cece [ 1413.651260][T28656] RDX: 0000000000000001 RSI: 00007f992fbb00a0 RDI: 0000000000000004 [ 1413.659256][T28656] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.667243][T28656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.675237][T28656] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1413.683251][T28656] [ 1413.854776][T28659] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1413.863601][T28659] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1414.075972][T28668] netlink: 'syz.3.7895': attribute type 10 has an invalid length. [ 1414.108875][T28663] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7894'. [ 1414.161746][T28667] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1414.169890][T28667] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1414.184984][T28669] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7903'. [ 1414.472202][T28674] sctp: [Deprecated]: syz.1.7897 (pid 28674) Use of int in max_burst socket option deprecated. [ 1414.472202][T28674] Use struct sctp_assoc_value instead [ 1414.546414][T28677] netlink: 'syz.4.7898': attribute type 10 has an invalid length. [ 1414.570144][T28677] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7898'. [ 1414.986328][T28692] netlink: 'syz.4.7905': attribute type 23 has an invalid length. [ 1415.396360][T28696] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1415.432035][T28696] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1415.541455][T28701] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7906'. [ 1415.571039][T28703] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1415.579475][T28703] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1415.590915][T28700] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7907'. [ 1415.610465][T28709] netlink: 'syz.4.7908': attribute type 23 has an invalid length. [ 1416.213917][T28722] netlink: 'syz.3.7911': attribute type 39 has an invalid length. [ 1416.361415][T28719] sctp: [Deprecated]: syz.2.7910 (pid 28719) Use of int in max_burst socket option deprecated. [ 1416.361415][T28719] Use struct sctp_assoc_value instead [ 1417.046604][T28724] netlink: 'syz.4.7913': attribute type 10 has an invalid length. [ 1417.175696][T28737] netlink: 'syz.3.7916': attribute type 23 has an invalid length. [ 1417.285923][T28741] netlink: 'syz.2.7917': attribute type 10 has an invalid length. [ 1417.501365][T28746] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1417.517616][T28746] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1417.589514][T28749] __nla_validate_parse: 1 callbacks suppressed [ 1417.589534][T28749] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7919'. [ 1417.634226][T28746] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1417.647940][T28746] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1417.853607][T28755] netlink: 'syz.2.7923': attribute type 10 has an invalid length. [ 1417.900533][T28755] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7923'. [ 1418.028307][T28763] netlink: 'syz.1.7924': attribute type 23 has an invalid length. [ 1418.160934][T28759] sctp: [Deprecated]: syz.3.7925 (pid 28759) Use of int in max_burst socket option deprecated. [ 1418.160934][T28759] Use struct sctp_assoc_value instead [ 1418.779849][T28766] netlink: 'syz.2.7926': attribute type 39 has an invalid length. [ 1419.249518][T28780] netlink: 'syz.3.7929': attribute type 23 has an invalid length. [ 1419.500115][T28793] netlink: 'syz.2.7933': attribute type 10 has an invalid length. [ 1419.626178][T28796] netlink: 'syz.4.7934': attribute type 10 has an invalid length. [ 1419.698159][T28796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1419.724896][T28796] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1419.742582][T28798] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7935'. [ 1419.861810][T28801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1419.880261][T28801] team0: Port device bond0 added [ 1419.990089][T28809] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.7938'. [ 1420.006909][T28807] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1420.028394][T28807] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1420.141248][T28810] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7939'. [ 1420.154729][T28807] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1420.163094][T28807] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1420.482841][T28817] FAULT_INJECTION: forcing a failure. [ 1420.482841][T28817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1420.501601][T28817] CPU: 0 PID: 28817 Comm: syz.4.7941 Not tainted syzkaller #0 [ 1420.509139][T28817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1420.519241][T28817] Call Trace: [ 1420.522568][T28817] [ 1420.525537][T28817] dump_stack_lvl+0x18c/0x250 [ 1420.530274][T28817] ? show_regs_print_info+0x20/0x20 [ 1420.535523][T28817] ? load_image+0x400/0x400 [ 1420.540076][T28817] ? __might_fault+0xaa/0x120 [ 1420.544804][T28817] ? __lock_acquire+0x7d40/0x7d40 [ 1420.549888][T28817] should_fail_ex+0x39d/0x4d0 [ 1420.554625][T28817] _copy_from_user+0x2f/0xe0 [ 1420.559267][T28817] bpf_prog_test_run_skb+0x266/0x12b0 [ 1420.564684][T28817] ? __fget_files+0x28/0x4b0 [ 1420.569319][T28817] ? __fget_files+0x28/0x4b0 [ 1420.573951][T28817] ? __fget_files+0x43d/0x4b0 [ 1420.578682][T28817] ? cpu_online+0x60/0x60 [ 1420.583049][T28817] bpf_prog_test_run+0x321/0x390 [ 1420.588016][T28817] __sys_bpf+0x49d/0x890 [ 1420.592291][T28817] ? bpf_link_show_fdinfo+0x390/0x390 [ 1420.597709][T28817] ? lock_chain_count+0x20/0x20 [ 1420.602598][T28817] __x64_sys_bpf+0x7c/0x90 [ 1420.607042][T28817] do_syscall_64+0x55/0xa0 [ 1420.611492][T28817] ? clear_bhb_loop+0x40/0x90 [ 1420.616198][T28817] ? clear_bhb_loop+0x40/0x90 [ 1420.620906][T28817] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1420.626823][T28817] RIP: 0033:0x7f992ed9c629 [ 1420.631263][T28817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1420.650913][T28817] RSP: 002b:00007f992fbb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1420.659358][T28817] RAX: ffffffffffffffda RBX: 00007f992f015fa0 RCX: 00007f992ed9c629 [ 1420.667357][T28817] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 1420.675355][T28817] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.683359][T28817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.691357][T28817] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1420.699376][T28817] [ 1421.292875][T28831] validate_nla: 5 callbacks suppressed [ 1421.293019][T28831] netlink: 'syz.4.7945': attribute type 39 has an invalid length. [ 1421.878889][T28842] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1421.898849][T28842] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1421.947187][T28845] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7949'. [ 1421.959955][T28837] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1421.969371][T28837] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1422.018016][T28841] netlink: 'syz.3.7947': attribute type 10 has an invalid length. [ 1422.034269][T28841] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7947'. [ 1422.190418][T28852] netlink: 'syz.4.7952': attribute type 10 has an invalid length. [ 1422.482943][T28863] netlink: 'syz.3.7956': attribute type 23 has an invalid length. [ 1422.956357][T28876] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1422.964244][T28876] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1422.996737][T28876] netlink: 180 bytes leftover after parsing attributes in process `syz.3.7961'. [ 1423.019247][T28878] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1423.026452][T28878] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1423.055755][T28876] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1423.063510][T28876] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1423.102350][T28878] netlink: 180 bytes leftover after parsing attributes in process `syz.4.7962'. [ 1423.138135][T28878] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1423.147963][T28878] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1423.262297][T28882] netlink: 'syz.1.7963': attribute type 10 has an invalid length. [ 1423.279063][T28882] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7963'. [ 1423.399525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.406001][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.518128][T28891] netlink: 'syz.1.7968': attribute type 23 has an invalid length. [ 1424.097392][T28907] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1424.107012][T28907] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1424.175088][T28907] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7972'. [ 1424.241182][T28907] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1424.261710][T28907] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1424.299360][T28914] netlink: 'syz.4.7982': attribute type 10 has an invalid length. [ 1424.315192][T28911] sctp: [Deprecated]: syz.3.7974 (pid 28911) Use of int in max_burst socket option deprecated. [ 1424.315192][T28911] Use struct sctp_assoc_value instead [ 1424.438099][T28919] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1424.445551][T28919] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1424.496926][T28919] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7975'. [ 1424.553298][T28919] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1424.569918][T28919] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1424.728342][T28926] netlink: 'syz.4.7976': attribute type 10 has an invalid length. [ 1424.736693][T28926] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7976'. [ 1424.804913][T28924] sctp: [Deprecated]: syz.3.7977 (pid 28924) Use of int in max_burst socket option deprecated. [ 1424.804913][T28924] Use struct sctp_assoc_value instead [ 1425.107508][T28936] netlink: 'syz.2.7981': attribute type 23 has an invalid length. [ 1425.541277][T28944] netlink: 'syz.4.7986': attribute type 10 has an invalid length. [ 1425.678897][T28950] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7988'. [ 1425.689872][T28951] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1425.696715][T28951] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1425.775885][T28946] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1425.804668][T28946] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1425.834686][T28948] sctp: [Deprecated]: syz.2.7987 (pid 28948) Use of int in max_burst socket option deprecated. [ 1425.834686][T28948] Use struct sctp_assoc_value instead [ 1425.840153][T28946] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1426.333898][T28966] sctp: [Deprecated]: syz.2.7993 (pid 28966) Use of int in max_burst socket option deprecated. [ 1426.333898][T28966] Use struct sctp_assoc_value instead [ 1426.406192][T28968] validate_nla: 1 callbacks suppressed [ 1426.406210][T28968] netlink: 'syz.1.7995': attribute type 23 has an invalid length. [ 1426.682234][T28977] netlink: 'syz.2.7998': attribute type 10 has an invalid length. [ 1426.700162][T28977] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7998'. [ 1426.788333][T28979] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1426.805989][T28979] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1426.848461][T28981] netlink: 180 bytes leftover after parsing attributes in process `syz.1.7999'. [ 1426.886951][T28980] netlink: 'syz.3.7997': attribute type 10 has an invalid length. [ 1426.924092][T28980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1426.958009][T28980] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1426.976890][T28979] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1426.985249][T28979] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1427.165541][T28983] sctp: [Deprecated]: syz.4.8000 (pid 28983) Use of int in max_burst socket option deprecated. [ 1427.165541][T28983] Use struct sctp_assoc_value instead [ 1427.508505][T29002] FAULT_INJECTION: forcing a failure. [ 1427.508505][T29002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.537497][T29002] CPU: 1 PID: 29002 Comm: syz.1.8006 Not tainted syzkaller #0 [ 1427.545156][T29002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1427.555772][T29002] Call Trace: [ 1427.559097][T29002] [ 1427.562248][T29002] dump_stack_lvl+0x18c/0x250 [ 1427.567008][T29002] ? show_regs_print_info+0x20/0x20 [ 1427.572276][T29002] ? load_image+0x400/0x400 [ 1427.576849][T29002] ? __might_fault+0xaa/0x120 [ 1427.581580][T29002] ? __lock_acquire+0x7d40/0x7d40 [ 1427.586663][T29002] should_fail_ex+0x39d/0x4d0 [ 1427.591407][T29002] _copy_from_user+0x2f/0xe0 [ 1427.596063][T29002] ip_rt_ioctl+0x44d/0x11b0 [ 1427.600638][T29002] ? fib_validate_source+0x1320/0x1320 [ 1427.606184][T29002] ? __might_fault+0xc6/0x120 [ 1427.610922][T29002] ? __might_fault+0xaa/0x120 [ 1427.615657][T29002] inet_ioctl+0x49e/0x560 [ 1427.620043][T29002] ? tomoyo_path_number_perm+0x217/0x620 [ 1427.625748][T29002] ? inet_shutdown+0x370/0x370 [ 1427.630579][T29002] ? slab_free_freelist_hook+0x130/0x1a0 [ 1427.636264][T29002] ? tomoyo_path_number_perm+0x500/0x620 [ 1427.641952][T29002] ? __kmem_cache_free+0xba/0x1e0 [ 1427.647059][T29002] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1427.652598][T29002] sock_do_ioctl+0xfc/0x310 [ 1427.657139][T29002] ? sock_show_fdinfo+0xb0/0xb0 [ 1427.662031][T29002] sock_ioctl+0x5ba/0x7e0 [ 1427.666391][T29002] ? sock_poll+0x3e0/0x3e0 [ 1427.670848][T29002] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1427.675812][T29002] ? security_file_ioctl+0x80/0xa0 [ 1427.680983][T29002] ? sock_poll+0x3e0/0x3e0 [ 1427.685432][T29002] __se_sys_ioctl+0xfd/0x170 [ 1427.690061][T29002] do_syscall_64+0x55/0xa0 [ 1427.694548][T29002] ? clear_bhb_loop+0x40/0x90 [ 1427.699253][T29002] ? clear_bhb_loop+0x40/0x90 [ 1427.703965][T29002] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1427.709897][T29002] RIP: 0033:0x7fa223f9c629 [ 1427.714340][T29002] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.733974][T29002] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1427.742428][T29002] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1427.750427][T29002] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000003 [ 1427.758423][T29002] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.766412][T29002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.774411][T29002] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1427.782429][T29002] [ 1427.882119][T29004] netlink: 'syz.2.8007': attribute type 23 has an invalid length. [ 1427.916714][T29009] netlink: 'syz.3.8009': attribute type 10 has an invalid length. [ 1428.056028][T29018] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1428.064654][T29018] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1428.093752][T29018] __nla_validate_parse: 1 callbacks suppressed [ 1428.093792][T29018] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1428.121232][T29018] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1428.142424][T29018] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1428.357323][T29024] sctp: [Deprecated]: syz.1.8013 (pid 29024) Use of int in max_burst socket option deprecated. [ 1428.357323][T29024] Use struct sctp_assoc_value instead [ 1428.851889][T29038] netlink: 'syz.1.8019': attribute type 10 has an invalid length. [ 1428.860034][T29038] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1428.924438][T29043] netlink: 'syz.2.8020': attribute type 23 has an invalid length. [ 1428.982187][T29042] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1428.996954][T29042] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1429.042179][T29048] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8021'. [ 1429.107988][T29042] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1429.161342][T29042] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1430.435430][T29066] sctp: [Deprecated]: syz.4.8026 (pid 29066) Use of int in max_burst socket option deprecated. [ 1430.435430][T29066] Use struct sctp_assoc_value instead [ 1430.663355][T29075] FAULT_INJECTION: forcing a failure. [ 1430.663355][T29075] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.696453][T29077] netlink: 'syz.1.8031': attribute type 10 has an invalid length. [ 1430.708273][T29077] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8031'. [ 1430.719589][T29075] CPU: 1 PID: 29075 Comm: syz.2.8030 Not tainted syzkaller #0 [ 1430.727120][T29075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1430.737228][T29075] Call Trace: [ 1430.740549][T29075] [ 1430.743524][T29075] dump_stack_lvl+0x18c/0x250 [ 1430.748259][T29075] ? show_regs_print_info+0x20/0x20 [ 1430.753519][T29075] ? _printk+0x11d/0x130 [ 1430.757818][T29075] should_fail_ex+0x39d/0x4d0 [ 1430.762562][T29075] should_failslab+0x9/0x20 [ 1430.767209][T29075] slab_pre_alloc_hook+0x59/0x310 [ 1430.772298][T29075] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1430.778092][T29075] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1430.783860][T29075] __kmem_cache_alloc_node+0x53/0x250 [ 1430.789294][T29075] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1430.795066][T29075] __kmalloc+0xa4/0x230 [ 1430.799308][T29075] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1430.804916][T29075] tomoyo_path_number_perm+0x248/0x620 [ 1430.810430][T29075] ? tomoyo_path_number_perm+0x217/0x620 [ 1430.816113][T29075] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1430.821654][T29075] ? ksys_write+0x1c4/0x260 [ 1430.826252][T29075] ? __fget_files+0x28/0x4b0 [ 1430.830874][T29075] ? __fget_files+0x28/0x4b0 [ 1430.835530][T29075] security_file_ioctl+0x70/0xa0 [ 1430.840512][T29075] __se_sys_ioctl+0x48/0x170 [ 1430.845135][T29075] do_syscall_64+0x55/0xa0 [ 1430.849591][T29075] ? clear_bhb_loop+0x40/0x90 [ 1430.854294][T29075] ? clear_bhb_loop+0x40/0x90 [ 1430.859006][T29075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1430.864921][T29075] RIP: 0033:0x7f58c019c629 [ 1430.869372][T29075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.889003][T29075] RSP: 002b:00007f58c10fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1430.897533][T29075] RAX: ffffffffffffffda RBX: 00007f58c0415fa0 RCX: 00007f58c019c629 [ 1430.905652][T29075] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 0000000000000011 [ 1430.913648][T29075] RBP: 00007f58c10fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.921644][T29075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.929637][T29075] R13: 00007f58c0416038 R14: 00007f58c0415fa0 R15: 00007ffc48cb13d8 [ 1430.937671][T29075] [ 1431.012182][T29075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1431.209430][T29079] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1431.220320][T29079] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1431.270098][T29079] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8032'. [ 1431.300969][T29079] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1431.308532][T29079] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1431.345252][T29086] netlink: 'syz.1.8035': attribute type 23 has an invalid length. [ 1432.023418][T29108] netlink: 'syz.3.8043': attribute type 10 has an invalid length. [ 1432.034349][T29108] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8043'. [ 1434.692504][T29117] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1434.700683][T29117] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1434.756405][T29122] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8045'. [ 1434.779046][T29124] netlink: 'syz.4.8048': attribute type 23 has an invalid length. [ 1434.805700][T29117] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1434.817716][T29117] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1435.637855][T29145] netlink: 'syz.1.8054': attribute type 10 has an invalid length. [ 1435.653726][T29145] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8054'. [ 1436.022124][T29152] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1436.038259][T29152] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1436.109199][ T5085] Bluetooth: hci4: command 0x0406 tx timeout [ 1436.123200][T29155] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1436.170414][T29159] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1436.178399][T29159] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1436.343140][T29162] netlink: 'syz.2.8060': attribute type 23 has an invalid length. [ 1436.383739][T29163] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1436.401359][T29163] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1436.452679][T29168] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8059'. [ 1436.471721][T29163] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1436.488973][T29163] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1436.767992][T29175] netlink: 'syz.3.8065': attribute type 10 has an invalid length. [ 1436.790483][T29175] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8065'. [ 1437.210432][T29187] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1437.218141][T29187] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1437.259338][T29187] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8070'. [ 1437.279936][T29187] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1437.288005][T29187] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1437.681764][T29198] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1437.696230][T29198] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1437.747681][T29202] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8074'. [ 1437.778229][T29203] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1437.799704][T29203] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1437.941508][T29207] netlink: 'syz.2.8077': attribute type 10 has an invalid length. [ 1437.956700][T29207] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8077'. [ 1438.036120][T29210] netlink: 'syz.1.8080': attribute type 10 has an invalid length. [ 1438.105432][T29210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1438.158454][T29210] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1439.545289][T29228] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1439.579008][T29228] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1439.640129][T29230] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8086'. [ 1439.809439][T29232] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1439.816628][T29232] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1440.145798][T29236] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1440.158935][T29236] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1440.184269][T29237] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1440.240195][T29238] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1440.251185][T29238] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1440.260455][T29243] netlink: 'syz.2.8089': attribute type 10 has an invalid length. [ 1440.281731][T29243] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8089'. [ 1440.722992][T29255] netlink: 'syz.1.8093': attribute type 9 has an invalid length. [ 1440.758761][T29255] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8093'. [ 1440.982511][T29257] netlink: 'syz.2.8094': attribute type 10 has an invalid length. [ 1441.099744][T29257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1441.138848][T29257] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1441.430392][T29270] netlink: 'syz.3.8097': attribute type 10 has an invalid length. [ 1441.446504][T29270] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8097'. [ 1441.881658][T29278] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1441.890964][T29278] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1441.914927][T29274] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8098'. [ 1441.943811][T29282] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1441.964827][T29282] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1441.991878][T29283] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1442.009182][T29283] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1442.039937][T29281] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8100'. [ 1442.184854][T29289] netlink: 'syz.2.8102': attribute type 10 has an invalid length. [ 1442.198989][T29289] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8102'. [ 1442.279506][T29296] FAULT_INJECTION: forcing a failure. [ 1442.279506][T29296] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.295697][T29296] CPU: 1 PID: 29296 Comm: syz.3.8104 Not tainted syzkaller #0 [ 1442.303226][T29296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1442.313327][T29296] Call Trace: [ 1442.316644][T29296] [ 1442.319617][T29296] dump_stack_lvl+0x18c/0x250 [ 1442.324351][T29296] ? show_regs_print_info+0x20/0x20 [ 1442.329607][T29296] ? load_image+0x400/0x400 [ 1442.334170][T29296] ? __might_sleep+0xe0/0xe0 [ 1442.338819][T29296] ? __lock_acquire+0x7d40/0x7d40 [ 1442.343903][T29296] ? __lock_acquire+0x1273/0x7d40 [ 1442.348984][T29296] should_fail_ex+0x39d/0x4d0 [ 1442.353720][T29296] should_failslab+0x9/0x20 [ 1442.358261][T29296] slab_pre_alloc_hook+0x59/0x310 [ 1442.363321][T29296] kmem_cache_alloc_node+0x60/0x320 [ 1442.368548][T29296] ? __alloc_skb+0x103/0x2c0 [ 1442.373173][T29296] __alloc_skb+0x103/0x2c0 [ 1442.377624][T29296] alloc_skb_with_frags+0xca/0x7b0 [ 1442.382781][T29296] ? trace_event_raw_event_lock+0x250/0x250 [ 1442.388722][T29296] ? __lock_acquire+0x1273/0x7d40 [ 1442.393769][T29296] sock_alloc_send_pskb+0x883/0x9a0 [ 1442.399028][T29296] ? sock_kzfree_s+0x50/0x50 [ 1442.403668][T29296] ? __sock_cmsg_send+0x33b/0x460 [ 1442.408719][T29296] ? sock_cmsg_send+0x24a/0x270 [ 1442.413603][T29296] packet_sendmsg+0x316e/0x4d70 [ 1442.418490][T29296] ? sugov_update_single_common+0x4e0/0xa60 [ 1442.424414][T29296] ? __might_sleep+0xe0/0xe0 [ 1442.429027][T29296] ? trace_event_raw_event_lock+0x250/0x250 [ 1442.434962][T29296] ? aa_sk_perm+0x83c/0x970 [ 1442.439495][T29296] ? packet_getsockopt+0xad0/0xad0 [ 1442.444642][T29296] ? __might_fault+0xaa/0x120 [ 1442.449336][T29296] ? aa_sock_msg_perm+0x94/0x150 [ 1442.454301][T29296] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1442.459608][T29296] ? security_socket_sendmsg+0x80/0xa0 [ 1442.465087][T29296] ? packet_getsockopt+0xad0/0xad0 [ 1442.470230][T29296] ____sys_sendmsg+0x5ba/0x960 [ 1442.475014][T29296] ? __lock_acquire+0x7d40/0x7d40 [ 1442.480072][T29296] ? __sys_sendmsg_sock+0x30/0x30 [ 1442.485122][T29296] ? __import_iovec+0x3fa/0x850 [ 1442.490007][T29296] ? import_iovec+0x73/0xa0 [ 1442.494541][T29296] ___sys_sendmsg+0x2a6/0x360 [ 1442.499247][T29296] ? __sys_sendmsg+0x2a0/0x2a0 [ 1442.504048][T29296] ? __lock_acquire+0x7d40/0x7d40 [ 1442.509128][T29296] __se_sys_sendmsg+0x1c2/0x2b0 [ 1442.514001][T29296] ? __x64_sys_sendmsg+0x80/0x80 [ 1442.518971][T29296] ? lockdep_hardirqs_on+0x98/0x150 [ 1442.524198][T29296] do_syscall_64+0x55/0xa0 [ 1442.528651][T29296] ? clear_bhb_loop+0x40/0x90 [ 1442.533356][T29296] ? clear_bhb_loop+0x40/0x90 [ 1442.538054][T29296] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1442.543976][T29296] RIP: 0033:0x7f80e059c629 [ 1442.548417][T29296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.568047][T29296] RSP: 002b:00007f80e13b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.576498][T29296] RAX: ffffffffffffffda RBX: 00007f80e0816090 RCX: 00007f80e059c629 [ 1442.584492][T29296] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1442.592500][T29296] RBP: 00007f80e13b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.600495][T29296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.608521][T29296] R13: 00007f80e0816128 R14: 00007f80e0816090 R15: 00007ffd3c4a3098 [ 1442.616542][T29296] [ 1442.626472][T29297] netlink: 'syz.1.8105': attribute type 1 has an invalid length. [ 1442.635754][T29297] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.8105'. [ 1443.016517][T29306] netlink: 'syz.3.8107': attribute type 10 has an invalid length. [ 1443.024588][T29306] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8107'. [ 1443.148192][T29310] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1443.159931][T29310] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1443.365111][T29320] netlink: 'syz.1.8110': attribute type 10 has an invalid length. [ 1443.378809][T29320] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8110'. [ 1443.475623][T29322] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1443.496183][T29322] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1443.696193][T29327] netlink: 'syz.1.8115': attribute type 21 has an invalid length. [ 1443.754817][T29329] netlink: 'syz.3.8116': attribute type 10 has an invalid length. [ 1443.863817][T29331] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1443.959059][T29331] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1444.063237][T29336] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1444.070774][T29336] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1444.347363][T29346] netlink: 'syz.4.8120': attribute type 10 has an invalid length. [ 1444.587095][T29356] netlink: 'syz.4.8124': attribute type 10 has an invalid length. [ 1444.714053][T29359] netlink: 'syz.3.8127': attribute type 10 has an invalid length. [ 1445.146969][T29370] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1445.239920][T29370] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1445.718284][T29374] netlink: 'syz.2.8132': attribute type 10 has an invalid length. [ 1445.984696][T29382] FAULT_INJECTION: forcing a failure. [ 1445.984696][T29382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1446.043320][T29382] CPU: 0 PID: 29382 Comm: syz.3.8135 Not tainted syzkaller #0 [ 1446.050866][T29382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1446.060969][T29382] Call Trace: [ 1446.064308][T29382] [ 1446.067282][T29382] dump_stack_lvl+0x18c/0x250 [ 1446.072024][T29382] ? show_regs_print_info+0x20/0x20 [ 1446.077277][T29382] ? load_image+0x400/0x400 [ 1446.081843][T29382] ? __might_fault+0xaa/0x120 [ 1446.086563][T29382] ? __lock_acquire+0x7d40/0x7d40 [ 1446.091643][T29382] should_fail_ex+0x39d/0x4d0 [ 1446.096380][T29382] _copy_from_user+0x2f/0xe0 [ 1446.101027][T29382] ___sys_sendmsg+0x1c7/0x360 [ 1446.105755][T29382] ? __sys_sendmsg+0x2a0/0x2a0 [ 1446.110615][T29382] __se_sys_sendmsg+0x1c2/0x2b0 [ 1446.115603][T29382] ? __x64_sys_sendmsg+0x80/0x80 [ 1446.120598][T29382] ? lockdep_hardirqs_on+0x98/0x150 [ 1446.125836][T29382] do_syscall_64+0x55/0xa0 [ 1446.130284][T29382] ? clear_bhb_loop+0x40/0x90 [ 1446.134987][T29382] ? clear_bhb_loop+0x40/0x90 [ 1446.139692][T29382] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1446.145608][T29382] RIP: 0033:0x7f80e059c629 [ 1446.150052][T29382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.169677][T29382] RSP: 002b:00007f80e13d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.178111][T29382] RAX: ffffffffffffffda RBX: 00007f80e0815fa0 RCX: 00007f80e059c629 [ 1446.186102][T29382] RDX: 00000000000052cc RSI: 0000200000000040 RDI: 0000000000000005 [ 1446.194095][T29382] RBP: 00007f80e13d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.202105][T29382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.210116][T29382] R13: 00007f80e0816038 R14: 00007f80e0815fa0 R15: 00007ffd3c4a3098 [ 1446.218221][T29382] [ 1446.484891][T29384] netlink: 'syz.2.8136': attribute type 23 has an invalid length. [ 1446.664456][T29393] __nla_validate_parse: 5 callbacks suppressed [ 1446.664476][T29393] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8137'. [ 1446.854471][T29395] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1446.867507][T29395] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1446.893090][T29398] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8138'. [ 1447.017454][T29401] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1447.026241][T29401] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1447.055161][T29402] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8139'. [ 1447.124869][T29406] raw_sendmsg: syz.1.8141 forgot to set AF_INET. Fix it! [ 1447.332487][T29412] netlink: 'syz.3.8144': attribute type 23 has an invalid length. [ 1448.076375][T29433] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1448.121311][T29433] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1448.155970][T29433] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1448.448159][T29438] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1448.472603][T29438] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1448.569033][T29443] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1448.614873][T29443] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1448.655350][T29442] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1448.667382][T29442] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1448.712045][T29446] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8150'. [ 1448.733621][T29445] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1448.968055][T29454] validate_nla: 1 callbacks suppressed [ 1448.968075][T29454] netlink: 'syz.4.8155': attribute type 23 has an invalid length. [ 1449.067009][T29450] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1449.093174][T29450] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1449.688055][T29475] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1449.868688][T29478] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1449.879734][T29478] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1450.062770][T29482] netlink: 'syz.3.8163': attribute type 10 has an invalid length. [ 1450.088061][T29482] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8163'. [ 1450.347078][T29491] netlink: 'syz.2.8168': attribute type 23 has an invalid length. [ 1450.534289][T29497] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1450.572222][T29497] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1451.361965][T29506] netlink: 'syz.2.8171': attribute type 1 has an invalid length. [ 1451.379568][T29506] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.8171'. [ 1451.504458][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 1451.616776][T29510] FAULT_INJECTION: forcing a failure. [ 1451.616776][T29510] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.640630][T29510] CPU: 1 PID: 29510 Comm: syz.2.8172 Not tainted syzkaller #0 [ 1451.648185][T29510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1451.658296][T29510] Call Trace: [ 1451.661616][T29510] [ 1451.664589][T29510] dump_stack_lvl+0x18c/0x250 [ 1451.669323][T29510] ? show_regs_print_info+0x20/0x20 [ 1451.674580][T29510] ? load_image+0x400/0x400 [ 1451.679140][T29510] ? __might_sleep+0xe0/0xe0 [ 1451.683796][T29510] ? __lock_acquire+0x7d40/0x7d40 [ 1451.688886][T29510] should_fail_ex+0x39d/0x4d0 [ 1451.693621][T29510] should_failslab+0x9/0x20 [ 1451.698184][T29510] slab_pre_alloc_hook+0x59/0x310 [ 1451.703271][T29510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1451.709064][T29510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1451.714831][T29510] __kmem_cache_alloc_node+0x53/0x250 [ 1451.720281][T29510] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1451.726059][T29510] __kmalloc+0xa4/0x230 [ 1451.730278][T29510] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1451.735894][T29510] tomoyo_path_number_perm+0x248/0x620 [ 1451.741427][T29510] ? tomoyo_path_number_perm+0x217/0x620 [ 1451.747215][T29510] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1451.752744][T29510] ? ksys_write+0x1c4/0x260 [ 1451.757330][T29510] ? __fget_files+0x28/0x4b0 [ 1451.762049][T29510] ? __fget_files+0x28/0x4b0 [ 1451.766683][T29510] security_file_ioctl+0x70/0xa0 [ 1451.771685][T29510] __se_sys_ioctl+0x48/0x170 [ 1451.776326][T29510] do_syscall_64+0x55/0xa0 [ 1451.780779][T29510] ? clear_bhb_loop+0x40/0x90 [ 1451.785501][T29510] ? clear_bhb_loop+0x40/0x90 [ 1451.790210][T29510] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1451.796168][T29510] RIP: 0033:0x7f58c019c629 [ 1451.800704][T29510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1451.820626][T29510] RSP: 002b:00007f58c10fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1451.829070][T29510] RAX: ffffffffffffffda RBX: 00007f58c0415fa0 RCX: 00007f58c019c629 [ 1451.837073][T29510] RDX: 0000200000000140 RSI: 00000000400454d9 RDI: 0000000000000004 [ 1451.845075][T29510] RBP: 00007f58c10fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1451.853161][T29510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1451.861244][T29510] R13: 00007f58c0416038 R14: 00007f58c0415fa0 R15: 00007ffc48cb13d8 [ 1451.869429][T29510] [ 1451.884875][T29510] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1451.917212][T29513] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1451.925123][T29513] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1451.977955][T29513] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1451.986618][T29513] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1452.192255][T29519] netlink: 'syz.3.8175': attribute type 10 has an invalid length. [ 1452.208359][T29519] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8175'. [ 1452.826812][T29540] FAULT_INJECTION: forcing a failure. [ 1452.826812][T29540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.851290][T29540] CPU: 0 PID: 29540 Comm: syz.3.8185 Not tainted syzkaller #0 [ 1452.858858][T29540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1452.868996][T29540] Call Trace: [ 1452.872313][T29540] [ 1452.875285][T29540] dump_stack_lvl+0x18c/0x250 [ 1452.880025][T29540] ? show_regs_print_info+0x20/0x20 [ 1452.885278][T29540] ? load_image+0x400/0x400 [ 1452.889844][T29540] ? __might_fault+0xaa/0x120 [ 1452.894569][T29540] ? __lock_acquire+0x7d40/0x7d40 [ 1452.899651][T29540] should_fail_ex+0x39d/0x4d0 [ 1452.904392][T29540] _copy_from_user+0x2f/0xe0 [ 1452.909039][T29540] kstrtouint_from_user+0xde/0x170 [ 1452.914230][T29540] ? kstrtol_from_user+0x190/0x190 [ 1452.919421][T29540] proc_fail_nth_write+0x8f/0x250 [ 1452.924504][T29540] ? proc_fail_nth_read+0x260/0x260 [ 1452.929762][T29540] ? proc_fail_nth_read+0x260/0x260 [ 1452.935011][T29540] vfs_write+0x296/0x990 [ 1452.939323][T29540] ? file_end_write+0x250/0x250 [ 1452.944237][T29540] ? __fget_files+0x28/0x4b0 [ 1452.948877][T29540] ? __fget_files+0x28/0x4b0 [ 1452.953533][T29540] ? __fget_files+0x43d/0x4b0 [ 1452.958280][T29540] ? __fdget_pos+0x2a3/0x330 [ 1452.962922][T29540] ? ksys_write+0x75/0x260 [ 1452.967405][T29540] ksys_write+0x150/0x260 [ 1452.971796][T29540] ? __ia32_sys_read+0x90/0x90 [ 1452.976638][T29540] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1452.982698][T29540] do_syscall_64+0x55/0xa0 [ 1452.987202][T29540] ? clear_bhb_loop+0x40/0x90 [ 1452.991961][T29540] ? clear_bhb_loop+0x40/0x90 [ 1452.996738][T29540] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1453.002687][T29540] RIP: 0033:0x7f80e055cece [ 1453.007234][T29540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1453.026900][T29540] RSP: 002b:00007f80e13d2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1453.035375][T29540] RAX: ffffffffffffffda RBX: 00007f80e13d36c0 RCX: 00007f80e055cece [ 1453.043421][T29540] RDX: 0000000000000001 RSI: 00007f80e13d30a0 RDI: 000000000000003b [ 1453.051463][T29540] RBP: 00007f80e13d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.059495][T29540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.067527][T29540] R13: 00007f80e0816038 R14: 00007f80e0815fa0 R15: 00007ffd3c4a3098 [ 1453.075753][T29540] [ 1453.289743][T29548] netlink: 'syz.2.8188': attribute type 10 has an invalid length. [ 1453.322730][T29548] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8188'. [ 1453.358976][T29554] netlink: 'syz.1.8190': attribute type 23 has an invalid length. [ 1453.954947][T29572] netlink: 180 bytes leftover after parsing attributes in process `syz.3.8196'. [ 1453.975004][T29572] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1453.992764][T29572] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1454.170923][T29575] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8205'. [ 1454.335729][T29579] FAULT_INJECTION: forcing a failure. [ 1454.335729][T29579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.425407][T29579] CPU: 0 PID: 29579 Comm: syz.4.8198 Not tainted syzkaller #0 [ 1454.432975][T29579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1454.443121][T29579] Call Trace: [ 1454.446443][T29579] [ 1454.449421][T29579] dump_stack_lvl+0x18c/0x250 [ 1454.454425][T29579] ? show_regs_print_info+0x20/0x20 [ 1454.459693][T29579] ? load_image+0x400/0x400 [ 1454.464788][T29579] ? __might_fault+0xaa/0x120 [ 1454.469551][T29579] ? __lock_acquire+0x7d40/0x7d40 [ 1454.474636][T29579] should_fail_ex+0x39d/0x4d0 [ 1454.479386][T29579] _copy_from_user+0x2f/0xe0 [ 1454.484029][T29579] ___sys_recvmsg+0x176/0x590 [ 1454.488763][T29579] ? __sys_recvmsg+0x2a0/0x2a0 [ 1454.493590][T29579] ? trace_call_bpf+0xc3/0x6c0 [ 1454.498412][T29579] ? trace_call_bpf+0x5e9/0x6c0 [ 1454.503337][T29579] ? __fget_files+0x43d/0x4b0 [ 1454.508086][T29579] __x64_sys_recvmsg+0x20c/0x2e0 [ 1454.513068][T29579] ? perf_trace_preemptirq_template+0x269/0x330 [ 1454.519470][T29579] ? ___sys_recvmsg+0x590/0x590 [ 1454.524400][T29579] ? lockdep_hardirqs_on+0x98/0x150 [ 1454.529641][T29579] do_syscall_64+0x55/0xa0 [ 1454.534103][T29579] ? clear_bhb_loop+0x40/0x90 [ 1454.538808][T29579] ? clear_bhb_loop+0x40/0x90 [ 1454.543516][T29579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1454.549440][T29579] RIP: 0033:0x7f992ed9c629 [ 1454.553877][T29579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.573530][T29579] RSP: 002b:00007f992fbb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1454.581968][T29579] RAX: ffffffffffffffda RBX: 00007f992f015fa0 RCX: 00007f992ed9c629 [ 1454.589963][T29579] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1454.597954][T29579] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.605954][T29579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.614132][T29579] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1454.622155][T29579] [ 1454.884580][T29584] netlink: 'syz.2.8199': attribute type 1 has an invalid length. [ 1454.910407][T29584] netlink: 'syz.2.8199': attribute type 4 has an invalid length. [ 1454.928950][T29584] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8199'. [ 1455.306686][T29592] netlink: 'syz.3.8202': attribute type 23 has an invalid length. [ 1455.699467][T29606] netlink: 180 bytes leftover after parsing attributes in process `syz.4.8207'. [ 1455.864872][T29612] FAULT_INJECTION: forcing a failure. [ 1455.864872][T29612] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.892117][T29612] CPU: 1 PID: 29612 Comm: syz.3.8209 Not tainted syzkaller #0 [ 1455.899713][T29612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.909855][T29612] Call Trace: [ 1455.913213][T29612] [ 1455.916218][T29612] dump_stack_lvl+0x18c/0x250 [ 1455.921000][T29612] ? show_regs_print_info+0x20/0x20 [ 1455.926299][T29612] ? load_image+0x400/0x400 [ 1455.930898][T29612] ? __might_sleep+0xe0/0xe0 [ 1455.935579][T29612] ? __lock_acquire+0x7d40/0x7d40 [ 1455.940705][T29612] should_fail_ex+0x39d/0x4d0 [ 1455.945489][T29612] should_failslab+0x9/0x20 [ 1455.950076][T29612] slab_pre_alloc_hook+0x59/0x310 [ 1455.955198][T29612] ? trace_call_bpf+0x5e9/0x6c0 [ 1455.960144][T29612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.965952][T29612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.971755][T29612] __kmem_cache_alloc_node+0x53/0x250 [ 1455.977250][T29612] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.983047][T29612] __kmalloc+0xa4/0x230 [ 1455.987322][T29612] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1455.993016][T29612] tomoyo_path_number_perm+0x248/0x620 [ 1455.998572][T29612] ? tomoyo_path_number_perm+0x217/0x620 [ 1456.004304][T29612] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1456.009979][T29612] ? ksys_write+0x1c4/0x260 [ 1456.014711][T29612] ? __fget_files+0x28/0x4b0 [ 1456.019390][T29612] ? __fget_files+0x28/0x4b0 [ 1456.024110][T29612] security_file_ioctl+0x70/0xa0 [ 1456.029152][T29612] __se_sys_ioctl+0x48/0x170 [ 1456.033906][T29612] do_syscall_64+0x55/0xa0 [ 1456.038404][T29612] ? clear_bhb_loop+0x40/0x90 [ 1456.043164][T29612] ? clear_bhb_loop+0x40/0x90 [ 1456.047937][T29612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1456.053921][T29612] RIP: 0033:0x7f80e059c629 [ 1456.058410][T29612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1456.078096][T29612] RSP: 002b:00007f80e13d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.086613][T29612] RAX: ffffffffffffffda RBX: 00007f80e0815fa0 RCX: 00007f80e059c629 [ 1456.094673][T29612] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000008 [ 1456.102720][T29612] RBP: 00007f80e13d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1456.110773][T29612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.118820][T29612] R13: 00007f80e0816038 R14: 00007f80e0815fa0 R15: 00007ffd3c4a3098 [ 1456.126928][T29612] [ 1456.177145][T29612] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1456.842989][T29628] netlink: 'syz.3.8215': attribute type 23 has an invalid length. [ 1457.607973][T29638] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1457.627795][T29638] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1457.728150][T29640] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1457.740719][T29640] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1457.876017][T29645] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8220'. [ 1457.931473][T29646] netlink: 'syz.4.8219': attribute type 1 has an invalid length. [ 1457.959068][T29646] netlink: 'syz.4.8219': attribute type 4 has an invalid length. [ 1457.978172][T29646] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8219'. [ 1458.269190][T29649] FAULT_INJECTION: forcing a failure. [ 1458.269190][T29649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.283777][T29649] CPU: 0 PID: 29649 Comm: syz.1.8221 Not tainted syzkaller #0 [ 1458.291323][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1458.301440][T29649] Call Trace: [ 1458.304760][T29649] [ 1458.307735][T29649] dump_stack_lvl+0x18c/0x250 [ 1458.311275][T29652] netlink: 'syz.2.8222': attribute type 2 has an invalid length. [ 1458.312485][T29649] ? show_regs_print_info+0x20/0x20 [ 1458.325666][T29649] ? load_image+0x400/0x400 [ 1458.330236][T29649] ? __might_fault+0xaa/0x120 [ 1458.336480][T29649] ? __lock_acquire+0x7d40/0x7d40 [ 1458.342036][T29649] should_fail_ex+0x39d/0x4d0 [ 1458.347250][T29649] _copy_from_iter+0x1d9/0x12e0 [ 1458.352617][T29649] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1458.357958][T29649] ? __virt_addr_valid+0x18c/0x540 [ 1458.363123][T29649] ? __lock_acquire+0x7d40/0x7d40 [ 1458.368191][T29649] ? rcu_is_watching+0x15/0xb0 [ 1458.373092][T29649] ? copyout_mc+0x70/0x70 [ 1458.377545][T29649] ? __virt_addr_valid+0x18c/0x540 [ 1458.382810][T29649] ? __virt_addr_valid+0x18c/0x540 [ 1458.388142][T29649] ? __virt_addr_valid+0x469/0x540 [ 1458.393299][T29649] ? __check_object_size+0x506/0xa20 [ 1458.398660][T29649] netlink_sendmsg+0x76b/0xbf0 [ 1458.403501][T29649] ? lockdep_hardirqs_on+0x98/0x150 [ 1458.408774][T29649] ? netlink_getsockopt+0x590/0x590 [ 1458.414123][T29649] ? aa_sock_msg_perm+0x94/0x150 [ 1458.419105][T29649] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1458.424426][T29649] ? security_socket_sendmsg+0x80/0xa0 [ 1458.430085][T29649] ? netlink_getsockopt+0x590/0x590 [ 1458.435343][T29649] ____sys_sendmsg+0x5ba/0x960 [ 1458.440174][T29649] ? __asan_memset+0x22/0x40 [ 1458.444816][T29649] ? __sys_sendmsg_sock+0x30/0x30 [ 1458.449869][T29649] ? __import_iovec+0x5f2/0x850 [ 1458.454771][T29649] ? import_iovec+0x73/0xa0 [ 1458.459316][T29649] ___sys_sendmsg+0x2a6/0x360 [ 1458.464018][T29649] ? __sys_sendmsg+0x2a0/0x2a0 [ 1458.468850][T29649] __se_sys_sendmsg+0x1c2/0x2b0 [ 1458.473729][T29649] ? hrtimer_interrupt+0x7bb/0x9c0 [ 1458.478869][T29649] ? __x64_sys_sendmsg+0x80/0x80 [ 1458.483866][T29649] ? lockdep_hardirqs_on+0x98/0x150 [ 1458.489103][T29649] do_syscall_64+0x55/0xa0 [ 1458.493557][T29649] ? clear_bhb_loop+0x40/0x90 [ 1458.498260][T29649] ? clear_bhb_loop+0x40/0x90 [ 1458.502972][T29649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1458.508889][T29649] RIP: 0033:0x7fa223f9c629 [ 1458.513331][T29649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1458.532967][T29649] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1458.541421][T29649] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1458.549441][T29649] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 1458.557433][T29649] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1458.565423][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1458.573418][T29649] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1458.581424][T29649] [ 1458.603163][T29652] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8222'. [ 1458.817265][T29661] netlink: 'syz.4.8227': attribute type 23 has an invalid length. [ 1458.850264][T29663] netlink: 'syz.1.8228': attribute type 10 has an invalid length. [ 1459.045456][T29667] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1459.147150][T29667] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1459.702077][T29676] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1459.719575][T29676] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1459.756772][T29672] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1459.764412][T29672] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1459.774377][T29674] netlink: 'syz.4.8230': attribute type 10 has an invalid length. [ 1459.801724][T29674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8230'. [ 1459.827866][T29677] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1459.835490][T29677] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1460.120521][T29684] FAULT_INJECTION: forcing a failure. [ 1460.120521][T29684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.134673][T29684] CPU: 1 PID: 29684 Comm: syz.4.8234 Not tainted syzkaller #0 [ 1460.142207][T29684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1460.152327][T29684] Call Trace: [ 1460.155654][T29684] [ 1460.158631][T29684] dump_stack_lvl+0x18c/0x250 [ 1460.163390][T29684] ? show_regs_print_info+0x20/0x20 [ 1460.168654][T29684] ? load_image+0x400/0x400 [ 1460.173228][T29684] ? __lock_acquire+0x7d40/0x7d40 [ 1460.178337][T29684] ? snprintf+0xe9/0x140 [ 1460.182660][T29684] should_fail_ex+0x39d/0x4d0 [ 1460.187424][T29684] _copy_to_user+0x2f/0xa0 [ 1460.191912][T29684] simple_read_from_buffer+0xe7/0x150 [ 1460.197368][T29684] proc_fail_nth_read+0x1e8/0x260 [ 1460.202470][T29684] ? proc_fault_inject_write+0x360/0x360 [ 1460.208179][T29684] ? fsnotify_perm+0x271/0x5e0 [ 1460.213201][T29684] ? proc_fault_inject_write+0x360/0x360 [ 1460.218918][T29684] vfs_read+0x28b/0x970 [ 1460.223160][T29684] ? kernel_read+0x1e0/0x1e0 [ 1460.227828][T29684] ? __fget_files+0x28/0x4b0 [ 1460.232491][T29684] ? __fget_files+0x28/0x4b0 [ 1460.237150][T29684] ? __fget_files+0x43d/0x4b0 [ 1460.241919][T29684] ? __fdget_pos+0x2a3/0x330 [ 1460.246571][T29684] ? ksys_read+0x75/0x260 [ 1460.250978][T29684] ksys_read+0x150/0x260 [ 1460.255293][T29684] ? vfs_write+0x990/0x990 [ 1460.259797][T29684] ? lockdep_hardirqs_on+0x98/0x150 [ 1460.265067][T29684] do_syscall_64+0x55/0xa0 [ 1460.269546][T29684] ? clear_bhb_loop+0x40/0x90 [ 1460.274289][T29684] ? clear_bhb_loop+0x40/0x90 [ 1460.279034][T29684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1460.284986][T29684] RIP: 0033:0x7f992ed5cece [ 1460.289461][T29684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1460.309135][T29684] RSP: 002b:00007f992fbaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1460.317625][T29684] RAX: ffffffffffffffda RBX: 00007f992fbb06c0 RCX: 00007f992ed5cece [ 1460.325665][T29684] RDX: 000000000000000f RSI: 00007f992fbb00a0 RDI: 000000000000000f [ 1460.333700][T29684] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1460.341746][T29684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.349790][T29684] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1460.357866][T29684] [ 1460.538845][T29705] netlink: 'syz.1.8238': attribute type 23 has an invalid length. [ 1460.655255][T29707] netlink: 'syz.4.8239': attribute type 10 has an invalid length. [ 1460.843162][T29716] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1460.857781][T29716] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1460.897697][T29721] FAULT_INJECTION: forcing a failure. [ 1460.897697][T29721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.913032][T29721] CPU: 1 PID: 29721 Comm: syz.4.8243 Not tainted syzkaller #0 [ 1460.920578][T29721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1460.930688][T29721] Call Trace: [ 1460.934008][T29721] [ 1460.936978][T29721] dump_stack_lvl+0x18c/0x250 [ 1460.941715][T29721] ? show_regs_print_info+0x20/0x20 [ 1460.946968][T29721] ? load_image+0x400/0x400 [ 1460.951534][T29721] ? __lock_acquire+0x7d40/0x7d40 [ 1460.956614][T29721] ? snprintf+0xe9/0x140 [ 1460.960913][T29721] should_fail_ex+0x39d/0x4d0 [ 1460.965681][T29721] _copy_to_user+0x2f/0xa0 [ 1460.970153][T29721] simple_read_from_buffer+0xe7/0x150 [ 1460.975589][T29721] proc_fail_nth_read+0x1e8/0x260 [ 1460.978896][T29719] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1460.980654][T29721] ? proc_fault_inject_write+0x360/0x360 [ 1460.980696][T29721] ? fsnotify_perm+0x271/0x5e0 [ 1460.998303][T29721] ? proc_fault_inject_write+0x360/0x360 [ 1461.003992][T29721] vfs_read+0x28b/0x970 [ 1461.008208][T29721] ? kernel_read+0x1e0/0x1e0 [ 1461.010095][T29719] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1461.012833][T29721] ? __fget_files+0x28/0x4b0 [ 1461.024592][T29721] ? __fget_files+0x28/0x4b0 [ 1461.029244][T29721] ? __fget_files+0x43d/0x4b0 [ 1461.033987][T29721] ? __fdget_pos+0x2a3/0x330 [ 1461.038629][T29721] ? ksys_read+0x75/0x260 [ 1461.043102][T29721] ksys_read+0x150/0x260 [ 1461.047415][T29721] ? vfs_write+0x990/0x990 [ 1461.051900][T29721] ? lockdep_hardirqs_on+0x98/0x150 [ 1461.057173][T29721] do_syscall_64+0x55/0xa0 [ 1461.061650][T29721] ? clear_bhb_loop+0x40/0x90 [ 1461.066376][T29721] ? clear_bhb_loop+0x40/0x90 [ 1461.071112][T29721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1461.077057][T29721] RIP: 0033:0x7f992ed5cece [ 1461.081526][T29721] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1461.101193][T29721] RSP: 002b:00007f992fbaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.109670][T29721] RAX: ffffffffffffffda RBX: 00007f992fbb06c0 RCX: 00007f992ed5cece [ 1461.117700][T29721] RDX: 000000000000000f RSI: 00007f992fbb00a0 RDI: 0000000000000004 [ 1461.125716][T29721] RBP: 00007f992fbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.133735][T29721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.141750][T29721] R13: 00007f992f016038 R14: 00007f992f015fa0 R15: 00007ffd26953c38 [ 1461.149807][T29721] [ 1461.434095][T29727] netlink: 'syz.4.8244': attribute type 10 has an invalid length. [ 1461.449332][T29727] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1461.765848][T29744] netlink: 'syz.1.8250': attribute type 23 has an invalid length. [ 1462.022662][T29752] netlink: 'syz.2.8251': attribute type 10 has an invalid length. [ 1462.076055][T29755] netlink: 'syz.1.8252': attribute type 10 has an invalid length. [ 1462.342892][T29760] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1462.354891][T29760] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1462.474979][T29763] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1462.490827][T29763] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1462.512793][T29767] netlink: 'syz.1.8262': attribute type 10 has an invalid length. [ 1462.782407][T29772] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1462.823749][T29772] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1462.903115][T29772] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1462.919890][T29772] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1463.027007][T29779] netlink: 'syz.1.8257': attribute type 10 has an invalid length. [ 1463.048903][T29779] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8257'. [ 1463.268384][T29789] netlink: 'syz.1.8261': attribute type 23 has an invalid length. [ 1463.700275][T29798] lo: left promiscuous mode [ 1463.801373][T29798] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.204502][T29804] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1464.213319][T29804] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1464.234163][T29807] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1464.246410][T29807] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1464.258083][T29808] netlink: 'syz.2.8266': attribute type 10 has an invalid length. [ 1465.692973][T29823] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1465.711771][T29823] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1465.767762][T29827] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1465.775291][T29827] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1465.900841][T29826] validate_nla: 1 callbacks suppressed [ 1465.900905][T29826] netlink: 'syz.1.8271': attribute type 10 has an invalid length. [ 1465.921223][T29826] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8271'. [ 1466.070663][T29832] netlink: 'syz.2.8273': attribute type 23 has an invalid length. [ 1466.490415][T29840] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1466.497888][T29840] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1466.510239][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 1466.525790][T29842] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1466.545092][T29842] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1466.805436][T29845] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1466.860235][T29845] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1467.043323][T29848] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1467.060719][T29848] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1467.130698][T29853] netlink: 'syz.1.8279': attribute type 10 has an invalid length. [ 1467.539388][T29859] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1467.546691][T29859] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1467.644669][T29860] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1467.664959][T29860] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1467.788401][T29864] netlink: 'syz.2.8283': attribute type 10 has an invalid length. [ 1467.807266][T29864] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8283'. [ 1467.850995][T29865] netlink: 'syz.1.8282': attribute type 10 has an invalid length. [ 1467.879294][T29865] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8282'. [ 1467.912737][T29865] ipvlan1: entered promiscuous mode [ 1467.939861][T29865] ipvlan1: entered allmulticast mode [ 1467.970227][T29865] veth0_vlan: entered allmulticast mode [ 1468.159820][T29865] bridge0: port 3(ipvlan1) entered blocking state [ 1468.193212][T29865] bridge0: port 3(ipvlan1) entered disabled state [ 1468.213024][T29865] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1468.324309][T29875] netlink: 'syz.2.8286': attribute type 23 has an invalid length. [ 1468.722119][T29890] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1468.735180][T29890] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1468.832124][T29892] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1468.840194][T29892] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1469.126602][T29900] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1469.134515][T29900] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1469.171569][T29900] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1469.179689][T29900] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1469.340936][T29907] netlink: 'syz.4.8297': attribute type 23 has an invalid length. [ 1470.167467][T29921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8299'. [ 1470.427459][T29925] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1470.436291][T29925] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1470.542869][T29926] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1470.560385][T29926] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1470.609432][T29923] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1470.631266][T29923] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1470.713952][T29927] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1470.733430][T29927] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1470.924621][T29934] FAULT_INJECTION: forcing a failure. [ 1470.924621][T29934] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.969837][T29934] CPU: 0 PID: 29934 Comm: syz.2.8304 Not tainted syzkaller #0 [ 1470.977381][T29934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1470.987479][T29934] Call Trace: [ 1470.990797][T29934] [ 1470.993788][T29934] dump_stack_lvl+0x18c/0x250 [ 1470.998531][T29934] ? show_regs_print_info+0x20/0x20 [ 1471.003794][T29934] ? _printk+0x11d/0x130 [ 1471.008092][T29934] should_fail_ex+0x39d/0x4d0 [ 1471.012822][T29934] should_failslab+0x9/0x20 [ 1471.017470][T29934] slab_pre_alloc_hook+0x59/0x310 [ 1471.022549][T29934] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1471.028337][T29934] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1471.034135][T29934] __kmem_cache_alloc_node+0x53/0x250 [ 1471.039593][T29934] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1471.045369][T29934] __kmalloc+0xa4/0x230 [ 1471.049597][T29934] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1471.055213][T29934] tomoyo_path_number_perm+0x248/0x620 [ 1471.060731][T29934] ? tomoyo_path_number_perm+0x217/0x620 [ 1471.066438][T29934] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1471.071963][T29934] ? hrtimer_interrupt+0x597/0x9c0 [ 1471.077132][T29934] ? ktime_get+0x7f/0x280 [ 1471.081544][T29934] ? __fget_files+0x28/0x4b0 [ 1471.086180][T29934] ? __fget_files+0x28/0x4b0 [ 1471.090817][T29934] security_file_ioctl+0x70/0xa0 [ 1471.095815][T29934] __se_sys_ioctl+0x48/0x170 [ 1471.100456][T29934] do_syscall_64+0x55/0xa0 [ 1471.105024][T29934] ? clear_bhb_loop+0x40/0x90 [ 1471.109740][T29934] ? clear_bhb_loop+0x40/0x90 [ 1471.114550][T29934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1471.120481][T29934] RIP: 0033:0x7f58c019c629 [ 1471.124971][T29934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.144625][T29934] RSP: 002b:00007f58c10fc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1471.153101][T29934] RAX: ffffffffffffffda RBX: 00007f58c0415fa0 RCX: 00007f58c019c629 [ 1471.161130][T29934] RDX: 0000200000000000 RSI: 0000000000008924 RDI: 000000000000000f [ 1471.169148][T29934] RBP: 00007f58c10fc090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.177157][T29934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.185169][T29934] R13: 00007f58c0416038 R14: 00007f58c0415fa0 R15: 00007ffc48cb13d8 [ 1471.193198][T29934] [ 1471.236442][T29936] mac80211_hwsim hwsim65 wlan0: left promiscuous mode [ 1471.250032][T29936] mac80211_hwsim hwsim65 wlan0: left allmulticast mode [ 1471.282062][T29939] mac80211_hwsim hwsim65 wlan0: entered promiscuous mode [ 1471.282288][T29934] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1471.300187][T29939] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode [ 1471.445783][T29944] netlink: 'syz.2.8308': attribute type 23 has an invalid length. [ 1471.766432][T29951] netlink: 'syz.1.8317': attribute type 23 has an invalid length. [ 1475.206354][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1475.240303][T29966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1475.275994][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1475.286833][T29966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.602490][T29966] bond0: (slave batadv0): Releasing backup interface [ 1476.679480][T29970] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1476.701578][T29970] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1476.724231][T29971] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1476.739919][T29971] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1476.831868][T29977] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1476.843609][T29977] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1477.046112][T29981] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1477.062966][T29981] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1477.077007][T29982] netlink: 'syz.1.8319': attribute type 10 has an invalid length. [ 1477.085941][T29982] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8319'. [ 1477.120536][T29980] netlink: 'syz.3.8318': attribute type 10 has an invalid length. [ 1477.263944][T29986] netlink: 'syz.4.8320': attribute type 1 has an invalid length. [ 1477.276226][T29986] netlink: 'syz.4.8320': attribute type 4 has an invalid length. [ 1477.308991][T29986] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8320'. [ 1477.819458][T30001] å1ÿ: renamed from bond_slave_0 (while UP) [ 1477.865606][T30001] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8325'. [ 1477.915329][T30001] sit0: entered allmulticast mode [ 1478.100611][T30005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1478.108233][T30005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.116365][T30005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.129033][T30005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.238275][T30005] bond0: (slave batadv0): Releasing backup interface [ 1479.292165][T30009] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1479.299290][T30009] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1479.318041][T30010] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1479.336915][T30010] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1479.380771][T30016] netlink: 'syz.2.8330': attribute type 1 has an invalid length. [ 1479.409101][T30016] netlink: 'syz.2.8330': attribute type 4 has an invalid length. [ 1479.416941][T30016] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8330'. [ 1479.450144][T30013] netlink: 'syz.3.8329': attribute type 10 has an invalid length. [ 1479.623830][T30019] netlink: 'syz.4.8339': attribute type 1 has an invalid length. [ 1479.646412][T30019] netlink: 'syz.4.8339': attribute type 4 has an invalid length. [ 1479.665398][T30019] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8339'. [ 1479.689765][T30023] netlink: 'syz.2.8331': attribute type 1 has an invalid length. [ 1479.735431][T30023] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8331'. [ 1480.149273][T30030] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.8343'. [ 1480.663856][T30047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1480.687548][T30047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1483.295102][T30047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1483.308249][T30047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1483.384187][T30047] bond0: (slave batadv0): Releasing backup interface [ 1483.516259][T30050] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1483.528149][T30050] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1483.690137][T30053] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1483.709372][T30053] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1483.785627][T30057] validate_nla: 3 callbacks suppressed [ 1483.785644][T30057] netlink: 'syz.4.8342': attribute type 10 has an invalid length. [ 1484.843775][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.853492][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.057313][T30060] netlink: 'syz.2.8354': attribute type 10 has an invalid length. [ 1485.076341][T30060] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8354'. [ 1485.093677][T30062] netlink: 'syz.1.8346': attribute type 1 has an invalid length. [ 1485.107048][T30062] netlink: 'syz.1.8346': attribute type 4 has an invalid length. [ 1485.117511][T30062] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8346'. [ 1485.294094][T30066] netlink: 'syz.4.8356': attribute type 10 has an invalid length. [ 1485.528152][T30070] netlink: 'syz.2.8348': attribute type 1 has an invalid length. [ 1485.554986][T30070] netlink: 'syz.2.8348': attribute type 4 has an invalid length. [ 1485.570272][T30070] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.8348'. [ 1485.763652][T29700] hsr_slave_0: left promiscuous mode [ 1485.796725][T29700] hsr_slave_1: left promiscuous mode [ 1485.809442][T29700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1485.823247][T29700] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1485.834575][T29700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1485.847800][T29700] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1485.856512][T29700] bridge_slave_1: left allmulticast mode [ 1485.871019][T29700] bridge_slave_1: left promiscuous mode [ 1485.878125][T29700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.895283][T29700] bridge_slave_0: left allmulticast mode [ 1485.902166][T29700] bridge_slave_0: left promiscuous mode [ 1485.910917][T29700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.936841][T29700] veth1_macvtap: left promiscuous mode [ 1485.942707][T29700] veth0_macvtap: left promiscuous mode [ 1485.949362][T29700] veth1_vlan: left promiscuous mode [ 1485.955433][T29700] veth0_vlan: left promiscuous mode [ 1486.010997][T30082] netlink: set zone limit has 8 unknown bytes [ 1486.157466][T29700] team0 (unregistering): Port device geneve1 removed [ 1486.194759][T29700] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1486.396699][T29700] team0 (unregistering): Port device macvlan0 removed [ 1486.809927][T29700] team0 (unregistering): Port device team_slave_1 removed [ 1486.856457][T29700] team0 (unregistering): Port device C removed [ 1486.905674][T29700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1486.958437][T29700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1487.285124][T29700] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1487.320326][T29700] team0 (unregistering): Port device bridge0 removed [ 1487.361346][T29700] bond0 (unregistering): Released all slaves [ 1487.485807][T30079] FAULT_INJECTION: forcing a failure. [ 1487.485807][T30079] name failslab, interval 1, probability 0, space 0, times 0 [ 1487.501101][T30079] CPU: 1 PID: 30079 Comm: syz.1.8350 Not tainted syzkaller #0 [ 1487.508644][T30079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1487.518771][T30079] Call Trace: [ 1487.522353][T30079] [ 1487.525416][T30079] dump_stack_lvl+0x18c/0x250 [ 1487.530167][T30079] ? show_regs_print_info+0x20/0x20 [ 1487.535432][T30079] ? load_image+0x400/0x400 [ 1487.540011][T30079] ? __might_sleep+0xe0/0xe0 [ 1487.544757][T30079] ? __lock_acquire+0x7d40/0x7d40 [ 1487.549807][T30079] should_fail_ex+0x39d/0x4d0 [ 1487.554513][T30079] should_failslab+0x9/0x20 [ 1487.559048][T30079] slab_pre_alloc_hook+0x59/0x310 [ 1487.564127][T30079] ? new_nbp+0x29/0x430 [ 1487.568324][T30079] ? new_nbp+0x29/0x430 [ 1487.572500][T30079] __kmem_cache_alloc_node+0x53/0x250 [ 1487.577936][T30079] ? new_nbp+0x29/0x430 [ 1487.582119][T30079] __kmalloc+0xa4/0x230 [ 1487.586307][T30079] new_nbp+0x29/0x430 [ 1487.590311][T30079] ? mutex_is_locked+0x12/0x40 [ 1487.595128][T30079] br_add_if+0x28f/0xec0 [ 1487.599403][T30079] ? apparmor_capable+0x137/0x1a0 [ 1487.604447][T30079] ? bpf_lsm_capable+0x9/0x10 [ 1487.609167][T30079] ? security_capable+0x89/0xb0 [ 1487.614060][T30079] br_ioctl_stub+0x730/0xd50 [ 1487.618756][T30079] ? do_raw_spin_unlock+0x121/0x230 [ 1487.623971][T30079] ? rcu_read_unlock+0xa0/0xa0 [ 1487.628843][T30079] ? __mutex_lock+0x956/0xcc0 [ 1487.633546][T30079] ? __mutex_lock+0x4f9/0xcc0 [ 1487.638268][T30079] ? mutex_lock_nested+0x20/0x20 [ 1487.643278][T30079] ? rcu_read_unlock+0xa0/0xa0 [ 1487.648090][T30079] sock_ioctl+0x517/0x7e0 [ 1487.652451][T30079] ? sock_poll+0x3e0/0x3e0 [ 1487.656925][T30079] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1487.661887][T30079] ? security_file_ioctl+0x80/0xa0 [ 1487.667023][T30079] ? sock_poll+0x3e0/0x3e0 [ 1487.671570][T30079] __se_sys_ioctl+0xfd/0x170 [ 1487.676195][T30079] do_syscall_64+0x55/0xa0 [ 1487.680649][T30079] ? clear_bhb_loop+0x40/0x90 [ 1487.685374][T30079] ? clear_bhb_loop+0x40/0x90 [ 1487.690105][T30079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.696189][T30079] RIP: 0033:0x7fa223f9c629 [ 1487.700621][T30079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.720548][T30079] RSP: 002b:00007fa224e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1487.729000][T30079] RAX: ffffffffffffffda RBX: 00007fa224216090 RCX: 00007fa223f9c629 [ 1487.737013][T30079] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 000000000000000b [ 1487.745031][T30079] RBP: 00007fa224e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.753041][T30079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.761052][T30079] R13: 00007fa224216128 R14: 00007fa224216090 R15: 00007ffd24bfb948 [ 1487.769847][T30079] [ 1487.854645][T30080] syzkaller0: entered promiscuous mode [ 1487.861870][T30080] syzkaller0: entered allmulticast mode [ 1491.508602][T30102] netlink: 'syz.4.8358': attribute type 10 has an invalid length. [ 1491.518450][T30102] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8358'. [ 1491.643053][T30104] netlink: 'syz.3.8359': attribute type 10 has an invalid length. [ 1491.678304][T30108] netlink: 'syz.1.8361': attribute type 1 has an invalid length. [ 1491.686645][T30108] netlink: 'syz.1.8361': attribute type 4 has an invalid length. [ 1491.695964][T30108] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8361'. [ 1491.849615][T30112] netlink: 'syz.4.8363': attribute type 10 has an invalid length. [ 1491.857659][T30112] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1491.874825][T30112] team0: entered promiscuous mode [ 1491.888970][T30112] C: entered promiscuous mode [ 1491.898322][T30112] team_slave_1: entered promiscuous mode [ 1491.910700][T30112] bridge0: entered promiscuous mode [ 1491.916341][T30112] geneve1: entered promiscuous mode [ 1491.924595][T30112] macvlan0: entered promiscuous mode [ 1491.931103][T30112] bond0: entered promiscuous mode [ 1491.936380][T30112] bond_slave_0: entered promiscuous mode [ 1491.944093][T30112] bond_slave_1: entered promiscuous mode [ 1491.961909][T30112] team0: entered allmulticast mode [ 1491.967970][T30112] C: entered allmulticast mode [ 1491.981981][T30112] team_slave_1: entered allmulticast mode [ 1491.988713][T30112] bridge0: entered allmulticast mode [ 1491.994141][T30112] geneve1: entered allmulticast mode [ 1491.999751][T30112] macvlan0: entered allmulticast mode [ 1492.005288][T30112] veth1_vlan: entered allmulticast mode [ 1492.011221][T30112] bond0: entered allmulticast mode [ 1492.016518][T30112] bond_slave_0: entered allmulticast mode [ 1492.022569][T30112] bond_slave_1: entered allmulticast mode [ 1492.030418][T30112] geneve0: entered allmulticast mode [ 1492.036845][T30112] bridge0: port 4(team0) entered blocking state [ 1492.045028][T30112] bridge0: port 4(team0) entered disabled state [ 1492.055946][T30112] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1492.071921][T30115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8365'. [ 1492.184447][T30113] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1492.202121][T30113] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1492.229393][T30117] mac80211_hwsim hwsim67 wlan0: entered promiscuous mode [ 1492.242753][T30117] mac80211_hwsim hwsim67 wlan0: entered allmulticast mode [ 1492.672375][T30132] netlink: 'syz.1.8372': attribute type 1 has an invalid length. [ 1492.700368][T30132] netlink: 'syz.1.8372': attribute type 4 has an invalid length. [ 1492.708213][T30132] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.8372'. [ 1492.723313][T30134] netlink: 'syz.4.8371': attribute type 10 has an invalid length. [ 1492.733330][T30134] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8371'. [ 1493.020268][T30145] netlink: 'syz.1.8374': attribute type 10 has an invalid length. [ 1493.062405][T30143] mac80211_hwsim hwsim63 wlan0: left promiscuous mode [ 1493.079029][T30143] mac80211_hwsim hwsim63 wlan0: left allmulticast mode [ 1493.118453][T30148] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 1493.128669][T30148] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 1493.180641][T30147] netlink: 'syz.2.8377': attribute type 10 has an invalid length. [ 1493.188536][T30147] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8377'. [ 1493.213611][T30147] team0: entered promiscuous mode [ 1493.218830][T30147] team_slave_0: entered promiscuous mode [ 1493.224962][T30147] team_slave_1: entered promiscuous mode [ 1493.233706][T30147] bridge0: entered promiscuous mode [ 1493.244181][T30147] team0: entered allmulticast mode [ 1493.251325][T30147] team_slave_0: entered allmulticast mode [ 1493.257394][T30147] team_slave_1: entered allmulticast mode [ 1493.265134][T30147] bridge0: entered allmulticast mode [ 1493.273063][T30147] bridge0: port 3(team0) entered blocking state [ 1493.279894][T30147] bridge0: port 3(team0) entered disabled state [ 1493.292630][T30147] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1493.315734][T30151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8380'. [ 1493.535435][T30162] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8383'. [ 1493.985986][T30175] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8386'. [ 1496.990811][T30178] validate_nla: 4 callbacks suppressed [ 1496.990847][T30178] netlink: 'syz.3.8388': attribute type 3 has an invalid length. [ 1497.004959][T30178] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.8388'. [ 1497.100535][T30183] netlink: 'syz.1.8391': attribute type 10 has an invalid length. [ 1497.108435][T30183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8391'. [ 1497.123489][T30183] team0: entered promiscuous mode [ 1497.134252][T30183] team_slave_0: entered promiscuous mode [ 1497.145646][T30183] team_slave_1: entered promiscuous mode [ 1497.179544][T30183] bridge0: entered promiscuous mode [ 1497.208964][T30183] team0: entered allmulticast mode [ 1497.216186][T30183] team_slave_0: entered allmulticast mode [ 1497.225397][T30183] team_slave_1: entered allmulticast mode [ 1497.231403][T30183] bridge0: entered allmulticast mode [ 1497.237701][T30183] bridge0: port 3(team0) entered blocking state [ 1497.245593][T30183] bridge0: port 3(team0) entered disabled state [ 1497.255427][T30183] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1497.280231][T30186] netlink: 'syz.4.8398': attribute type 10 has an invalid length. [ 1497.291297][T30186] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8398'. [ 1497.313073][T30185] mac80211_hwsim hwsim69 wlan0: left promiscuous mode [ 1497.339163][T30185] mac80211_hwsim hwsim69 wlan0: left allmulticast mode [ 1497.369132][T30188] mac80211_hwsim hwsim69 wlan0: entered promiscuous mode [ 1497.376281][T30188] mac80211_hwsim hwsim69 wlan0: entered allmulticast mode [ 1497.440712][T30191] netlink: 'syz.3.8393': attribute type 1 has an invalid length. [ 1497.468480][T30191] netlink: 'syz.3.8393': attribute type 4 has an invalid length. [ 1497.497420][T30191] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.8393'. [ 1497.566910][T30193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8392'. [ 1497.958445][T30208] netlink: 'syz.3.8397': attribute type 10 has an invalid length. [ 1498.137566][T30218] netlink: 'syz.4.8401': attribute type 10 has an invalid length. [ 1498.149160][T30218] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1498.173888][T30218] bridge0: port 4(team0) entered blocking state [ 1498.210988][T30218] bridge0: port 4(team0) entered disabled state [ 1498.223135][T30218] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1498.259720][T30219] netlink: 'syz.2.8402': attribute type 10 has an invalid length. [ 1498.463962][T30219] syz_tun: entered promiscuous mode [ 1498.470816][T30219] syz_tun: entered allmulticast mode [ 1498.494093][T30219] team0: Port device syz_tun added [ 1498.507095][T30221] netlink: 'syz.3.8403': attribute type 10 has an invalid length. [ 1498.538826][T30221] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8403'. [ 1498.552505][T30213] netlink: 'syz.1.8399': attribute type 10 has an invalid length. [ 1498.565323][T30213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8399'. [ 1498.586947][T30213] bridge0: port 3(ipvlan1) entered blocking state [ 1498.595025][T30213] bridge0: port 3(ipvlan1) entered disabled state [ 1498.614220][T30213] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1498.836257][T30241] FAULT_INJECTION: forcing a failure. [ 1498.836257][T30241] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.854468][T30241] CPU: 0 PID: 30241 Comm: syz.1.8410 Not tainted syzkaller #0 [ 1498.862713][T30241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1498.872812][T30241] Call Trace: [ 1498.876172][T30241] [ 1498.879225][T30241] dump_stack_lvl+0x18c/0x250 [ 1498.884048][T30241] ? show_regs_print_info+0x20/0x20 [ 1498.889317][T30241] ? load_image+0x400/0x400 [ 1498.893963][T30241] ? __might_sleep+0xe0/0xe0 [ 1498.898638][T30241] ? __lock_acquire+0x7d40/0x7d40 [ 1498.903731][T30241] should_fail_ex+0x39d/0x4d0 [ 1498.908467][T30241] should_failslab+0x9/0x20 [ 1498.913125][T30241] slab_pre_alloc_hook+0x59/0x310 [ 1498.918197][T30241] ? d_instantiate+0x6f/0x90 [ 1498.922926][T30241] kmem_cache_alloc+0x5a/0x2d0 [ 1498.927734][T30241] ? alloc_empty_file+0x9e/0x1d0 [ 1498.932865][T30241] alloc_empty_file+0x9e/0x1d0 [ 1498.937703][T30241] alloc_file+0x5c/0x600 [ 1498.941993][T30241] alloc_file_pseudo+0x184/0x210 [ 1498.947087][T30241] ? alloc_empty_backing_file+0xe0/0xe0 [ 1498.952790][T30241] ? alloc_fd+0x58f/0x630 [ 1498.957222][T30241] anon_inode_getfd+0xca/0x1c0 [ 1498.962118][T30241] map_create+0xf14/0x12f0 [ 1498.968050][T30241] __sys_bpf+0x651/0x890 [ 1498.972340][T30241] ? bpf_link_show_fdinfo+0x390/0x390 [ 1498.978055][T30241] ? lock_chain_count+0x20/0x20 [ 1498.983173][T30241] __x64_sys_bpf+0x7c/0x90 [ 1498.987625][T30241] do_syscall_64+0x55/0xa0 [ 1498.992813][T30241] ? clear_bhb_loop+0x40/0x90 [ 1498.997625][T30241] ? clear_bhb_loop+0x40/0x90 [ 1499.002348][T30241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.008356][T30241] RIP: 0033:0x7fa223f9c629 [ 1499.012823][T30241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.033345][T30241] RSP: 002b:00007fa224e8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1499.041795][T30241] RAX: ffffffffffffffda RBX: 00007fa224215fa0 RCX: 00007fa223f9c629 [ 1499.049800][T30241] RDX: 0000000000000048 RSI: 00002000000009c0 RDI: 0000000000000000 [ 1499.057801][T30241] RBP: 00007fa224e8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1499.065883][T30241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1499.073881][T30241] R13: 00007fa224216038 R14: 00007fa224215fa0 R15: 00007ffd24bfb948 [ 1499.081996][T30241] [ 1499.204219][T30242] ================================================================== [ 1499.212369][T30242] BUG: KASAN: slab-out-of-bounds in __bpf_get_stackid+0x6bf/0x900 [ 1499.223070][T30242] Write of size 48 at addr ffff88802c548f10 by task syz.4.8411/30242 [ 1499.232268][T30242] [ 1499.234737][T30242] CPU: 0 PID: 30242 Comm: syz.4.8411 Not tainted syzkaller #0 [ 1499.242702][T30242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1499.253352][T30242] Call Trace: [ 1499.256671][T30242] [ 1499.259657][T30242] dump_stack_lvl+0x18c/0x250 [ 1499.264424][T30242] ? read_lock_is_recursive+0x20/0x20 [ 1499.270623][T30242] ? show_regs_print_info+0x20/0x20 [ 1499.275907][T30242] ? load_image+0x400/0x400 [ 1499.280485][T30242] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1499.286614][T30242] ? __virt_addr_valid+0x18c/0x540 [ 1499.291911][T30242] ? __virt_addr_valid+0x469/0x540 [ 1499.298318][T30242] print_report+0xa8/0x210 [ 1499.302811][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1499.308414][T30242] kasan_report+0x117/0x150 [ 1499.313877][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1499.319079][T30242] kasan_check_range+0x241/0x290 [ 1499.325835][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1499.331840][T30242] __asan_memcpy+0x40/0x70 [ 1499.336430][T30242] __bpf_get_stackid+0x6bf/0x900 [ 1499.341573][T30242] bpf_get_stackid_pe+0x343/0x410 [ 1499.348521][T30242] bpf_prog_16fa1569821187d5+0x29/0x39 [ 1499.354483][T30242] bpf_overflow_handler+0x1fc/0x510 [ 1499.360538][T30242] ? bpf_overflow_handler+0xde/0x510 [ 1499.365983][T30242] ? tp_perf_event_destroy+0x20/0x20 [ 1499.372404][T30242] ? __perf_event_account_interrupt+0x187/0x280 [ 1499.378694][T30242] __perf_event_overflow+0x447/0x630 [ 1499.384568][T30242] perf_swevent_event+0x324/0x630 [ 1499.391065][T30242] ? perf_tp_event+0x1450/0x1450 [ 1499.396054][T30242] ___perf_sw_event+0x4a7/0x730 [ 1499.401658][T30242] ? ___perf_sw_event+0x199/0x730 [ 1499.406901][T30242] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1499.413454][T30242] ? __lock_acquire+0x1347/0x7d40 [ 1499.418539][T30242] ? __put_user_4+0x11/0x20 [ 1499.423540][T30242] ? verify_lock_unused+0x140/0x140 [ 1499.429699][T30242] ? perf_trace_lock+0xfc/0x3b0 [ 1499.434841][T30242] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1499.440977][T30242] ? lock_chain_count+0x20/0x20 [ 1499.445966][T30242] ? perf_trace_lock+0xfc/0x3b0 [ 1499.451622][T30242] __perf_sw_event+0x139/0x270 [ 1499.456445][T30242] do_user_addr_fault+0x123e/0x12c0 [ 1499.462322][T30242] ? rcu_is_watching+0x15/0xb0 [ 1499.467168][T30242] exc_page_fault+0x64/0x100 [ 1499.471834][T30242] asm_exc_page_fault+0x26/0x30 [ 1499.476804][T30242] RIP: 0010:__put_user_4+0x11/0x20 [ 1499.481960][T30242] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1499.502137][T30242] RSP: 0018:ffffc9000c38fe80 EFLAGS: 00050206 [ 1499.508467][T30242] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000200000000000 [ 1499.516466][T30242] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c82e0 [ 1499.524502][T30242] RBP: 000000000000000c R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 1499.532641][T30242] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000000 [ 1499.540663][T30242] R13: 0000200000000000 R14: 0000000000000001 R15: 0000000000000001 [ 1499.548876][T30242] __sys_socketpair+0xb8/0x550 [ 1499.553836][T30242] ? lock_chain_count+0x20/0x20 [ 1499.558765][T30242] __x64_sys_socketpair+0x9b/0xb0 [ 1499.564217][T30242] do_syscall_64+0x55/0xa0 [ 1499.568768][T30242] ? clear_bhb_loop+0x40/0x90 [ 1499.573566][T30242] ? clear_bhb_loop+0x40/0x90 [ 1499.579154][T30242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.585272][T30242] RIP: 0033:0x7f992ed9c629 [ 1499.589742][T30242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1499.611257][T30242] RSP: 002b:00007f992fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1499.620294][T30242] RAX: ffffffffffffffda RBX: 00007f992f016090 RCX: 00007f992ed9c629 [ 1499.628395][T30242] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1499.636659][T30242] RBP: 00007f992ee32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1499.644979][T30242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.652985][T30242] R13: 00007f992f016128 R14: 00007f992f016090 R15: 00007ffd26953c38 [ 1499.661287][T30242] [ 1499.664332][T30242] [ 1499.666704][T30242] Allocated by task 30242: [ 1499.671155][T30242] kasan_set_track+0x4e/0x70 [ 1499.675798][T30242] __kasan_kmalloc+0x8f/0xa0 [ 1499.680957][T30242] __kmalloc_node+0xb4/0x230 [ 1499.685850][T30242] bpf_map_area_alloc+0x5e/0x110 [ 1499.691550][T30242] prealloc_elems_and_freelist+0x86/0x1c0 [ 1499.697312][T30242] stack_map_alloc+0x33a/0x4c0 [ 1499.702374][T30242] map_create+0x877/0x12f0 [ 1499.706824][T30242] __sys_bpf+0x651/0x890 [ 1499.711090][T30242] __x64_sys_bpf+0x7c/0x90 [ 1499.715544][T30242] do_syscall_64+0x55/0xa0 [ 1499.720003][T30242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.726477][T30242] [ 1499.728837][T30242] The buggy address belongs to the object at ffff88802c548f00 [ 1499.728837][T30242] which belongs to the cache kmalloc-cg-64 of size 64 [ 1499.743805][T30242] The buggy address is located 16 bytes inside of [ 1499.743805][T30242] allocated 40-byte region [ffff88802c548f00, ffff88802c548f28) [ 1499.758871][T30242] [ 1499.761239][T30242] The buggy address belongs to the physical page: [ 1499.767719][T30242] page:ffffea0000b15200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c548 [ 1499.778176][T30242] memcg:ffff88802140b001 [ 1499.782441][T30242] ksm flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff) [ 1499.790534][T30242] page_type: 0xffffffff() [ 1499.794894][T30242] raw: 00fff00000000800 ffff888017c4da00 ffffea00017bd700 dead000000000007 [ 1499.803503][T30242] raw: 0000000000000000 0000000080200020 00000001ffffffff ffff88802140b001 [ 1499.812108][T30242] page dumped because: kasan: bad access detected [ 1499.818543][T30242] page_owner tracks the page as allocated [ 1499.824283][T30242] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 19020, tgid 19020 (syz-executor), ts 1076379835023, free_ts 1076379398230 [ 1499.843364][T30242] post_alloc_hook+0x1c1/0x200 [ 1499.848213][T30242] get_page_from_freelist+0x1951/0x19e0 [ 1499.853793][T30242] __alloc_pages+0x1f0/0x460 [ 1499.858427][T30242] alloc_slab_page+0x5d/0x160 [ 1499.863127][T30242] new_slab+0x87/0x2d0 [ 1499.867233][T30242] ___slab_alloc+0xc5d/0x12f0 [ 1499.872118][T30242] __kmem_cache_alloc_node+0x19e/0x250 [ 1499.877647][T30242] kmalloc_trace+0x2a/0xe0 [ 1499.882218][T30242] alloc_fdtable+0xca/0x2c0 [ 1499.886845][T30242] dup_fd+0x786/0xa50 [ 1499.890890][T30242] copy_files+0xc3/0x120 [ 1499.895193][T30242] copy_process+0x15ab/0x3d80 [ 1499.899913][T30242] kernel_clone+0x24b/0x8a0 [ 1499.904562][T30242] __x64_sys_clone+0x1b7/0x230 [ 1499.909477][T30242] do_syscall_64+0x55/0xa0 [ 1499.913956][T30242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.920103][T30242] page last free stack trace: [ 1499.924794][T30242] free_unref_page_prepare+0x7b2/0x8c0 [ 1499.930471][T30242] free_unref_page+0x32/0x2e0 [ 1499.935189][T30242] vfree+0x1a6/0x320 [ 1499.939109][T30242] do_ip6t_get_ctl+0xf21/0x1210 [ 1499.944684][T30242] nf_getsockopt+0x262/0x280 [ 1499.949391][T30242] ipv6_getsockopt+0x226/0x2e0 [ 1499.954209][T30242] do_sock_getsockopt+0x379/0x450 [ 1499.959368][T30242] __x64_sys_getsockopt+0x1d6/0x280 [ 1499.964617][T30242] do_syscall_64+0x55/0xa0 [ 1499.969177][T30242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1499.975110][T30242] [ 1499.977637][T30242] Memory state around the buggy address: [ 1499.983293][T30242] ffff88802c548e00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1499.991390][T30242] ffff88802c548e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1499.999488][T30242] >ffff88802c548f00: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 1500.007683][T30242] ^ [ 1500.013098][T30242] ffff88802c548f80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 1500.021192][T30242] ffff88802c549000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1500.029444][T30242] ================================================================== [ 1500.039326][T30242] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1500.046673][T30242] CPU: 0 PID: 30242 Comm: syz.4.8411 Not tainted syzkaller #0 [ 1500.054541][T30242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1500.064993][T30242] Call Trace: [ 1500.068933][T30242] [ 1500.072671][T30242] dump_stack_lvl+0x18c/0x250 [ 1500.077518][T30242] ? show_regs_print_info+0x20/0x20 [ 1500.083752][T30242] ? load_image+0x400/0x400 [ 1500.089200][T30242] panic+0x2dc/0x730 [ 1500.093580][T30242] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1500.099960][T30242] ? bpf_jit_dump+0xd0/0xd0 [ 1500.104498][T30242] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 1500.110511][T30242] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1500.116428][T30242] ? _raw_spin_unlock+0x40/0x40 [ 1500.121342][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1500.127327][T30242] check_panic_on_warn+0x84/0xa0 [ 1500.132313][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1500.137549][T30242] end_report+0x6f/0x130 [ 1500.141934][T30242] kasan_report+0x128/0x150 [ 1500.146497][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1500.151665][T30242] kasan_check_range+0x241/0x290 [ 1500.156723][T30242] ? __bpf_get_stackid+0x6bf/0x900 [ 1500.161868][T30242] __asan_memcpy+0x40/0x70 [ 1500.166323][T30242] __bpf_get_stackid+0x6bf/0x900 [ 1500.171308][T30242] bpf_get_stackid_pe+0x343/0x410 [ 1500.176686][T30242] bpf_prog_16fa1569821187d5+0x29/0x39 [ 1500.182192][T30242] bpf_overflow_handler+0x1fc/0x510 [ 1500.187550][T30242] ? bpf_overflow_handler+0xde/0x510 [ 1500.193158][T30242] ? tp_perf_event_destroy+0x20/0x20 [ 1500.198511][T30242] ? __perf_event_account_interrupt+0x187/0x280 [ 1500.204865][T30242] __perf_event_overflow+0x447/0x630 [ 1500.210221][T30242] perf_swevent_event+0x324/0x630 [ 1500.215379][T30242] ? perf_tp_event+0x1450/0x1450 [ 1500.220364][T30242] ___perf_sw_event+0x4a7/0x730 [ 1500.225254][T30242] ? ___perf_sw_event+0x199/0x730 [ 1500.230342][T30242] ? perf_swevent_put_recursion_context+0xb0/0xb0 [ 1500.236902][T30242] ? __lock_acquire+0x1347/0x7d40 [ 1500.241987][T30242] ? __put_user_4+0x11/0x20 [ 1500.246791][T30242] ? verify_lock_unused+0x140/0x140 [ 1500.252076][T30242] ? perf_trace_lock+0xfc/0x3b0 [ 1500.257578][T30242] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1500.263588][T30242] ? lock_chain_count+0x20/0x20 [ 1500.268465][T30242] ? perf_trace_lock+0xfc/0x3b0 [ 1500.273439][T30242] __perf_sw_event+0x139/0x270 [ 1500.278247][T30242] do_user_addr_fault+0x123e/0x12c0 [ 1500.283508][T30242] ? rcu_is_watching+0x15/0xb0 [ 1500.288315][T30242] exc_page_fault+0x64/0x100 [ 1500.292953][T30242] asm_exc_page_fault+0x26/0x30 [ 1500.297839][T30242] RIP: 0010:__put_user_4+0x11/0x20 [ 1500.302989][T30242] Code: 01 ca c3 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 90 f3 0f 1e fa 0f 01 cb [ 1500.322671][T30242] RSP: 0018:ffffc9000c38fe80 EFLAGS: 00050206 [ 1500.328780][T30242] RAX: 000000000000000c RBX: 0000000000000000 RCX: 0000200000000000 [ 1500.336887][T30242] RDX: 0000000000000000 RSI: ffffffff8acada80 RDI: ffffffff8b1c82e0 [ 1500.344993][T30242] RBP: 000000000000000c R08: ffffffff8e8adeaf R09: 1ffffffff1d15bd5 [ 1500.352999][T30242] R10: dffffc0000000000 R11: fffffbfff1d15bd6 R12: 0000000000000000 [ 1500.361005][T30242] R13: 0000200000000000 R14: 0000000000000001 R15: 0000000000000001 [ 1500.369018][T30242] __sys_socketpair+0xb8/0x550 [ 1500.373854][T30242] ? lock_chain_count+0x20/0x20 [ 1500.378794][T30242] __x64_sys_socketpair+0x9b/0xb0 [ 1500.383872][T30242] do_syscall_64+0x55/0xa0 [ 1500.388326][T30242] ? clear_bhb_loop+0x40/0x90 [ 1500.393146][T30242] ? clear_bhb_loop+0x40/0x90 [ 1500.397894][T30242] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1500.404003][T30242] RIP: 0033:0x7f992ed9c629 [ 1500.408450][T30242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.428278][T30242] RSP: 002b:00007f992fb8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1500.437785][T30242] RAX: ffffffffffffffda RBX: 00007f992f016090 RCX: 00007f992ed9c629 [ 1500.445856][T30242] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1500.453880][T30242] RBP: 00007f992ee32b39 R08: 0000000000000000 R09: 0000000000000000 [ 1500.462759][T30242] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1500.470888][T30242] R13: 00007f992f016128 R14: 00007f992f016090 R15: 00007ffd26953c38 [ 1500.479005][T30242] [ 1500.482829][T30242] Kernel Offset: disabled [ 1500.487167][T30242] Rebooting in 86400 seconds..