last executing test programs: 7.289090067s ago: executing program 0 (id=12357): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001780)}, 0x4000808) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.025434306s ago: executing program 0 (id=12360): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x30, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000), 0x62) socket$kcm(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x1}, 0x4001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [r6]}}], 0x38}, 0x8841) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, r7, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.661528567s ago: executing program 0 (id=12364): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="890000", 0x3}], 0x1}, 0x0) 6.463242804s ago: executing program 0 (id=12366): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x30, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000), 0x62) socket$kcm(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x1}, 0x4001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x18, 0x1, 0x1, [r5]}}], 0x38}, 0x8841) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, r6, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 6.177816373s ago: executing program 0 (id=12367): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2d3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 5.872071192s ago: executing program 0 (id=12371): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="130000000100000080960000faffffff06000300", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB="01000013930d745fc639c777d41355f47f", @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x10182) r8 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r8, 0x0, 0xfdef) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x2, 0x200000000000001, 0x106) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad8", 0x9c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 3.956312804s ago: executing program 3 (id=12383): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="180099030000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f85b24099c0081e4e7effc5c13ff0000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x57}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x1b, &(0x7f0000000a00)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0x2}, @generic={0x5, 0x7, 0x5, 0x40, 0x101}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfeaa}}, @map_fd={0x18, 0x1}, @alu={0x7, 0x1, 0x6, 0x9, 0x1, 0x50, 0xfffffffffffffff0}], &(0x7f0000000340)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x18, 0x0, 0x0) socketpair(0x3, 0x800, 0x0, &(0x7f0000000000)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x21, 0x0, 0x0, 0x20}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}, 0x40010040) r8 = socket$kcm(0x2c, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x11b, 0x2, &(0x7f0000000900), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r5, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x4000088) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@const={0x0, 0x0, 0x0, 0x4}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x34}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', 0x0, r9, 0x0, 0x1}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x27, 0x30, 0x0, &(0x7f0000000600)="f8ad48c5fce216efcc244f5d86dd6c5fee416a26f2a47171535434145d224d820439ccd9c109b1d38ea5c464189c571e", 0x0, 0x61ab, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 3.315669164s ago: executing program 3 (id=12385): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="d2ff03076003008cb89e08f086ddd6b86e9cbde1768470f96012a257d878da58a5d06db96423beab", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) write$cgroup_pid(r0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040840) r6 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000640)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x4}}, 0x30, 0x0}, 0x0) close(r1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000006d0500000300000000400000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r7}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={r5, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) sendmsg$inet(r3, &(0x7f0000000f40)={&(0x7f0000000300)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000400)="497ef369fd75cbe757a6b4283ed123c3511b3b2e719a37fd85e8486276c827d4cbf1b132317bde860bfe1924a1430eb7ee3b9b4645d38714646b4d8665dbc4a183f9634da1eec12701ed2b0b7efee915692b62cb32a940377c32f063ece5036c23bdbd777ba0b3a413e5a5fbc44cc0636ca51a563c113f91387f53dda03c816115721f560920f13bfd4b99406054fb20a734661c33afcf15f3757cef9dd9928e8360ef2203388870400178906edfe1d9860c93", 0xb3}, {&(0x7f00000005c0)="20935fe13b5fe0887a3c08499a0330872dff96f238abab2ab18d2baac17f9a16eb4dea2bc138ef84d8bc2861e195094efd0cb50558b4206138be9d9c353e9300298902350271cf8ef19be806fe0979a827e2a7308af930c48807ae6cdd856e6442cf5e2d1f52aa6ee8b2d2ff1be29250a535e7cdac2e9c218d", 0x79}, {&(0x7f0000000780)="c8be1e2a051d5a0e0014459c29da03dcd2e70a93c6078ec946c5e9468f93b2e575b40aa2c60ec4de3dac3e7c8a09d467f3e0f8ec0ee644d52ab5602f5b1b110aaa89b25310fc796e977a378873d2ff278db98ad481f4820699687f65c5d524e3c5e3da4c175e8bfe9bf8d6a5bbacc87963eaa195723c322841026e537656dc702edc33cf2355b53e4ad0f6cf0309316f70d05903760e675ab9ab9c0b", 0x9c}, {&(0x7f0000000980)="3271f64a7fc225ed4597f6d530f623eaf19f0a980ecd70357ddd3c9e43466bf01c277f3183b9a048b6eb8d1360889fa87f0cdb048776c933008c5776966fe7531a37953596c5c7c0775abcc614141e1358fdcb27123b73fdf4338de74147e8090e9262e6b464b631794321e3d5c7497c38ab7a57b7fef0c9d32d964071b82778c54108f76d062fa744adec8434f9d912a54e7229d6891db479077b7e6240db240f96657a30ea93cf8d38a07e8703260cc23ddc0490d91cfa929338", 0xbb}, {&(0x7f0000000a40)="620e9a6ed38c12e8e660cf8cff44430749cf883166d29c74194cb60a19f7bfbb24d82a459694e1ccef6f238b2de872bf99139ae7a97ce674363b5a3a0f1cb633", 0x40}], 0x5, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x1d}, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}], 0x50}, 0x4008000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r7}, 0x38) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)=0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r0, r5}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r9, &(0x7f0000000180), 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) 3.033026803s ago: executing program 3 (id=12388): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100c, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000092a54f6ca1a84ffc704f88a506e2a404906eec2130a384b7bd5426ce7e213b6c8d41501e0dee57fc99c88e605d98a100000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2c40, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 2.959000825s ago: executing program 1 (id=12389): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x2c) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.712007823s ago: executing program 2 (id=12390): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="130000000100000080960000faffffff06000300", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB="01000013930d745fc639c777d41355f47f91", @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x10182) r8 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r8, 0x0, 0xfdef) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x2, 0x200000000000001, 0x106) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad8", 0x9c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 2.421484223s ago: executing program 1 (id=12391): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100c, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000092a54f6ca1a84ffc704f88a506e2a404906eec2130a384b7bd5426ce7e213b6c8d41501e0dee57fc99c88e605d98a100000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2c40, 0x0) socket$kcm(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 2.276690817s ago: executing program 2 (id=12392): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd33, 0x0, 0x0, 0x0, 0x8a8b}}, &(0x7f0000000500)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000640)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x2, 0x93, 0xe48}, 0x10, 0x2615e, 0xffffffffffffffff, 0x0, &(0x7f0000000900), 0x0, 0x10, 0x51}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x11, 0x0, 0x0, 0x0, 0x6, 0x441e, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0x8, 0x0, 0x1e5cc849, 0x0, 0x60000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0xffffffff, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600), 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000800)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000)=r6, 0x8) close(0x3) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0xa, 0x9, 0x6, 0x5, 0x0, 0x4, 0x94011, 0xe, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x4, @perf_config_ext={0x0, 0x7}, 0x111080, 0xffff, 0x5a1, 0x0, 0x3, 0x407, 0x3, 0x0, 0x3, 0x0, 0x6}, 0x0, 0xb, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r7, @ANYRES8=0x0, @ANYRESHEX=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r9 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r8, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r9, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r9, r7, 0x4, r7}, 0x10) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000100)=r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) 2.116567032s ago: executing program 3 (id=12393): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100c, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000092a54f6ca1a84ffc704f88a506e2a404906eec2130a384b7bd5426ce7e213b6c8d41501e0dee57fc99c88e605d98a100000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2c40, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000001c0)=0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.956098568s ago: executing program 2 (id=12394): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="890000", 0x3}], 0x1}, 0x0) 1.724234025s ago: executing program 2 (id=12395): r0 = socket$kcm(0x11, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48005) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r1, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, &(0x7f0000000200)=[0x0], 0x0, 0x0}, 0x24) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$kcm(0x10, 0x5, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x5}, 0x100c, 0x0, 0xfffffffc, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r4, 0x4) socket$kcm(0x2, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="ffffff8d00"}) socket$kcm(0x2, 0x200000000000001, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000002e"], 0x0, 0x4d}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000092a54f6ca1a84ffc704f88a506e2a404906eec2130a384b7bd5426ce7e213b6c8d41501e0dee57fc99c88e605d98a100000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="000000000100"/28], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2c40, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, &(0x7f00000001c0)=0x2) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xef, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) 1.57278828s ago: executing program 1 (id=12396): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f0000001780)}, 0x4000808) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000063016a0000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.420070525s ago: executing program 1 (id=12397): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x2d3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000019000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000008001000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.175619192s ago: executing program 3 (id=12398): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7f}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x16, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="660a00000000000061114c000000000085000000010000009500000000000000342c022b90f2f10fbd8bbd2d62a0f8825bddb72e4d7bd92a36e6fe1f59cf1b6561820547a94973f30c63946cb727077864e4cbd01229439c01e5f1ed9967fcd3b11b77f3196fe37603f7c114ed33f9512c88"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, 0x5b) close(r0) 995.283458ms ago: executing program 1 (id=12399): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1f00000004000000060000000700000080130000", @ANYRES32, @ANYBLOB="0000000000000000008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001"], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x81021, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="130000000100000080960000faffffff06000300", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB="01000013930d745fc639c777d41355f47f91", @ANYRES32, @ANYBLOB], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x1e, 0x4, 0x0) r5 = socket$kcm(0x1e, 0x4, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f00000002c0)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000500eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfdef) recvmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x10182) r8 = socket$kcm(0x1e, 0x4, 0x0) write$cgroup_subtree(r8, 0x0, 0xfdef) recvmsg(r4, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x10021) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00'}, 0x18) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfdef) socket$kcm(0x2, 0x200000000000001, 0x106) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad8", 0x9c}], 0x1}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) 797.764855ms ago: executing program 2 (id=12400): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x9, 0x5, 0xff, 0x1, 0x0, 0x7fffffff, 0x44, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x7}, 0x20a, 0xfffffffffffffffd, 0x5, 0x1, 0x81, 0x6, 0x8, 0x0, 0x58, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0xb8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x14, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0xd2ec, 0x0, 0xffffffffffffffff, 0x3, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) close(r1) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="39000000140081ae10003c000500018311001f9f660fcff11997af0ce6ae066505acb612f691f3bd3508abca1be6eeb89c44ebb37392dc2bdb", 0x39}], 0x1}, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYRES16, @ANYBLOB="45333a333f81d6d2b9bc6631b4214cd8b7e777239cb51e6575cc7e173da229fcfa68ddd9bd9852192141023ca87f9db718804ef5c824c9c65b3cbd96a87c16a4ee312cb1405a9025c97d5e466b11176df7a8ed04a2376385", @ANYRES64=r0, @ANYRES64=r5, @ANYRES16=r6, @ANYRES8=r3], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x30, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0x0, 0x4, 0x1}, 0x50) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x9, 0x3, 0x9, 0x1, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x4, 0xc}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r11 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r11, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r11, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 77.163218ms ago: executing program 3 (id=12401): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{}]}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x30, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x77, &(0x7f0000000000), 0x62) socket$kcm(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}], 0x20, 0x1}, 0x4001) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[], 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = getpid() sendmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x18, 0x1, 0x1, [r6]}}], 0x38}, 0x8841) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, r7, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89a0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x2, 0x1024, &(0x7f0000001540)=""/4132, 0x0, 0x5}, 0x94) r9 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r9, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f90524fc60040f030048000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 67.061728ms ago: executing program 2 (id=12402): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x5, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYRES8, @ANYRESHEX=r0], 0x9a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000041600001800000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 0s ago: executing program 1 (id=12403): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x44010) kernel console output (not intermixed with test programs): 195][ T7710] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3083.114803][ T7710] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3083.120699][ T7710] Node 0 DMA32 free:1396440kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:19932kB inactive_anon:0kB active_file:85320kB inactive_file:163200kB unevictable:1536kB writepending:1744kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:26736kB local_pcp:7296kB free_cma:0kB [ 3083.177500][ T7710] lowmem_reserve[]: 0 0 0 0 0 [ 3083.182447][ T7710] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3083.262487][ T7710] lowmem_reserve[]: 0 0 0 0 0 [ 3083.275966][ T7710] Node 1 Normal free:3896052kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19004kB local_pcp:10136kB free_cma:0kB [ 3083.318151][ T7710] lowmem_reserve[]: 0 0 0 0 0 [ 3083.322973][ T7710] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3083.389386][ T7710] Node 0 DMA32: 1957*4kB (UME) 1714*8kB (UME) 1882*16kB (UME) 2634*32kB (UME) 797*64kB (UME) 159*128kB (UME) 66*256kB (UME) 103*512kB (UME) 95*1024kB (UM) 13*2048kB (UME) 249*4096kB (UM) = 1420740kB [ 3083.427611][ T7710] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3083.457647][ T7728] netlink: 'syz.2.11845': attribute type 2 has an invalid length. [ 3083.466258][ T7710] Node 1 Normal: 251*4kB (UE) 51*8kB (UME) 31*16kB (UME) 74*32kB (UME) 19*64kB (UE) 7*128kB (UME) 0*256kB 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3896052kB [ 3083.468194][ T7728] netlink: 'syz.2.11845': attribute type 8 has an invalid length. [ 3083.483806][ T7710] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3083.483830][ T7710] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3083.483848][ T7710] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3083.483866][ T7710] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3083.483884][ T7710] 63748 total pagecache pages [ 3083.483893][ T7710] 0 pages in swap cache [ 3083.483902][ T7710] Free swap = 124728kB [ 3083.483911][ T7710] Total swap = 124996kB [ 3083.483922][ T7710] 2097051 pages RAM [ 3083.483930][ T7710] 0 pages HighMem/MovableOnly [ 3083.483938][ T7710] 416929 pages reserved [ 3083.483947][ T7710] 0 pages cma reserved [ 3083.885595][ T7737] netlink: 'syz.0.11849': attribute type 3 has an invalid length. [ 3084.190871][ T7745] netlink: 'syz.2.11853': attribute type 21 has an invalid length. [ 3084.258592][ T7745] netlink: 'syz.2.11853': attribute type 21 has an invalid length. [ 3084.813052][ T7760] FAULT_INJECTION: forcing a failure. [ 3084.813052][ T7760] name failslab, interval 1, probability 0, space 0, times 0 [ 3084.841685][ T7760] CPU: 1 PID: 7760 Comm: syz.3.11859 Not tainted syzkaller #0 [ 3084.849254][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3084.859363][ T7760] Call Trace: [ 3084.862767][ T7760] [ 3084.865739][ T7760] dump_stack_lvl+0x18c/0x250 [ 3084.870485][ T7760] ? show_regs_print_info+0x20/0x20 [ 3084.875731][ T7760] ? load_image+0x420/0x420 [ 3084.880317][ T7760] ? __might_sleep+0xe0/0xe0 [ 3084.884981][ T7760] ? __lock_acquire+0x7d40/0x7d40 [ 3084.890096][ T7760] should_fail_ex+0x39d/0x4d0 [ 3084.894864][ T7760] should_failslab+0x9/0x20 [ 3084.899442][ T7760] slab_pre_alloc_hook+0x59/0x310 [ 3084.904538][ T7760] ? tomoyo_encode+0x28b/0x540 [ 3084.909411][ T7760] ? tomoyo_encode+0x28b/0x540 [ 3084.914218][ T7760] __kmem_cache_alloc_node+0x53/0x250 [ 3084.919647][ T7760] ? tomoyo_encode+0x28b/0x540 [ 3084.924487][ T7760] __kmalloc+0xa4/0x230 [ 3084.928717][ T7760] tomoyo_encode+0x28b/0x540 [ 3084.933361][ T7760] tomoyo_realpath_from_path+0x592/0x5d0 [ 3084.939069][ T7760] tomoyo_path_number_perm+0x248/0x620 [ 3084.944585][ T7760] ? tomoyo_path_number_perm+0x217/0x620 [ 3084.950282][ T7760] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3084.955806][ T7760] ? ksys_write+0x1c4/0x260 [ 3084.960415][ T7760] ? __fget_files+0x28/0x4b0 [ 3084.965149][ T7760] ? __fget_files+0x28/0x4b0 [ 3084.969804][ T7760] security_file_ioctl+0x70/0xa0 [ 3084.974798][ T7760] __se_sys_ioctl+0x48/0x170 [ 3084.979448][ T7760] do_syscall_64+0x55/0xb0 [ 3084.983901][ T7760] ? clear_bhb_loop+0x40/0x90 [ 3084.988620][ T7760] ? clear_bhb_loop+0x40/0x90 [ 3084.993356][ T7760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3084.999298][ T7760] RIP: 0033:0x7f7b5eb9ce59 [ 3085.003765][ T7760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3085.023418][ T7760] RSP: 002b:00007f7b5f998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3085.031880][ T7760] RAX: ffffffffffffffda RBX: 00007f7b5ee15fa0 RCX: 00007f7b5eb9ce59 [ 3085.039887][ T7760] RDX: 0000200000000000 RSI: 0000000000008916 RDI: 0000000000000003 [ 3085.047893][ T7760] RBP: 00007f7b5f998090 R08: 0000000000000000 R09: 0000000000000000 [ 3085.055900][ T7760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3085.063906][ T7760] R13: 00007f7b5ee16038 R14: 00007f7b5ee15fa0 R15: 00007ffd19f40108 [ 3085.071932][ T7760] [ 3085.087169][ T7760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3085.128007][ T7763] __nla_validate_parse: 6 callbacks suppressed [ 3085.128025][ T7763] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11857'. [ 3085.523675][ T7775] netlink: 192 bytes leftover after parsing attributes in process `syz.3.11865'. [ 3085.611953][ T7773] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11863'. [ 3085.913546][ T7782] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11867'. [ 3086.388143][ T7795] netlink: 192 bytes leftover after parsing attributes in process `syz.1.11874'. [ 3086.598911][ T7803] validate_nla: 7 callbacks suppressed [ 3086.598931][ T7803] netlink: 'syz.0.11878': attribute type 12 has an invalid length. [ 3086.622362][ T7803] netlink: 'syz.0.11878': attribute type 15 has an invalid length. [ 3087.178996][ T7816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11882'. [ 3087.574057][ T7821] netlink: 'syz.1.11883': attribute type 21 has an invalid length. [ 3087.600474][ T7820] netlink: 'syz.1.11883': attribute type 21 has an invalid length. [ 3087.619222][ T7820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11883'. [ 3087.672488][ T7823] FAULT_INJECTION: forcing a failure. [ 3087.672488][ T7823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3087.700995][ T7823] CPU: 0 PID: 7823 Comm: syz.3.11885 Not tainted syzkaller #0 [ 3087.708553][ T7823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3087.718665][ T7823] Call Trace: [ 3087.722000][ T7823] [ 3087.724970][ T7823] dump_stack_lvl+0x18c/0x250 [ 3087.729706][ T7823] ? show_regs_print_info+0x20/0x20 [ 3087.734950][ T7823] ? load_image+0x420/0x420 [ 3087.739527][ T7823] ? __lock_acquire+0x7d40/0x7d40 [ 3087.744604][ T7823] ? __virt_addr_valid+0x18c/0x540 [ 3087.749768][ T7823] should_fail_ex+0x39d/0x4d0 [ 3087.754512][ T7823] _copy_from_user+0x2f/0xe0 [ 3087.759154][ T7823] bpf_test_init+0xde/0x140 [ 3087.763725][ T7823] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 3087.769162][ T7823] ? dev_put+0x80/0x80 [ 3087.773296][ T7823] ? dev_put+0x80/0x80 [ 3087.777409][ T7823] bpf_prog_test_run+0x321/0x390 [ 3087.782403][ T7823] __sys_bpf+0x49d/0x890 [ 3087.786704][ T7823] ? bpf_link_show_fdinfo+0x390/0x390 [ 3087.792162][ T7823] ? lock_chain_count+0x20/0x20 [ 3087.797116][ T7823] __x64_sys_bpf+0x7c/0x90 [ 3087.801590][ T7823] do_syscall_64+0x55/0xb0 [ 3087.806045][ T7823] ? clear_bhb_loop+0x40/0x90 [ 3087.810783][ T7823] ? clear_bhb_loop+0x40/0x90 [ 3087.815534][ T7823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3087.821500][ T7823] RIP: 0033:0x7f7b5eb9ce59 [ 3087.825962][ T7823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3087.845620][ T7823] RSP: 002b:00007f7b5f998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3087.854088][ T7823] RAX: ffffffffffffffda RBX: 00007f7b5ee15fa0 RCX: 00007f7b5eb9ce59 [ 3087.862137][ T7823] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 3087.870168][ T7823] RBP: 00007f7b5f998090 R08: 0000000000000000 R09: 0000000000000000 [ 3087.878227][ T7823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3087.886256][ T7823] R13: 00007f7b5ee16038 R14: 00007f7b5ee15fa0 R15: 00007ffd19f40108 [ 3087.894300][ T7823] [ 3088.120244][ T7831] netlink: 'syz.1.11888': attribute type 3 has an invalid length. [ 3088.137172][ T7831] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11888'. [ 3088.457296][ T7844] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11892'. [ 3088.495944][ T7850] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.11895'. [ 3088.731363][ T5073] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 3088.781706][ T5073] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 3088.852355][ T7861] netlink: 'syz.2.11899': attribute type 12 has an invalid length. [ 3088.892152][ T7861] netlink: 'syz.2.11899': attribute type 15 has an invalid length. [ 3090.629850][ T7900] netlink: 'syz.3.11917': attribute type 12 has an invalid length. [ 3090.641889][ T7900] netlink: 'syz.3.11917': attribute type 15 has an invalid length. [ 3090.777216][ T5073] Bluetooth: hci3: command 0x0406 tx timeout [ 3090.856894][ T5073] Bluetooth: hci2: command 0x0406 tx timeout [ 3091.561694][ T7920] __nla_validate_parse: 2 callbacks suppressed [ 3091.561714][ T7920] netlink: 192 bytes leftover after parsing attributes in process `syz.2.11922'. [ 3091.807304][ T7931] FAULT_INJECTION: forcing a failure. [ 3091.807304][ T7931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3091.844975][ T7931] CPU: 1 PID: 7931 Comm: syz.2.11926 Not tainted syzkaller #0 [ 3091.852544][ T7931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3091.862661][ T7931] Call Trace: [ 3091.865995][ T7931] [ 3091.868974][ T7931] dump_stack_lvl+0x18c/0x250 [ 3091.873713][ T7931] ? show_regs_print_info+0x20/0x20 [ 3091.878978][ T7931] ? load_image+0x420/0x420 [ 3091.883552][ T7931] ? __might_fault+0xaa/0x120 [ 3091.888306][ T7931] ? __lock_acquire+0x7d40/0x7d40 [ 3091.893401][ T7931] should_fail_ex+0x39d/0x4d0 [ 3091.898150][ T7931] _copy_from_user+0x2f/0xe0 [ 3091.902785][ T7931] bpf_prog_test_run_skb+0x266/0x12b0 [ 3091.908203][ T7931] ? __fget_files+0x28/0x4b0 [ 3091.912842][ T7931] ? __fget_files+0x28/0x4b0 [ 3091.917475][ T7931] ? __fget_files+0x43d/0x4b0 [ 3091.922192][ T7931] ? cpu_online+0x60/0x60 [ 3091.926554][ T7931] bpf_prog_test_run+0x321/0x390 [ 3091.931526][ T7931] __sys_bpf+0x49d/0x890 [ 3091.935802][ T7931] ? bpf_link_show_fdinfo+0x390/0x390 [ 3091.941217][ T7931] ? lock_chain_count+0x20/0x20 [ 3091.946108][ T7931] __x64_sys_bpf+0x7c/0x90 [ 3091.950564][ T7931] do_syscall_64+0x55/0xb0 [ 3091.955024][ T7931] ? clear_bhb_loop+0x40/0x90 [ 3091.959772][ T7931] ? clear_bhb_loop+0x40/0x90 [ 3091.964507][ T7931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3091.970463][ T7931] RIP: 0033:0x7f12f099ce59 [ 3091.974915][ T7931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3091.994560][ T7931] RSP: 002b:00007f12f18f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3092.003041][ T7931] RAX: ffffffffffffffda RBX: 00007f12f0c15fa0 RCX: 00007f12f099ce59 [ 3092.011045][ T7931] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 3092.019043][ T7931] RBP: 00007f12f18f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3092.027052][ T7931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3092.035051][ T7931] R13: 00007f12f0c16038 R14: 00007f12f0c15fa0 R15: 00007ffcf29bc288 [ 3092.043061][ T7931] [ 3092.111506][ T7934] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11928'. [ 3092.447097][ T7947] FAULT_INJECTION: forcing a failure. [ 3092.447097][ T7947] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.521771][ T7947] CPU: 0 PID: 7947 Comm: syz.2.11935 Not tainted syzkaller #0 [ 3092.525122][ T7944] netlink: 'syz.0.11934': attribute type 21 has an invalid length. [ 3092.529308][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3092.529355][ T7947] Call Trace: [ 3092.529365][ T7947] [ 3092.529375][ T7947] dump_stack_lvl+0x18c/0x250 [ 3092.529409][ T7947] ? show_regs_print_info+0x20/0x20 [ 3092.529433][ T7947] ? load_image+0x420/0x420 [ 3092.529468][ T7947] ? __lock_acquire+0x7d40/0x7d40 [ 3092.529493][ T7947] ? __mutex_trylock_common+0x159/0x260 [ 3092.529524][ T7947] should_fail_ex+0x39d/0x4d0 [ 3092.529565][ T7947] should_failslab+0x9/0x20 [ 3092.529596][ T7947] slab_pre_alloc_hook+0x59/0x310 [ 3092.529629][ T7947] ? __mutex_lock+0x315/0xcc0 [ 3092.529652][ T7947] ? tracepoint_add_func+0x2eb/0xa00 [ 3092.529674][ T7947] ? tracepoint_add_func+0x2eb/0xa00 [ 3092.529695][ T7947] __kmem_cache_alloc_node+0x53/0x250 [ 3092.529733][ T7947] ? tracepoint_add_func+0x2eb/0xa00 [ 3092.529754][ T7947] __kmalloc+0xa4/0x230 [ 3092.529786][ T7947] ? trace_event_raw_event_lock+0x250/0x250 [ 3092.529822][ T7947] tracepoint_add_func+0x2eb/0xa00 [ 3092.529853][ T7947] ? trace_event_raw_event_lock+0x250/0x250 [ 3092.529887][ T7947] tracepoint_probe_register+0x5e/0x90 [ 3092.529909][ T7947] ? trace_event_raw_event_lock+0x250/0x250 [ 3092.529946][ T7947] perf_trace_event_init+0x4d2/0x9b0 [ 3092.529983][ T7947] perf_trace_init+0x238/0x2d0 [ 3092.530014][ T7947] perf_tp_event_init+0x8d/0x110 [ 3092.530048][ T7947] perf_try_init_event+0x12b/0x3c0 [ 3092.530094][ T7947] perf_event_alloc+0xfa4/0x21b0 [ 3092.530120][ T7947] ? perf_event_alloc+0xc06/0x21b0 [ 3092.530157][ T7947] ? find_lively_task_by_vpid+0x19/0x290 [ 3092.530196][ T7947] __se_sys_perf_event_open+0x740/0x1c50 [ 3092.530234][ T7947] ? mutex_unlock+0x10/0x10 [ 3092.530262][ T7947] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3092.530304][ T7947] ? lock_chain_count+0x20/0x20 [ 3092.530339][ T7947] ? lockdep_hardirqs_on+0x98/0x150 [ 3092.530365][ T7947] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3092.530396][ T7947] do_syscall_64+0x55/0xb0 [ 3092.530417][ T7947] ? clear_bhb_loop+0x40/0x90 [ 3092.530446][ T7947] ? clear_bhb_loop+0x40/0x90 [ 3092.530477][ T7947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3092.530505][ T7947] RIP: 0033:0x7f12f099ce59 [ 3092.530525][ T7947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3092.530545][ T7947] RSP: 002b:00007f12f18f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3092.530570][ T7947] RAX: ffffffffffffffda RBX: 00007f12f0c15fa0 RCX: 00007f12f099ce59 [ 3092.530588][ T7947] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000200 [ 3092.530604][ T7947] RBP: 00007f12f18f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3092.530618][ T7947] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 3092.530633][ T7947] R13: 00007f12f0c16038 R14: 00007f12f0c15fa0 R15: 00007ffcf29bc288 [ 3092.530667][ T7947] [ 3092.559978][ T7948] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11935'. [ 3093.688514][ T7970] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11941'. [ 3094.094574][ T7982] netlink: 'syz.3.11947': attribute type 21 has an invalid length. [ 3094.145291][ T7982] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11947'. [ 3094.181775][ T7987] netlink: 'syz.3.11947': attribute type 21 has an invalid length. [ 3094.506981][ T7993] FAULT_INJECTION: forcing a failure. [ 3094.506981][ T7993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3094.521724][ T7993] CPU: 1 PID: 7993 Comm: syz.1.11952 Not tainted syzkaller #0 [ 3094.529265][ T7993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3094.539374][ T7993] Call Trace: [ 3094.542700][ T7993] [ 3094.545672][ T7993] dump_stack_lvl+0x18c/0x250 [ 3094.550416][ T7993] ? show_regs_print_info+0x20/0x20 [ 3094.555675][ T7993] ? load_image+0x420/0x420 [ 3094.560242][ T7993] ? __might_fault+0xaa/0x120 [ 3094.564965][ T7993] ? __lock_acquire+0x7d40/0x7d40 [ 3094.570046][ T7993] should_fail_ex+0x39d/0x4d0 [ 3094.574798][ T7993] _copy_from_user+0x2f/0xe0 [ 3094.579429][ T7993] get_user_ifreq+0x6b/0x180 [ 3094.584059][ T7993] sock_ioctl+0x6f1/0x7e0 [ 3094.588424][ T7993] ? sock_poll+0x3e0/0x3e0 [ 3094.592884][ T7993] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3094.597852][ T7993] ? security_file_ioctl+0x80/0xa0 [ 3094.602997][ T7993] ? sock_poll+0x3e0/0x3e0 [ 3094.607452][ T7993] __se_sys_ioctl+0xfd/0x170 [ 3094.612082][ T7993] do_syscall_64+0x55/0xb0 [ 3094.616540][ T7993] ? clear_bhb_loop+0x40/0x90 [ 3094.621257][ T7993] ? clear_bhb_loop+0x40/0x90 [ 3094.625976][ T7993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3094.631909][ T7993] RIP: 0033:0x7f6c43b9ce59 [ 3094.636355][ T7993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3094.656442][ T7993] RSP: 002b:00007f6c44a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3094.664885][ T7993] RAX: ffffffffffffffda RBX: 00007f6c43e15fa0 RCX: 00007f6c43b9ce59 [ 3094.672888][ T7993] RDX: 0000200000000080 RSI: 00000000000089fc RDI: 0000000000000004 [ 3094.680882][ T7993] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3094.688877][ T7993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3094.696902][ T7993] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3094.704924][ T7993] [ 3094.965421][ T7999] FAULT_INJECTION: forcing a failure. [ 3094.965421][ T7999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3094.980498][ T8001] FAULT_INJECTION: forcing a failure. [ 3094.980498][ T8001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3095.005754][ T7999] CPU: 0 PID: 7999 Comm: syz.2.11954 Not tainted syzkaller #0 [ 3095.013295][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3095.023406][ T7999] Call Trace: [ 3095.026730][ T7999] [ 3095.029709][ T7999] dump_stack_lvl+0x18c/0x250 [ 3095.034447][ T7999] ? show_regs_print_info+0x20/0x20 [ 3095.039703][ T7999] ? load_image+0x420/0x420 [ 3095.044261][ T7999] ? __might_fault+0xaa/0x120 [ 3095.048974][ T7999] ? __lock_acquire+0x7d40/0x7d40 [ 3095.054038][ T7999] should_fail_ex+0x39d/0x4d0 [ 3095.058848][ T7999] _copy_from_user+0x2f/0xe0 [ 3095.063472][ T7999] __tun_chr_ioctl+0x1031/0x2000 [ 3095.068645][ T7999] ? tun_flow_create+0x310/0x310 [ 3095.073633][ T7999] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3095.078599][ T7999] ? security_file_ioctl+0x80/0xa0 [ 3095.083739][ T7999] ? tun_chr_poll+0x630/0x630 [ 3095.088450][ T7999] __se_sys_ioctl+0xfd/0x170 [ 3095.093086][ T7999] do_syscall_64+0x55/0xb0 [ 3095.097546][ T7999] ? clear_bhb_loop+0x40/0x90 [ 3095.102275][ T7999] ? clear_bhb_loop+0x40/0x90 [ 3095.107005][ T7999] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3095.112948][ T7999] RIP: 0033:0x7f12f099ce59 [ 3095.117397][ T7999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3095.137393][ T7999] RSP: 002b:00007f12f18f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3095.145841][ T7999] RAX: ffffffffffffffda RBX: 00007f12f0c15fa0 RCX: 00007f12f099ce59 [ 3095.153874][ T7999] RDX: 0000200000000780 RSI: 00000000401054d5 RDI: 0000000000000003 [ 3095.161932][ T7999] RBP: 00007f12f18f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3095.169948][ T7999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3095.177947][ T7999] R13: 00007f12f0c16038 R14: 00007f12f0c15fa0 R15: 00007ffcf29bc288 [ 3095.185964][ T7999] [ 3095.190169][ T8001] CPU: 0 PID: 8001 Comm: syz.0.11955 Not tainted syzkaller #0 [ 3095.197695][ T8001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3095.207792][ T8001] Call Trace: [ 3095.211097][ T8001] [ 3095.214038][ T8001] dump_stack_lvl+0x18c/0x250 [ 3095.218736][ T8001] ? show_regs_print_info+0x20/0x20 [ 3095.223950][ T8001] ? load_image+0x420/0x420 [ 3095.228489][ T8001] ? __might_fault+0xaa/0x120 [ 3095.233189][ T8001] ? __lock_acquire+0x7d40/0x7d40 [ 3095.238231][ T8001] should_fail_ex+0x39d/0x4d0 [ 3095.242931][ T8001] _copy_from_user+0x2f/0xe0 [ 3095.247561][ T8001] __tun_chr_ioctl+0x22f/0x2000 [ 3095.252470][ T8001] ? tun_flow_create+0x310/0x310 [ 3095.257483][ T8001] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3095.262465][ T8001] ? security_file_ioctl+0x80/0xa0 [ 3095.267629][ T8001] ? tun_chr_poll+0x630/0x630 [ 3095.272357][ T8001] __se_sys_ioctl+0xfd/0x170 [ 3095.277009][ T8001] do_syscall_64+0x55/0xb0 [ 3095.281475][ T8001] ? clear_bhb_loop+0x40/0x90 [ 3095.286211][ T8001] ? clear_bhb_loop+0x40/0x90 [ 3095.290946][ T8001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3095.296900][ T8001] RIP: 0033:0x7fccaaf9ce59 [ 3095.301379][ T8001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3095.321037][ T8001] RSP: 002b:00007fccabe8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3095.329502][ T8001] RAX: ffffffffffffffda RBX: 00007fccab215fa0 RCX: 00007fccaaf9ce59 [ 3095.337524][ T8001] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 3095.345534][ T8001] RBP: 00007fccabe8d090 R08: 0000000000000000 R09: 0000000000000000 [ 3095.353538][ T8001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3095.361544][ T8001] R13: 00007fccab216038 R14: 00007fccab215fa0 R15: 00007ffff1461458 [ 3095.369555][ T8001] [ 3095.427996][ T8004] tap0: tun_chr_ioctl cmd 1074025677 [ 3095.434108][ T8004] tap0: linktype set to 270 [ 3095.675354][ T8012] netlink: 'syz.2.11959': attribute type 21 has an invalid length. [ 3095.722347][ T8012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11959'. [ 3095.771855][ T8013] netlink: 'syz.2.11959': attribute type 21 has an invalid length. [ 3096.152554][ T8026] FAULT_INJECTION: forcing a failure. [ 3096.152554][ T8026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3096.172992][ T8026] CPU: 1 PID: 8026 Comm: syz.3.11964 Not tainted syzkaller #0 [ 3096.180543][ T8026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3096.190654][ T8026] Call Trace: [ 3096.193969][ T8026] [ 3096.196936][ T8026] dump_stack_lvl+0x18c/0x250 [ 3096.201664][ T8026] ? show_regs_print_info+0x20/0x20 [ 3096.206901][ T8026] ? load_image+0x420/0x420 [ 3096.211444][ T8026] ? __lock_acquire+0x7d40/0x7d40 [ 3096.216500][ T8026] ? snprintf+0xe9/0x140 [ 3096.220776][ T8026] should_fail_ex+0x39d/0x4d0 [ 3096.225578][ T8026] _copy_to_user+0x2f/0xa0 [ 3096.230026][ T8026] simple_read_from_buffer+0xe7/0x150 [ 3096.235436][ T8026] proc_fail_nth_read+0x1e8/0x260 [ 3096.240494][ T8026] ? proc_fault_inject_write+0x360/0x360 [ 3096.246164][ T8026] ? fsnotify_perm+0x271/0x5e0 [ 3096.251572][ T8026] ? proc_fault_inject_write+0x360/0x360 [ 3096.257248][ T8026] vfs_read+0x28b/0x970 [ 3096.261442][ T8026] ? kernel_read+0x1e0/0x1e0 [ 3096.266062][ T8026] ? __fget_files+0x28/0x4b0 [ 3096.270687][ T8026] ? __fget_files+0x28/0x4b0 [ 3096.275348][ T8026] ? __fget_files+0x43d/0x4b0 [ 3096.280071][ T8026] ? __fdget_pos+0x2a3/0x330 [ 3096.284697][ T8026] ? ksys_read+0x75/0x260 [ 3096.289066][ T8026] ksys_read+0x150/0x260 [ 3096.293359][ T8026] ? vfs_write+0x990/0x990 [ 3096.297820][ T8026] ? lockdep_hardirqs_on+0x98/0x150 [ 3096.303067][ T8026] do_syscall_64+0x55/0xb0 [ 3096.307510][ T8026] ? clear_bhb_loop+0x40/0x90 [ 3096.312217][ T8026] ? clear_bhb_loop+0x40/0x90 [ 3096.316924][ T8026] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3096.322849][ T8026] RIP: 0033:0x7f7b5eb5d68e [ 3096.327289][ T8026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3096.346922][ T8026] RSP: 002b:00007f7b5f997fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3096.355370][ T8026] RAX: ffffffffffffffda RBX: 00007f7b5f9986c0 RCX: 00007f7b5eb5d68e [ 3096.363380][ T8026] RDX: 000000000000000f RSI: 00007f7b5f9980a0 RDI: 0000000000000005 [ 3096.371390][ T8026] RBP: 00007f7b5f998090 R08: 0000000000000000 R09: 0000000000000000 [ 3096.379395][ T8026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3096.387393][ T8026] R13: 00007f7b5ee16038 R14: 00007f7b5ee15fa0 R15: 00007ffd19f40108 [ 3096.395615][ T8026] [ 3096.795051][ T8037] FAULT_INJECTION: forcing a failure. [ 3096.795051][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3096.821523][ T8037] CPU: 1 PID: 8037 Comm: syz.0.11968 Not tainted syzkaller #0 [ 3096.829095][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3096.839212][ T8037] Call Trace: [ 3096.842581][ T8037] [ 3096.845575][ T8037] dump_stack_lvl+0x18c/0x250 [ 3096.850353][ T8037] ? show_regs_print_info+0x20/0x20 [ 3096.855620][ T8037] ? load_image+0x420/0x420 [ 3096.860229][ T8037] ? __might_fault+0xaa/0x120 [ 3096.864960][ T8037] ? __lock_acquire+0x7d40/0x7d40 [ 3096.870123][ T8037] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3096.876412][ T8037] should_fail_ex+0x39d/0x4d0 [ 3096.881144][ T8037] _copy_from_user+0x2f/0xe0 [ 3096.885783][ T8037] __sys_bpf+0x23e/0x890 [ 3096.890094][ T8037] ? bpf_link_show_fdinfo+0x390/0x390 [ 3096.895557][ T8037] ? lock_chain_count+0x20/0x20 [ 3096.900462][ T8037] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3096.906500][ T8037] __x64_sys_bpf+0x7c/0x90 [ 3096.910963][ T8037] do_syscall_64+0x55/0xb0 [ 3096.915416][ T8037] ? clear_bhb_loop+0x40/0x90 [ 3096.920140][ T8037] ? clear_bhb_loop+0x40/0x90 [ 3096.924893][ T8037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3096.930827][ T8037] RIP: 0033:0x7fccaaf9ce59 [ 3096.935283][ T8037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3096.954933][ T8037] RSP: 002b:00007fccabe8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3096.963394][ T8037] RAX: ffffffffffffffda RBX: 00007fccab215fa0 RCX: 00007fccaaf9ce59 [ 3096.971404][ T8037] RDX: 0000000000000029 RSI: 0000200000000440 RDI: 0000000000000005 [ 3096.979419][ T8037] RBP: 00007fccabe8d090 R08: 0000000000000000 R09: 0000000000000000 [ 3096.987430][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3096.995438][ T8037] R13: 00007fccab216038 R14: 00007fccab215fa0 R15: 00007ffff1461458 [ 3097.003472][ T8037] [ 3097.457470][ T8042] netlink: 'syz.2.11969': attribute type 3 has an invalid length. [ 3097.477312][ T8042] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11969'. [ 3097.554996][ T8046] netlink: 'syz.0.11971': attribute type 10 has an invalid length. [ 3097.569101][ T8046] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11971'. [ 3097.610214][ T8046] team0: entered promiscuous mode [ 3097.640672][ T8046] C: entered promiscuous mode [ 3097.646255][ T8046] team_slave_1: entered promiscuous mode [ 3097.670706][ T8046] dummy0: entered promiscuous mode [ 3097.688489][ T8046] batadv0: entered promiscuous mode [ 3097.725507][ T8046] team0: entered allmulticast mode [ 3097.732950][ T8046] C: entered allmulticast mode [ 3097.752134][ T8046] team_slave_1: entered allmulticast mode [ 3097.779190][ T8046] dummy0: entered allmulticast mode [ 3097.784902][ T8046] batadv0: entered allmulticast mode [ 3097.866103][ T8046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3098.389712][ T8063] netlink: 'syz.1.11973': attribute type 15 has an invalid length. [ 3098.470354][ T8063] netlink: 'syz.1.11973': attribute type 7 has an invalid length. [ 3099.043277][ T8078] netlink: 'syz.3.11978': attribute type 10 has an invalid length. [ 3099.077850][ T8078] netlink: 'syz.3.11978': attribute type 10 has an invalid length. [ 3099.085844][ T8078] netlink: 203924 bytes leftover after parsing attributes in process `syz.3.11978'. [ 3099.164988][ T8078] openvswitch: netlink: Message has 4 unknown bytes. [ 3099.211151][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3099.221257][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3099.229569][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3099.239597][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3099.247511][ T5817] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3099.254930][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3099.321499][ T8078] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.11978'. [ 3099.368401][ T8078] netlink: 'syz.3.11978': attribute type 1 has an invalid length. [ 3101.347378][ T5073] Bluetooth: hci0: command tx timeout [ 3102.076690][T22866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.195905][T22866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.313023][T22866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.459442][T22866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3102.693392][ T8106] tap0: tun_chr_ioctl cmd 1074025677 [ 3102.711018][ T8106] tap0: linktype set to 270 [ 3102.958164][ T8084] chnl_net:caif_netlink_parms(): no params data found [ 3103.419502][ T5073] Bluetooth: hci0: command tx timeout [ 3105.497040][ T5073] Bluetooth: hci0: command tx timeout [ 3106.068734][ T8130] netlink: 'syz.1.11988': attribute type 3 has an invalid length. [ 3106.086819][ T8130] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11988'. [ 3106.997838][ T8084] bridge0: port 1(bridge_slave_0) entered blocking state [ 3107.005863][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state [ 3107.027262][ T8084] bridge_slave_0: entered allmulticast mode [ 3107.034784][ T8084] bridge_slave_0: entered promiscuous mode [ 3107.064975][ T8084] bridge0: port 2(bridge_slave_1) entered blocking state [ 3107.078645][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state [ 3107.090307][ T8084] bridge_slave_1: entered allmulticast mode [ 3107.128231][ T8084] bridge_slave_1: entered promiscuous mode [ 3107.216940][T22864] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3107.320677][ T8084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3107.379096][ T8084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3107.471823][ T8084] team0: Port device team_slave_0 added [ 3107.488260][ T8084] team0: Port device team_slave_1 added [ 3107.576979][ T5073] Bluetooth: hci0: command tx timeout [ 3107.587790][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3107.612429][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3107.641344][ T8084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3107.655614][ T8084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3107.663222][ T8084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3107.690576][ T8084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3108.125893][ T8167] netlink: 'syz.0.11997': attribute type 6 has an invalid length. [ 3108.150309][ T8167] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11997'. [ 3110.768866][ T8084] hsr_slave_0: entered promiscuous mode [ 3110.775678][ T8084] hsr_slave_1: entered promiscuous mode [ 3110.818982][ T8084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3110.837018][ T8084] Cannot create hsr debugfs directory [ 3110.955160][ T8182] netlink: 'syz.1.11999': attribute type 10 has an invalid length. [ 3110.996415][ T8182] netlink: 'syz.1.11999': attribute type 10 has an invalid length. [ 3111.006586][ T8182] netlink: 203924 bytes leftover after parsing attributes in process `syz.1.11999'. [ 3111.071613][ T8182] openvswitch: netlink: Message has 4 unknown bytes. [ 3111.195425][ T8189] netlink: 'syz.0.12001': attribute type 3 has an invalid length. [ 3111.224079][ T8189] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12001'. [ 3111.246037][ T8187] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.11999'. [ 3111.265791][ T8187] netlink: 'syz.1.11999': attribute type 1 has an invalid length. [ 3114.594124][ T8193] netlink: 'syz.3.12002': attribute type 10 has an invalid length. [ 3114.640703][ T8193] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12002'. [ 3114.700760][ T8193] team0: entered promiscuous mode [ 3114.707625][ T8193] team_slave_0: entered promiscuous mode [ 3114.714415][ T8193] team_slave_1: entered promiscuous mode [ 3114.722044][ T8193] dummy0: entered promiscuous mode [ 3114.729736][ T8193] team0: entered allmulticast mode [ 3114.756156][ T8193] team_slave_0: entered allmulticast mode [ 3114.771059][ T8193] team_slave_1: entered allmulticast mode [ 3114.781932][ T8193] dummy0: entered allmulticast mode [ 3114.805785][ T8193] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3115.199075][ T5073] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3115.333227][T22866] vlan0: left allmulticast mode [ 3115.373581][T22866] veth0_vlan: left allmulticast mode [ 3115.402696][T22866] vlan0: left promiscuous mode [ 3115.421789][T22866] @: port 1(vlan0) entered disabled state [ 3115.560157][T22866] hsr_slave_0: left promiscuous mode [ 3115.582225][T22866] hsr_slave_1: left promiscuous mode [ 3115.608777][T22866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3115.616287][T22866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3115.656012][T22866] batman_adv: batadv0: Interface deactivated: €Â0 [ 3115.665817][T22866] batman_adv: batadv0: Removing interface: €Â0 [ 3115.753821][T22866] veth0_vlan: left promiscuous mode [ 3118.818471][T22866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3118.879920][T22866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3119.286157][T22866] bond0 (unregistering): Released all slaves [ 3119.383554][ T8222] netlink: 'syz.0.12008': attribute type 21 has an invalid length. [ 3119.398033][ T8222] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12008'. [ 3119.755278][ T8242] netlink: 'syz.3.12011': attribute type 21 has an invalid length. [ 3119.798091][ T8242] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12011'. [ 3119.856468][ T8246] netlink: 'syz.3.12011': attribute type 21 has an invalid length. [ 3119.884633][ T8084] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3119.931111][ T8245] netlink: 'syz.1.12012': attribute type 6 has an invalid length. [ 3119.946355][ T8245] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12012'. [ 3119.973566][ T8084] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3119.999906][ T8084] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3120.029316][ T8084] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3120.341344][ T8084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3120.409849][ T8084] 8021q: adding VLAN 0 to HW filter on device team0 [ 3120.464262][T22864] bridge0: port 1(bridge_slave_0) entered blocking state [ 3120.471526][T22864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3120.524244][ T5073] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 3120.534189][T22864] bridge0: port 2(bridge_slave_1) entered blocking state [ 3120.541429][T22864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3121.294690][ T8084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3121.413565][ T8084] veth0_vlan: entered promiscuous mode [ 3121.450580][ T8084] veth1_vlan: entered promiscuous mode [ 3121.562379][ T8084] veth0_macvtap: entered promiscuous mode [ 3121.603064][ T8084] veth1_macvtap: entered promiscuous mode [ 3121.726114][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3121.752583][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3121.763756][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3121.779353][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3121.792084][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3121.805872][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3121.839030][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3121.854558][ T8289] netlink: 'syz.0.12022': attribute type 21 has an invalid length. [ 3121.883437][ T8289] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12022'. [ 3121.982398][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3122.016997][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3122.037344][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3122.060301][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3122.086819][ T8084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 3122.096548][ T8084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3122.139885][ T8084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3122.157954][ T8292] netlink: 'syz.0.12022': attribute type 21 has an invalid length. [ 3122.174709][ T8305] FAULT_INJECTION: forcing a failure. [ 3122.174709][ T8305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3122.203974][ T8084] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3122.230919][ T8305] CPU: 0 PID: 8305 Comm: syz.1.12024 Not tainted syzkaller #0 [ 3122.238477][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3122.248604][ T8305] Call Trace: [ 3122.251954][ T8305] [ 3122.254946][ T8305] dump_stack_lvl+0x18c/0x250 [ 3122.259688][ T8305] ? show_regs_print_info+0x20/0x20 [ 3122.264947][ T8305] ? load_image+0x420/0x420 [ 3122.269523][ T8305] ? __might_fault+0xaa/0x120 [ 3122.274273][ T8305] ? __lock_acquire+0x7d40/0x7d40 [ 3122.279365][ T8305] should_fail_ex+0x39d/0x4d0 [ 3122.284120][ T8305] _copy_from_user+0x2f/0xe0 [ 3122.288774][ T8305] vmemdup_user+0xac/0x1e0 [ 3122.293252][ T8305] map_lookup_elem+0x276/0x7c0 [ 3122.298077][ T8305] ? __might_fault+0xaa/0x120 [ 3122.302821][ T8305] ? security_bpf+0x7e/0xa0 [ 3122.307397][ T8305] __sys_bpf+0x438/0x890 [ 3122.311698][ T8305] ? bpf_link_show_fdinfo+0x390/0x390 [ 3122.317147][ T8305] ? lock_chain_count+0x20/0x20 [ 3122.322075][ T8305] __x64_sys_bpf+0x7c/0x90 [ 3122.326556][ T8305] do_syscall_64+0x55/0xb0 [ 3122.331021][ T8305] ? clear_bhb_loop+0x40/0x90 [ 3122.335766][ T8305] ? clear_bhb_loop+0x40/0x90 [ 3122.338971][ T8084] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3122.340485][ T8305] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.355194][ T8305] RIP: 0033:0x7f6c43b9ce59 [ 3122.359645][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3122.379294][ T8305] RSP: 002b:00007f6c449eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3122.387759][ T8305] RAX: ffffffffffffffda RBX: 00007f6c43e16090 RCX: 00007f6c43b9ce59 [ 3122.395773][ T8305] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000001 [ 3122.403768][ T8305] RBP: 00007f6c449eb090 R08: 0000000000000000 R09: 0000000000000000 [ 3122.411772][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3122.420214][ T8305] R13: 00007f6c43e16128 R14: 00007f6c43e16090 R15: 00007ffe7ef954d8 [ 3122.428241][ T8305] [ 3122.431496][ T8084] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3122.441067][ T8084] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3122.527684][ T8308] FAULT_INJECTION: forcing a failure. [ 3122.527684][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3122.567105][ T8308] CPU: 0 PID: 8308 Comm: syz.0.12025 Not tainted syzkaller #0 [ 3122.574665][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3122.585216][ T8308] Call Trace: [ 3122.588544][ T8308] [ 3122.591518][ T8308] dump_stack_lvl+0x18c/0x250 [ 3122.596261][ T8308] ? show_regs_print_info+0x20/0x20 [ 3122.601525][ T8308] ? load_image+0x420/0x420 [ 3122.606093][ T8308] ? __lock_acquire+0x7d40/0x7d40 [ 3122.611199][ T8308] ? snprintf+0xe9/0x140 [ 3122.615503][ T8308] should_fail_ex+0x39d/0x4d0 [ 3122.620255][ T8308] _copy_to_user+0x2f/0xa0 [ 3122.624738][ T8308] simple_read_from_buffer+0xe7/0x150 [ 3122.630189][ T8308] proc_fail_nth_read+0x1e8/0x260 [ 3122.635281][ T8308] ? proc_fault_inject_write+0x360/0x360 [ 3122.640990][ T8308] ? fsnotify_perm+0x271/0x5e0 [ 3122.645804][ T8308] ? proc_fault_inject_write+0x360/0x360 [ 3122.651476][ T8308] vfs_read+0x28b/0x970 [ 3122.655677][ T8308] ? kernel_read+0x1e0/0x1e0 [ 3122.660301][ T8308] ? __fget_files+0x28/0x4b0 [ 3122.664922][ T8308] ? __fget_files+0x28/0x4b0 [ 3122.669543][ T8308] ? __fget_files+0x43d/0x4b0 [ 3122.674297][ T8308] ? __fdget_pos+0x2a3/0x330 [ 3122.678926][ T8308] ? ksys_read+0x75/0x260 [ 3122.683312][ T8308] ksys_read+0x150/0x260 [ 3122.687591][ T8308] ? vfs_write+0x990/0x990 [ 3122.692044][ T8308] ? lockdep_hardirqs_on+0x98/0x150 [ 3122.697468][ T8308] do_syscall_64+0x55/0xb0 [ 3122.701914][ T8308] ? clear_bhb_loop+0x40/0x90 [ 3122.706621][ T8308] ? clear_bhb_loop+0x40/0x90 [ 3122.711328][ T8308] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3122.717258][ T8308] RIP: 0033:0x7fccaaf5d68e [ 3122.721707][ T8308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3122.741522][ T8308] RSP: 002b:00007fccabe8cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3122.750135][ T8308] RAX: ffffffffffffffda RBX: 00007fccabe8d6c0 RCX: 00007fccaaf5d68e [ 3122.758308][ T8308] RDX: 000000000000000f RSI: 00007fccabe8d0a0 RDI: 0000000000000006 [ 3122.766300][ T8308] RBP: 00007fccabe8d090 R08: 0000000000000000 R09: 0000000000000000 [ 3122.774382][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3122.782383][ T8308] R13: 00007fccab216038 R14: 00007fccab215fa0 R15: 00007ffff1461458 [ 3122.790483][ T8308] [ 3122.971556][T22864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3122.983328][T22864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3123.042157][ T5073] Bluetooth: hci3: ISO packet for unknown connection handle 5 [ 3123.099814][T22864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3123.156297][T22864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3123.904214][ T8337] syzkaller0: entered promiscuous mode [ 3123.935447][ T8337] syzkaller0: entered allmulticast mode [ 3124.520515][ T8355] FAULT_INJECTION: forcing a failure. [ 3124.520515][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3124.557358][ T8355] CPU: 1 PID: 8355 Comm: syz.1.12037 Not tainted syzkaller #0 [ 3124.564917][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3124.575035][ T8355] Call Trace: [ 3124.578345][ T8355] [ 3124.581300][ T8355] dump_stack_lvl+0x18c/0x250 [ 3124.586104][ T8355] ? show_regs_print_info+0x20/0x20 [ 3124.591338][ T8355] ? load_image+0x420/0x420 [ 3124.595877][ T8355] ? __lock_acquire+0x7d40/0x7d40 [ 3124.600932][ T8355] ? snprintf+0xe9/0x140 [ 3124.605218][ T8355] should_fail_ex+0x39d/0x4d0 [ 3124.609984][ T8355] _copy_to_user+0x2f/0xa0 [ 3124.614444][ T8355] simple_read_from_buffer+0xe7/0x150 [ 3124.619864][ T8355] proc_fail_nth_read+0x1e8/0x260 [ 3124.624930][ T8355] ? proc_fault_inject_write+0x360/0x360 [ 3124.630615][ T8355] ? fsnotify_perm+0x271/0x5e0 [ 3124.635410][ T8355] ? proc_fault_inject_write+0x360/0x360 [ 3124.641079][ T8355] vfs_read+0x28b/0x970 [ 3124.645278][ T8355] ? kernel_read+0x1e0/0x1e0 [ 3124.649911][ T8355] ? __fget_files+0x28/0x4b0 [ 3124.654543][ T8355] ? __fget_files+0x28/0x4b0 [ 3124.659169][ T8355] ? __fget_files+0x43d/0x4b0 [ 3124.663889][ T8355] ? __fdget_pos+0x2a3/0x330 [ 3124.668513][ T8355] ? ksys_read+0x75/0x260 [ 3124.672874][ T8355] ksys_read+0x150/0x260 [ 3124.677160][ T8355] ? vfs_write+0x990/0x990 [ 3124.681618][ T8355] ? lockdep_hardirqs_on+0x98/0x150 [ 3124.686883][ T8355] do_syscall_64+0x55/0xb0 [ 3124.691331][ T8355] ? clear_bhb_loop+0x40/0x90 [ 3124.696044][ T8355] ? clear_bhb_loop+0x40/0x90 [ 3124.700758][ T8355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3124.706704][ T8355] RIP: 0033:0x7f6c43b5d68e [ 3124.711239][ T8355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3124.730892][ T8355] RSP: 002b:00007f6c44a0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3124.739351][ T8355] RAX: ffffffffffffffda RBX: 00007f6c44a0c6c0 RCX: 00007f6c43b5d68e [ 3124.747378][ T8355] RDX: 000000000000000f RSI: 00007f6c44a0c0a0 RDI: 0000000000000005 [ 3124.755384][ T8355] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3124.763475][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3124.771475][ T8355] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3124.779494][ T8355] [ 3124.946963][ T5073] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 3125.457416][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3125.487272][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3125.513322][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3125.590319][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3125.601910][ T5817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3125.617008][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3126.215168][ T8373] chnl_net:caif_netlink_parms(): no params data found [ 3126.746012][ T5817] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 3126.800576][T22867] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3126.847116][ T8373] bridge0: port 1(bridge_slave_0) entered blocking state [ 3126.854323][ T8373] bridge0: port 1(bridge_slave_0) entered disabled state [ 3126.873003][ T8373] bridge_slave_0: entered allmulticast mode [ 3126.881347][ T8373] bridge_slave_0: entered promiscuous mode [ 3126.914716][ T8373] bridge0: port 2(bridge_slave_1) entered blocking state [ 3126.938245][ T8373] bridge0: port 2(bridge_slave_1) entered disabled state [ 3126.958438][ T8373] bridge_slave_1: entered allmulticast mode [ 3126.972385][ T8373] bridge_slave_1: entered promiscuous mode [ 3127.050356][T22867] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3127.196134][ T8373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3127.237338][ T8421] FAULT_INJECTION: forcing a failure. [ 3127.237338][ T8421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3127.281500][T22867] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3127.293230][ T8421] CPU: 0 PID: 8421 Comm: syz.0.12049 Not tainted syzkaller #0 [ 3127.300768][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3127.310879][ T8421] Call Trace: [ 3127.314210][ T8421] [ 3127.317191][ T8421] dump_stack_lvl+0x18c/0x250 [ 3127.321928][ T8421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3127.328144][ T8421] ? show_regs_print_info+0x20/0x20 [ 3127.333398][ T8421] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3127.339620][ T8421] ? dump_stack+0x9/0x20 [ 3127.343931][ T8421] should_fail_ex+0x39d/0x4d0 [ 3127.348681][ T8421] _copy_to_user+0x2f/0xa0 [ 3127.353166][ T8421] netns_bpf_prog_query+0x2a3/0x510 [ 3127.358421][ T8421] ? rht_unlock+0x1d0/0x1d0 [ 3127.362985][ T8421] __sys_bpf+0x7a0/0x890 [ 3127.367278][ T8421] ? bpf_link_show_fdinfo+0x390/0x390 [ 3127.372715][ T8421] ? lock_chain_count+0x20/0x20 [ 3127.377616][ T8421] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3127.383664][ T8421] __x64_sys_bpf+0x7c/0x90 [ 3127.388134][ T8421] do_syscall_64+0x55/0xb0 [ 3127.392595][ T8421] ? clear_bhb_loop+0x40/0x90 [ 3127.397325][ T8421] ? clear_bhb_loop+0x40/0x90 [ 3127.402066][ T8421] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3127.408023][ T8421] RIP: 0033:0x7fccaaf9ce59 [ 3127.412483][ T8421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3127.432171][ T8421] RSP: 002b:00007fccabe8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3127.440641][ T8421] RAX: ffffffffffffffda RBX: 00007fccab215fa0 RCX: 00007fccaaf9ce59 [ 3127.448670][ T8421] RDX: 0000000000000040 RSI: 0000200000000640 RDI: 0000000000000010 [ 3127.456724][ T8421] RBP: 00007fccabe8d090 R08: 0000000000000000 R09: 0000000000000000 [ 3127.464747][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3127.472784][ T8421] R13: 00007fccab216038 R14: 00007fccab215fa0 R15: 00007ffff1461458 [ 3127.480821][ T8421] [ 3127.503483][ T8373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3127.613714][T22867] netdevsim netdevsim3 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3127.700682][ T8373] team0: Port device team_slave_0 added [ 3127.740326][ T8373] team0: Port device team_slave_1 added [ 3127.847049][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3127.860695][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3127.976982][ T8373] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3128.111017][ T8373] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3128.157133][ T8373] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3128.216950][ T5817] Bluetooth: hci4: command tx timeout [ 3128.227349][ T8373] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3128.636393][ T8373] hsr_slave_0: entered promiscuous mode [ 3128.693744][ T8373] hsr_slave_1: entered promiscuous mode [ 3128.704051][ T8373] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3128.712788][ T8373] Cannot create hsr debugfs directory [ 3128.792101][ T8445] FAULT_INJECTION: forcing a failure. [ 3128.792101][ T8445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3128.814291][ T8446] netlink: 'syz.1.12055': attribute type 3 has an invalid length. [ 3128.827542][ T8445] CPU: 1 PID: 8445 Comm: syz.2.12056 Not tainted syzkaller #0 [ 3128.835090][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3128.845199][ T8445] Call Trace: [ 3128.848534][ T8445] [ 3128.851509][ T8445] dump_stack_lvl+0x18c/0x250 [ 3128.856273][ T8445] ? show_regs_print_info+0x20/0x20 [ 3128.859541][ T8446] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12055'. [ 3128.861508][ T8445] ? load_image+0x420/0x420 [ 3128.875475][ T8445] ? __might_fault+0xaa/0x120 [ 3128.880206][ T8445] ? __lock_acquire+0x7d40/0x7d40 [ 3128.885293][ T8445] should_fail_ex+0x39d/0x4d0 [ 3128.890042][ T8445] _copy_to_user+0x2f/0xa0 [ 3128.894565][ T8445] netns_bpf_prog_query+0x2a3/0x510 [ 3128.899839][ T8445] ? rht_unlock+0x1d0/0x1d0 [ 3128.904416][ T8445] __sys_bpf+0x7a0/0x890 [ 3128.908722][ T8445] ? bpf_link_show_fdinfo+0x390/0x390 [ 3128.914185][ T8445] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3128.920417][ T8445] __x64_sys_bpf+0x7c/0x90 [ 3128.924902][ T8445] do_syscall_64+0x55/0xb0 [ 3128.929375][ T8445] ? clear_bhb_loop+0x40/0x90 [ 3128.934114][ T8445] ? clear_bhb_loop+0x40/0x90 [ 3128.938854][ T8445] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3128.944817][ T8445] RIP: 0033:0x7f17bff9ce59 [ 3128.949292][ T8445] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3128.968951][ T8445] RSP: 002b:00007f17c0f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3128.977431][ T8445] RAX: ffffffffffffffda RBX: 00007f17c0215fa0 RCX: 00007f17bff9ce59 [ 3128.985464][ T8445] RDX: 0000000000000040 RSI: 0000200000000480 RDI: 0000000000000010 [ 3128.993501][ T8445] RBP: 00007f17c0f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3129.001549][ T8445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3129.009595][ T8445] R13: 00007f17c0216038 R14: 00007f17c0215fa0 R15: 00007fff32aee6d8 [ 3129.017647][ T8445] [ 3129.410837][ T5817] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 3129.480485][ T8453] FAULT_INJECTION: forcing a failure. [ 3129.480485][ T8453] name failslab, interval 1, probability 0, space 0, times 0 [ 3129.558288][ T8453] CPU: 0 PID: 8453 Comm: syz.2.12059 Not tainted syzkaller #0 [ 3129.565854][ T8453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3129.576077][ T8453] Call Trace: [ 3129.579434][ T8453] [ 3129.582434][ T8453] dump_stack_lvl+0x18c/0x250 [ 3129.587212][ T8453] ? show_regs_print_info+0x20/0x20 [ 3129.592497][ T8453] ? load_image+0x420/0x420 [ 3129.597109][ T8453] ? __lock_acquire+0x7d40/0x7d40 [ 3129.602246][ T8453] should_fail_ex+0x39d/0x4d0 [ 3129.607033][ T8453] should_failslab+0x9/0x20 [ 3129.611622][ T8453] slab_pre_alloc_hook+0x59/0x310 [ 3129.616758][ T8453] kmem_cache_alloc+0x5a/0x2d0 [ 3129.621618][ T8453] ? alloc_empty_file+0x9e/0x1d0 [ 3129.626674][ T8453] alloc_empty_file+0x9e/0x1d0 [ 3129.631565][ T8453] path_openat+0x113/0x3230 [ 3129.636233][ T8453] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 3129.642133][ T8453] ? verify_lock_unused+0x140/0x140 [ 3129.647420][ T8453] ? do_filp_open+0x430/0x430 [ 3129.652206][ T8453] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 3129.658972][ T8453] do_filp_open+0x1f5/0x430 [ 3129.663608][ T8453] ? vfs_tmpfile+0x490/0x490 [ 3129.668356][ T8453] ? _raw_spin_unlock+0x28/0x40 [ 3129.673297][ T8453] ? alloc_fd+0x58f/0x630 [ 3129.677734][ T8453] do_sys_openat2+0x134/0x1d0 [ 3129.682475][ T8453] ? perf_trace_preemptirq_template+0x269/0x330 [ 3129.688783][ T8453] ? do_sys_open+0xe0/0xe0 [ 3129.693286][ T8453] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3129.699332][ T8453] ? lock_chain_count+0x20/0x20 [ 3129.704247][ T8453] __x64_sys_openat+0x139/0x160 [ 3129.709164][ T8453] do_syscall_64+0x55/0xb0 [ 3129.713631][ T8453] ? clear_bhb_loop+0x40/0x90 [ 3129.718363][ T8453] ? clear_bhb_loop+0x40/0x90 [ 3129.723097][ T8453] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3129.729055][ T8453] RIP: 0033:0x7f17bff5d68e [ 3129.733545][ T8453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3129.753207][ T8453] RSP: 002b:00007f17c0f29ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3129.761679][ T8453] RAX: ffffffffffffffda RBX: 00007f17c0f2a6c0 RCX: 00007f17bff5d68e [ 3129.769788][ T8453] RDX: 0000000000000002 RSI: 00007f17c0f29f90 RDI: ffffffffffffff9c [ 3129.777805][ T8453] RBP: 00007f17c0f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3129.785819][ T8453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3129.793865][ T8453] R13: 00007f17c0216038 R14: 00007f17c0215fa0 R15: 00007fff32aee6d8 [ 3129.801960][ T8453] [ 3130.297002][ T5817] Bluetooth: hci4: command tx timeout [ 3130.846232][ T8477] netlink: 'syz.1.12063': attribute type 3 has an invalid length. [ 3130.854727][ T8477] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12063'. [ 3131.216055][ T5817] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 3131.409373][ T8373] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3131.424573][ T5817] Bluetooth: hci2: command 0x0406 tx timeout [ 3131.552138][ T8373] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3131.572136][ T8494] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.12068'. [ 3131.591664][ T8373] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3131.603025][ T8373] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3131.812853][T22867] vlan0: left allmulticast mode [ 3131.825436][T22867] veth0_vlan: left allmulticast mode [ 3131.833978][T22867] vlan0: left promiscuous mode [ 3131.864053][T22867] @: port 1(vlan0) entered disabled state [ 3131.960733][T22867] hsr_slave_0: left promiscuous mode [ 3131.973247][T22867] hsr_slave_1: left promiscuous mode [ 3132.047181][T22867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3132.056396][T22867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3132.087948][T22867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3132.104382][T22867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3132.323657][ T8518] netlink: 'syz.1.12073': attribute type 3 has an invalid length. [ 3132.333070][ T8518] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12073'. [ 3132.376969][ T5817] Bluetooth: hci4: command tx timeout [ 3132.384527][T22867] veth1_vlan: left promiscuous mode [ 3132.392868][T22867] veth0_vlan: left promiscuous mode [ 3132.589474][ T8520] netlink: 'syz.2.12074': attribute type 3 has an invalid length. [ 3132.609534][ T8520] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12074'. [ 3132.801925][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3134.462625][ T5817] Bluetooth: hci4: command tx timeout [ 3135.466292][T22867] team_slave_1 (unregistering): left promiscuous mode [ 3135.474555][T22867] team_slave_1 (unregistering): left allmulticast mode [ 3135.485430][T22867] team0 (unregistering): Port device team_slave_1 removed [ 3135.539317][T22867] team_slave_0 (unregistering): left promiscuous mode [ 3135.546157][T22867] team_slave_0 (unregistering): left allmulticast mode [ 3135.554618][T22867] team0 (unregistering): Port device team_slave_0 removed [ 3135.609661][T22867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3135.663417][T22867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3136.013134][T22867] dummy0 (unregistering): left promiscuous mode [ 3136.020651][T22867] dummy0 (unregistering): left allmulticast mode [ 3136.028538][T22867] team0 (unregistering): Port device dummy0 removed [ 3136.094176][T22867] bond0 (unregistering): Released all slaves [ 3136.305605][ T8373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3136.401541][ T8373] 8021q: adding VLAN 0 to HW filter on device team0 [ 3136.464855][T22864] bridge0: port 1(bridge_slave_0) entered blocking state [ 3136.472146][T22864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3136.495186][T22864] bridge0: port 2(bridge_slave_1) entered blocking state [ 3136.502713][T22864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3136.656692][ T8373] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3136.762834][ T8544] netlink: 'syz.0.12081': attribute type 3 has an invalid length. [ 3136.774440][ T8544] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12081'. [ 3136.928358][ T8373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3136.975908][ T8373] veth0_vlan: entered promiscuous mode [ 3136.988919][ T8373] veth1_vlan: entered promiscuous mode [ 3137.021959][ T8373] veth0_macvtap: entered promiscuous mode [ 3137.032693][ T8373] veth1_macvtap: entered promiscuous mode [ 3137.056967][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3137.070186][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.081306][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3137.093208][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.103797][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3137.114674][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.126500][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3137.149162][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3137.161019][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.172918][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 3137.182947][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.192908][ T8373] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3137.203652][ T8373] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3137.215499][ T8373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3137.230428][ T8373] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3137.239646][ T8373] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3137.250701][ T8373] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3137.261638][ T8373] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3137.351274][T22867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3137.366022][T22867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3137.391908][T22869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3137.401715][T22869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3138.577732][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3138.940516][ T8574] netlink: 'syz.0.12085': attribute type 3 has an invalid length. [ 3138.964184][ T8574] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12085'. [ 3139.134535][ T8582] netlink: 'syz.3.12092': attribute type 1 has an invalid length. [ 3139.213046][ T8589] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12095'. [ 3139.449153][ T5817] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 3139.909867][ T8613] netlink: 'syz.1.12107': attribute type 2 has an invalid length. [ 3139.919530][ T8613] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12107'. [ 3139.936019][ T8611] netlink: 'syz.0.12105': attribute type 10 has an invalid length. [ 3139.986986][ T8611] batadv0: left promiscuous mode [ 3139.992200][ T8611] batadv0: left allmulticast mode [ 3140.029639][ T8611] team0: Port device batadv0 removed [ 3140.048480][ T8611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3140.073880][ T8611] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3140.212262][ T8617] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12108'. [ 3140.735529][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3140.778944][ T8632] netlink: 'syz.2.12114': attribute type 4 has an invalid length. [ 3140.787595][ T8632] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12114'. [ 3141.111089][ T8640] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12117'. [ 3141.546118][ T8646] netlink: 'syz.0.12121': attribute type 2 has an invalid length. [ 3141.889359][ T8658] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.12123'. [ 3141.942940][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3142.021032][ T8667] FAULT_INJECTION: forcing a failure. [ 3142.021032][ T8667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3142.068828][ T8667] CPU: 0 PID: 8667 Comm: syz.2.12126 Not tainted syzkaller #0 [ 3142.076394][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3142.086500][ T8667] Call Trace: [ 3142.089822][ T8667] [ 3142.092794][ T8667] dump_stack_lvl+0x18c/0x250 [ 3142.097533][ T8667] ? show_regs_print_info+0x20/0x20 [ 3142.102779][ T8667] ? load_image+0x420/0x420 [ 3142.107345][ T8667] ? __lock_acquire+0x7d40/0x7d40 [ 3142.112428][ T8667] ? snprintf+0xe9/0x140 [ 3142.116736][ T8667] should_fail_ex+0x39d/0x4d0 [ 3142.121479][ T8667] _copy_to_user+0x2f/0xa0 [ 3142.125954][ T8667] simple_read_from_buffer+0xe7/0x150 [ 3142.131400][ T8667] proc_fail_nth_read+0x1e8/0x260 [ 3142.136494][ T8667] ? proc_fault_inject_write+0x360/0x360 [ 3142.142195][ T8667] ? fsnotify_perm+0x271/0x5e0 [ 3142.147004][ T8667] ? proc_fault_inject_write+0x360/0x360 [ 3142.152703][ T8667] vfs_read+0x28b/0x970 [ 3142.156931][ T8667] ? kernel_read+0x1e0/0x1e0 [ 3142.161641][ T8667] ? __fget_files+0x28/0x4b0 [ 3142.166294][ T8667] ? __fget_files+0x28/0x4b0 [ 3142.170952][ T8667] ? __fget_files+0x43d/0x4b0 [ 3142.175723][ T8667] ? __fdget_pos+0x2a3/0x330 [ 3142.180384][ T8667] ? ksys_read+0x75/0x260 [ 3142.184785][ T8667] ksys_read+0x150/0x260 [ 3142.189099][ T8667] ? vfs_write+0x990/0x990 [ 3142.193581][ T8667] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3142.199554][ T8667] do_syscall_64+0x55/0xb0 [ 3142.204018][ T8667] ? clear_bhb_loop+0x40/0x90 [ 3142.208748][ T8667] ? clear_bhb_loop+0x40/0x90 [ 3142.213485][ T8667] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.219424][ T8667] RIP: 0033:0x7f17bff5d68e [ 3142.223880][ T8667] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3142.243704][ T8667] RSP: 002b:00007f17c0f29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3142.252157][ T8667] RAX: ffffffffffffffda RBX: 00007f17c0f2a6c0 RCX: 00007f17bff5d68e [ 3142.260160][ T8667] RDX: 000000000000000f RSI: 00007f17c0f2a0a0 RDI: 0000000000000009 [ 3142.268169][ T8667] RBP: 00007f17c0f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3142.276168][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3142.284167][ T8667] R13: 00007f17c0216038 R14: 00007f17c0215fa0 R15: 00007fff32aee6d8 [ 3142.292180][ T8667] [ 3142.411055][ T8668] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.12126'. [ 3142.642912][ T8676] FAULT_INJECTION: forcing a failure. [ 3142.642912][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3142.689654][ T8676] CPU: 0 PID: 8676 Comm: syz.3.12129 Not tainted syzkaller #0 [ 3142.697210][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3142.707400][ T8676] Call Trace: [ 3142.710721][ T8676] [ 3142.713703][ T8676] dump_stack_lvl+0x18c/0x250 [ 3142.718462][ T8676] ? show_regs_print_info+0x20/0x20 [ 3142.723712][ T8676] ? load_image+0x420/0x420 [ 3142.728282][ T8676] ? __might_fault+0xaa/0x120 [ 3142.733011][ T8676] ? __lock_acquire+0x7d40/0x7d40 [ 3142.738088][ T8676] should_fail_ex+0x39d/0x4d0 [ 3142.742830][ T8676] _copy_from_user+0x2f/0xe0 [ 3142.747477][ T8676] inet6_ioctl+0x1ad/0x2d0 [ 3142.751954][ T8676] ? inet6_getname+0x650/0x650 [ 3142.756770][ T8676] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3142.762294][ T8676] sock_do_ioctl+0xfc/0x310 [ 3142.766855][ T8676] ? sock_show_fdinfo+0xb0/0xb0 [ 3142.771783][ T8676] sock_ioctl+0x5ba/0x7e0 [ 3142.776158][ T8676] ? sock_poll+0x3e0/0x3e0 [ 3142.780633][ T8676] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3142.785616][ T8676] ? security_file_ioctl+0x80/0xa0 [ 3142.790776][ T8676] ? sock_poll+0x3e0/0x3e0 [ 3142.795241][ T8676] __se_sys_ioctl+0xfd/0x170 [ 3142.799886][ T8676] do_syscall_64+0x55/0xb0 [ 3142.804351][ T8676] ? clear_bhb_loop+0x40/0x90 [ 3142.809083][ T8676] ? clear_bhb_loop+0x40/0x90 [ 3142.813823][ T8676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3142.819950][ T8676] RIP: 0033:0x7f1f8439ce59 [ 3142.824412][ T8676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3142.844070][ T8676] RSP: 002b:00007f1f85219028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3142.852548][ T8676] RAX: ffffffffffffffda RBX: 00007f1f84615fa0 RCX: 00007f1f8439ce59 [ 3142.860552][ T8676] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 3142.868556][ T8676] RBP: 00007f1f85219090 R08: 0000000000000000 R09: 0000000000000000 [ 3142.876554][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3142.884550][ T8676] R13: 00007f1f84616038 R14: 00007f1f84615fa0 R15: 00007ffede190058 [ 3142.892566][ T8676] [ 3143.491962][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3143.710018][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.716410][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.858577][ T8692] mac80211_hwsim hwsim806 wlan1: entered allmulticast mode [ 3144.001343][ T8706] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12139'. [ 3144.995818][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3145.025190][ T8712] FAULT_INJECTION: forcing a failure. [ 3145.025190][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3145.044447][ T8712] CPU: 0 PID: 8712 Comm: syz.1.12142 Not tainted syzkaller #0 [ 3145.052005][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3145.062111][ T8712] Call Trace: [ 3145.065439][ T8712] [ 3145.068415][ T8712] dump_stack_lvl+0x18c/0x250 [ 3145.073157][ T8712] ? show_regs_print_info+0x20/0x20 [ 3145.078500][ T8712] ? load_image+0x420/0x420 [ 3145.083065][ T8712] ? __lock_acquire+0x7d40/0x7d40 [ 3145.088151][ T8712] ? snprintf+0xe9/0x140 [ 3145.092461][ T8712] should_fail_ex+0x39d/0x4d0 [ 3145.097215][ T8712] _copy_to_user+0x2f/0xa0 [ 3145.101700][ T8712] simple_read_from_buffer+0xe7/0x150 [ 3145.107154][ T8712] proc_fail_nth_read+0x1e8/0x260 [ 3145.112253][ T8712] ? proc_fault_inject_write+0x360/0x360 [ 3145.117969][ T8712] ? fsnotify_perm+0x271/0x5e0 [ 3145.122797][ T8712] ? proc_fault_inject_write+0x360/0x360 [ 3145.128529][ T8712] vfs_read+0x28b/0x970 [ 3145.132824][ T8712] ? kernel_read+0x1e0/0x1e0 [ 3145.137526][ T8712] ? __fget_files+0x28/0x4b0 [ 3145.142233][ T8712] ? __fget_files+0x28/0x4b0 [ 3145.146895][ T8712] ? __fget_files+0x43d/0x4b0 [ 3145.151642][ T8712] ? __fdget_pos+0x2a3/0x330 [ 3145.156265][ T8712] ? ksys_read+0x75/0x260 [ 3145.160629][ T8712] ksys_read+0x150/0x260 [ 3145.164905][ T8712] ? vfs_write+0x990/0x990 [ 3145.169372][ T8712] ? lockdep_hardirqs_on+0x98/0x150 [ 3145.174637][ T8712] do_syscall_64+0x55/0xb0 [ 3145.179087][ T8712] ? clear_bhb_loop+0x40/0x90 [ 3145.183833][ T8712] ? clear_bhb_loop+0x40/0x90 [ 3145.188582][ T8712] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3145.194530][ T8712] RIP: 0033:0x7f6c43b5d68e [ 3145.199006][ T8712] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3145.218672][ T8712] RSP: 002b:00007f6c44a0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3145.227151][ T8712] RAX: ffffffffffffffda RBX: 00007f6c44a0c6c0 RCX: 00007f6c43b5d68e [ 3145.235183][ T8712] RDX: 000000000000000f RSI: 00007f6c44a0c0a0 RDI: 0000000000000004 [ 3145.243213][ T8712] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3145.251324][ T8712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3145.259371][ T8712] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3145.267489][ T8712] [ 3145.407955][ T8732] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12150'. [ 3145.420510][ T8732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3145.558772][ T8737] FAULT_INJECTION: forcing a failure. [ 3145.558772][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 3145.592179][ T8737] CPU: 1 PID: 8737 Comm: syz.1.12152 Not tainted syzkaller #0 [ 3145.599734][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3145.606432][ T8726] netlink: 'syz.2.12149': attribute type 10 has an invalid length. [ 3145.609818][ T8737] Call Trace: [ 3145.609830][ T8737] [ 3145.609841][ T8737] dump_stack_lvl+0x18c/0x250 [ 3145.609873][ T8737] ? show_regs_print_info+0x20/0x20 [ 3145.609897][ T8737] ? load_image+0x420/0x420 [ 3145.609929][ T8737] ? __might_sleep+0xe0/0xe0 [ 3145.609958][ T8737] ? __lock_acquire+0x7d40/0x7d40 [ 3145.609989][ T8737] should_fail_ex+0x39d/0x4d0 [ 3145.610027][ T8737] should_failslab+0x9/0x20 [ 3145.610059][ T8737] slab_pre_alloc_hook+0x59/0x310 [ 3145.610094][ T8737] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3145.610121][ T8737] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3145.610161][ T8737] __kmem_cache_alloc_node+0x53/0x250 [ 3145.610199][ T8737] ? bpf_prog_test_run_skb+0x238/0x12b0 [ 3145.610225][ T8737] __kmalloc+0xa4/0x230 [ 3145.610260][ T8737] bpf_prog_test_run_skb+0x238/0x12b0 [ 3145.610285][ T8737] ? __fget_files+0x28/0x4b0 [ 3145.610319][ T8737] ? __fget_files+0x28/0x4b0 [ 3145.610350][ T8737] ? __fget_files+0x43d/0x4b0 [ 3145.610391][ T8737] ? cpu_online+0x60/0x60 [ 3145.610417][ T8737] bpf_prog_test_run+0x321/0x390 [ 3145.610446][ T8737] __sys_bpf+0x49d/0x890 [ 3145.610474][ T8737] ? bpf_link_show_fdinfo+0x390/0x390 [ 3145.610515][ T8737] ? lock_chain_count+0x20/0x20 [ 3145.610550][ T8737] __x64_sys_bpf+0x7c/0x90 [ 3145.610575][ T8737] do_syscall_64+0x55/0xb0 [ 3145.610595][ T8737] ? clear_bhb_loop+0x40/0x90 [ 3145.610624][ T8737] ? clear_bhb_loop+0x40/0x90 [ 3145.610654][ T8737] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3145.610682][ T8737] RIP: 0033:0x7f6c43b9ce59 [ 3145.610703][ T8737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3145.610722][ T8737] RSP: 002b:00007f6c44a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3145.610747][ T8737] RAX: ffffffffffffffda RBX: 00007f6c43e15fa0 RCX: 00007f6c43b9ce59 [ 3145.610763][ T8737] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3145.610777][ T8737] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3145.610791][ T8737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3145.610813][ T8737] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3145.610846][ T8737] [ 3145.943066][ T8726] team0: Port device wlan1 added [ 3145.960095][ T8742] netlink: 'syz.1.12154': attribute type 10 has an invalid length. [ 3145.991746][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3146.017243][ T8742] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3146.278780][ T5817] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 3146.366016][ T8755] FAULT_INJECTION: forcing a failure. [ 3146.366016][ T8755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3146.399038][ T8755] CPU: 1 PID: 8755 Comm: syz.3.12159 Not tainted syzkaller #0 [ 3146.406592][ T8755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3146.416784][ T8755] Call Trace: [ 3146.420108][ T8755] [ 3146.423066][ T8755] dump_stack_lvl+0x18c/0x250 [ 3146.427785][ T8755] ? show_regs_print_info+0x20/0x20 [ 3146.433009][ T8755] ? load_image+0x420/0x420 [ 3146.437559][ T8755] ? __lock_acquire+0x7d40/0x7d40 [ 3146.442623][ T8755] ? mark_lock+0x94/0x320 [ 3146.446995][ T8755] should_fail_ex+0x39d/0x4d0 [ 3146.451732][ T8755] prepare_alloc_pages+0x1e2/0x5f0 [ 3146.456895][ T8755] __alloc_pages+0x134/0x460 [ 3146.461534][ T8755] ? zone_statistics+0x170/0x170 [ 3146.466512][ T8755] ? do_wp_page+0x7ca/0x35f0 [ 3146.471136][ T8755] ? do_wp_page+0xfc5/0x35f0 [ 3146.475758][ T8755] __folio_alloc+0x10/0x20 [ 3146.480200][ T8755] vma_alloc_folio+0x47a/0x8f0 [ 3146.484998][ T8755] do_wp_page+0x1243/0x35f0 [ 3146.489539][ T8755] ? folio_put+0xd0/0xd0 [ 3146.493808][ T8755] ? do_raw_spin_lock+0x11f/0x2c0 [ 3146.498865][ T8755] ? __rwlock_init+0x150/0x150 [ 3146.503667][ T8755] handle_mm_fault+0x135d/0x4c00 [ 3146.508639][ T8755] ? handle_mm_fault+0xe7/0x4c00 [ 3146.513619][ T8755] ? numa_migrate_prep+0x350/0x350 [ 3146.518770][ T8755] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3146.524117][ T8755] do_user_addr_fault+0x730/0x12c0 [ 3146.529280][ T8755] exc_page_fault+0x64/0x100 [ 3146.533923][ T8755] asm_exc_page_fault+0x26/0x30 [ 3146.538823][ T8755] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 3146.544670][ T8755] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 3146.564658][ T8755] RSP: 0018:ffffc900046cf630 EFLAGS: 00050206 [ 3146.570767][ T8755] RAX: ffffffff8427fb01 RBX: 0000000000000e88 RCX: 0000000000000e88 [ 3146.578794][ T8755] RDX: 0000000000000000 RSI: ffff88804f3ea000 RDI: 0000200000002200 [ 3146.586791][ T8755] RBP: ffffc900046cf7c0 R08: ffff88804f3eae87 R09: 1ffff11009e7d5d0 [ 3146.594813][ T8755] R10: dffffc0000000000 R11: ffffed1009e7d5d1 R12: 0000200000003088 [ 3146.602813][ T8755] R13: ffffc900046cfe40 R14: 0000200000002200 R15: ffff88804f3ea000 [ 3146.610910][ T8755] ? copyout+0x1/0x90 [ 3146.614941][ T8755] copyout+0x70/0x90 [ 3146.618878][ T8755] _copy_to_iter+0x432/0x1120 [ 3146.623603][ T8755] ? iov_iter_init+0x1e0/0x1e0 [ 3146.628408][ T8755] ? __virt_addr_valid+0x18c/0x540 [ 3146.633560][ T8755] ? __virt_addr_valid+0x469/0x540 [ 3146.638708][ T8755] ? __phys_addr_symbol+0x2f/0x70 [ 3146.643769][ T8755] __skb_datagram_iter+0xdb/0x780 [ 3146.648834][ T8755] ? skb_copy_datagram_iter+0x200/0x200 [ 3146.654417][ T8755] skb_copy_datagram_iter+0xb1/0x200 [ 3146.659745][ T8755] netlink_recvmsg+0x2d4/0xe60 [ 3146.664556][ T8755] ? netlink_sendmsg+0xbf0/0xbf0 [ 3146.669541][ T8755] ? aa_af_perm+0x330/0x330 [ 3146.674068][ T8755] ? __lock_acquire+0x1273/0x7d40 [ 3146.679131][ T8755] ? verify_lock_unused+0x140/0x140 [ 3146.684365][ T8755] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3146.689679][ T8755] ? security_socket_recvmsg+0x89/0xb0 [ 3146.695166][ T8755] ? netlink_sendmsg+0xbf0/0xbf0 [ 3146.700140][ T8755] ____sys_recvmsg+0x2ce/0x5e0 [ 3146.704947][ T8755] ? __sys_recvmsg_sock+0x50/0x50 [ 3146.710015][ T8755] ? import_iovec+0x73/0xa0 [ 3146.714556][ T8755] ___sys_recvmsg+0x216/0x590 [ 3146.719268][ T8755] ? __sys_recvmsg+0x2a0/0x2a0 [ 3146.724065][ T8755] ? ksys_write+0x1c4/0x260 [ 3146.728612][ T8755] ? __fget_files+0x43d/0x4b0 [ 3146.733344][ T8755] __x64_sys_recvmsg+0x20c/0x2e0 [ 3146.738322][ T8755] ? ___sys_recvmsg+0x590/0x590 [ 3146.743239][ T8755] ? lockdep_hardirqs_on+0x98/0x150 [ 3146.748494][ T8755] do_syscall_64+0x55/0xb0 [ 3146.752951][ T8755] ? clear_bhb_loop+0x40/0x90 [ 3146.757670][ T8755] ? clear_bhb_loop+0x40/0x90 [ 3146.762406][ T8755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3146.768341][ T8755] RIP: 0033:0x7f1f8439ce59 [ 3146.772794][ T8755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3146.792461][ T8755] RSP: 002b:00007f1f85219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3146.800906][ T8755] RAX: ffffffffffffffda RBX: 00007f1f84615fa0 RCX: 00007f1f8439ce59 [ 3146.808911][ T8755] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 3146.816997][ T8755] RBP: 00007f1f85219090 R08: 0000000000000000 R09: 0000000000000000 [ 3146.824994][ T8755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3146.832990][ T8755] R13: 00007f1f84616038 R14: 00007f1f84615fa0 R15: 00007ffede190058 [ 3146.841010][ T8755] [ 3147.084066][ T8763] netlink: 'syz.1.12164': attribute type 10 has an invalid length. [ 3147.133812][ T8765] netlink: 'syz.3.12163': attribute type 2 has an invalid length. [ 3147.152060][ T8765] netlink: 'syz.3.12163': attribute type 8 has an invalid length. [ 3147.177065][ T8765] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12163'. [ 3147.374359][ T8777] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12169'. [ 3147.394857][ T8777] netlink: 3064 bytes leftover after parsing attributes in process `syz.3.12169'. [ 3147.509210][ T5817] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 3147.598358][ T8769] netlink: 'syz.0.12165': attribute type 10 has an invalid length. [ 3147.615087][ T8769] mac80211_hwsim hwsim686 wlan1: left allmulticast mode [ 3147.718513][ T8769] mac80211_hwsim hwsim686 wlan1: entered promiscuous mode [ 3147.736483][ T8769] mac80211_hwsim hwsim686 wlan1: entered allmulticast mode [ 3147.768290][ T8769] team0: Device wlan1 is of different type [ 3148.235969][ T8800] netlink: 'syz.3.12179': attribute type 29 has an invalid length. [ 3148.260921][ T8800] netlink: 'syz.3.12179': attribute type 29 has an invalid length. [ 3148.388557][ T5817] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 3148.632279][ T8813] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12184'. [ 3148.667086][ T8813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3148.705493][ T5817] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3148.721988][ T5817] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 3148.730971][ T5817] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:0' [ 3148.741658][ T5817] CPU: 1 PID: 5817 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 3148.749275][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3148.759370][ T5817] Workqueue: hci0 hci_rx_work [ 3148.764202][ T5817] Call Trace: [ 3148.767519][ T5817] [ 3148.770483][ T5817] dump_stack_lvl+0x18c/0x250 [ 3148.775204][ T5817] ? show_regs_print_info+0x20/0x20 [ 3148.780433][ T5817] ? load_image+0x420/0x420 [ 3148.784990][ T5817] sysfs_create_dir_ns+0x26e/0x2a0 [ 3148.790149][ T5817] ? sysfs_warn_dup+0xa0/0xa0 [ 3148.794860][ T5817] ? do_raw_spin_unlock+0x121/0x230 [ 3148.800116][ T5817] kobject_add_internal+0x61c/0xcc0 [ 3148.805522][ T5817] kobject_add+0x164/0x240 [ 3148.809982][ T5817] ? __rwlock_init+0x150/0x150 [ 3148.814793][ T5817] ? kobject_init+0x1e0/0x1e0 [ 3148.819514][ T5817] ? _raw_spin_unlock+0x28/0x40 [ 3148.824413][ T5817] ? get_device_parent+0x366/0x390 [ 3148.829598][ T5817] device_add+0x408/0xc50 [ 3148.834042][ T5817] hci_conn_add_sysfs+0xd5/0x1e0 [ 3148.839100][ T5817] le_conn_complete_evt+0xf5d/0x1540 [ 3148.844475][ T5817] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 3148.850760][ T5817] ? bt_info+0x180/0x180 [ 3148.855068][ T5817] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3148.860741][ T5817] ? skb_pull_data+0xfb/0x200 [ 3148.865465][ T5817] hci_le_conn_complete_evt+0x187/0x440 [ 3148.871057][ T5817] ? hci_remote_host_features_evt+0x150/0x150 [ 3148.877262][ T5817] hci_event_packet+0x7ba/0x1270 [ 3148.882257][ T5817] ? bis_list+0x290/0x290 [ 3148.886638][ T5817] ? lockdep_hardirqs_on+0x98/0x150 [ 3148.891878][ T5817] ? hci_send_to_monitor+0xd7/0x4f0 [ 3148.897111][ T5817] hci_rx_work+0x43a/0xd60 [ 3148.901590][ T5817] ? process_scheduled_works+0x96f/0x15d0 [ 3148.907357][ T5817] process_scheduled_works+0xa5d/0x15d0 [ 3148.912973][ T5817] ? worker_attach_to_pool+0x380/0x380 [ 3148.918483][ T5817] ? assign_work+0x3d2/0x5d0 [ 3148.923114][ T5817] worker_thread+0xa55/0xfc0 [ 3148.927774][ T5817] kthread+0x2fa/0x390 [ 3148.931874][ T5817] ? pr_cont_work+0x560/0x560 [ 3148.936592][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 3148.941214][ T5817] ret_from_fork+0x48/0x80 [ 3148.945669][ T5817] ? kthread_blkcg+0xd0/0xd0 [ 3148.950295][ T5817] ret_from_fork_asm+0x11/0x20 [ 3148.955117][ T5817] [ 3148.963768][ T5817] kobject: kobject_add_internal failed for hci0:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 3148.977938][ T5817] Bluetooth: hci0: failed to register connection device [ 3149.272103][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3149.355427][ T8835] netlink: 'syz.1.12192': attribute type 21 has an invalid length. [ 3149.631549][ T8839] netlink: 'syz.0.12194': attribute type 29 has an invalid length. [ 3149.817756][ T8851] FAULT_INJECTION: forcing a failure. [ 3149.817756][ T8851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3149.843708][ T8851] CPU: 0 PID: 8851 Comm: syz.3.12197 Not tainted syzkaller #0 [ 3149.851251][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3149.861359][ T8851] Call Trace: [ 3149.864692][ T8851] [ 3149.867672][ T8851] dump_stack_lvl+0x18c/0x250 [ 3149.872417][ T8851] ? show_regs_print_info+0x20/0x20 [ 3149.877683][ T8851] ? load_image+0x420/0x420 [ 3149.882261][ T8851] ? __might_fault+0xaa/0x120 [ 3149.886999][ T8851] ? __lock_acquire+0x7d40/0x7d40 [ 3149.892084][ T8851] should_fail_ex+0x39d/0x4d0 [ 3149.896827][ T8851] _copy_from_user+0x2f/0xe0 [ 3149.901485][ T8851] ___sys_sendmsg+0x1c7/0x360 [ 3149.906215][ T8851] ? get_pid_task+0x20/0x1e0 [ 3149.910866][ T8851] ? __sys_sendmsg+0x2a0/0x2a0 [ 3149.915694][ T8851] ? __lock_acquire+0x7d40/0x7d40 [ 3149.920770][ T8851] __se_sys_sendmsg+0x1c2/0x2b0 [ 3149.925661][ T8851] ? __x64_sys_sendmsg+0x80/0x80 [ 3149.930643][ T8851] ? lockdep_hardirqs_on+0x98/0x150 [ 3149.935917][ T8851] do_syscall_64+0x55/0xb0 [ 3149.940369][ T8851] ? clear_bhb_loop+0x40/0x90 [ 3149.945075][ T8851] ? clear_bhb_loop+0x40/0x90 [ 3149.949795][ T8851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3149.955718][ T8851] RIP: 0033:0x7f1f8439ce59 [ 3149.960157][ T8851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3149.979802][ T8851] RSP: 002b:00007f1f851d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3149.988241][ T8851] RAX: ffffffffffffffda RBX: 00007f1f84616180 RCX: 00007f1f8439ce59 [ 3149.996242][ T8851] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 3150.004238][ T8851] RBP: 00007f1f851d7090 R08: 0000000000000000 R09: 0000000000000000 [ 3150.012240][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3150.020238][ T8851] R13: 00007f1f84616218 R14: 00007f1f84616180 R15: 00007ffede190058 [ 3150.028256][ T8851] [ 3150.197931][ T5817] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 3150.298363][ T8862] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12210'. [ 3150.769943][ T8866] validate_nla: 2 callbacks suppressed [ 3150.770006][ T8866] netlink: 'syz.1.12203': attribute type 10 has an invalid length. [ 3150.789969][ T8866] mac80211_hwsim hwsim786 wlan1: left allmulticast mode [ 3150.876952][ T8866] team0: Port device wlan1 added [ 3151.019934][ T8886] netlink: 212424 bytes leftover after parsing attributes in process `syz.3.12211'. [ 3151.033956][ T5817] Bluetooth: hci0: command tx timeout [ 3151.320842][ T8893] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12214'. [ 3151.414830][ T8895] netlink: 'syz.1.12215': attribute type 29 has an invalid length. [ 3151.439338][ T8895] netlink: 'syz.1.12215': attribute type 29 has an invalid length. [ 3151.455525][ T8895] netlink: 'syz.1.12215': attribute type 29 has an invalid length. [ 3151.666717][ T8898] netlink: 'syz.0.12216': attribute type 3 has an invalid length. [ 3151.682392][ T8898] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12216'. [ 3151.764474][ T8903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3152.108531][ T8911] netlink: 'syz.1.12221': attribute type 3 has an invalid length. [ 3152.137075][ T8911] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12221'. [ 3152.547504][ T8919] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12223'. [ 3152.608632][ T5817] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 3152.667835][ T8923] netlink: 'syz.2.12225': attribute type 21 has an invalid length. [ 3152.725417][ T8928] bridge_slave_1: left allmulticast mode [ 3152.740462][ T8928] bridge_slave_1: left promiscuous mode [ 3152.755658][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 3152.827595][ T8928] bridge_slave_0: left allmulticast mode [ 3152.917136][ T8928] bridge_slave_0: left promiscuous mode [ 3152.949621][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 3153.097093][ T5817] Bluetooth: hci0: command tx timeout [ 3153.180056][T22867] wlan1: Trigger new scan to find an IBSS to join [ 3153.301029][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12226'. [ 3153.719338][ T5817] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 3153.758162][ T8953] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12234'. [ 3153.939292][ T8947] netlink: 'syz.1.12233': attribute type 3 has an invalid length. [ 3153.982213][ T8947] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12233'. [ 3154.408104][ T8965] netlink: 'syz.3.12238': attribute type 10 has an invalid length. [ 3154.766453][ T8965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3154.780080][ T8965] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3154.940353][ T8973] netlink: 'syz.3.12241': attribute type 15 has an invalid length. [ 3155.089906][ T8979] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12245'. [ 3155.718536][ T8993] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12247'. [ 3156.018450][ T9009] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12254'. [ 3156.679794][ T9027] validate_nla: 3 callbacks suppressed [ 3156.679838][ T9027] netlink: 'syz.1.12261': attribute type 3 has an invalid length. [ 3156.701226][ T9027] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12261'. [ 3156.886421][ T9037] FAULT_INJECTION: forcing a failure. [ 3156.886421][ T9037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3156.934096][ T9037] CPU: 0 PID: 9037 Comm: syz.2.12265 Not tainted syzkaller #0 [ 3156.941741][ T9037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3156.951852][ T9037] Call Trace: [ 3156.955173][ T9037] [ 3156.958151][ T9037] dump_stack_lvl+0x18c/0x250 [ 3156.962893][ T9037] ? show_regs_print_info+0x20/0x20 [ 3156.968153][ T9037] ? load_image+0x420/0x420 [ 3156.972724][ T9037] ? __might_fault+0xaa/0x120 [ 3156.977458][ T9037] ? __lock_acquire+0x7d40/0x7d40 [ 3156.982546][ T9037] ? __virt_addr_valid+0x18c/0x540 [ 3156.987753][ T9037] should_fail_ex+0x39d/0x4d0 [ 3156.992508][ T9037] _copy_from_user+0x2f/0xe0 [ 3156.997165][ T9037] ___bpf_copy_key+0xb0/0x100 [ 3157.001909][ T9037] map_update_elem+0x260/0x700 [ 3157.006732][ T9037] __sys_bpf+0x6b5/0x890 [ 3157.011028][ T9037] ? bpf_link_show_fdinfo+0x390/0x390 [ 3157.016456][ T9037] ? lock_chain_count+0x20/0x20 [ 3157.021400][ T9037] __x64_sys_bpf+0x7c/0x90 [ 3157.025865][ T9037] do_syscall_64+0x55/0xb0 [ 3157.030324][ T9037] ? clear_bhb_loop+0x40/0x90 [ 3157.035053][ T9037] ? clear_bhb_loop+0x40/0x90 [ 3157.039780][ T9037] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3157.045736][ T9037] RIP: 0033:0x7f17bff9ce59 [ 3157.050195][ T9037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3157.069920][ T9037] RSP: 002b:00007f17c0f2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3157.078366][ T9037] RAX: ffffffffffffffda RBX: 00007f17c0215fa0 RCX: 00007f17bff9ce59 [ 3157.086366][ T9037] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 3157.094378][ T9037] RBP: 00007f17c0f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3157.102406][ T9037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3157.110427][ T9037] R13: 00007f17c0216038 R14: 00007f17c0215fa0 R15: 00007fff32aee6d8 [ 3157.118452][ T9037] [ 3157.205525][ T8662] wlan1: Trigger new scan to find an IBSS to join [ 3157.250042][ T9034] netlink: 'syz.0.12272': attribute type 3 has an invalid length. [ 3157.259047][ T9034] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12272'. [ 3157.436080][ T9043] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12267'. [ 3157.547545][ T5817] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 3157.670083][ T9051] netlink: 'syz.2.12273': attribute type 10 has an invalid length. [ 3157.683075][ T9053] FAULT_INJECTION: forcing a failure. [ 3157.683075][ T9053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3157.698223][ T9053] CPU: 0 PID: 9053 Comm: syz.3.12271 Not tainted syzkaller #0 [ 3157.705755][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3157.715863][ T9053] Call Trace: [ 3157.719222][ T9053] [ 3157.722206][ T9053] dump_stack_lvl+0x18c/0x250 [ 3157.726951][ T9053] ? show_regs_print_info+0x20/0x20 [ 3157.732210][ T9053] ? load_image+0x420/0x420 [ 3157.736789][ T9053] ? __might_fault+0xaa/0x120 [ 3157.741613][ T9053] ? __lock_acquire+0x7d40/0x7d40 [ 3157.746704][ T9053] should_fail_ex+0x39d/0x4d0 [ 3157.751454][ T9053] _copy_from_user+0x2f/0xe0 [ 3157.756115][ T9053] ___sys_sendmsg+0x1c7/0x360 [ 3157.760913][ T9053] ? get_pid_task+0x20/0x1e0 [ 3157.765552][ T9053] ? __sys_sendmsg+0x2a0/0x2a0 [ 3157.770366][ T9053] ? __lock_acquire+0x7d40/0x7d40 [ 3157.775454][ T9053] __se_sys_sendmsg+0x1c2/0x2b0 [ 3157.780344][ T9053] ? __x64_sys_sendmsg+0x80/0x80 [ 3157.785334][ T9053] ? lockdep_hardirqs_on+0x98/0x150 [ 3157.790575][ T9053] do_syscall_64+0x55/0xb0 [ 3157.795021][ T9053] ? clear_bhb_loop+0x40/0x90 [ 3157.799739][ T9053] ? clear_bhb_loop+0x40/0x90 [ 3157.804466][ T9053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3157.810403][ T9053] RIP: 0033:0x7f1f8439ce59 [ 3157.814846][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3157.834483][ T9053] RSP: 002b:00007f1f85219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3157.842924][ T9053] RAX: ffffffffffffffda RBX: 00007f1f84615fa0 RCX: 00007f1f8439ce59 [ 3157.850926][ T9053] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000007 [ 3157.858937][ T9053] RBP: 00007f1f85219090 R08: 0000000000000000 R09: 0000000000000000 [ 3157.866941][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3157.874937][ T9053] R13: 00007f1f84616038 R14: 00007f1f84615fa0 R15: 00007ffede190058 [ 3157.882951][ T9053] [ 3158.481562][ T9069] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.12277'. [ 3158.526832][ T9069] openvswitch: netlink: IP tunnel dst address not specified [ 3160.495155][ T8662] wlan1: Creating new IBSS network, BSSID 3a:96:c9:b5:13:7a [ 3160.515362][ T9051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3160.556399][ T9051] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3160.569862][ T9061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3160.586851][ T9065] netlink: 'syz.1.12275': attribute type 10 has an invalid length. [ 3160.815417][ T9076] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12280'. [ 3161.040169][ T9078] mac80211_hwsim hwsim803 wlan0: entered promiscuous mode [ 3161.057954][ T9078] mac80211_hwsim hwsim803 wlan0: entered allmulticast mode [ 3161.065943][ T9077] netlink: 'syz.1.12279': attribute type 3 has an invalid length. [ 3161.079661][ T5817] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 3161.083697][ T9077] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.12279'. [ 3161.696948][ T9090] netlink: 'syz.1.12286': attribute type 10 has an invalid length. [ 3161.859461][ T9090] team0: Cannot enslave team device to itself [ 3162.133530][ T9096] netlink: 'syz.0.12287': attribute type 10 has an invalid length. [ 3162.300473][ T9103] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12290'. [ 3162.383725][ T5817] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 3162.838953][ T9123] FAULT_INJECTION: forcing a failure. [ 3162.838953][ T9123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3162.884108][ T9123] CPU: 1 PID: 9123 Comm: syz.1.12296 Not tainted syzkaller #0 [ 3162.891667][ T9123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3162.901803][ T9123] Call Trace: [ 3162.905135][ T9123] [ 3162.908188][ T9123] dump_stack_lvl+0x18c/0x250 [ 3162.912922][ T9123] ? show_regs_print_info+0x20/0x20 [ 3162.918172][ T9123] ? load_image+0x420/0x420 [ 3162.922736][ T9123] ? __might_fault+0xaa/0x120 [ 3162.927457][ T9123] ? __lock_acquire+0x7d40/0x7d40 [ 3162.932530][ T9123] should_fail_ex+0x39d/0x4d0 [ 3162.937271][ T9123] _copy_from_user+0x2f/0xe0 [ 3162.941905][ T9123] ___sys_sendmsg+0x1c7/0x360 [ 3162.946626][ T9123] ? __sys_sendmsg+0x2a0/0x2a0 [ 3162.951465][ T9123] ? __lock_acquire+0x7d40/0x7d40 [ 3162.956578][ T9123] __se_sys_sendmsg+0x1c2/0x2b0 [ 3162.961481][ T9123] ? __x64_sys_sendmsg+0x80/0x80 [ 3162.966482][ T9123] ? lockdep_hardirqs_on+0x98/0x150 [ 3162.971735][ T9123] do_syscall_64+0x55/0xb0 [ 3162.976183][ T9123] ? clear_bhb_loop+0x40/0x90 [ 3162.980899][ T9123] ? clear_bhb_loop+0x40/0x90 [ 3162.985623][ T9123] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3162.991553][ T9123] RIP: 0033:0x7f6c43b9ce59 [ 3162.996002][ T9123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3163.015651][ T9123] RSP: 002b:00007f6c44a0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3163.024114][ T9123] RAX: ffffffffffffffda RBX: 00007f6c43e15fa0 RCX: 00007f6c43b9ce59 [ 3163.032120][ T9123] RDX: 0000000000000090 RSI: 0000200000000080 RDI: 0000000000000004 [ 3163.040129][ T9123] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3163.048136][ T9123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3163.056231][ T9123] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3163.064268][ T9123] [ 3163.177341][ T9121] netlink: 'syz.3.12297': attribute type 10 has an invalid length. [ 3163.625019][ T9121] team0: Cannot enslave team device to itself [ 3163.686458][ T9138] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12301'. [ 3163.818380][ T5817] Bluetooth: hci4: ISO packet for unknown connection handle 5 [ 3163.896502][ T5817] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6 [ 3164.009803][ T9149] FAULT_INJECTION: forcing a failure. [ 3164.009803][ T9149] name failslab, interval 1, probability 0, space 0, times 0 [ 3164.029665][ T9149] CPU: 1 PID: 9149 Comm: syz.1.12306 Not tainted syzkaller #0 [ 3164.037181][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3164.047290][ T9149] Call Trace: [ 3164.050611][ T9149] [ 3164.053583][ T9149] dump_stack_lvl+0x18c/0x250 [ 3164.058323][ T9149] ? show_regs_print_info+0x20/0x20 [ 3164.063560][ T9149] ? load_image+0x420/0x420 [ 3164.068099][ T9149] ? __might_sleep+0xe0/0xe0 [ 3164.072728][ T9149] ? __lock_acquire+0x7d40/0x7d40 [ 3164.077782][ T9149] ? lock_chain_count+0x20/0x20 [ 3164.082692][ T9149] should_fail_ex+0x39d/0x4d0 [ 3164.087474][ T9149] should_failslab+0x9/0x20 [ 3164.092040][ T9149] slab_pre_alloc_hook+0x59/0x310 [ 3164.097131][ T9149] ? _raw_spin_unlock+0x40/0x40 [ 3164.102049][ T9149] ? __request_module+0x2d1/0x600 [ 3164.107126][ T9149] __kmem_cache_alloc_node+0x53/0x250 [ 3164.112564][ T9149] ? __request_module+0x2d1/0x600 [ 3164.117636][ T9149] kmalloc_trace+0x2a/0xe0 [ 3164.122104][ T9149] __request_module+0x2d1/0x600 [ 3164.127002][ T9149] ? module_enforce_rwx_sections+0x150/0x150 [ 3164.133016][ T9149] ? rcu_read_unlock+0x8c/0xa0 [ 3164.137833][ T9149] ? rcu_read_unlock+0x8c/0xa0 [ 3164.142687][ T9149] inet_create+0x3ea/0xfe0 [ 3164.147155][ T9149] ? inet_create+0x9c/0xfe0 [ 3164.151732][ T9149] __sock_create+0x4a6/0x940 [ 3164.156556][ T9149] __sys_socket+0xd7/0x1a0 [ 3164.161063][ T9149] __x64_sys_socket+0x7a/0x90 [ 3164.165825][ T9149] do_syscall_64+0x55/0xb0 [ 3164.170543][ T9149] ? clear_bhb_loop+0x40/0x90 [ 3164.175352][ T9149] ? clear_bhb_loop+0x40/0x90 [ 3164.180065][ T9149] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3164.185996][ T9149] RIP: 0033:0x7f6c43b9ce59 [ 3164.190444][ T9149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3164.210164][ T9149] RSP: 002b:00007f6c44a0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3164.218612][ T9149] RAX: ffffffffffffffda RBX: 00007f6c43e15fa0 RCX: 00007f6c43b9ce59 [ 3164.226610][ T9149] RDX: 0000000000000073 RSI: 0000000000000000 RDI: 0000000000000002 [ 3164.234607][ T9149] RBP: 00007f6c44a0c090 R08: 0000000000000000 R09: 0000000000000000 [ 3164.242606][ T9149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3164.250607][ T9149] R13: 00007f6c43e16038 R14: 00007f6c43e15fa0 R15: 00007ffe7ef954d8 [ 3164.258625][ T9149] [ 3164.500192][ T9161] netlink: 'syz.2.12307': attribute type 10 has an invalid length. [ 3164.725832][ T9167] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12312'. [ 3164.866935][ T9170] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.12313'. [ 3165.652094][ T9191] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12321'. [ 3166.608393][ T9203] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12330'. [ 3167.126855][T22867] wlan1: Trigger new scan to find an IBSS to join [ 3167.163760][ T9210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3167.198727][ T9205] netlink: 'syz.2.12324': attribute type 3 has an invalid length. [ 3167.219491][ T9205] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12324'. [ 3167.247432][ T9211] netlink: 'syz.0.12326': attribute type 10 has an invalid length. [ 3167.615034][ T9218] netlink: 'syz.2.12328': attribute type 21 has an invalid length. [ 3167.637016][ T9218] IPv6: NLM_F_CREATE should be specified when creating new route [ 3167.662407][ T9218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 3167.669841][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 3167.677234][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 3167.684716][ T9218] IPv6: NLM_F_CREATE should be set when creating new route [ 3167.875016][ T9221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3168.011750][ T9226] FAULT_INJECTION: forcing a failure. [ 3168.011750][ T9226] name failslab, interval 1, probability 0, space 0, times 0 [ 3168.025205][ T9225] netlink: 'syz.1.12331': attribute type 10 has an invalid length. [ 3168.025688][ T9226] CPU: 0 PID: 9226 Comm: syz.3.12332 Not tainted syzkaller #0 [ 3168.040652][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3168.050752][ T9226] Call Trace: [ 3168.054070][ T9226] [ 3168.057041][ T9226] dump_stack_lvl+0x18c/0x250 [ 3168.061773][ T9226] ? show_regs_print_info+0x20/0x20 [ 3168.067020][ T9226] ? load_image+0x420/0x420 [ 3168.071578][ T9226] ? __lock_acquire+0x7d40/0x7d40 [ 3168.076655][ T9226] should_fail_ex+0x39d/0x4d0 [ 3168.081399][ T9226] should_failslab+0x9/0x20 [ 3168.085959][ T9226] slab_pre_alloc_hook+0x59/0x310 [ 3168.091036][ T9226] ? ____sys_sendmsg+0x5ba/0x960 [ 3168.096017][ T9226] ? ___sys_sendmsg+0x2a6/0x360 [ 3168.100907][ T9226] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 3168.105982][ T9226] kmem_cache_alloc_node+0x60/0x320 [ 3168.111239][ T9226] ? alloc_vmap_area+0x1b4/0x1e30 [ 3168.116332][ T9226] alloc_vmap_area+0x1b4/0x1e30 [ 3168.121268][ T9226] ? vm_map_ram+0xcb0/0xcb0 [ 3168.125854][ T9226] ? rcu_is_watching+0x15/0xb0 [ 3168.130684][ T9226] __get_vm_area_node+0x162/0x370 [ 3168.135801][ T9226] __vmalloc_node_range+0x36e/0x1330 [ 3168.141144][ T9226] ? netlink_sendmsg+0x602/0xbf0 [ 3168.146123][ T9226] ? netlink_insert+0x109f/0x13a0 [ 3168.151291][ T9226] ? netlink_data_ready+0x10/0x10 [ 3168.156364][ T9226] ? free_vm_area+0x50/0x50 [ 3168.160912][ T9226] ? netlink_sendmsg+0x602/0xbf0 [ 3168.165911][ T9226] vmalloc+0x79/0x90 [ 3168.169862][ T9226] ? netlink_sendmsg+0x602/0xbf0 [ 3168.174855][ T9226] netlink_sendmsg+0x602/0xbf0 [ 3168.179759][ T9226] ? netlink_getsockopt+0x590/0x590 [ 3168.184999][ T9226] ? aa_sock_msg_perm+0x94/0x150 [ 3168.189980][ T9226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3168.195297][ T9226] ? security_socket_sendmsg+0x80/0xa0 [ 3168.200788][ T9226] ? netlink_getsockopt+0x590/0x590 [ 3168.206026][ T9226] ____sys_sendmsg+0x5ba/0x960 [ 3168.210826][ T9226] ? __asan_memset+0x22/0x40 [ 3168.215450][ T9226] ? __sys_sendmsg_sock+0x30/0x30 [ 3168.220504][ T9226] ? __import_iovec+0x5f2/0x850 [ 3168.225389][ T9226] ? import_iovec+0x73/0xa0 [ 3168.229921][ T9226] ___sys_sendmsg+0x2a6/0x360 [ 3168.234638][ T9226] ? __sys_sendmsg+0x2a0/0x2a0 [ 3168.239458][ T9226] ? trace_call_bpf+0xc3/0x6c0 [ 3168.244288][ T9226] __se_sys_sendmsg+0x1c2/0x2b0 [ 3168.249176][ T9226] ? __x64_sys_sendmsg+0x80/0x80 [ 3168.254160][ T9226] ? lockdep_hardirqs_on+0x98/0x150 [ 3168.259402][ T9226] do_syscall_64+0x55/0xb0 [ 3168.263844][ T9226] ? clear_bhb_loop+0x40/0x90 [ 3168.268559][ T9226] ? clear_bhb_loop+0x40/0x90 [ 3168.273271][ T9226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3168.279203][ T9226] RIP: 0033:0x7f1f8439ce59 [ 3168.283652][ T9226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3168.303292][ T9226] RSP: 002b:00007f1f85219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3168.311750][ T9226] RAX: ffffffffffffffda RBX: 00007f1f84615fa0 RCX: 00007f1f8439ce59 [ 3168.319746][ T9226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3168.327746][ T9226] RBP: 00007f1f85219090 R08: 0000000000000000 R09: 0000000000000000 [ 3168.335738][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3168.343737][ T9226] R13: 00007f1f84616038 R14: 00007f1f84615fa0 R15: 00007ffede190058 [ 3168.351752][ T9226] [ 3168.391731][ T9226] syz.3.12332: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 3168.449989][ T9226] CPU: 0 PID: 9226 Comm: syz.3.12332 Not tainted syzkaller #0 [ 3168.457549][ T9226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3168.467649][ T9226] Call Trace: [ 3168.470972][ T9226] [ 3168.473950][ T9226] dump_stack_lvl+0x18c/0x250 [ 3168.478675][ T9226] ? show_regs_print_info+0x20/0x20 [ 3168.483910][ T9226] ? load_image+0x420/0x420 [ 3168.488553][ T9226] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 3168.495013][ T9226] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 3168.501556][ T9226] warn_alloc+0x246/0x340 [ 3168.505931][ T9226] ? slab_free_freelist_hook+0x130/0x1a0 [ 3168.511604][ T9226] ? zone_watermark_ok_safe+0x230/0x230 [ 3168.517279][ T9226] ? __get_vm_area_node+0x17b/0x370 [ 3168.522526][ T9226] ? __get_vm_area_node+0x17b/0x370 [ 3168.527787][ T9226] __vmalloc_node_range+0x393/0x1330 [ 3168.533118][ T9226] ? netlink_insert+0x109f/0x13a0 [ 3168.538216][ T9226] ? netlink_data_ready+0x10/0x10 [ 3168.543293][ T9226] ? free_vm_area+0x50/0x50 [ 3168.547853][ T9226] ? netlink_sendmsg+0x602/0xbf0 [ 3168.552837][ T9226] vmalloc+0x79/0x90 [ 3168.556785][ T9226] ? netlink_sendmsg+0x602/0xbf0 [ 3168.561782][ T9226] netlink_sendmsg+0x602/0xbf0 [ 3168.566603][ T9226] ? netlink_getsockopt+0x590/0x590 [ 3168.571842][ T9226] ? aa_sock_msg_perm+0x94/0x150 [ 3168.576819][ T9226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3168.582144][ T9226] ? security_socket_sendmsg+0x80/0xa0 [ 3168.587654][ T9226] ? netlink_getsockopt+0x590/0x590 [ 3168.592908][ T9226] ____sys_sendmsg+0x5ba/0x960 [ 3168.597707][ T9226] ? __asan_memset+0x22/0x40 [ 3168.602340][ T9226] ? __sys_sendmsg_sock+0x30/0x30 [ 3168.607416][ T9226] ? __import_iovec+0x5f2/0x850 [ 3168.612315][ T9226] ? import_iovec+0x73/0xa0 [ 3168.616865][ T9226] ___sys_sendmsg+0x2a6/0x360 [ 3168.621587][ T9226] ? __sys_sendmsg+0x2a0/0x2a0 [ 3168.626409][ T9226] ? trace_call_bpf+0xc3/0x6c0 [ 3168.631254][ T9226] __se_sys_sendmsg+0x1c2/0x2b0 [ 3168.636160][ T9226] ? __x64_sys_sendmsg+0x80/0x80 [ 3168.641162][ T9226] ? lockdep_hardirqs_on+0x98/0x150 [ 3168.646417][ T9226] do_syscall_64+0x55/0xb0 [ 3168.651225][ T9226] ? clear_bhb_loop+0x40/0x90 [ 3168.655959][ T9226] ? clear_bhb_loop+0x40/0x90 [ 3168.660696][ T9226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3168.666644][ T9226] RIP: 0033:0x7f1f8439ce59 [ 3168.671098][ T9226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3168.690739][ T9226] RSP: 002b:00007f1f85219028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3168.699206][ T9226] RAX: ffffffffffffffda RBX: 00007f1f84615fa0 RCX: 00007f1f8439ce59 [ 3168.707304][ T9226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 3168.715305][ T9226] RBP: 00007f1f85219090 R08: 0000000000000000 R09: 0000000000000000 [ 3168.723317][ T9226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3168.731327][ T9226] R13: 00007f1f84616038 R14: 00007f1f84615fa0 R15: 00007ffede190058 [ 3168.739436][ T9226] [ 3168.871354][ T9226] Mem-Info: [ 3168.882862][ T9226] active_anon:15062 inactive_anon:0 isolated_anon:0 [ 3168.882862][ T9226] active_file:21330 inactive_file:41093 isolated_file:0 [ 3168.882862][ T9226] unevictable:768 dirty:588 writeback:0 [ 3168.882862][ T9226] slab_reclaimable:11235 slab_unreclaimable:106298 [ 3168.882862][ T9226] mapped:34830 shmem:11298 pagetables:625 [ 3168.882862][ T9226] sec_pagetables:0 bounce:0 [ 3168.882862][ T9226] kernel_misc_reclaimable:0 [ 3168.882862][ T9226] free:1316324 free_pcp:10106 free_cma:0 [ 3169.033638][ T9232] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12335'. [ 3169.057840][ T9226] Node 0 active_anon:62148kB inactive_anon:0kB active_file:85320kB inactive_file:164164kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:141420kB dirty:2352kB writeback:0kB shmem:45856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10240kB pagetables:2400kB sec_pagetables:0kB all_unreclaimable? no [ 3169.157156][ T9226] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3169.227081][ T9226] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3169.315861][ T9226] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 3169.372277][ T9236] netlink: 'syz.2.12337': attribute type 3 has an invalid length. [ 3169.381162][ T9236] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12337'. [ 3169.413483][ T9226] Node 0 DMA32 free:1347164kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:66308kB inactive_anon:0kB active_file:85320kB inactive_file:163344kB unevictable:1536kB writepending:2352kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:22124kB local_pcp:20716kB free_cma:0kB [ 3169.448297][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 3169.495438][ T9226] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3169.693297][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 3169.713149][ T9226] Node 1 Normal free:3895800kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19256kB local_pcp:10388kB free_cma:0kB [ 3169.820430][ T9226] lowmem_reserve[]: 0 0 0 0 0 [ 3169.825268][ T9226] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 3169.887934][ T9226] Node 0 DMA32: 159*4kB (UME) 792*8kB (UME) 149*16kB (UE) 598*32kB (UE) 938*64kB (UME) 283*128kB (UME) 95*256kB (UME) 110*512kB (UME) 97*1024kB (UM) 17*2048kB (UME) 249*4096kB (UM) = 1359436kB [ 3169.950290][ T9226] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 3169.986936][ T9226] Node 1 Normal: 188*4kB (UE) 51*8kB (UME) 31*16kB (UME) 74*32kB (UME) 19*64kB (UE) 7*128kB (UME) 0*256kB 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895800kB [ 3170.042204][ T9226] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3170.096992][ T9226] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3170.114632][ T9252] netlink: 1010 bytes leftover after parsing attributes in process `syz.0.12341'. [ 3170.156580][ T9226] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3170.211964][ T9226] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3170.247013][ T9226] 79406 total pagecache pages [ 3170.298840][ T9226] 0 pages in swap cache [ 3170.303083][ T9226] Free swap = 124728kB [ 3170.332278][ T9254] FAULT_INJECTION: forcing a failure. [ 3170.332278][ T9254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3170.431425][ T9254] CPU: 0 PID: 9254 Comm: syz.2.12342 Not tainted syzkaller #0 [ 3170.438981][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3170.449191][ T9254] Call Trace: [ 3170.452511][ T9254] [ 3170.455672][ T9254] dump_stack_lvl+0x18c/0x250 [ 3170.460416][ T9254] ? show_regs_print_info+0x20/0x20 [ 3170.465674][ T9254] ? load_image+0x420/0x420 [ 3170.470239][ T9254] ? __lock_acquire+0x7d40/0x7d40 [ 3170.475328][ T9254] ? snprintf+0xe9/0x140 [ 3170.479637][ T9254] should_fail_ex+0x39d/0x4d0 [ 3170.484388][ T9254] _copy_to_user+0x2f/0xa0 [ 3170.488870][ T9254] simple_read_from_buffer+0xe7/0x150 [ 3170.494324][ T9254] proc_fail_nth_read+0x1e8/0x260 [ 3170.499413][ T9254] ? proc_fault_inject_write+0x360/0x360 [ 3170.505127][ T9254] ? fsnotify_perm+0x271/0x5e0 [ 3170.509946][ T9254] ? proc_fault_inject_write+0x360/0x360 [ 3170.515647][ T9254] vfs_read+0x28b/0x970 [ 3170.519869][ T9254] ? kernel_read+0x1e0/0x1e0 [ 3170.524524][ T9254] ? __fget_files+0x28/0x4b0 [ 3170.529259][ T9254] ? __fget_files+0x28/0x4b0 [ 3170.533914][ T9254] ? __fget_files+0x43d/0x4b0 [ 3170.538665][ T9254] ? __fdget_pos+0x2a3/0x330 [ 3170.543319][ T9254] ? ksys_read+0x75/0x260 [ 3170.547720][ T9254] ksys_read+0x150/0x260 [ 3170.552036][ T9254] ? vfs_write+0x990/0x990 [ 3170.556523][ T9254] ? lockdep_hardirqs_on+0x98/0x150 [ 3170.561784][ T9254] do_syscall_64+0x55/0xb0 [ 3170.566266][ T9254] ? clear_bhb_loop+0x40/0x90 [ 3170.571003][ T9254] ? clear_bhb_loop+0x40/0x90 [ 3170.575771][ T9254] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3170.581731][ T9254] RIP: 0033:0x7f17bff5d68e [ 3170.586217][ T9254] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3170.605966][ T9254] RSP: 002b:00007f17c0f29fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3170.614436][ T9254] RAX: ffffffffffffffda RBX: 00007f17c0f2a6c0 RCX: 00007f17bff5d68e [ 3170.622467][ T9254] RDX: 000000000000000f RSI: 00007f17c0f2a0a0 RDI: 0000000000000004 [ 3170.630483][ T9254] RBP: 00007f17c0f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 3170.638492][ T9254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3170.646509][ T9254] R13: 00007f17c0216038 R14: 00007f17c0215fa0 R15: 00007fff32aee6d8 [ 3170.654532][ T9254] [ 3170.658534][ T9226] Total swap = 124996kB [ 3170.662757][ T9226] 2097051 pages RAM [ 3170.666591][ T9226] 0 pages HighMem/MovableOnly [ 3170.696828][ T9226] 416929 pages reserved [ 3170.701100][ T9226] 0 pages cma reserved [ 3170.861536][ T9263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3170.968268][ T9267] netlink: 'syz.2.12344': attribute type 10 has an invalid length. [ 3171.102447][ T9264] netlink: 'syz.0.12352': attribute type 10 has an invalid length. [ 3171.177310][ T8662] wlan1: Trigger new scan to find an IBSS to join [ 3171.196054][ T9264] team0: Port device wlan1 added [ 3171.432999][ T9273] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12346'. [ 3171.657266][ T9276] netlink: 'syz.0.12348': attribute type 3 has an invalid length. [ 3171.677044][ T9276] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12348'. [ 3171.803677][ T9278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3171.878575][ T9278] netlink: 'syz.1.12349': attribute type 10 has an invalid length. [ 3171.969120][ T5817] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 3172.099008][ T9282] netlink: 'syz.0.12351': attribute type 3 has an invalid length. [ 3172.128044][ T9282] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12351'. [ 3172.317720][ T9290] netlink: 'syz.2.12356': attribute type 10 has an invalid length. [ 3172.379171][ T9290] geneve0: entered promiscuous mode [ 3172.428774][ T9290] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3172.513826][ T9295] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12358'. [ 3172.794344][ T9298] netlink: 'syz.0.12360': attribute type 3 has an invalid length. [ 3172.806989][ T9298] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12360'. [ 3172.992673][ T5817] Bluetooth: hci2: ISO packet for unknown connection handle 5 [ 3173.315619][ T9312] netlink: 'syz.0.12366': attribute type 3 has an invalid length. [ 3173.324355][ T9312] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12366'. [ 3173.668056][ T9310] netlink: 'syz.1.12365': attribute type 10 has an invalid length. [ 3173.821563][ T9326] netlink: 192 bytes leftover after parsing attributes in process `syz.0.12371'. [ 3174.156079][ T9330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3174.240750][ T9330] netlink: 'syz.2.12374': attribute type 10 has an invalid length. [ 3174.338972][ T9332] netlink: 'syz.1.12373': attribute type 10 has an invalid length. [ 3174.517060][ T9332] geneve0: entered promiscuous mode [ 3174.581783][ T9332] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3174.808112][ T5073] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3174.819141][ T5073] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3174.832067][ T5073] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3174.888571][ T5073] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3174.908072][ T5073] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3174.919815][ T5073] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3175.103962][ T9336] netlink: 'syz.2.12375': attribute type 10 has an invalid length. [ 3175.414812][ T8662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.489418][ T9360] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12380'. [ 3175.738882][ T8662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.828862][ T9358] netlink: 'syz.2.12381': attribute type 10 has an invalid length. [ 3175.879825][ T8662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3175.918596][ T9365] netlink: 'syz.3.12383': attribute type 10 has an invalid length. [ 3175.938315][ T9365] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12383'. [ 3175.962825][ T9365] team0: entered promiscuous mode [ 3175.984126][ T9365] team_slave_0: entered promiscuous mode [ 3175.999170][ T9365] team_slave_1: entered promiscuous mode [ 3176.016884][ T9365] team0: entered allmulticast mode [ 3176.032960][ T9365] team_slave_0: entered allmulticast mode [ 3176.047288][ T9365] team_slave_1: entered allmulticast mode [ 3176.081771][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 3176.109621][ T9365] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 3176.180407][ T8662] netdevsim netdevsim0 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3176.232544][ T9369] netlink: 'syz.1.12382': attribute type 10 has an invalid length. [ 3176.385654][ T9344] chnl_net:caif_netlink_parms(): no params data found [ 3176.734387][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 3176.772640][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 3176.780688][ T9344] bridge_slave_0: entered allmulticast mode [ 3176.806993][ T9344] bridge_slave_0: entered promiscuous mode [ 3176.968906][ T9391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3176.976486][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 3177.007183][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 3177.014879][ T9344] bridge_slave_1: entered allmulticast mode [ 3177.022526][ T5817] Bluetooth: hci3: command tx timeout [ 3177.033075][ T9344] bridge_slave_1: entered promiscuous mode [ 3177.052991][ T9386] mac80211_hwsim hwsim806 wlan1: left allmulticast mode [ 3177.069190][ T9386] mac80211_hwsim hwsim806 wlan1: entered promiscuous mode [ 3177.076599][ T9386] mac80211_hwsim hwsim806 wlan1: entered allmulticast mode [ 3177.118787][ T9386] team0: Port device wlan1 added [ 3177.174710][ T9397] netlink: 192 bytes leftover after parsing attributes in process `syz.2.12390'. [ 3177.468555][ T9344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3177.500504][ T9344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3177.679942][ T9404] validate_nla: 2 callbacks suppressed [ 3177.679960][ T9404] netlink: 'syz.1.12391': attribute type 10 has an invalid length. [ 3177.881049][ T9344] team0: Port device team_slave_0 added [ 3177.899374][ T9344] team0: Port device team_slave_1 added [ 3178.031035][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3178.048184][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3178.103694][ T9344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3178.159928][ T9418] netlink: 'syz.3.12393': attribute type 10 has an invalid length. [ 3178.190022][ T9344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3178.202330][ T9344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3178.293154][ T9344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3178.515677][ T9425] netlink: 'syz.2.12395': attribute type 10 has an invalid length. [ 3179.005140][ T9344] hsr_slave_0: entered promiscuous mode [ 3179.096974][ T5817] Bluetooth: hci3: command tx timeout [ 3179.117559][ T9344] hsr_slave_1: entered promiscuous mode [ 3179.263036][ T9344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3179.276987][ T9344] Cannot create hsr debugfs directory [ 3179.394100][ T9442] netlink: 192 bytes leftover after parsing attributes in process `syz.1.12399'. [ 3179.678027][ T8662] [ 3179.680436][ T8662] ====================================================== [ 3179.687480][ T8662] WARNING: possible circular locking dependency detected [ 3179.694543][ T8662] syzkaller #0 Not tainted [ 3179.698990][ T8662] ------------------------------------------------------ [ 3179.706041][ T8662] kworker/u4:6/8662 is trying to acquire lock: [ 3179.712240][ T8662] ffff888060d40d00 (team->team_lock_key#8){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 3179.721967][ T8662] [ 3179.721967][ T8662] but task is already holding lock: [ 3179.729347][ T8662] ffff88807d898768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 3179.739736][ T8662] [ 3179.739736][ T8662] which lock already depends on the new lock. [ 3179.739736][ T8662] [ 3179.750244][ T8662] [ 3179.750244][ T8662] the existing dependency chain (in reverse order) is: [ 3179.759276][ T8662] [ 3179.759276][ T8662] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 3179.767031][ T8662] __mutex_lock+0x136/0xcc0 [ 3179.772173][ T8662] ieee80211_open+0x144/0x200 [ 3179.777401][ T8662] __dev_open+0x2cb/0x430 [ 3179.782281][ T8662] dev_open+0xab/0x190 [ 3179.786894][ T8662] team_add_slave+0x75f/0x29a0 [ 3179.792198][ T8662] do_setlink+0xdfe/0x4130 [ 3179.797230][ T8662] rtnl_newlink+0x17da/0x20a0 [ 3179.802456][ T8662] rtnetlink_rcv_msg+0x869/0xfa0 [ 3179.807942][ T8662] netlink_rcv_skb+0x241/0x4d0 [ 3179.813254][ T8662] netlink_unicast+0x751/0x8d0 [ 3179.818563][ T8662] netlink_sendmsg+0x8d0/0xbf0 [ 3179.823873][ T8662] ____sys_sendmsg+0x5ba/0x960 [ 3179.829181][ T8662] ___sys_sendmsg+0x2a6/0x360 [ 3179.834398][ T8662] __se_sys_sendmsg+0x1c2/0x2b0 [ 3179.839791][ T8662] do_syscall_64+0x55/0xb0 [ 3179.844753][ T8662] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3179.851198][ T8662] [ 3179.851198][ T8662] -> #0 (team->team_lock_key#8){+.+.}-{3:3}: [ 3179.859391][ T8662] __lock_acquire+0x2df1/0x7d40 [ 3179.864791][ T8662] lock_acquire+0x19e/0x420 [ 3179.869838][ T8662] __mutex_lock+0x136/0xcc0 [ 3179.874883][ T8662] team_del_slave+0x32/0x1c0 [ 3179.880015][ T8662] team_device_event+0x28d/0xa20 [ 3179.885525][ T8662] notifier_call_chain+0x197/0x380 [ 3179.891200][ T8662] unregister_netdevice_many_notify+0x100d/0x1900 [ 3179.898177][ T8662] unregister_netdevice_queue+0x32c/0x370 [ 3179.904456][ T8662] _cfg80211_unregister_wdev+0x16b/0x580 [ 3179.910640][ T8662] ieee80211_remove_interfaces+0x49e/0x690 [ 3179.916992][ T8662] ieee80211_unregister_hw+0x5d/0x2a0 [ 3179.922906][ T8662] mac80211_hwsim_del_radio+0x289/0x480 [ 3179.929018][ T8662] hwsim_exit_net+0x58d/0x650 [ 3179.934242][ T8662] cleanup_net+0x70a/0xbb0 [ 3179.939200][ T8662] process_scheduled_works+0xa5d/0x15d0 [ 3179.945290][ T8662] worker_thread+0xa55/0xfc0 [ 3179.950430][ T8662] kthread+0x2fa/0x390 [ 3179.955037][ T8662] ret_from_fork+0x48/0x80 [ 3179.959999][ T8662] ret_from_fork_asm+0x11/0x20 [ 3179.965341][ T8662] [ 3179.965341][ T8662] other info that might help us debug this: [ 3179.965341][ T8662] [ 3179.975585][ T8662] Possible unsafe locking scenario: [ 3179.975585][ T8662] [ 3179.983052][ T8662] CPU0 CPU1 [ 3179.988432][ T8662] ---- ---- [ 3179.993815][ T8662] lock(&rdev->wiphy.mtx); [ 3179.998338][ T8662] lock(team->team_lock_key#8); [ 3180.005821][ T8662] lock(&rdev->wiphy.mtx); [ 3180.012870][ T8662] lock(team->team_lock_key#8); [ 3180.017847][ T8662] [ 3180.017847][ T8662] *** DEADLOCK *** [ 3180.017847][ T8662] [ 3180.026018][ T8662] 5 locks held by kworker/u4:6/8662: [ 3180.031340][ T8662] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 3180.042272][ T8662] #1: ffffc900037dfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 3180.052856][ T8662] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 3180.062291][ T8662] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 3180.072174][ T8662] #4: ffff88807d898768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 3180.082999][ T8662] [ 3180.082999][ T8662] stack backtrace: [ 3180.088917][ T8662] CPU: 1 PID: 8662 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 3180.096476][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 3180.106729][ T8662] Workqueue: netns cleanup_net [ 3180.111519][ T8662] Call Trace: [ 3180.114826][ T8662] [ 3180.117778][ T8662] dump_stack_lvl+0x18c/0x250 [ 3180.122477][ T8662] ? load_image+0x420/0x420 [ 3180.127006][ T8662] ? show_regs_print_info+0x20/0x20 [ 3180.132236][ T8662] ? print_circular_bug+0x12b/0x1a0 [ 3180.137459][ T8662] check_noncircular+0x2fc/0x400 [ 3180.142427][ T8662] ? print_deadlock_bug+0x5d0/0x5d0 [ 3180.147650][ T8662] ? lockdep_lock+0xf5/0x230 [ 3180.152273][ T8662] ? __lock_acquire+0x1273/0x7d40 [ 3180.157385][ T8662] ? _find_first_zero_bit+0xd3/0x100 [ 3180.162714][ T8662] __lock_acquire+0x2df1/0x7d40 [ 3180.167612][ T8662] ? verify_lock_unused+0x140/0x140 [ 3180.172845][ T8662] ? verify_lock_unused+0x140/0x140 [ 3180.178105][ T8662] lock_acquire+0x19e/0x420 [ 3180.182636][ T8662] ? team_del_slave+0x32/0x1c0 [ 3180.187434][ T8662] ? __might_sleep+0xe0/0xe0 [ 3180.192053][ T8662] ? read_lock_is_recursive+0x20/0x20 [ 3180.197461][ T8662] __mutex_lock+0x136/0xcc0 [ 3180.201991][ T8662] ? team_del_slave+0x32/0x1c0 [ 3180.206866][ T8662] ? __lock_acquire+0x7d40/0x7d40 [ 3180.211915][ T8662] ? rcu_is_watching+0x15/0xb0 [ 3180.216706][ T8662] ? trace_contention_end+0x39/0xe0 [ 3180.221939][ T8662] ? __mutex_lock+0x315/0xcc0 [ 3180.226642][ T8662] ? team_del_slave+0x32/0x1c0 [ 3180.231436][ T8662] ? mutex_lock_nested+0x20/0x20 [ 3180.236399][ T8662] ? bond_netdev_event+0xeb/0xf20 [ 3180.241454][ T8662] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 3180.247112][ T8662] team_del_slave+0x32/0x1c0 [ 3180.251726][ T8662] team_device_event+0x28d/0xa20 [ 3180.256693][ T8662] notifier_call_chain+0x197/0x380 [ 3180.261842][ T8662] unregister_netdevice_many_notify+0x100d/0x1900 [ 3180.268281][ T8662] ? lock_chain_count+0x20/0x20 [ 3180.273173][ T8662] ? unregister_netdevice_many+0x20/0x20 [ 3180.278833][ T8662] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3180.284585][ T8662] ? __lock_acquire+0x7d40/0x7d40 [ 3180.289641][ T8662] unregister_netdevice_queue+0x32c/0x370 [ 3180.295384][ T8662] ? list_netdevice+0x730/0x730 [ 3180.300258][ T8662] ? kernfs_remove_by_name_ns+0x117/0x150 [ 3180.306011][ T8662] _cfg80211_unregister_wdev+0x16b/0x580 [ 3180.311669][ T8662] ieee80211_remove_interfaces+0x49e/0x690 [ 3180.317503][ T8662] ? ieee80211_do_stop+0x1e20/0x1e20 [ 3180.322813][ T8662] ? rcu_is_watching+0x15/0xb0 [ 3180.327608][ T8662] ieee80211_unregister_hw+0x5d/0x2a0 [ 3180.333013][ T8662] mac80211_hwsim_del_radio+0x289/0x480 [ 3180.338584][ T8662] ? rhashtable_remove_fast+0xc00/0xc00 [ 3180.344155][ T8662] hwsim_exit_net+0x58d/0x650 [ 3180.348859][ T8662] ? hwsim_init_net+0x90/0x90 [ 3180.353565][ T8662] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 3180.359492][ T8662] cleanup_net+0x70a/0xbb0 [ 3180.363930][ T8662] ? ops_free_list+0x3b0/0x3b0 [ 3180.368716][ T8662] ? _raw_spin_unlock_irq+0x23/0x50 [ 3180.373938][ T8662] ? process_scheduled_works+0x96f/0x15d0 [ 3180.379687][ T8662] ? process_scheduled_works+0x96f/0x15d0 [ 3180.385429][ T8662] process_scheduled_works+0xa5d/0x15d0 [ 3180.391018][ T8662] ? worker_attach_to_pool+0x380/0x380 [ 3180.396513][ T8662] ? assign_work+0x3d2/0x5d0 [ 3180.401133][ T8662] worker_thread+0xa55/0xfc0 [ 3180.405767][ T8662] kthread+0x2fa/0x390 [ 3180.409863][ T8662] ? pr_cont_work+0x560/0x560 [ 3180.414564][ T8662] ? kthread_blkcg+0xd0/0xd0 [ 3180.419175][ T8662] ret_from_fork+0x48/0x80 [ 3180.423636][ T8662] ? kthread_blkcg+0xd0/0xd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 3180.428251][ T8662] ret_from_fork_asm+0x11/0x20 [ 3180.433053][ T8662] [ 3180.484739][ T8662] team0: Port device wlan1 removed [ 3180.570867][ T9465] netlink: 'syz.3.12401': attribute type 3 has an invalid length. [ 3180.596875][ T9465] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.12401'. [ 3180.951037][ T8662] vlan0: left allmulticast mode [ 3180.955980][ T8662] veth0_vlan: left allmulticast mode [ 3181.009766][ T8662] vlan0: left promiscuous mode [ 3181.014965][ T8662] @: port 1(vlan0) entered disabled state [ 3181.117563][ T8662] hsr_slave_0: left promiscuous mode [ 3181.146968][ T8662] hsr_slave_1: left promiscuous mode [ 3181.182583][ T5817] Bluetooth: hci3: command tx timeout [ 3181.214906][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3181.249694][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3181.258471][ T8662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3181.265946][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3181.306005][ T8662] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 3181.313773][ T8662] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 3181.365996][ T8662] veth1_macvtap: left promiscuous mode [ 3181.372009][ T8662] veth0_macvtap: left promiscuous mode [ 3181.379835][ T8662] veth1_vlan: left promiscuous mode [ 3181.385235][ T8662] veth0_vlan: left promiscuous mode [ 3184.061555][ T8662] team_slave_1 (unregistering): left promiscuous mode [ 3184.068523][ T8662] team_slave_1 (unregistering): left allmulticast mode [ 3184.076157][ T8662] team0 (unregistering): Port device team_slave_1 removed [ 3184.117460][ T8662] C (unregistering): left promiscuous mode [ 3184.123519][ T8662] C (unregistering): left allmulticast mode [ 3184.132325][ T8662] team0 (unregistering): Port device C removed [ 3184.173579][ T8662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3184.211235][ T8662] bond0 (unregistering): (slave 73ÿ): Releasing backup interface [ 3184.333196][ T8662] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3184.374805][ T8662] dummy0 (unregistering): left promiscuous mode [ 3184.381159][ T8662] dummy0 (unregistering): left allmulticast mode [ 3184.397306][ T8662] team0 (unregistering): Port device dummy0 removed [ 3184.426373][ T8662] bond0 (unregistering): Released all slaves [ 3185.650916][ T8662] hsr_slave_0: left promiscuous mode [ 3185.663120][ T8662] hsr_slave_1: left promiscuous mode [ 3185.672838][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3185.684507][ T8662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3185.694344][ T8662] bridge_slave_1: left allmulticast mode [ 3185.700206][ T8662] bridge_slave_1: left promiscuous mode [ 3185.705963][ T8662] bridge0: port 2(bridge_slave_1) entered disabled state [ 3185.716400][ T8662] bridge_slave_0: left allmulticast mode [ 3185.722275][ T8662] bridge_slave_0: left promiscuous mode [ 3185.729751][ T8662] bridge0: port 1(bridge_slave_0) entered disabled state [ 3185.861691][ T8662] team0 (unregistering): Port device team_slave_1 removed [ 3185.902503][ T8662] team0 (unregistering): Port device team_slave_0 removed [ 3185.944227][ T8662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3185.986246][ T8662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3186.053898][ T8662] bond0 (unregistering): Released all slaves