last executing test programs: 15.947598711s ago: executing program 3 (id=4644): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x20000, 0x4004}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x6, 0x4, 0x8, 0x20000, 0x4004}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) (async) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x40010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000300)=0x12, &(0x7f0000000680)=r0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r8}, &(0x7f0000000300)=0x12, &(0x7f0000000680)=r0}, 0x20) 7.888902401s ago: executing program 1 (id=4682): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000003c0)="c425388a61cfacd8c0cdb465c7a00662b408945b1ef5c9b06b2ec53c5fc5fb49170a2ed2859762fff6bf7cd3cca036a79aa713759a0e501f0b42fb0b5fa8a02d00b47cc06c39ba26ab2d15710d7bd6477752ddbe32c1711923bfbb23de23616ad74ad4d46f8c289d3e3ccf29b2534ece5051f0f73aad413ead0e851f79052115fe55855151f03d0bf64cfd1db9", 0x8d}, {&(0x7f0000000580)="eea150e8297ab006197a15143b57413d43e39cc595a010d40911364de017fb09c502bbcfc21b54d55b3b1fc9aa08fb5de2348c8ea3cfe7d92c6bf0450fe27d48593c6a763798578b8a1876eea505db902389e82c1ab7d34c944aa1afae10c5308a3b920cadae93999f9b2607e9721be20d8314a0407c251e439c858d24db52", 0x7f}, {&(0x7f0000000600)="9a1cf68b9bc34cc1dd20a568a0ad442fa98a3b35c4f399f87c1934341ce59793c08cc0d74aff199de6fc8f01468419892304ab4c5fc52f9ec81025b848c09be2e5cd05ae340788082ab9c84b1642906fda78fa341e3b82e1981a3e", 0x5b}, {&(0x7f0000000680)="67af5a15b8", 0x5}, {&(0x7f00000006c0)="a39171", 0x3}, {&(0x7f0000000700)="b66fb8f1aafcaca1311e3487c6836b2714584f5e9bf3f310b849a1ea0af72eabf9f7d2c1df39037c9cecedf51cbd6b9a5213caf3a42cceb81202625e7284b65e13edfc165698d48b255000cf28fbf31095cbe7c58b32ecccd2a8d6cad985d9992b8d7a1061565281a0f10edf270e465fdbe99f8294d74984b9e963915d2aedd7f9a00877251d5763c8d0bb1a1cc8a6b2e0fe968950812e9aa8d46da4a51aaa878e4f5b895e0bbc09f0ada7248eaf9d15e4a07fd5cbda5e", 0xb7}, {&(0x7f00000008c0)="d0a257c84d68bc18e9326d23205759de10153572be4bb7e23e6bfd2fc4488322b57408c7c519450ce5d36d479cb186f5d53c6df159cfaecb4b25cbf86dc3e4896a481ef8df394cdd109681e0ad1a13e7c220653e53d85f5117cc66440afdc03d613093252b0b54150dcc1f072dae366477b65b187205f37049b07f11fb7596bfaba818fae1cc04295d9ec814b9f756503f318724d8042c633eec0d914616c9d35f85efa101152694206d16dc232ad7c8f5d4e893464318192ecaf88ad10287b96b23", 0xc2}], 0x7, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x4, [{@rand_addr=0x64010101, 0x1431}, {@remote, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0xff}]}, @rr={0x7, 0x2b, 0xa5, [@broadcast, @multicast1, @remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x9, [{@loopback, 0x2}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x77b9}, {@empty, 0x80}]}, @ssrr={0x89, 0x17, 0x6b, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @rand_addr=0x64010102]}, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x8, "5a25085ac816"}, {0x7, 0xd, "dc7378b2ffcb173e3f3beb"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0xd, [0x2, 0xc, 0x77af8f1f, 0x9, 0xffffff81, 0x0]}, @noop]}}}], 0x108}, 0x4000080) 7.157325292s ago: executing program 2 (id=4686): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x108c0, 0xa6, 0x2, 0x9, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, &(0x7f0000000040), 0xf7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e002309000000a6000003000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 6.944880125s ago: executing program 1 (id=4688): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000073113d000009007600000095000000002100009500a50500"/47], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000002) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, r1}, 0x94) socket$kcm(0x10, 0x3, 0x10) openat$cgroup_type(r0, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, @perf_config_ext={0x40000, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x10000020}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=r2, 0x12) r3 = perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x3}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x400000000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='!=[\\\\}#\x00') ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r4) r5 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffcc8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f00000002c0), &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x97, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_config_ext={0x8, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180), 0x9}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.891961311s ago: executing program 2 (id=4692): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r3, 0x46) 5.543241326s ago: executing program 1 (id=4694): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000003080)=""/167, 0x74, 0xfffffffffffffe44, 0x1, 0x69}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000003180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="bc0900"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="05000000040000210300000000"], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000003000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r2], 0x48}, 0x40004) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fb5600d0e3db0af643b0063924ce851b7d", @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x8, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bridge_slave_0\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 5.222461951s ago: executing program 0 (id=4695): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 2.386805464s ago: executing program 3 (id=4648): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x8840) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x541b, 0x0) r6 = socket$kcm(0x2, 0x6, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe0e41b0000900ac00060411000000040012000a0005000248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db7259826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d00"/216, 0xd8}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x4, &(0x7f0000000780)=ANY=[@ANYRESOCT=r2], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, 0x0, &(0x7f0000000740)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4004, @dev={0xac, 0x14, 0x14, 0x4}}, 0x10, 0x0}, 0x28008840) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x41, &(0x7f00000006c0)=r8, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.361528024s ago: executing program 0 (id=4696): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000003c0)="c425388a61cfacd8c0cdb465c7a00662b408945b1ef5c9b06b2ec53c5fc5fb49170a2ed2859762fff6bf7cd3cca036a79aa713759a0e501f0b42fb0b5fa8a02d00b47cc06c39ba26ab2d15710d7bd6477752ddbe32c1711923bfbb23de23616ad74ad4d46f8c289d3e3ccf29b2534ece5051f0f73aad413ead0e851f79052115fe55855151f03d0bf64cfd1db9", 0x8d}, {&(0x7f0000000580)="eea150e8297ab006197a15143b57413d43e39cc595a010d40911364de017fb09c502bbcfc21b54d55b3b1fc9aa08fb5de2348c8ea3cfe7d92c6bf0450fe27d48593c6a763798578b8a1876eea505db902389e82c1ab7d34c944aa1afae10c5308a3b920cadae93999f9b2607e9721be20d8314a0407c251e439c858d24db52", 0x7f}, {&(0x7f0000000600)="9a1cf68b9bc34cc1dd20a568a0ad442fa98a3b35c4f399f87c1934341ce59793c08cc0d74aff199de6fc8f01468419892304ab4c5fc52f9ec81025b848c09be2e5cd05ae340788082ab9c84b1642906fda78fa341e3b82e1981a3e", 0x5b}, {&(0x7f0000000680)="67af5a15b8", 0x5}, {&(0x7f00000006c0)="a39171", 0x3}, {&(0x7f0000000700)="b66fb8f1aafcaca1311e3487c6836b2714584f5e9bf3f310b849a1ea0af72eabf9f7d2c1df39037c9cecedf51cbd6b9a5213caf3a42cceb81202625e7284b65e13edfc165698d48b255000cf28fbf31095cbe7c58b32ecccd2a8d6cad985d9992b8d7a1061565281a0f10edf270e465fdbe99f8294d74984b9e963915d2aedd7f9a00877251d5763c8d0bb1a1cc8a6b2e0fe968950812e9aa8d46da4a51aaa878e4f5b895e0bbc09f0ada7248eaf9d15e4a07fd5cbda5e", 0xb7}, {&(0x7f00000008c0)="d0a257c84d68bc18e9326d23205759de10153572be4bb7e23e6bfd2fc4488322b57408c7c519450ce5d36d479cb186f5d53c6df159cfaecb4b25cbf86dc3e4896a481ef8df394cdd109681e0ad1a13e7c220653e53d85f5117cc66440afdc03d613093252b0b54150dcc1f072dae366477b65b187205f37049b07f11fb7596bfaba818fae1cc04295d9ec814b9f756503f318724d8042c633eec0d914616c9d35f85efa101152694206d16dc232ad7c8f5d4e893464318192ecaf88ad10287b96b23", 0xc2}], 0x7, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x4, [{@rand_addr=0x64010101, 0x1431}, {@remote, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0xff}]}, @rr={0x7, 0x2b, 0xa5, [@broadcast, @multicast1, @remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x9, [{@loopback, 0x2}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x77b9}, {@empty, 0x80}]}, @ssrr={0x89, 0x17, 0x6b, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x8, "5a25085ac816"}, {0x7, 0xd, "dc7378b2ffcb173e3f3beb"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0xd, [0x2, 0xc, 0x77af8f1f, 0x9, 0xffffff81, 0x0]}, @noop]}}}], 0x108}, 0x4000080) 2.350654284s ago: executing program 2 (id=4697): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x26e1, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r7 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYRES8=r8, @ANYRESOCT=r8, @ANYRES16=r6], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000180)="5c00000013006bcc9efab0a6ffbbdca6156b876c1d0000007ea60864160afd6514001ac00800020002000200050007c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r9 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f0000000100)=r10, 0x4) sendmsg$kcm(r9, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e00)="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", 0x2f3}], 0x1}, 0x10) sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 2.341817984s ago: executing program 1 (id=4698): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f00000000c0)={r1}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000080)) 2.237530696s ago: executing program 0 (id=4699): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100e68, 0x0, 0x4000, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) 2.221702676s ago: executing program 1 (id=4700): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x108c0, 0xa6, 0x2, 0x9, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, &(0x7f0000000040), 0xf7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e002309000000a6000003000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.212705906s ago: executing program 3 (id=4701): perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0x2, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x108c0, 0xa6, 0x2, 0x9, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x24, &(0x7f0000000200), 0x4) r2 = perf_event_open(&(0x7f0000000040)={0x5, 0x69, 0x0, 0x1, 0x8, 0xa, 0x0, 0x4, 0x400, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x4, @perf_bp={0x0, 0x8}, 0x11950, 0x4854, 0x3, 0x6, 0x5, 0xb5, 0x5, 0x0, 0xc8, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x16, &(0x7f0000000040), 0xf7) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2e}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) write$cgroup_type(r7, 0x0, 0x0) close(0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e002309000000a6000003000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.095393368s ago: executing program 2 (id=4702): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0004000000020000000c00000008100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r1, 0x5, 0x1, 0xc48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r3 = socket$kcm(0xa, 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg(r3, 0x0, 0x2000000) close(r3) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x24, 0xc, 0x0, 0x0, 0x0, 0xd, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x86, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x30004084) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec00008500000082000000", @ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000001100)=0x5c9, 0x12) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r0}, 0x38) 1.610592045s ago: executing program 0 (id=4703): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x2, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x1, @perf_bp={0x0}, 0x100102, 0x5, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) 1.233756501s ago: executing program 2 (id=4704): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x3, 0x3, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 1.233279241s ago: executing program 0 (id=4705): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x3, 0x0, 0x3, 0x0, 0x10000000000, 0x808, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x4}, 0x4108, 0x3, 0x0, 0x6, 0x7, 0xffffffff, 0x802, 0x0, 0xffffffff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x19) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r3, 0x5452, &(0x7f00000013c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00 \x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x6, 0xffffffffffff8001}, 0x8000, 0x5, 0x43a1bd76, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000fb5600d0e3db0af643b0063924ce851b7d", @ANYRES32=r5, @ANYRESDEC=r3], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x8, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={'bridge_slave_0\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) 1.095092153s ago: executing program 3 (id=4707): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f00000001c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000009c0)=[{&(0x7f00000003c0)="c425388a61cfacd8c0cdb465c7a00662b408945b1ef5c9b06b2ec53c5fc5fb49170a2ed2859762fff6bf7cd3cca036a79aa713759a0e501f0b42fb0b5fa8a02d00b47cc06c39ba26ab2d15710d7bd6477752ddbe32c1711923bfbb23de23616ad74ad4d46f8c289d3e3ccf29b2534ece5051f0f73aad413ead0e851f79052115fe55855151f03d0bf64cfd1db9", 0x8d}, {&(0x7f0000000580)="eea150e8297ab006197a15143b57413d43e39cc595a010d40911364de017fb09c502bbcfc21b54d55b3b1fc9aa08fb5de2348c8ea3cfe7d92c6bf0450fe27d48593c6a763798578b8a1876eea505db902389e82c1ab7d34c944aa1afae10c5308a3b920cadae93999f9b2607e9721be20d8314a0407c251e439c858d24db52", 0x7f}, {&(0x7f0000000600)="9a1cf68b9bc34cc1dd20a568a0ad442fa98a3b35c4f399f87c1934341ce59793c08cc0d74aff199de6fc8f01468419892304ab4c5fc52f9ec81025b848c09be2e5cd05ae340788082ab9c84b1642906fda78fa341e3b82e1981a3e", 0x5b}, {&(0x7f0000000680)="67af5a15b8", 0x5}, {&(0x7f00000006c0)="a39171", 0x3}, {&(0x7f0000000700)="b66fb8f1aafcaca1311e3487c6836b2714584f5e9bf3f310b849a1ea0af72eabf9f7d2c1df39037c9cecedf51cbd6b9a5213caf3a42cceb81202625e7284b65e13edfc165698d48b255000cf28fbf31095cbe7c58b32ecccd2a8d6cad985d9992b8d7a1061565281a0f10edf270e465fdbe99f8294d74984b9e963915d2aedd7f9a00877251d5763c8d0bb1a1cc8a6b2e0fe968950812e9aa8d46da4a51aaa878e4f5b895e0bbc09f0ada7248eaf9d15e4a07fd5cbda5e", 0xb7}, {&(0x7f00000008c0)="d0a257c84d68bc18e9326d23205759de10153572be4bb7e23e6bfd2fc4488322b57408c7c519450ce5d36d479cb186f5d53c6df159cfaecb4b25cbf86dc3e4896a481ef8df394cdd109681e0ad1a13e7c220653e53d85f5117cc66440afdc03d613093252b0b54150dcc1f072dae366477b65b187205f37049b07f11fb7596bfaba818fae1cc04295d9ec814b9f756503f318724d8042c633eec0d914616c9d35f85efa101152694206d16dc232ad7c8f5d4e893464318192ecaf88ad10287b96b23", 0xc2}], 0x7, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xd}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0xf0, 0x1, 0x4, [{@rand_addr=0x64010101, 0x1431}, {@remote, 0x100}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@broadcast, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@loopback, 0xff}]}, @rr={0x7, 0x2b, 0xa5, [@broadcast, @multicast1, @remote, @local, @loopback, @dev={0xac, 0x14, 0x14, 0x31}, @local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x24, 0x24, 0x1, 0x9, [{@loopback, 0x2}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x77b9}, {@empty, 0x80}]}, @ssrr={0x89, 0x17, 0x6b, [@dev={0xac, 0x14, 0x14, 0xb}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x1b, 0x0, [{0x2, 0x8, "5a25085ac816"}, {0x7, 0xd, "dc7378b2ffcb173e3f3beb"}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x7e, 0x0, 0xd, [0x2, 0xc, 0x77af8f1f, 0x9, 0xffffff81, 0x0]}, @noop]}}}], 0x108}, 0x4000080) 1.032686024s ago: executing program 0 (id=4708): r0 = socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x2a979d) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0xa, 0x0, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0)=r3, 0x46) 1.032242634s ago: executing program 2 (id=4709): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socket$kcm(0xa, 0x1, 0x106) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) (async) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000300)={r1}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040a00000000fe0500002015000600142603600e1209000a00000000000001060000b94dcf5c0468c1d67f6f94007134cfeee0800089e408e8d8ef52b40800de00e06bbace8017cbec4c2ee5a7cef4090000001fb79164075ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5035ccb29e00360db70100000040fad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a83954b43370e9701008400002d3bc75dc0bb9dd33e438c", 0xd8}], 0x1}, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000007c0)="ff", 0x0, 0x1, r0}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r8, &(0x7f00000007c0), 0x0}, 0x20) close(0xffffffffffffffff) (async) socket$kcm(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ffff020018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000070000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400003e000000850000008700000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.017183484s ago: executing program 3 (id=4710): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0xc03e, 0x0}, 0x8004) 0s ago: executing program 3 (id=4711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xd) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x80000002, r0}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0900000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r2}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280), 0x1782, r0}, 0x38) kernel console output (not intermixed with test programs): new_radio_nl+0xdad/0x1a70 [ 689.715775][T16812] ? __nla_validate+0x50/0x50 [ 689.720487][T16812] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 689.726842][T16812] ? __nla_parse+0x40/0x50 [ 689.731267][T16812] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 689.737603][T16812] genl_family_rcv_msg_doit+0x21a/0x310 [ 689.743157][T16812] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 689.749075][T16812] ? bpf_lsm_capable+0x9/0x10 [ 689.753798][T16812] ? security_capable+0x89/0xb0 [ 689.758685][T16812] genl_rcv_msg+0x611/0x7a0 [ 689.763195][T16812] ? genl_bind+0x360/0x360 [ 689.767611][T16812] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 689.773940][T16812] ? ref_tracker_free+0x686/0x830 [ 689.778960][T16812] ? __kasan_kmalloc_large+0x8b/0xa0 [ 689.784255][T16812] netlink_rcv_skb+0x235/0x4c0 [ 689.789020][T16812] ? genl_bind+0x360/0x360 [ 689.793441][T16812] ? netlink_ack+0x1160/0x1160 [ 689.798210][T16812] ? __lock_acquire+0x7d80/0x7d80 [ 689.803246][T16812] ? down_read+0x1ac/0x2e0 [ 689.807696][T16812] genl_rcv+0x28/0x40 [ 689.811693][T16812] netlink_unicast+0x7b1/0x930 [ 689.816464][T16812] netlink_sendmsg+0x8d0/0xbf0 [ 689.821232][T16812] ? netlink_getsockopt+0x590/0x590 [ 689.826436][T16812] ? aa_sock_msg_perm+0x94/0x150 [ 689.831375][T16812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 689.836669][T16812] ? security_socket_sendmsg+0x80/0xa0 [ 689.842125][T16812] ? netlink_getsockopt+0x590/0x590 [ 689.847344][T16812] ____sys_sendmsg+0x61b/0x980 [ 689.852112][T16812] ? __asan_memset+0x22/0x40 [ 689.856701][T16812] ? __sys_sendmsg_sock+0x30/0x30 [ 689.861720][T16812] ? __import_iovec+0x5f2/0x850 [ 689.866573][T16812] ? import_iovec+0x73/0xa0 [ 689.871077][T16812] ___sys_sendmsg+0x2a6/0x360 [ 689.875757][T16812] ? __sys_sendmsg+0x2b0/0x2b0 [ 689.880590][T16812] __se_sys_sendmsg+0x1d0/0x2c0 [ 689.885445][T16812] ? perf_trace_preemptirq_template+0x269/0x330 [ 689.891694][T16812] ? __x64_sys_sendmsg+0x80/0x80 [ 689.896663][T16812] ? lockdep_hardirqs_on+0x98/0x150 [ 689.901869][T16812] do_syscall_64+0x55/0xb0 [ 689.906286][T16812] ? clear_bhb_loop+0x40/0x90 [ 689.910967][T16812] ? clear_bhb_loop+0x40/0x90 [ 689.915653][T16812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 689.921577][T16812] RIP: 0033:0x7f14fbd9ce59 [ 689.926021][T16812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.945663][T16812] RSP: 002b:00007f14fccf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.954172][T16812] RAX: ffffffffffffffda RBX: 00007f14fc015fa0 RCX: 00007f14fbd9ce59 [ 689.962146][T16812] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 689.970116][T16812] RBP: 00007f14fbe32e6f R08: 0000000000000000 R09: 0000000000000000 [ 689.978104][T16812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.986076][T16812] R13: 00007f14fc016038 R14: 00007f14fc015fa0 R15: 00007ffeb344d4e8 [ 689.994075][T16812] [ 690.013260][T16818] netlink: 'syz.0.3930': attribute type 8 has an invalid length. [ 690.037027][T16818] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 690.045122][T16818] CPU: 1 PID: 16818 Comm: syz.0.3930 Not tainted syzkaller #0 [ 690.052625][T16818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.062721][T16818] Call Trace: [ 690.066022][T16818] [ 690.068980][T16818] dump_stack_lvl+0x18c/0x250 [ 690.073700][T16818] ? show_regs_print_info+0x20/0x20 [ 690.078943][T16818] ? load_image+0x420/0x420 [ 690.083514][T16818] sysfs_warn_dup+0x8e/0xa0 [ 690.088058][T16818] sysfs_do_create_link_sd+0xc0/0x110 [ 690.093470][T16818] device_add_class_symlinks+0x1cf/0x240 [ 690.099155][T16818] device_add+0x4f9/0xc40 [ 690.103528][T16818] wiphy_register+0x1d99/0x2ac0 [ 690.108448][T16818] ? cfg80211_event_work+0x40/0x40 [ 690.113577][T16818] ? minstrel_ht_alloc+0x88a/0x990 [ 690.118717][T16818] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 690.124855][T16818] ieee80211_register_hw+0x2dd8/0x3b30 [ 690.130375][T16818] ? ieee80211_register_hw+0xfc1/0x3b30 [ 690.135981][T16818] ? ieee80211_tasklet_handler+0x20/0x20 [ 690.141655][T16818] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 690.147596][T16818] ? __debug_object_init+0xec/0x450 [ 690.152836][T16818] ? __asan_memset+0x22/0x40 [ 690.157440][T16818] ? __hrtimer_init+0x189/0x270 [ 690.162315][T16818] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 690.168066][T16818] ? mac80211_hwsim_free+0x220/0x220 [ 690.173353][T16818] ? rcu_is_watching+0x15/0xb0 [ 690.178124][T16818] ? kstrndup+0xbd/0x140 [ 690.182381][T16818] hwsim_new_radio_nl+0xdad/0x1a70 [ 690.187520][T16818] ? __nla_validate+0x50/0x50 [ 690.192211][T16818] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 690.198563][T16818] ? __nla_parse+0x40/0x50 [ 690.202986][T16818] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 690.209325][T16818] genl_family_rcv_msg_doit+0x21a/0x310 [ 690.214897][T16818] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 690.220815][T16818] ? bpf_lsm_capable+0x9/0x10 [ 690.225517][T16818] ? security_capable+0x89/0xb0 [ 690.230395][T16818] genl_rcv_msg+0x611/0x7a0 [ 690.234917][T16818] ? genl_bind+0x360/0x360 [ 690.239357][T16818] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 690.245715][T16818] netlink_rcv_skb+0x235/0x4c0 [ 690.250492][T16818] ? genl_bind+0x360/0x360 [ 690.254961][T16818] ? netlink_ack+0x1160/0x1160 [ 690.259770][T16818] ? __lock_acquire+0x7d80/0x7d80 [ 690.264819][T16818] ? down_read+0x1ac/0x2e0 [ 690.269255][T16818] genl_rcv+0x28/0x40 [ 690.273258][T16818] netlink_unicast+0x7b1/0x930 [ 690.278047][T16818] netlink_sendmsg+0x8d0/0xbf0 [ 690.282828][T16818] ? netlink_getsockopt+0x590/0x590 [ 690.288034][T16818] ? aa_sock_msg_perm+0x94/0x150 [ 690.292993][T16818] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 690.298286][T16818] ? security_socket_sendmsg+0x80/0xa0 [ 690.303768][T16818] ? netlink_getsockopt+0x590/0x590 [ 690.308982][T16818] ____sys_sendmsg+0x61b/0x980 [ 690.313761][T16818] ? __asan_memset+0x22/0x40 [ 690.318360][T16818] ? __sys_sendmsg_sock+0x30/0x30 [ 690.323392][T16818] ? __import_iovec+0x5f2/0x850 [ 690.328261][T16818] ? import_iovec+0x73/0xa0 [ 690.333204][T16818] ___sys_sendmsg+0x2a6/0x360 [ 690.337902][T16818] ? __sys_sendmsg+0x2b0/0x2b0 [ 690.342709][T16818] __se_sys_sendmsg+0x1d0/0x2c0 [ 690.347592][T16818] ? __x64_sys_sendmsg+0x80/0x80 [ 690.352549][T16818] ? lockdep_hardirqs_on+0x98/0x150 [ 690.357760][T16818] do_syscall_64+0x55/0xb0 [ 690.362183][T16818] ? clear_bhb_loop+0x40/0x90 [ 690.366920][T16818] ? clear_bhb_loop+0x40/0x90 [ 690.371643][T16818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.377574][T16818] RIP: 0033:0x7fef2af9ce59 [ 690.381993][T16818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.401607][T16818] RSP: 002b:00007fef2be05028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.410033][T16818] RAX: ffffffffffffffda RBX: 00007fef2b216090 RCX: 00007fef2af9ce59 [ 690.418012][T16818] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 690.425991][T16818] RBP: 00007fef2b032e6f R08: 0000000000000000 R09: 0000000000000000 [ 690.433967][T16818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.441937][T16818] R13: 00007fef2b216128 R14: 00007fef2b216090 R15: 00007ffea4ee7ff8 [ 690.449925][T16818] [ 690.481021][T16823] FAULT_INJECTION: forcing a failure. [ 690.481021][T16823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 690.519621][T16823] CPU: 1 PID: 16823 Comm: syz.3.3932 Not tainted syzkaller #0 [ 690.527152][T16823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.537268][T16823] Call Trace: [ 690.540582][T16823] [ 690.543539][T16823] dump_stack_lvl+0x18c/0x250 [ 690.548256][T16823] ? show_regs_print_info+0x20/0x20 [ 690.553464][T16823] ? load_image+0x420/0x420 [ 690.557994][T16823] ? __lock_acquire+0x7d80/0x7d80 [ 690.563041][T16823] should_fail_ex+0x394/0x4c0 [ 690.567730][T16823] prepare_alloc_pages+0x1e1/0x5b0 [ 690.572845][T16823] __alloc_pages+0x134/0x460 [ 690.577454][T16823] ? zone_statistics+0x170/0x170 [ 690.582419][T16823] ? alloc_pages+0x4e1/0x740 [ 690.587021][T16823] ? do_raw_spin_unlock+0x121/0x230 [ 690.592221][T16823] __get_free_pages+0xc/0x30 [ 690.596860][T16823] kasan_populate_vmalloc_pte+0x35/0x100 [ 690.602498][T16823] __apply_to_page_range+0x860/0xdd0 [ 690.607803][T16823] ? kasan_populate_vmalloc+0x70/0x70 [ 690.613176][T16823] ? apply_to_page_range+0x50/0x50 [ 690.618291][T16823] ? do_raw_spin_unlock+0x121/0x230 [ 690.623497][T16823] alloc_vmap_area+0x1d26/0x1e50 [ 690.628487][T16823] ? vm_map_ram+0xcf0/0xcf0 [ 690.633003][T16823] ? rcu_is_watching+0x15/0xb0 [ 690.637781][T16823] __get_vm_area_node+0x162/0x370 [ 690.642812][T16823] ? __kasan_kmalloc+0x8f/0xa0 [ 690.647577][T16823] __vmalloc_node_range+0x36f/0x1320 [ 690.652861][T16823] ? btf_new_fd+0x27a/0x9e0 [ 690.657362][T16823] ? __asan_memset+0x22/0x40 [ 690.661971][T16823] ? free_vm_area+0x50/0x50 [ 690.666477][T16823] ? kvmalloc_node+0x70/0x180 [ 690.671152][T16823] ? rcu_is_watching+0x15/0xb0 [ 690.676001][T16823] ? kvmalloc_node+0x70/0x180 [ 690.680678][T16823] ? trace_kmalloc+0x1f/0xa0 [ 690.685266][T16823] kvmalloc_node+0x13f/0x180 [ 690.689856][T16823] ? btf_new_fd+0x27a/0x9e0 [ 690.694368][T16823] btf_new_fd+0x27a/0x9e0 [ 690.698724][T16823] ? bpf_btf_show_fdinfo+0x80/0x80 [ 690.703837][T16823] ? capable+0x88/0xe0 [ 690.707910][T16823] __sys_bpf+0x670/0x890 [ 690.712151][T16823] ? bpf_link_show_fdinfo+0x390/0x390 [ 690.717537][T16823] ? lock_chain_count+0x20/0x20 [ 690.722391][T16823] __x64_sys_bpf+0x7c/0x90 [ 690.726809][T16823] do_syscall_64+0x55/0xb0 [ 690.731256][T16823] ? clear_bhb_loop+0x40/0x90 [ 690.735928][T16823] ? clear_bhb_loop+0x40/0x90 [ 690.740606][T16823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 690.746506][T16823] RIP: 0033:0x7fefda39ce59 [ 690.750938][T16823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.770545][T16823] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 690.778966][T16823] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 690.786935][T16823] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012 [ 690.794916][T16823] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 690.802892][T16823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.810870][T16823] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 690.818857][T16823] [ 691.457348][T16841] sit0: entered allmulticast mode [ 691.641155][T16841] sit0: entered promiscuous mode [ 692.562862][T16846] netlink: 'syz.3.3939': attribute type 27 has an invalid length. [ 692.583422][T16846] netlink: 'syz.3.3939': attribute type 4 has an invalid length. [ 692.620534][T16846] __nla_validate_parse: 9 callbacks suppressed [ 692.620552][T16846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3939'. [ 692.739306][T16857] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3941'. [ 692.789721][T16859] netlink: 'syz.1.3943': attribute type 8 has an invalid length. [ 692.804725][T16859] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.3943'. [ 692.835498][T16859] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 692.845166][T16859] CPU: 0 PID: 16859 Comm: syz.1.3943 Not tainted syzkaller #0 [ 692.852683][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.862777][T16859] Call Trace: [ 692.866167][T16859] [ 692.869127][T16859] dump_stack_lvl+0x18c/0x250 [ 692.873869][T16859] ? show_regs_print_info+0x20/0x20 [ 692.879212][T16859] ? load_image+0x420/0x420 [ 692.883759][T16859] sysfs_warn_dup+0x8e/0xa0 [ 692.888295][T16859] sysfs_do_create_link_sd+0xc0/0x110 [ 692.893695][T16859] device_add_class_symlinks+0x1cf/0x240 [ 692.899361][T16859] device_add+0x4f9/0xc40 [ 692.903712][T16859] wiphy_register+0x1d99/0x2ac0 [ 692.908616][T16859] ? cfg80211_event_work+0x40/0x40 [ 692.913755][T16859] ? minstrel_ht_alloc+0x88a/0x990 [ 692.918889][T16859] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 692.924977][T16859] ieee80211_register_hw+0x2dd8/0x3b30 [ 692.930489][T16859] ? ieee80211_register_hw+0xfc1/0x3b30 [ 692.936065][T16859] ? ieee80211_tasklet_handler+0x20/0x20 [ 692.941713][T16859] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 692.947629][T16859] ? __debug_object_init+0xec/0x450 [ 692.952843][T16859] ? __asan_memset+0x22/0x40 [ 692.957442][T16859] ? __hrtimer_init+0x189/0x270 [ 692.962308][T16859] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 692.968064][T16859] ? mac80211_hwsim_free+0x220/0x220 [ 692.973352][T16859] ? rcu_is_watching+0x15/0xb0 [ 692.978127][T16859] ? kstrndup+0xbd/0x140 [ 692.982390][T16859] hwsim_new_radio_nl+0xdad/0x1a70 [ 692.987526][T16859] ? __nla_validate+0x50/0x50 [ 692.992219][T16859] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 692.998570][T16859] ? __nla_parse+0x40/0x50 [ 693.003002][T16859] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 693.009363][T16859] genl_family_rcv_msg_doit+0x21a/0x310 [ 693.014931][T16859] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 693.020842][T16859] ? bpf_lsm_capable+0x9/0x10 [ 693.025558][T16859] ? security_capable+0x89/0xb0 [ 693.030432][T16859] genl_rcv_msg+0x611/0x7a0 [ 693.034947][T16859] ? genl_bind+0x360/0x360 [ 693.039472][T16859] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 693.045808][T16859] ? ref_tracker_free+0x686/0x830 [ 693.050836][T16859] ? __kasan_kmalloc_large+0x8b/0xa0 [ 693.056151][T16859] netlink_rcv_skb+0x235/0x4c0 [ 693.060927][T16859] ? genl_bind+0x360/0x360 [ 693.065350][T16859] ? netlink_ack+0x1160/0x1160 [ 693.070584][T16859] ? __lock_acquire+0x7d80/0x7d80 [ 693.075631][T16859] ? down_read+0x1ac/0x2e0 [ 693.080068][T16859] genl_rcv+0x28/0x40 [ 693.084059][T16859] netlink_unicast+0x7b1/0x930 [ 693.088926][T16859] netlink_sendmsg+0x8d0/0xbf0 [ 693.093711][T16859] ? netlink_getsockopt+0x590/0x590 [ 693.098916][T16859] ? aa_sock_msg_perm+0x94/0x150 [ 693.103989][T16859] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 693.109280][T16859] ? security_socket_sendmsg+0x80/0xa0 [ 693.114744][T16859] ? netlink_getsockopt+0x590/0x590 [ 693.119968][T16859] ____sys_sendmsg+0x61b/0x980 [ 693.124773][T16859] ? __asan_memset+0x22/0x40 [ 693.129385][T16859] ? __sys_sendmsg_sock+0x30/0x30 [ 693.134457][T16859] ? __import_iovec+0x5f2/0x850 [ 693.139320][T16859] ? import_iovec+0x73/0xa0 [ 693.143829][T16859] ___sys_sendmsg+0x2a6/0x360 [ 693.148524][T16859] ? __sys_sendmsg+0x2b0/0x2b0 [ 693.153334][T16859] __se_sys_sendmsg+0x1d0/0x2c0 [ 693.158187][T16859] ? perf_trace_preemptirq_template+0x269/0x330 [ 693.164438][T16859] ? __x64_sys_sendmsg+0x80/0x80 [ 693.169391][T16859] ? lockdep_hardirqs_on+0x98/0x150 [ 693.174600][T16859] do_syscall_64+0x55/0xb0 [ 693.179033][T16859] ? clear_bhb_loop+0x40/0x90 [ 693.183711][T16859] ? clear_bhb_loop+0x40/0x90 [ 693.188393][T16859] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.194295][T16859] RIP: 0033:0x7f6b0f79ce59 [ 693.198717][T16859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.218347][T16859] RSP: 002b:00007f6b1066b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.226778][T16859] RAX: ffffffffffffffda RBX: 00007f6b0fa15fa0 RCX: 00007f6b0f79ce59 [ 693.234754][T16859] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 693.242736][T16859] RBP: 00007f6b0f832e6f R08: 0000000000000000 R09: 0000000000000000 [ 693.250713][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.258689][T16859] R13: 00007f6b0fa16038 R14: 00007f6b0fa15fa0 R15: 00007fffdb5e4298 [ 693.266682][T16859] [ 693.277543][T16865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3944'. [ 693.303807][T16865] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3944'. [ 693.479767][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3946'. [ 693.561895][T16877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 693.709804][T16881] netlink: 'syz.0.3950': attribute type 27 has an invalid length. [ 693.732099][T16881] netlink: 'syz.0.3950': attribute type 4 has an invalid length. [ 693.746290][T16881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3950'. [ 693.801881][T16889] sit0: entered allmulticast mode [ 693.879144][T16889] sit0: entered promiscuous mode [ 695.061264][T16904] netlink: 'syz.0.3964': attribute type 27 has an invalid length. [ 695.086752][T16904] netlink: 'syz.0.3964': attribute type 4 has an invalid length. [ 695.088578][T16905] netlink: 'syz.3.3956': attribute type 8 has an invalid length. [ 695.094526][T16904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3964'. [ 695.114909][T16905] netlink: 209716 bytes leftover after parsing attributes in process `syz.3.3956'. [ 695.148253][T16905] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 695.156230][T16905] CPU: 1 PID: 16905 Comm: syz.3.3956 Not tainted syzkaller #0 [ 695.163722][T16905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 695.173815][T16905] Call Trace: [ 695.177109][T16905] [ 695.180054][T16905] dump_stack_lvl+0x18c/0x250 [ 695.184752][T16905] ? show_regs_print_info+0x20/0x20 [ 695.189959][T16905] ? load_image+0x420/0x420 [ 695.194482][T16905] sysfs_warn_dup+0x8e/0xa0 [ 695.199004][T16905] sysfs_do_create_link_sd+0xc0/0x110 [ 695.204394][T16905] device_add_class_symlinks+0x1cf/0x240 [ 695.210046][T16905] device_add+0x4f9/0xc40 [ 695.214387][T16905] wiphy_register+0x1d99/0x2ac0 [ 695.219272][T16905] ? cfg80211_event_work+0x40/0x40 [ 695.224391][T16905] ? minstrel_ht_alloc+0x88a/0x990 [ 695.229515][T16905] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 695.235598][T16905] ieee80211_register_hw+0x2dd8/0x3b30 [ 695.241077][T16905] ? ieee80211_register_hw+0xfc1/0x3b30 [ 695.246635][T16905] ? ieee80211_tasklet_handler+0x20/0x20 [ 695.252277][T16905] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 695.258185][T16905] ? __debug_object_init+0xec/0x450 [ 695.263415][T16905] ? __asan_memset+0x22/0x40 [ 695.268018][T16905] ? __hrtimer_init+0x189/0x270 [ 695.272873][T16905] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 695.278619][T16905] ? mac80211_hwsim_free+0x220/0x220 [ 695.283907][T16905] ? rcu_is_watching+0x15/0xb0 [ 695.288681][T16905] ? kstrndup+0xbd/0x140 [ 695.293048][T16905] hwsim_new_radio_nl+0xdad/0x1a70 [ 695.298182][T16905] ? __nla_validate+0x50/0x50 [ 695.302872][T16905] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 695.309212][T16905] ? __nla_parse+0x40/0x50 [ 695.313637][T16905] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 695.319980][T16905] genl_family_rcv_msg_doit+0x21a/0x310 [ 695.325568][T16905] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 695.331475][T16905] ? bpf_lsm_capable+0x9/0x10 [ 695.336160][T16905] ? security_capable+0x89/0xb0 [ 695.341027][T16905] genl_rcv_msg+0x611/0x7a0 [ 695.345546][T16905] ? genl_bind+0x360/0x360 [ 695.349963][T16905] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 695.356296][T16905] ? ref_tracker_free+0x686/0x830 [ 695.361331][T16905] ? __kasan_kmalloc_large+0x8b/0xa0 [ 695.366639][T16905] netlink_rcv_skb+0x235/0x4c0 [ 695.371418][T16905] ? genl_bind+0x360/0x360 [ 695.375854][T16905] ? netlink_ack+0x1160/0x1160 [ 695.380637][T16905] ? __lock_acquire+0x7d80/0x7d80 [ 695.385681][T16905] ? down_read+0x1ac/0x2e0 [ 695.390105][T16905] genl_rcv+0x28/0x40 [ 695.394093][T16905] netlink_unicast+0x7b1/0x930 [ 695.398900][T16905] netlink_sendmsg+0x8d0/0xbf0 [ 695.403673][T16905] ? netlink_getsockopt+0x590/0x590 [ 695.408877][T16905] ? aa_sock_msg_perm+0x94/0x150 [ 695.413826][T16905] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 695.419122][T16905] ? security_socket_sendmsg+0x80/0xa0 [ 695.424587][T16905] ? netlink_getsockopt+0x590/0x590 [ 695.429794][T16905] ____sys_sendmsg+0x61b/0x980 [ 695.434572][T16905] ? __asan_memset+0x22/0x40 [ 695.439199][T16905] ? __sys_sendmsg_sock+0x30/0x30 [ 695.444252][T16905] ? __import_iovec+0x5f2/0x850 [ 695.449116][T16905] ? import_iovec+0x73/0xa0 [ 695.453663][T16905] ___sys_sendmsg+0x2a6/0x360 [ 695.458369][T16905] ? __sys_sendmsg+0x2b0/0x2b0 [ 695.463187][T16905] __se_sys_sendmsg+0x1d0/0x2c0 [ 695.468044][T16905] ? perf_trace_preemptirq_template+0x269/0x330 [ 695.474294][T16905] ? __x64_sys_sendmsg+0x80/0x80 [ 695.479264][T16905] ? lockdep_hardirqs_on+0x98/0x150 [ 695.484474][T16905] do_syscall_64+0x55/0xb0 [ 695.488896][T16905] ? clear_bhb_loop+0x40/0x90 [ 695.493598][T16905] ? clear_bhb_loop+0x40/0x90 [ 695.498281][T16905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.504185][T16905] RIP: 0033:0x7fefda39ce59 [ 695.508606][T16905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 695.528229][T16905] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.536651][T16905] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 695.544625][T16905] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 695.552597][T16905] RBP: 00007fefda432e6f R08: 0000000000000000 R09: 0000000000000000 [ 695.560571][T16905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 695.568551][T16905] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 695.576540][T16905] [ 695.775395][T16915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3959'. [ 695.899869][T16919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 696.184787][T16931] sit0: left promiscuous mode [ 696.323426][T16931] sit0: entered promiscuous mode [ 696.935771][T16947] netlink: 'syz.1.3970': attribute type 27 has an invalid length. [ 696.953518][T16947] netlink: 'syz.1.3970': attribute type 4 has an invalid length. [ 697.136059][T16953] sctp: [Deprecated]: syz.2.3971 (pid 16953) Use of struct sctp_assoc_value in delayed_ack socket option. [ 697.136059][T16953] Use struct sctp_sack_info instead [ 697.160580][ T5787] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 697.693719][T16958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.838132][T16966] FAULT_INJECTION: forcing a failure. [ 697.838132][T16966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 697.851734][T16966] CPU: 1 PID: 16966 Comm: syz.0.3977 Not tainted syzkaller #0 [ 697.859225][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 697.869278][T16966] Call Trace: [ 697.872554][T16966] [ 697.875574][T16966] dump_stack_lvl+0x18c/0x250 [ 697.880343][T16966] ? show_regs_print_info+0x20/0x20 [ 697.885540][T16966] ? load_image+0x420/0x420 [ 697.890063][T16966] ? __lock_acquire+0x7d80/0x7d80 [ 697.895134][T16966] ? snprintf+0xe9/0x140 [ 697.899427][T16966] should_fail_ex+0x394/0x4c0 [ 697.904116][T16966] _copy_to_user+0x2f/0xa0 [ 697.908533][T16966] simple_read_from_buffer+0xe7/0x150 [ 697.913907][T16966] proc_fail_nth_read+0x1e8/0x260 [ 697.918931][T16966] ? proc_fault_inject_write+0x360/0x360 [ 697.924567][T16966] ? fsnotify_perm+0x271/0x5e0 [ 697.929329][T16966] ? proc_fault_inject_write+0x360/0x360 [ 697.934961][T16966] vfs_read+0x298/0x990 [ 697.939216][T16966] ? kernel_read+0x1e0/0x1e0 [ 697.943820][T16966] ? __fget_files+0x28/0x460 [ 697.945680][T16968] __nla_validate_parse: 2 callbacks suppressed [ 697.945765][T16968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3976'. [ 697.948432][T16966] ? __fget_files+0x3fc/0x460 [ 697.948469][T16966] ? __fdget_pos+0x2a3/0x330 [ 697.948488][T16966] ? ksys_read+0x74/0x260 [ 697.948512][T16966] ksys_read+0x151/0x260 [ 697.948536][T16966] ? vfs_write+0x9a0/0x9a0 [ 697.948562][T16966] ? lockdep_hardirqs_on+0x98/0x150 [ 697.991015][T16966] do_syscall_64+0x55/0xb0 [ 697.995438][T16966] ? clear_bhb_loop+0x40/0x90 [ 698.000123][T16966] ? clear_bhb_loop+0x40/0x90 [ 698.004812][T16966] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.010723][T16966] RIP: 0033:0x7fef2af5d68e [ 698.015141][T16966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 698.034749][T16966] RSP: 002b:00007fef2be25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 698.043261][T16966] RAX: ffffffffffffffda RBX: 00007fef2be266c0 RCX: 00007fef2af5d68e [ 698.051277][T16966] RDX: 000000000000000f RSI: 00007fef2be260a0 RDI: 0000000000000004 [ 698.059263][T16966] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 698.067248][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.075251][T16966] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 698.083269][T16966] [ 698.242465][T16976] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3987'. [ 698.253079][T16976] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3987'. [ 698.330325][T16978] netlink: 'syz.2.3981': attribute type 27 has an invalid length. [ 698.340622][T16978] netlink: 'syz.2.3981': attribute type 4 has an invalid length. [ 698.349769][T16978] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3981'. [ 698.373689][T16979] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3987'. [ 698.383429][T16979] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3987'. [ 698.393877][T16979] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3987'. [ 699.091239][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3988'. [ 700.053338][T17025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3999'. [ 700.138413][T17028] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4000'. [ 700.355943][T17039] netlink: 'syz.3.4006': attribute type 8 has an invalid length. [ 700.380462][T17039] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 700.388659][T17039] CPU: 1 PID: 17039 Comm: syz.3.4006 Not tainted syzkaller #0 [ 700.396160][T17039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 700.406262][T17039] Call Trace: [ 700.409553][T17039] [ 700.412487][T17039] dump_stack_lvl+0x18c/0x250 [ 700.417183][T17039] ? show_regs_print_info+0x20/0x20 [ 700.422393][T17039] ? load_image+0x420/0x420 [ 700.426916][T17039] sysfs_warn_dup+0x8e/0xa0 [ 700.431427][T17039] sysfs_do_create_link_sd+0xc0/0x110 [ 700.436813][T17039] device_add_class_symlinks+0x1cf/0x240 [ 700.442469][T17039] device_add+0x4f9/0xc40 [ 700.446816][T17039] wiphy_register+0x1d99/0x2ac0 [ 700.451685][T17039] ? cfg80211_event_work+0x40/0x40 [ 700.456977][T17039] ? minstrel_ht_alloc+0x88a/0x990 [ 700.462098][T17039] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 700.468186][T17039] ieee80211_register_hw+0x2dd8/0x3b30 [ 700.473666][T17039] ? ieee80211_register_hw+0xfc1/0x3b30 [ 700.479246][T17039] ? ieee80211_tasklet_handler+0x20/0x20 [ 700.484883][T17039] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 700.490792][T17039] ? __debug_object_init+0xec/0x450 [ 700.496012][T17039] ? __asan_memset+0x22/0x40 [ 700.500614][T17039] ? __hrtimer_init+0x189/0x270 [ 700.505476][T17039] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 700.511220][T17039] ? mac80211_hwsim_free+0x220/0x220 [ 700.516512][T17039] ? rcu_is_watching+0x15/0xb0 [ 700.521373][T17039] ? kstrndup+0xbd/0x140 [ 700.525629][T17039] hwsim_new_radio_nl+0xdad/0x1a70 [ 700.530754][T17039] ? __nla_validate+0x50/0x50 [ 700.535456][T17039] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 700.541836][T17039] ? __nla_parse+0x40/0x50 [ 700.546271][T17039] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 700.552619][T17039] genl_family_rcv_msg_doit+0x21a/0x310 [ 700.558190][T17039] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 700.564107][T17039] ? bpf_lsm_capable+0x9/0x10 [ 700.568818][T17039] ? security_capable+0x89/0xb0 [ 700.573741][T17039] genl_rcv_msg+0x611/0x7a0 [ 700.578265][T17039] ? genl_bind+0x360/0x360 [ 700.582687][T17039] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 700.589029][T17039] ? ref_tracker_free+0x686/0x830 [ 700.594231][T17039] ? __kasan_kmalloc_large+0x8b/0xa0 [ 700.599618][T17039] netlink_rcv_skb+0x235/0x4c0 [ 700.604387][T17039] ? genl_bind+0x360/0x360 [ 700.608805][T17039] ? netlink_ack+0x1160/0x1160 [ 700.613582][T17039] ? __lock_acquire+0x7d80/0x7d80 [ 700.618620][T17039] ? down_read+0x1ac/0x2e0 [ 700.623045][T17039] genl_rcv+0x28/0x40 [ 700.627034][T17039] netlink_unicast+0x7b1/0x930 [ 700.631816][T17039] netlink_sendmsg+0x8d0/0xbf0 [ 700.636614][T17039] ? netlink_getsockopt+0x590/0x590 [ 700.641877][T17039] ? aa_sock_msg_perm+0x94/0x150 [ 700.646861][T17039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 700.652153][T17039] ? security_socket_sendmsg+0x80/0xa0 [ 700.657614][T17039] ? netlink_getsockopt+0x590/0x590 [ 700.662816][T17039] ____sys_sendmsg+0x61b/0x980 [ 700.667595][T17039] ? __asan_memset+0x22/0x40 [ 700.672191][T17039] ? __sys_sendmsg_sock+0x30/0x30 [ 700.677218][T17039] ? __import_iovec+0x5f2/0x850 [ 700.682078][T17039] ? import_iovec+0x73/0xa0 [ 700.686584][T17039] ___sys_sendmsg+0x2a6/0x360 [ 700.691272][T17039] ? __sys_sendmsg+0x2b0/0x2b0 [ 700.696168][T17039] __se_sys_sendmsg+0x1d0/0x2c0 [ 700.701027][T17039] ? perf_trace_preemptirq_template+0x269/0x330 [ 700.707277][T17039] ? __x64_sys_sendmsg+0x80/0x80 [ 700.712229][T17039] ? lockdep_hardirqs_on+0x98/0x150 [ 700.717438][T17039] do_syscall_64+0x55/0xb0 [ 700.721860][T17039] ? clear_bhb_loop+0x40/0x90 [ 700.726551][T17039] ? clear_bhb_loop+0x40/0x90 [ 700.731227][T17039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 700.737134][T17039] RIP: 0033:0x7fefda39ce59 [ 700.741554][T17039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.761165][T17039] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.769603][T17039] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 700.777585][T17039] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 700.785558][T17039] RBP: 00007fefda432e6f R08: 0000000000000000 R09: 0000000000000000 [ 700.793530][T17039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.801507][T17039] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 700.809503][T17039] [ 700.883354][T17041] syzkaller0: entered promiscuous mode [ 700.907336][T17041] syzkaller0: entered allmulticast mode [ 701.072616][T17051] sit0: entered promiscuous mode [ 701.090827][T17051] sit0: entered allmulticast mode [ 703.620887][T17060] netlink: 'syz.3.4012': attribute type 46 has an invalid length. [ 703.628882][T17060] __nla_validate_parse: 1 callbacks suppressed [ 703.628895][T17060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4012'. [ 703.645075][T17066] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4015'. [ 703.654852][T17074] sit0: left promiscuous mode [ 703.728704][T17075] sit0: entered promiscuous mode [ 703.833681][T17078] sit0: entered allmulticast mode [ 703.860680][T17081] netlink: 'syz.0.4021': attribute type 3 has an invalid length. [ 703.925893][T17078] sit0: entered promiscuous mode [ 705.188816][T17106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4030'. [ 705.857554][T17110] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4032'. [ 705.877567][T17111] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.4032'. [ 705.893559][T17110] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.4032'. [ 705.960629][T17113] sit0: left promiscuous mode [ 706.105603][T17118] sit0: left promiscuous mode [ 706.178478][T17113] sit0: entered promiscuous mode [ 706.249110][T17118] sit0: entered promiscuous mode [ 707.237213][T17142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4042'. [ 707.277134][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4043'. [ 709.543571][T17166] sit0: left promiscuous mode [ 709.741582][T17169] sit0: entered promiscuous mode [ 710.414552][T17171] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4051'. [ 710.521307][T17179] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4053'. [ 710.769649][T17183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4054'. [ 710.940217][T17188] netlink: 22 bytes leftover after parsing attributes in process `syz.1.4056'. [ 711.428447][T17201] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4063'. [ 714.599728][T17218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4068'. [ 714.626778][T17221] FAULT_INJECTION: forcing a failure. [ 714.626778][T17221] name failslab, interval 1, probability 0, space 0, times 0 [ 714.677494][T17221] CPU: 0 PID: 17221 Comm: syz.0.4069 Not tainted syzkaller #0 [ 714.685113][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 714.695198][T17221] Call Trace: [ 714.698493][T17221] [ 714.701441][T17221] dump_stack_lvl+0x18c/0x250 [ 714.706155][T17221] ? show_regs_print_info+0x20/0x20 [ 714.711382][T17221] ? load_image+0x420/0x420 [ 714.715901][T17221] ? __might_sleep+0xe0/0xe0 [ 714.720505][T17221] ? __lock_acquire+0x7d80/0x7d80 [ 714.725525][T17221] should_fail_ex+0x394/0x4c0 [ 714.730288][T17221] should_failslab+0x9/0x20 [ 714.734783][T17221] slab_pre_alloc_hook+0x59/0x300 [ 714.739820][T17221] ? __get_vm_area_node+0x125/0x370 [ 714.745048][T17221] __kmem_cache_alloc_node+0x53/0x250 [ 714.750450][T17221] ? __get_vm_area_node+0x125/0x370 [ 714.755674][T17221] kmalloc_node_trace+0x26/0xe0 [ 714.760557][T17221] __get_vm_area_node+0x125/0x370 [ 714.765609][T17221] __vmalloc_node_range+0x36f/0x1320 [ 714.770925][T17221] ? netlink_sendmsg+0x602/0xbf0 [ 714.775882][T17221] ? netlink_insert+0x1094/0x1390 [ 714.781043][T17221] ? netlink_insert+0x2ba/0x1390 [ 714.786010][T17221] ? free_vm_area+0x50/0x50 [ 714.790553][T17221] ? netlink_sendmsg+0x602/0xbf0 [ 714.795518][T17221] vmalloc+0x79/0x90 [ 714.799435][T17221] ? netlink_sendmsg+0x602/0xbf0 [ 714.804398][T17221] netlink_sendmsg+0x602/0xbf0 [ 714.809194][T17221] ? netlink_getsockopt+0x590/0x590 [ 714.814415][T17221] ? aa_sock_msg_perm+0x94/0x150 [ 714.819378][T17221] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 714.824685][T17221] ? security_socket_sendmsg+0x80/0xa0 [ 714.830169][T17221] ? netlink_getsockopt+0x590/0x590 [ 714.835396][T17221] ____sys_sendmsg+0x61b/0x980 [ 714.840201][T17221] ? __asan_memset+0x22/0x40 [ 714.844831][T17221] ? __sys_sendmsg_sock+0x30/0x30 [ 714.848888][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4067'. [ 714.849868][T17221] ? __import_iovec+0x5f2/0x850 [ 714.849904][T17221] ? import_iovec+0x73/0xa0 [ 714.849935][T17221] ___sys_sendmsg+0x2a6/0x360 [ 714.849965][T17221] ? __sys_sendmsg+0x2b0/0x2b0 [ 714.850009][T17221] ? trace_call_bpf+0xc3/0x6c0 [ 714.882536][T17221] __se_sys_sendmsg+0x1d0/0x2c0 [ 714.887436][T17221] ? __x64_sys_sendmsg+0x80/0x80 [ 714.892433][T17221] ? lockdep_hardirqs_on+0x98/0x150 [ 714.897684][T17221] do_syscall_64+0x55/0xb0 [ 714.902132][T17221] ? clear_bhb_loop+0x40/0x90 [ 714.906833][T17221] ? clear_bhb_loop+0x40/0x90 [ 714.911578][T17221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.917505][T17221] RIP: 0033:0x7fef2af9ce59 [ 714.921937][T17221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.941575][T17221] RSP: 002b:00007fef2be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.950021][T17221] RAX: ffffffffffffffda RBX: 00007fef2b215fa0 RCX: 00007fef2af9ce59 [ 714.958017][T17221] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 714.966013][T17221] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 714.974007][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.982002][T17221] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 714.990017][T17221] [ 715.016799][T17221] warn_alloc: 1 callbacks suppressed [ 715.016817][T17221] syz.0.4069: vmalloc error: size 65600, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 715.071298][T17221] CPU: 1 PID: 17221 Comm: syz.0.4069 Not tainted syzkaller #0 [ 715.078832][T17221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 715.088933][T17221] Call Trace: [ 715.092272][T17221] [ 715.095245][T17221] dump_stack_lvl+0x18c/0x250 [ 715.099974][T17221] ? show_regs_print_info+0x20/0x20 [ 715.105227][T17221] ? load_image+0x420/0x420 [ 715.109786][T17221] ? __rcu_read_unlock+0x7c/0xd0 [ 715.114779][T17221] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 715.121246][T17221] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 715.127799][T17221] warn_alloc+0x246/0x340 [ 715.132178][T17221] ? __get_vm_area_node+0x125/0x370 [ 715.137445][T17221] ? zone_watermark_ok_safe+0x230/0x230 [ 715.143040][T17221] ? rcu_is_watching+0x15/0xb0 [ 715.147862][T17221] ? __get_vm_area_node+0x356/0x370 [ 715.153129][T17221] __vmalloc_node_range+0x394/0x1320 [ 715.158460][T17221] ? netlink_insert+0x1094/0x1390 [ 715.163561][T17221] ? netlink_insert+0x2ba/0x1390 [ 715.168561][T17221] ? free_vm_area+0x50/0x50 [ 715.173132][T17221] ? netlink_sendmsg+0x602/0xbf0 [ 715.178118][T17221] vmalloc+0x79/0x90 [ 715.182061][T17221] ? netlink_sendmsg+0x602/0xbf0 [ 715.187048][T17221] netlink_sendmsg+0x602/0xbf0 [ 715.191890][T17221] ? netlink_getsockopt+0x590/0x590 [ 715.197150][T17221] ? aa_sock_msg_perm+0x94/0x150 [ 715.202144][T17221] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 715.207478][T17221] ? security_socket_sendmsg+0x80/0xa0 [ 715.212975][T17221] ? netlink_getsockopt+0x590/0x590 [ 715.218222][T17221] ____sys_sendmsg+0x61b/0x980 [ 715.223042][T17221] ? __asan_memset+0x22/0x40 [ 715.227677][T17221] ? __sys_sendmsg_sock+0x30/0x30 [ 715.232750][T17221] ? __import_iovec+0x5f2/0x850 [ 715.237663][T17221] ? import_iovec+0x73/0xa0 [ 715.242241][T17221] ___sys_sendmsg+0x2a6/0x360 [ 715.246985][T17221] ? __sys_sendmsg+0x2b0/0x2b0 [ 715.251837][T17221] ? trace_call_bpf+0xc3/0x6c0 [ 715.256705][T17221] __se_sys_sendmsg+0x1d0/0x2c0 [ 715.261601][T17221] ? __x64_sys_sendmsg+0x80/0x80 [ 715.266609][T17221] ? lockdep_hardirqs_on+0x98/0x150 [ 715.271856][T17221] do_syscall_64+0x55/0xb0 [ 715.276308][T17221] ? clear_bhb_loop+0x40/0x90 [ 715.281189][T17221] ? clear_bhb_loop+0x40/0x90 [ 715.285908][T17221] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 715.291848][T17221] RIP: 0033:0x7fef2af9ce59 [ 715.296318][T17221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.315970][T17221] RSP: 002b:00007fef2be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 715.324442][T17221] RAX: ffffffffffffffda RBX: 00007fef2b215fa0 RCX: 00007fef2af9ce59 [ 715.332466][T17221] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 715.336667][T17229] netlink: 'syz.2.4073': attribute type 10 has an invalid length. [ 715.340455][T17221] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 715.340477][T17221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 715.340489][T17221] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 715.340534][T17221] [ 715.349816][T17229] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4073'. [ 715.406531][T17221] Mem-Info: [ 715.408631][T17230] netlink: 'syz.1.4070': attribute type 5 has an invalid length. [ 715.409689][T17221] active_anon:6927 inactive_anon:0 isolated_anon:0 [ 715.409689][T17221] active_file:19258 inactive_file:40201 isolated_file:0 [ 715.409689][T17221] unevictable:768 dirty:128 writeback:0 [ 715.409689][T17221] slab_reclaimable:10813 slab_unreclaimable:94826 [ 715.409689][T17221] mapped:24878 shmem:2894 pagetables:516 [ 715.409689][T17221] sec_pagetables:0 bounce:0 [ 715.409689][T17221] kernel_misc_reclaimable:0 [ 715.409689][T17221] free:1346448 free_pcp:5732 free_cma:0 [ 715.418740][T17230] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4070'. [ 715.496369][T17221] Node 0 active_anon:23908kB inactive_anon:0kB active_file:77032kB inactive_file:160604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99412kB dirty:512kB writeback:0kB shmem:6240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10640kB pagetables:2064kB sec_pagetables:0kB all_unreclaimable? no [ 715.586613][T17221] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 715.628360][T17235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.649850][T17221] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 715.691386][T17221] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 715.697845][T17221] Node 0 DMA32 free:1465316kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21472kB inactive_anon:0kB active_file:77032kB inactive_file:159776kB unevictable:1536kB writepending:512kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:16860kB local_pcp:7472kB free_cma:0kB [ 715.711422][T17235] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4075'. [ 715.735096][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 715.756234][T17235] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 715.763119][T17221] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 715.820724][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 715.826153][T17221] Node 1 Normal free:3905116kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:13472kB local_pcp:2624kB free_cma:0kB [ 715.858274][T17221] lowmem_reserve[]: 0 0 0 0 0 [ 715.876473][T17221] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 715.915571][T17221] Node 0 DMA32: 2198*4kB (UME) 1820*8kB (UME) 1128*16kB (UME) 1116*32kB (UME) 355*64kB (UME) 174*128kB (UME) 176*256kB (UME) 129*512kB (UM) 64*1024kB (UME) 9*2048kB (UME) 280*4096kB (M) = 1464056kB [ 715.946413][T17221] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 715.984951][T17221] Node 1 Normal: 215*4kB (UE) 52*8kB (UE) 36*16kB (UE) 189*32kB (UE) 42*64kB (UME) 12*128kB (UME) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905116kB [ 716.034075][T17221] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.065786][T17221] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 716.090745][T17221] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.116485][T17221] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 716.156271][T17221] 60820 total pagecache pages [ 716.161730][T17221] 0 pages in swap cache [ 716.165918][T17221] Free swap = 124996kB [ 716.176749][T17221] Total swap = 124996kB [ 716.196793][T17221] 2097051 pages RAM [ 716.200914][T17221] 0 pages HighMem/MovableOnly [ 716.205846][T17221] 416931 pages reserved [ 716.217491][T17221] 0 pages cma reserved [ 716.547657][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4080'. [ 717.118127][T17266] netlink: 'syz.3.4084': attribute type 21 has an invalid length. [ 718.951729][T17272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 719.035522][T17272] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4088'. [ 719.062653][T17272] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 719.435882][T17291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'. [ 720.668345][T17319] netlink: 'syz.3.4106': attribute type 10 has an invalid length. [ 720.717064][T17319] geneve1: entered promiscuous mode [ 720.723037][T17319] geneve1: entered allmulticast mode [ 720.731932][T17319] team0: Port device geneve1 added [ 721.039252][T17331] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.4109'. [ 721.377745][T17336] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4111'. [ 721.404006][T17336] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4111'. [ 721.477100][T17342] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4113'. [ 724.912061][T17369] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.4124'. [ 725.878356][T17389] sit0: left promiscuous mode [ 725.992428][T17390] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4130'. [ 726.055520][T17393] sit0: entered promiscuous mode [ 726.435649][T17398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.544498][T17398] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4133'. [ 726.566512][T17398] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 726.656093][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4135'. [ 728.873075][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4149'. [ 728.962900][T17424] sit0: left promiscuous mode [ 729.093684][T17429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4145'. [ 729.135320][T17424] sit0: entered promiscuous mode [ 729.313056][T17431] sit0: left promiscuous mode [ 729.454245][T17437] FAULT_INJECTION: forcing a failure. [ 729.454245][T17437] name failslab, interval 1, probability 0, space 0, times 0 [ 729.483806][T17437] CPU: 0 PID: 17437 Comm: syz.2.4150 Not tainted syzkaller #0 [ 729.491336][T17437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 729.501421][T17437] Call Trace: [ 729.504736][T17437] [ 729.507699][T17437] dump_stack_lvl+0x18c/0x250 [ 729.512423][T17437] ? show_regs_print_info+0x20/0x20 [ 729.517660][T17437] ? load_image+0x420/0x420 [ 729.522201][T17437] ? __might_sleep+0xe0/0xe0 [ 729.526831][T17437] ? __lock_acquire+0x7d80/0x7d80 [ 729.531904][T17437] should_fail_ex+0x394/0x4c0 [ 729.536619][T17437] should_failslab+0x9/0x20 [ 729.541155][T17437] slab_pre_alloc_hook+0x59/0x300 [ 729.546220][T17437] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 729.551964][T17437] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 729.556387][T17433] sit0: entered promiscuous mode [ 729.557777][T17437] __kmem_cache_alloc_node+0x53/0x250 [ 729.557833][T17437] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 729.557854][T17437] __kmalloc+0xa7/0x240 [ 729.557881][T17437] tomoyo_realpath_from_path+0xe6/0x5c0 [ 729.557904][T17437] ? tomoyo_domain+0xd6/0x120 [ 729.557930][T17437] tomoyo_path_number_perm+0x248/0x5e0 [ 729.557950][T17437] ? tomoyo_path_number_perm+0x217/0x5e0 [ 729.557969][T17437] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 729.557988][T17437] ? lock_acquire+0xb7/0x420 [ 729.558010][T17437] ? kasan_check_range+0x89/0x290 [ 729.558062][T17437] ? __fget_files+0x28/0x460 [ 729.558097][T17437] security_file_ioctl+0x70/0xa0 [ 729.558120][T17437] __se_sys_ioctl+0x48/0x170 [ 729.558145][T17437] do_syscall_64+0x55/0xb0 [ 729.558166][T17437] ? clear_bhb_loop+0x40/0x90 [ 729.558184][T17437] ? clear_bhb_loop+0x40/0x90 [ 729.558204][T17437] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 729.558245][T17437] RIP: 0033:0x7f14fbd9ce59 [ 729.558265][T17437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.558281][T17437] RSP: 002b:00007f14fccf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 729.681217][T17437] RAX: ffffffffffffffda RBX: 00007f14fc015fa0 RCX: 00007f14fbd9ce59 [ 729.689300][T17437] RDX: 0000200000000200 RSI: 00000000000089e1 RDI: 0000000000000003 [ 729.697300][T17437] RBP: 00007f14fccf5090 R08: 0000000000000000 R09: 0000000000000000 [ 729.705304][T17437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.713392][T17437] R13: 00007f14fc016038 R14: 00007f14fc015fa0 R15: 00007ffeb344d4e8 [ 729.721412][T17437] [ 729.893550][T17437] ERROR: Out of memory at tomoyo_realpath_from_path. [ 730.265631][T17439] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4148'. [ 730.660126][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4155'. [ 730.997540][T17461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.007675][T17462] sit0: left promiscuous mode [ 731.050099][T17461] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4164'. [ 731.060228][T17461] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 731.152472][T17464] sit0: entered promiscuous mode [ 731.721179][T17472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4158'. [ 731.732078][T17475] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.839370][T17478] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4161'. [ 731.882337][T17478] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4161'. [ 731.939665][T17483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 731.997388][T17486] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4163'. [ 732.010041][T17486] bridge_slave_1: entered promiscuous mode [ 732.021879][T17483] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4166'. [ 732.046865][T17483] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 732.486935][T17485] sit0: left promiscuous mode [ 732.927438][T17495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.962111][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.009861][T17495] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4169'. [ 733.029718][T17497] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4170'. [ 733.039659][T17495] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 733.049239][T17497] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 733.324290][T17507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4176'. [ 733.577353][T17517] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4179'. [ 734.093327][T17527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.144402][T17528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.175448][T17527] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4184'. [ 734.205527][T17527] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 734.330833][T17528] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 734.594618][T17537] netlink: 'syz.1.4188': attribute type 11 has an invalid length. [ 735.057783][T17535] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 736.161121][T17565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.196140][T17564] sit0: entered promiscuous mode [ 736.227826][T17565] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 736.417512][T17567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.569458][T17567] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 737.961045][T17573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 738.059843][T17573] __nla_validate_parse: 7 callbacks suppressed [ 738.059881][T17573] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4210'. [ 738.076879][T17573] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 738.860810][T17578] sit0: left promiscuous mode [ 738.879116][T17580] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4203'. [ 739.031864][T17583] sit0: entered promiscuous mode [ 739.710944][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4208'. [ 739.799193][T17599] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4213'. [ 739.810564][T17599] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 739.918242][T17598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.979232][T17607] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4224'. [ 740.053437][T17610] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4217'. [ 741.413708][T17634] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4226'. [ 741.423614][T17634] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 741.463564][T17638] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4228'. [ 741.489081][T17633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 741.513587][T17636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4227'. [ 741.931501][T17656] sit0: left promiscuous mode [ 742.083386][T17656] sit0: entered promiscuous mode [ 745.210387][T17675] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4239'. [ 745.227076][T17675] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 745.265664][T17681] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.4242'. [ 745.301508][T17680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4241'. [ 745.312172][T17674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.419876][T17685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 745.505160][T17685] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4253'. [ 745.524235][T17685] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 745.580901][T17693] sit0: left promiscuous mode [ 745.707361][T17693] sit0: entered promiscuous mode [ 745.990150][T17703] FAULT_INJECTION: forcing a failure. [ 745.990150][T17703] name failslab, interval 1, probability 0, space 0, times 0 [ 746.003478][T17703] CPU: 1 PID: 17703 Comm: syz.3.4252 Not tainted syzkaller #0 [ 746.010996][T17703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.021097][T17703] Call Trace: [ 746.024403][T17703] [ 746.027365][T17703] dump_stack_lvl+0x18c/0x250 [ 746.032101][T17703] ? show_regs_print_info+0x20/0x20 [ 746.037346][T17703] ? load_image+0x420/0x420 [ 746.041901][T17703] ? __might_sleep+0xe0/0xe0 [ 746.046546][T17703] ? __lock_acquire+0x7d80/0x7d80 [ 746.051626][T17703] should_fail_ex+0x394/0x4c0 [ 746.056366][T17703] should_failslab+0x9/0x20 [ 746.060917][T17703] slab_pre_alloc_hook+0x59/0x300 [ 746.066008][T17703] ? kernfs_fop_write_iter+0x158/0x520 [ 746.071531][T17703] ? kernfs_fop_write_iter+0x158/0x520 [ 746.077048][T17703] __kmem_cache_alloc_node+0x53/0x250 [ 746.082484][T17703] ? kernfs_fop_write_iter+0x158/0x520 [ 746.087997][T17703] __kmalloc+0xa7/0x240 [ 746.092210][T17703] kernfs_fop_write_iter+0x158/0x520 [ 746.097557][T17703] vfs_write+0x474/0x9a0 [ 746.101846][T17703] ? file_end_write+0x250/0x250 [ 746.106742][T17703] ? __fget_files+0x3fc/0x460 [ 746.111496][T17703] ? __fdget_pos+0x2a3/0x330 [ 746.116137][T17703] ? ksys_write+0x74/0x260 [ 746.120623][T17703] ksys_write+0x151/0x260 [ 746.125013][T17703] ? __ia32_sys_read+0x90/0x90 [ 746.129840][T17703] ? lockdep_hardirqs_on+0x98/0x150 [ 746.135108][T17703] do_syscall_64+0x55/0xb0 [ 746.139576][T17703] ? clear_bhb_loop+0x40/0x90 [ 746.144309][T17703] ? clear_bhb_loop+0x40/0x90 [ 746.149032][T17703] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 746.154998][T17703] RIP: 0033:0x7fefda39ce59 [ 746.159455][T17703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.179124][T17703] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 746.187585][T17703] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 746.195596][T17703] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000008 [ 746.203601][T17703] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 746.211614][T17703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.219624][T17703] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 746.227660][T17703] [ 746.245172][T17708] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4254'. [ 746.466976][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4256'. [ 746.619264][T17717] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.705913][T17718] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4259'. [ 746.716264][T17718] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 747.298018][T17727] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4263'. [ 747.344039][T17729] sit0: left promiscuous mode [ 747.380394][T17731] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4265'. [ 747.461359][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.468959][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.572780][T17733] sit0: entered promiscuous mode [ 747.996188][T17749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4270'. [ 748.190322][T17759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.260235][T17759] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 748.579832][T17770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 748.664430][T17770] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 749.367407][T17775] sit0: left promiscuous mode [ 749.446984][T17776] sit0: entered promiscuous mode [ 749.793096][T17787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 749.902973][T17787] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 750.000448][T17789] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 750.198484][T17795] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 750.309083][T17794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.396522][T17806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.481756][T17810] __nla_validate_parse: 9 callbacks suppressed [ 750.481796][T17810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4295'. [ 750.529967][T17806] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4294'. [ 750.555169][T17806] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 750.582072][T17812] sit0: left promiscuous mode [ 750.728306][T17812] sit0: entered promiscuous mode [ 750.767015][T17818] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4298'. [ 751.053266][T17823] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4299'. [ 751.076570][T17823] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 752.121219][T17832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.217704][T17833] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4304'. [ 752.228546][T17833] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 752.352356][T17841] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4308'. [ 752.475579][T17839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4307'. [ 752.696108][T17853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 752.744507][T17853] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4313'. [ 752.758930][T17853] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 752.795108][T17852] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4312'. [ 752.822872][T17852] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 753.147551][T17867] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4318'. [ 753.973893][T17888] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 754.715525][T17916] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 755.848219][T17936] __nla_validate_parse: 9 callbacks suppressed [ 755.848259][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4349'. [ 756.620943][T17953] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.4355'. [ 756.673369][T17952] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4354'. [ 756.683987][T17952] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 756.780985][T17959] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4357'. [ 757.328092][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 759.915777][T17972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4362'. [ 760.269547][T17986] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4367'. [ 760.286662][T17986] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 760.736884][T17996] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4370'. [ 763.757533][T17999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4371'. [ 763.901714][T18007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4375'. [ 764.049660][T18014] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4378'. [ 764.076582][T18014] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 764.199701][T18018] sit0: left promiscuous mode [ 764.359625][T18020] sit0: entered promiscuous mode [ 764.687562][T18028] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4381'. [ 766.105719][T18041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4387'. [ 766.172326][T18047] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4390'. [ 766.172749][T18043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4388'. [ 766.182418][T18047] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 767.142730][T18066] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.4396'. [ 767.317264][T18070] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4397'. [ 767.877461][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4399'. [ 770.066090][T18085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4400'. [ 770.088077][T18088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4401'. [ 770.154426][T18090] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4402'. [ 770.166657][T18090] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 770.427714][T18101] sit0: left promiscuous mode [ 770.532203][T18104] sit0: left promiscuous mode [ 770.653819][T18108] sit0: entered promiscuous mode [ 771.434066][T18101] sit0: entered promiscuous mode [ 771.640930][T18120] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4410'. [ 771.653882][T18120] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 771.676961][T18121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4411'. [ 771.721834][T18122] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4409'. [ 771.854448][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4412'. [ 774.680887][T18130] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4414'. [ 774.690667][T18130] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 774.875382][T18139] sit0: left promiscuous mode [ 775.165426][T18139] sit0: entered promiscuous mode [ 775.807389][T18148] sit0: left promiscuous mode [ 775.901168][T18152] sit0: entered promiscuous mode [ 776.226391][T18161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4423'. [ 776.845609][T18170] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4426'. [ 776.875948][T18170] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 778.262263][T18171] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4425'. [ 778.531969][T18178] sit0: left promiscuous mode [ 778.654962][T18179] sit0: entered promiscuous mode [ 779.408521][T18182] sit0: left promiscuous mode [ 779.494559][T18184] sit0: entered promiscuous mode [ 779.602487][T18186] sit0: left promiscuous mode [ 779.712330][T18187] sit0: entered promiscuous mode [ 779.990636][T18189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4433'. [ 780.119462][T18204] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4437'. [ 780.276870][T18208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 781.784199][T18215] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4448'. [ 781.791396][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4440'. [ 781.805286][T18215] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 782.149466][T18224] sit0: left promiscuous mode [ 782.260476][T18227] sit0: entered promiscuous mode [ 783.895417][T18239] sit0: left promiscuous mode [ 784.116665][T18239] sit0: entered promiscuous mode [ 784.754512][T18250] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4452'. [ 784.790296][T18250] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 784.839146][T18248] sit0: left promiscuous mode [ 785.100766][T18258] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4454'. [ 785.221282][T18260] sit0: entered promiscuous mode [ 786.146592][T18262] sit0: left promiscuous mode [ 786.211561][T18265] sit0: entered promiscuous mode [ 786.481804][T18274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4460'. [ 786.726667][T18278] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4462'. [ 786.766606][T18278] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 787.224899][T18290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4466'. [ 787.246927][T18290] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 788.526930][T18293] sit0: left promiscuous mode [ 788.590004][T18294] sit0: entered promiscuous mode [ 788.991462][T18299] sit0: left promiscuous mode [ 789.248331][T18299] sit0: entered promiscuous mode [ 791.504779][T18322] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4475'. [ 791.515785][T18322] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 792.034291][T18332] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4482'. [ 792.044334][T18332] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 792.213329][T18340] sit0: left promiscuous mode [ 792.385643][T18340] sit0: entered promiscuous mode [ 792.748637][T18355] netlink: 'syz.2.4491': attribute type 11 has an invalid length. [ 792.803192][T18358] FAULT_INJECTION: forcing a failure. [ 792.803192][T18358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.845723][T18358] CPU: 1 PID: 18358 Comm: syz.0.4492 Not tainted syzkaller #0 [ 792.853251][T18358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 792.863344][T18358] Call Trace: [ 792.866649][T18358] [ 792.869596][T18358] dump_stack_lvl+0x18c/0x250 [ 792.874303][T18358] ? show_regs_print_info+0x20/0x20 [ 792.879521][T18358] ? load_image+0x420/0x420 [ 792.884057][T18358] ? __lock_acquire+0x7d80/0x7d80 [ 792.889203][T18358] should_fail_ex+0x394/0x4c0 [ 792.893921][T18358] _copy_from_user+0x2f/0xe0 [ 792.898542][T18358] bpf_prog_test_run_skb+0x267/0x18f0 [ 792.903976][T18358] ? __fget_files+0x28/0x460 [ 792.908602][T18358] ? __fget_files+0x3fc/0x460 [ 792.913336][T18358] ? cpu_online+0x60/0x60 [ 792.917714][T18358] bpf_prog_test_run+0x31f/0x390 [ 792.922694][T18358] __sys_bpf+0x49d/0x890 [ 792.926974][T18358] ? bpf_link_show_fdinfo+0x390/0x390 [ 792.932403][T18358] ? lock_chain_count+0x20/0x20 [ 792.937310][T18358] __x64_sys_bpf+0x7c/0x90 [ 792.941765][T18358] do_syscall_64+0x55/0xb0 [ 792.946213][T18358] ? clear_bhb_loop+0x40/0x90 [ 792.950916][T18358] ? clear_bhb_loop+0x40/0x90 [ 792.955626][T18358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 792.961549][T18358] RIP: 0033:0x7fef2af9ce59 [ 792.965987][T18358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.985880][T18358] RSP: 002b:00007fef2be05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 792.994316][T18358] RAX: ffffffffffffffda RBX: 00007fef2b216090 RCX: 00007fef2af9ce59 [ 793.002313][T18358] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 793.010304][T18358] RBP: 00007fef2be05090 R08: 0000000000000000 R09: 0000000000000000 [ 793.018298][T18358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 793.026299][T18358] R13: 00007fef2b216128 R14: 00007fef2b216090 R15: 00007ffea4ee7ff8 [ 793.034316][T18358] [ 793.440604][T18372] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4496'. [ 796.471402][T18387] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4501'. [ 796.489052][T18388] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4499'. [ 796.506485][T18388] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 797.659617][T18401] sit0: left promiscuous mode [ 797.768846][T18406] sit0: entered promiscuous mode [ 798.042562][T18405] sit0: left promiscuous mode [ 798.180270][T18411] FAULT_INJECTION: forcing a failure. [ 798.180270][T18411] name failslab, interval 1, probability 0, space 0, times 0 [ 798.215230][T18408] sit0: entered promiscuous mode [ 798.266506][T18411] CPU: 1 PID: 18411 Comm: syz.3.4510 Not tainted syzkaller #0 [ 798.274037][T18411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 798.284103][T18411] Call Trace: [ 798.287393][T18411] [ 798.290324][T18411] dump_stack_lvl+0x18c/0x250 [ 798.295018][T18411] ? show_regs_print_info+0x20/0x20 [ 798.300220][T18411] ? load_image+0x420/0x420 [ 798.304726][T18411] ? __might_sleep+0xe0/0xe0 [ 798.309316][T18411] ? __lock_acquire+0x7d80/0x7d80 [ 798.314346][T18411] should_fail_ex+0x394/0x4c0 [ 798.319035][T18411] should_failslab+0x9/0x20 [ 798.323542][T18411] slab_pre_alloc_hook+0x59/0x300 [ 798.328572][T18411] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 798.333858][T18411] __kmem_cache_alloc_node+0x53/0x250 [ 798.339233][T18411] ? __asan_memset+0x22/0x40 [ 798.343826][T18411] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 798.349138][T18411] kmalloc_trace+0x2a/0xe0 [ 798.353559][T18411] __xdp_reg_mem_model+0x1e3/0x5a0 [ 798.358693][T18411] ? kvmalloc_node+0x70/0x180 [ 798.363399][T18411] ? kvmalloc_node+0x70/0x180 [ 798.368097][T18411] ? xdp_reg_mem_model+0x40/0x40 [ 798.373158][T18411] xdp_reg_mem_model+0x22/0x40 [ 798.377923][T18411] bpf_test_run_xdp_live+0x262/0x1b30 [ 798.383306][T18411] ? 0xffffffffa0004740 [ 798.387458][T18411] ? 0xffffffffa0004740 [ 798.391609][T18411] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 798.397506][T18411] ? xdp_convert_md_to_buff+0x330/0x330 [ 798.403164][T18411] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 798.409407][T18411] ? _copy_from_user+0xa5/0xe0 [ 798.414174][T18411] ? bpf_test_init+0x119/0x140 [ 798.418945][T18411] ? xdp_convert_md_to_buff+0x5b/0x330 [ 798.424415][T18411] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 798.429794][T18411] ? __lock_acquire+0x7d80/0x7d80 [ 798.434827][T18411] ? dev_put+0x80/0x80 [ 798.438904][T18411] ? dev_put+0x80/0x80 [ 798.443003][T18411] bpf_prog_test_run+0x31f/0x390 [ 798.447952][T18411] __sys_bpf+0x49d/0x890 [ 798.452217][T18411] ? bpf_link_show_fdinfo+0x390/0x390 [ 798.457596][T18411] ? lock_chain_count+0x20/0x20 [ 798.462485][T18411] __x64_sys_bpf+0x7c/0x90 [ 798.466901][T18411] do_syscall_64+0x55/0xb0 [ 798.471316][T18411] ? clear_bhb_loop+0x40/0x90 [ 798.476016][T18411] ? clear_bhb_loop+0x40/0x90 [ 798.480696][T18411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 798.486594][T18411] RIP: 0033:0x7fefda39ce59 [ 798.491016][T18411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.510636][T18411] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 798.519058][T18411] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 798.527032][T18411] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 798.535008][T18411] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.542982][T18411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.550953][T18411] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 798.558939][T18411] [ 798.918028][T18424] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4511'. [ 799.427483][T18434] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4515'. [ 802.510023][ T5787] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 802.627078][T18446] sit0: left promiscuous mode [ 802.750522][T18450] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4529'. [ 802.802462][T18449] sit0: entered promiscuous mode [ 802.818316][T18454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4522'. [ 803.494165][T18454] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4522'. [ 803.503485][T18454] FAULT_INJECTION: forcing a failure. [ 803.503485][T18454] name failslab, interval 1, probability 0, space 0, times 0 [ 803.517199][T18454] CPU: 1 PID: 18454 Comm: syz.3.4522 Not tainted syzkaller #0 [ 803.524707][T18454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 803.534797][T18454] Call Trace: [ 803.538108][T18454] [ 803.541066][T18454] dump_stack_lvl+0x18c/0x250 [ 803.545780][T18454] ? show_regs_print_info+0x20/0x20 [ 803.551008][T18454] ? load_image+0x420/0x420 [ 803.555555][T18454] should_fail_ex+0x394/0x4c0 [ 803.560267][T18454] should_failslab+0x9/0x20 [ 803.564812][T18454] slab_pre_alloc_hook+0x59/0x300 [ 803.569873][T18454] kmem_cache_alloc+0x5a/0x2c0 [ 803.574668][T18454] ? skb_clone+0x1eb/0x370 [ 803.579111][T18454] skb_clone+0x1eb/0x370 [ 803.583370][T18454] __netlink_deliver_tap+0x411/0x7f0 [ 803.588727][T18454] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.593924][T18454] netlink_deliver_tap+0x19c/0x1b0 [ 803.599165][T18454] netlink_dump+0x95b/0xec0 [ 803.603761][T18454] ? netlink_lookup+0x200/0x200 [ 803.608642][T18454] ? netlink_lookup+0x30/0x200 [ 803.613408][T18454] ? netlink_lookup+0x30/0x200 [ 803.618181][T18454] __netlink_dump_start+0x57c/0x7a0 [ 803.623476][T18454] rtnetlink_rcv_msg+0xe19/0xf90 [ 803.628449][T18454] ? rtnetlink_rcv_msg+0x220/0xf90 [ 803.633561][T18454] ? rtnl_getlink+0xd20/0xd20 [ 803.638245][T18454] ? rtnetlink_bind+0x80/0x80 [ 803.642970][T18454] ? rtnl_getlink+0xd20/0xd20 [ 803.647650][T18454] ? ref_tracker_free+0x686/0x830 [ 803.652685][T18454] netlink_rcv_skb+0x235/0x4c0 [ 803.657460][T18454] ? rtnetlink_bind+0x80/0x80 [ 803.662142][T18454] ? netlink_ack+0x1160/0x1160 [ 803.666926][T18454] ? __lock_acquire+0x7d80/0x7d80 [ 803.671960][T18454] ? netlink_deliver_tap+0x2e/0x1b0 [ 803.677167][T18454] netlink_unicast+0x7b1/0x930 [ 803.681943][T18454] netlink_sendmsg+0x8d0/0xbf0 [ 803.686712][T18454] ? netlink_getsockopt+0x590/0x590 [ 803.691911][T18454] ? aa_sock_msg_perm+0x94/0x150 [ 803.696853][T18454] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 803.702162][T18454] ? security_socket_sendmsg+0x80/0xa0 [ 803.707653][T18454] ? netlink_getsockopt+0x590/0x590 [ 803.712864][T18454] ____sys_sendmsg+0x61b/0x980 [ 803.717641][T18454] ? __asan_memset+0x22/0x40 [ 803.722234][T18454] ? __sys_sendmsg_sock+0x30/0x30 [ 803.727257][T18454] ? __import_iovec+0x5f2/0x850 [ 803.732113][T18454] ? import_iovec+0x73/0xa0 [ 803.736617][T18454] ___sys_sendmsg+0x2a6/0x360 [ 803.741301][T18454] ? __sys_sendmsg+0x2b0/0x2b0 [ 803.746083][T18454] ? trace_call_bpf+0xc3/0x6c0 [ 803.750871][T18454] __se_sys_sendmsg+0x1d0/0x2c0 [ 803.755723][T18454] ? perf_trace_preemptirq_template+0x269/0x330 [ 803.761978][T18454] ? __x64_sys_sendmsg+0x80/0x80 [ 803.766933][T18454] ? lockdep_hardirqs_on+0x98/0x150 [ 803.772149][T18454] do_syscall_64+0x55/0xb0 [ 803.776568][T18454] ? clear_bhb_loop+0x40/0x90 [ 803.781278][T18454] ? clear_bhb_loop+0x40/0x90 [ 803.785960][T18454] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.791857][T18454] RIP: 0033:0x7fefda39ce59 [ 803.796276][T18454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.815899][T18454] RSP: 002b:00007fefdb26e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 803.824331][T18454] RAX: ffffffffffffffda RBX: 00007fefda616090 RCX: 00007fefda39ce59 [ 803.832307][T18454] RDX: 0000000020000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 803.840312][T18454] RBP: 00007fefdb26e090 R08: 0000000000000000 R09: 0000000000000000 [ 803.848282][T18454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.856252][T18454] R13: 00007fefda616128 R14: 00007fefda616090 R15: 00007ffcf47130e8 [ 803.864236][T18454] [ 806.287846][T18477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4532'. [ 806.907193][T18485] sit0: left promiscuous mode [ 807.139982][T18485] sit0: entered promiscuous mode [ 807.293708][T18491] syzkaller0: entered promiscuous mode [ 807.318336][T18491] syzkaller0: entered allmulticast mode [ 807.437385][T18506] netlink: set zone limit has 8 unknown bytes [ 808.076636][T18518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4545'. [ 808.917392][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.923785][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.331359][T18514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4544'. [ 812.346513][T18518] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4545'. [ 812.540817][ T5787] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 812.661330][T18537] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4554'. [ 812.681739][T18537] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 812.764209][T18543] sit0: left promiscuous mode [ 812.982633][T18543] sit0: entered promiscuous mode [ 813.693193][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4557'. [ 816.741901][T18574] sit0: left promiscuous mode [ 816.817624][T18573] sit0: entered promiscuous mode [ 817.153565][T18583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4567'. [ 817.185715][T18583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4567'. [ 817.210009][T18582] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4567'. [ 819.433870][T18590] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4570'. [ 819.458319][T18590] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 819.458692][T18594] FAULT_INJECTION: forcing a failure. [ 819.458692][T18594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.458730][T18594] CPU: 0 PID: 18594 Comm: syz.1.4572 Not tainted syzkaller #0 [ 819.458753][T18594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 819.458769][T18594] Call Trace: [ 819.458781][T18594] [ 819.458795][T18594] dump_stack_lvl+0x18c/0x250 [ 819.458840][T18594] ? show_regs_print_info+0x20/0x20 [ 819.458872][T18594] ? load_image+0x420/0x420 [ 819.458911][T18594] ? __lock_acquire+0x7d80/0x7d80 [ 819.458945][T18594] ? snprintf+0xe9/0x140 [ 819.458983][T18594] should_fail_ex+0x394/0x4c0 [ 819.459034][T18594] _copy_to_user+0x2f/0xa0 [ 819.459070][T18594] simple_read_from_buffer+0xe7/0x150 [ 819.459118][T18594] proc_fail_nth_read+0x1e8/0x260 [ 819.459159][T18594] ? proc_fault_inject_write+0x360/0x360 [ 819.459203][T18594] ? fsnotify_perm+0x271/0x5e0 [ 819.459229][T18594] ? proc_fault_inject_write+0x360/0x360 [ 819.459264][T18594] vfs_read+0x298/0x990 [ 819.459314][T18594] ? kernel_read+0x1e0/0x1e0 [ 819.459351][T18594] ? __fget_files+0x28/0x460 [ 819.576789][T18594] ? __fget_files+0x3fc/0x460 [ 819.581525][T18594] ? __fdget_pos+0x2a3/0x330 [ 819.586138][T18594] ? ksys_read+0x74/0x260 [ 819.590498][T18594] ksys_read+0x151/0x260 [ 819.594772][T18594] ? vfs_write+0x9a0/0x9a0 [ 819.599220][T18594] ? lockdep_hardirqs_on+0x98/0x150 [ 819.604723][T18594] do_syscall_64+0x55/0xb0 [ 819.609160][T18594] ? clear_bhb_loop+0x40/0x90 [ 819.613868][T18594] ? clear_bhb_loop+0x40/0x90 [ 819.618569][T18594] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 819.624486][T18594] RIP: 0033:0x7f6b0f75d68e [ 819.628925][T18594] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.648753][T18594] RSP: 002b:00007f6b1066afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 819.657196][T18594] RAX: ffffffffffffffda RBX: 00007f6b1066b6c0 RCX: 00007f6b0f75d68e [ 819.665217][T18594] RDX: 000000000000000f RSI: 00007f6b1066b0a0 RDI: 0000000000000005 [ 819.673220][T18594] RBP: 00007f6b1066b090 R08: 0000000000000000 R09: 0000000000000000 [ 819.681211][T18594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 819.689209][T18594] R13: 00007f6b0fa16038 R14: 00007f6b0fa15fa0 R15: 00007fffdb5e4298 [ 819.697244][T18594] [ 819.733196][T18592] netlink: 'syz.0.4571': attribute type 9 has an invalid length. [ 819.747715][T18592] netlink: 399 bytes leftover after parsing attributes in process `syz.0.4571'. [ 820.781822][T18630] FAULT_INJECTION: forcing a failure. [ 820.781822][T18630] name failslab, interval 1, probability 0, space 0, times 0 [ 820.795986][T18630] CPU: 1 PID: 18630 Comm: syz.3.4584 Not tainted syzkaller #0 [ 820.803489][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 820.813578][T18630] Call Trace: [ 820.816989][T18630] [ 820.819938][T18630] dump_stack_lvl+0x18c/0x250 [ 820.824653][T18630] ? show_regs_print_info+0x20/0x20 [ 820.829895][T18630] ? load_image+0x420/0x420 [ 820.834437][T18630] ? verify_lock_unused+0x140/0x140 [ 820.839697][T18630] should_fail_ex+0x394/0x4c0 [ 820.844380][T18630] should_failslab+0x9/0x20 [ 820.848902][T18630] slab_pre_alloc_hook+0x59/0x300 [ 820.853996][T18630] kmem_cache_alloc+0x5a/0x2c0 [ 820.858797][T18630] ? skb_clone+0x1eb/0x370 [ 820.863259][T18630] skb_clone+0x1eb/0x370 [ 820.867623][T18630] __netlink_deliver_tap+0x411/0x7f0 [ 820.872948][T18630] ? netlink_deliver_tap+0x2e/0x1b0 [ 820.878173][T18630] netlink_deliver_tap+0x19c/0x1b0 [ 820.883308][T18630] netlink_unicast+0x77b/0x930 [ 820.888086][T18630] netlink_sendmsg+0x8d0/0xbf0 [ 820.892857][T18630] ? netlink_getsockopt+0x590/0x590 [ 820.898058][T18630] ? aa_sock_msg_perm+0x94/0x150 [ 820.903003][T18630] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 820.908289][T18630] ? security_socket_sendmsg+0x80/0xa0 [ 820.913748][T18630] ? netlink_getsockopt+0x590/0x590 [ 820.918954][T18630] ____sys_sendmsg+0x61b/0x980 [ 820.923725][T18630] ? __asan_memset+0x22/0x40 [ 820.928325][T18630] ? __sys_sendmsg_sock+0x30/0x30 [ 820.933346][T18630] ? __import_iovec+0x5f2/0x850 [ 820.938200][T18630] ? import_iovec+0x73/0xa0 [ 820.942724][T18630] ___sys_sendmsg+0x2a6/0x360 [ 820.947409][T18630] ? __sys_sendmsg+0x2b0/0x2b0 [ 820.952190][T18630] ? trace_call_bpf+0xc3/0x6c0 [ 820.956971][T18630] __se_sys_sendmsg+0x1d0/0x2c0 [ 820.961818][T18630] ? perf_trace_preemptirq_template+0x269/0x330 [ 820.968061][T18630] ? __x64_sys_sendmsg+0x80/0x80 [ 820.973013][T18630] ? lockdep_hardirqs_on+0x98/0x150 [ 820.978216][T18630] do_syscall_64+0x55/0xb0 [ 820.982634][T18630] ? clear_bhb_loop+0x40/0x90 [ 820.987308][T18630] ? clear_bhb_loop+0x40/0x90 [ 820.991982][T18630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.997881][T18630] RIP: 0033:0x7fefda39ce59 [ 821.002298][T18630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.021912][T18630] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.030326][T18630] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 821.038317][T18630] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 821.046288][T18630] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 821.054262][T18630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.062228][T18630] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 821.070249][T18630] [ 821.158190][T18634] FAULT_INJECTION: forcing a failure. [ 821.158190][T18634] name failslab, interval 1, probability 0, space 0, times 0 [ 821.190359][T18634] CPU: 1 PID: 18634 Comm: syz.1.4585 Not tainted syzkaller #0 [ 821.197895][T18634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 821.207989][T18634] Call Trace: [ 821.211305][T18634] [ 821.214261][T18634] dump_stack_lvl+0x18c/0x250 [ 821.218995][T18634] ? show_regs_print_info+0x20/0x20 [ 821.224332][T18634] ? load_image+0x420/0x420 [ 821.228889][T18634] ? verify_lock_unused+0x140/0x140 [ 821.234128][T18634] ? perf_trace_lock+0x303/0x3b0 [ 821.239121][T18634] should_fail_ex+0x394/0x4c0 [ 821.243858][T18634] should_failslab+0x9/0x20 [ 821.248410][T18634] slab_pre_alloc_hook+0x59/0x300 [ 821.253479][T18634] kmem_cache_alloc+0x5a/0x2c0 [ 821.258259][T18634] ? skb_clone+0x1eb/0x370 [ 821.262694][T18634] skb_clone+0x1eb/0x370 [ 821.266965][T18634] __netlink_deliver_tap+0x411/0x7f0 [ 821.272274][T18634] ? netlink_deliver_tap+0x2e/0x1b0 [ 821.277480][T18634] netlink_deliver_tap+0x19c/0x1b0 [ 821.282599][T18634] netlink_unicast+0x77b/0x930 [ 821.287416][T18634] netlink_sendmsg+0x8d0/0xbf0 [ 821.292184][T18634] ? perf_trace_lock+0x303/0x3b0 [ 821.297144][T18634] ? netlink_getsockopt+0x590/0x590 [ 821.302356][T18634] ? aa_sock_msg_perm+0x94/0x150 [ 821.307308][T18634] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 821.312601][T18634] ? security_socket_sendmsg+0x80/0xa0 [ 821.318071][T18634] ? netlink_getsockopt+0x590/0x590 [ 821.323278][T18634] ____sys_sendmsg+0x61b/0x980 [ 821.328060][T18634] ? __asan_memset+0x22/0x40 [ 821.332664][T18634] ? __sys_sendmsg_sock+0x30/0x30 [ 821.337729][T18634] ? __import_iovec+0x5f2/0x850 [ 821.342607][T18634] ? import_iovec+0x73/0xa0 [ 821.347123][T18634] ___sys_sendmsg+0x2a6/0x360 [ 821.351820][T18634] ? __sys_sendmsg+0x2b0/0x2b0 [ 821.356623][T18634] ? trace_call_bpf+0xc3/0x6c0 [ 821.361434][T18634] __se_sys_sendmsg+0x1d0/0x2c0 [ 821.366293][T18634] ? perf_trace_preemptirq_template+0x269/0x330 [ 821.372558][T18634] ? __x64_sys_sendmsg+0x80/0x80 [ 821.377525][T18634] ? lockdep_hardirqs_on+0x98/0x150 [ 821.382746][T18634] do_syscall_64+0x55/0xb0 [ 821.387166][T18634] ? clear_bhb_loop+0x40/0x90 [ 821.391847][T18634] ? clear_bhb_loop+0x40/0x90 [ 821.396530][T18634] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 821.402432][T18634] RIP: 0033:0x7f6b0f79ce59 [ 821.406856][T18634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.426471][T18634] RSP: 002b:00007f6b1066b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.434897][T18634] RAX: ffffffffffffffda RBX: 00007f6b0fa15fa0 RCX: 00007f6b0f79ce59 [ 821.442877][T18634] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 821.450857][T18634] RBP: 00007f6b1066b090 R08: 0000000000000000 R09: 0000000000000000 [ 821.458942][T18634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.466920][T18634] R13: 00007f6b0fa16038 R14: 00007f6b0fa15fa0 R15: 00007fffdb5e4298 [ 821.474925][T18634] [ 822.163344][T18659] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4592'. [ 822.540085][T18665] FAULT_INJECTION: forcing a failure. [ 822.540085][T18665] name failslab, interval 1, probability 0, space 0, times 0 [ 822.553369][T18665] CPU: 1 PID: 18665 Comm: syz.1.4596 Not tainted syzkaller #0 [ 822.560871][T18665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 822.570955][T18665] Call Trace: [ 822.574267][T18665] [ 822.577325][T18665] dump_stack_lvl+0x18c/0x250 [ 822.582058][T18665] ? show_regs_print_info+0x20/0x20 [ 822.587297][T18665] ? load_image+0x420/0x420 [ 822.591843][T18665] ? __might_sleep+0xe0/0xe0 [ 822.596470][T18665] ? __lock_acquire+0x7d80/0x7d80 [ 822.601534][T18665] should_fail_ex+0x394/0x4c0 [ 822.606263][T18665] should_failslab+0x9/0x20 [ 822.610804][T18665] slab_pre_alloc_hook+0x59/0x300 [ 822.615871][T18665] ? sock_kmalloc+0x96/0xf0 [ 822.620418][T18665] ? sock_kmalloc+0x96/0xf0 [ 822.624958][T18665] __kmem_cache_alloc_node+0x53/0x250 [ 822.630394][T18665] ? sock_kmalloc+0x96/0xf0 [ 822.634944][T18665] __kmalloc+0xa7/0x240 [ 822.639161][T18665] sock_kmalloc+0x96/0xf0 [ 822.643537][T18665] ____sys_sendmsg+0x1d4/0x980 [ 822.648349][T18665] ? __asan_memset+0x22/0x40 [ 822.652984][T18665] ? __sys_sendmsg_sock+0x30/0x30 [ 822.658055][T18665] ? __import_iovec+0x3fa/0x850 [ 822.662978][T18665] ? import_iovec+0x73/0xa0 [ 822.667491][T18665] ___sys_sendmsg+0x2a6/0x360 [ 822.672175][T18665] ? __sys_sendmsg+0x2b0/0x2b0 [ 822.676971][T18665] __se_sys_sendmsg+0x1d0/0x2c0 [ 822.681828][T18665] ? __x64_sys_sendmsg+0x80/0x80 [ 822.686785][T18665] ? syscall_enter_from_user_mode+0x2e/0x80 [ 822.692712][T18665] do_syscall_64+0x55/0xb0 [ 822.697150][T18665] ? clear_bhb_loop+0x40/0x90 [ 822.701833][T18665] ? clear_bhb_loop+0x40/0x90 [ 822.706517][T18665] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 822.712425][T18665] RIP: 0033:0x7f6b0f79ce59 [ 822.716844][T18665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.736451][T18665] RSP: 002b:00007f6b1066b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.744867][T18665] RAX: ffffffffffffffda RBX: 00007f6b0fa15fa0 RCX: 00007f6b0f79ce59 [ 822.752835][T18665] RDX: 000000000000fc40 RSI: 0000200000000080 RDI: 0000000000000008 [ 822.760810][T18665] RBP: 00007f6b1066b090 R08: 0000000000000000 R09: 0000000000000000 [ 822.768782][T18665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.776750][T18665] R13: 00007f6b0fa16038 R14: 00007f6b0fa15fa0 R15: 00007fffdb5e4298 [ 822.784733][T18665] [ 822.794859][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4597'. [ 823.082328][T18682] sit0: left promiscuous mode [ 823.275860][T18683] sit0: entered promiscuous mode [ 826.805982][T18707] FAULT_INJECTION: forcing a failure. [ 826.805982][T18707] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.830555][T18705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4608'. [ 826.872063][T18707] CPU: 1 PID: 18707 Comm: syz.3.4609 Not tainted syzkaller #0 [ 826.879605][T18707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 826.889689][T18707] Call Trace: [ 826.892983][T18707] [ 826.895916][T18707] dump_stack_lvl+0x18c/0x250 [ 826.900605][T18707] ? show_regs_print_info+0x20/0x20 [ 826.905803][T18707] ? load_image+0x420/0x420 [ 826.910313][T18707] ? __might_fault+0xaa/0x120 [ 826.914990][T18707] ? __lock_acquire+0x7d80/0x7d80 [ 826.920020][T18707] should_fail_ex+0x394/0x4c0 [ 826.924706][T18707] _copy_from_iter+0x1cd/0x1290 [ 826.929575][T18707] ? __might_fault+0xaa/0x120 [ 826.934258][T18707] ? copyout_mc+0x70/0x70 [ 826.938596][T18707] ? copyout_mc+0x70/0x70 [ 826.942926][T18707] ? __virt_addr_valid+0x10c/0x380 [ 826.948038][T18707] ? page_copy_sane+0x16a/0x270 [ 826.952890][T18707] copy_page_from_iter+0x7b/0x100 [ 826.957924][T18707] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 826.963765][T18707] unix_stream_sendmsg+0x562/0xbf0 [ 826.968916][T18707] ? unix_show_fdinfo+0x280/0x280 [ 826.973942][T18707] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 826.980362][T18707] ? aa_sock_msg_perm+0x94/0x150 [ 826.985301][T18707] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 826.990586][T18707] ? security_socket_sendmsg+0x80/0xa0 [ 826.996066][T18707] sock_write_iter+0x2dc/0x420 [ 827.000865][T18707] ? sock_read_iter+0x3f0/0x3f0 [ 827.005755][T18707] ? common_file_perm+0x198/0x1f0 [ 827.010800][T18707] vfs_write+0x474/0x9a0 [ 827.015054][T18707] ? file_end_write+0x250/0x250 [ 827.019907][T18707] ? __fget_files+0x3fc/0x460 [ 827.024589][T18707] ? __fdget_pos+0x1d8/0x330 [ 827.029291][T18707] ? ksys_write+0x74/0x260 [ 827.033712][T18707] ksys_write+0x151/0x260 [ 827.038045][T18707] ? __ia32_sys_read+0x90/0x90 [ 827.042813][T18707] ? lockdep_hardirqs_on+0x98/0x150 [ 827.048020][T18707] do_syscall_64+0x55/0xb0 [ 827.052436][T18707] ? clear_bhb_loop+0x40/0x90 [ 827.057106][T18707] ? clear_bhb_loop+0x40/0x90 [ 827.061776][T18707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.067668][T18707] RIP: 0033:0x7fefda39ce59 [ 827.072089][T18707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.091704][T18707] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 827.100122][T18707] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 827.108104][T18707] RDX: 000000011ffffce1 RSI: 0000200000000080 RDI: 0000000000000003 [ 827.116067][T18707] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 827.124055][T18707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.132043][T18707] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 827.140029][T18707] [ 830.006158][T18736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4617'. [ 830.369481][T18746] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4622'. [ 830.564319][T18763] FAULT_INJECTION: forcing a failure. [ 830.564319][T18763] name failslab, interval 1, probability 0, space 0, times 0 [ 830.577339][T18763] CPU: 0 PID: 18763 Comm: syz.0.4629 Not tainted syzkaller #0 [ 830.584831][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.594905][T18763] Call Trace: [ 830.598188][T18763] [ 830.601119][T18763] dump_stack_lvl+0x18c/0x250 [ 830.605805][T18763] ? show_regs_print_info+0x20/0x20 [ 830.611005][T18763] ? load_image+0x420/0x420 [ 830.615509][T18763] ? __might_sleep+0xe0/0xe0 [ 830.620097][T18763] ? __lock_acquire+0x7d80/0x7d80 [ 830.625126][T18763] should_fail_ex+0x394/0x4c0 [ 830.629811][T18763] should_failslab+0x9/0x20 [ 830.634314][T18763] slab_pre_alloc_hook+0x59/0x300 [ 830.639342][T18763] ? __get_vm_area_node+0x125/0x370 [ 830.644544][T18763] __kmem_cache_alloc_node+0x53/0x250 [ 830.649926][T18763] ? __get_vm_area_node+0x125/0x370 [ 830.655128][T18763] kmalloc_node_trace+0x26/0xe0 [ 830.659988][T18763] __get_vm_area_node+0x125/0x370 [ 830.665026][T18763] __vmalloc_node_range+0x36f/0x1320 [ 830.670661][T18763] ? netlink_sendmsg+0x602/0xbf0 [ 830.675592][T18763] ? netlink_insert+0x1094/0x1390 [ 830.680653][T18763] ? netlink_insert+0x2ba/0x1390 [ 830.685614][T18763] ? free_vm_area+0x50/0x50 [ 830.690126][T18763] ? netlink_sendmsg+0x602/0xbf0 [ 830.695062][T18763] vmalloc+0x79/0x90 [ 830.698959][T18763] ? netlink_sendmsg+0x602/0xbf0 [ 830.703898][T18763] netlink_sendmsg+0x602/0xbf0 [ 830.708673][T18763] ? netlink_getsockopt+0x590/0x590 [ 830.713871][T18763] ? aa_sock_msg_perm+0x94/0x150 [ 830.718812][T18763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 830.724101][T18763] ? security_socket_sendmsg+0x80/0xa0 [ 830.729561][T18763] ? netlink_getsockopt+0x590/0x590 [ 830.734762][T18763] ____sys_sendmsg+0x61b/0x980 [ 830.739531][T18763] ? __asan_memset+0x22/0x40 [ 830.744131][T18763] ? __sys_sendmsg_sock+0x30/0x30 [ 830.749151][T18763] ? __import_iovec+0x5f2/0x850 [ 830.754003][T18763] ? import_iovec+0x73/0xa0 [ 830.758505][T18763] ___sys_sendmsg+0x2a6/0x360 [ 830.763187][T18763] ? __sys_sendmsg+0x2b0/0x2b0 [ 830.767968][T18763] ? trace_call_bpf+0xc3/0x6c0 [ 830.772794][T18763] __se_sys_sendmsg+0x1d0/0x2c0 [ 830.777646][T18763] ? perf_trace_preemptirq_template+0x269/0x330 [ 830.783894][T18763] ? __x64_sys_sendmsg+0x80/0x80 [ 830.788848][T18763] ? lockdep_hardirqs_on+0x98/0x150 [ 830.794056][T18763] do_syscall_64+0x55/0xb0 [ 830.798566][T18763] ? clear_bhb_loop+0x40/0x90 [ 830.803244][T18763] ? clear_bhb_loop+0x40/0x90 [ 830.807923][T18763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 830.813821][T18763] RIP: 0033:0x7fef2af9ce59 [ 830.818240][T18763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.837849][T18763] RSP: 002b:00007fef2be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 830.846264][T18763] RAX: ffffffffffffffda RBX: 00007fef2b215fa0 RCX: 00007fef2af9ce59 [ 830.854237][T18763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 830.862208][T18763] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 830.870181][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.878175][T18763] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 830.886161][T18763] [ 830.897319][T18763] syz.0.4629: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 830.912836][T18763] CPU: 0 PID: 18763 Comm: syz.0.4629 Not tainted syzkaller #0 [ 830.920329][T18763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 830.930386][T18763] Call Trace: [ 830.933665][T18763] [ 830.936640][T18763] dump_stack_lvl+0x18c/0x250 [ 830.941342][T18763] ? show_regs_print_info+0x20/0x20 [ 830.946559][T18763] ? load_image+0x420/0x420 [ 830.951078][T18763] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 830.957507][T18763] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 830.964039][T18763] warn_alloc+0x246/0x340 [ 830.968395][T18763] ? zone_watermark_ok_safe+0x230/0x230 [ 830.974132][T18763] ? __get_vm_area_node+0x356/0x370 [ 830.979334][T18763] __vmalloc_node_range+0x394/0x1320 [ 830.984616][T18763] ? netlink_insert+0x1094/0x1390 [ 830.989700][T18763] ? netlink_insert+0x2ba/0x1390 [ 830.994659][T18763] ? free_vm_area+0x50/0x50 [ 830.999188][T18763] ? netlink_sendmsg+0x602/0xbf0 [ 831.004145][T18763] vmalloc+0x79/0x90 [ 831.008039][T18763] ? netlink_sendmsg+0x602/0xbf0 [ 831.012996][T18763] netlink_sendmsg+0x602/0xbf0 [ 831.017760][T18763] ? netlink_getsockopt+0x590/0x590 [ 831.022954][T18763] ? aa_sock_msg_perm+0x94/0x150 [ 831.027904][T18763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 831.033193][T18763] ? security_socket_sendmsg+0x80/0xa0 [ 831.038687][T18763] ? netlink_getsockopt+0x590/0x590 [ 831.043914][T18763] ____sys_sendmsg+0x61b/0x980 [ 831.048691][T18763] ? __asan_memset+0x22/0x40 [ 831.053284][T18763] ? __sys_sendmsg_sock+0x30/0x30 [ 831.058335][T18763] ? __import_iovec+0x5f2/0x850 [ 831.063187][T18763] ? import_iovec+0x73/0xa0 [ 831.067712][T18763] ___sys_sendmsg+0x2a6/0x360 [ 831.072422][T18763] ? __sys_sendmsg+0x2b0/0x2b0 [ 831.077204][T18763] ? trace_call_bpf+0xc3/0x6c0 [ 831.081978][T18763] __se_sys_sendmsg+0x1d0/0x2c0 [ 831.086834][T18763] ? perf_trace_preemptirq_template+0x269/0x330 [ 831.093092][T18763] ? __x64_sys_sendmsg+0x80/0x80 [ 831.098060][T18763] ? lockdep_hardirqs_on+0x98/0x150 [ 831.103286][T18763] do_syscall_64+0x55/0xb0 [ 831.107714][T18763] ? clear_bhb_loop+0x40/0x90 [ 831.112408][T18763] ? clear_bhb_loop+0x40/0x90 [ 831.117223][T18763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.123219][T18763] RIP: 0033:0x7fef2af9ce59 [ 831.127659][T18763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.147302][T18763] RSP: 002b:00007fef2be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.155742][T18763] RAX: ffffffffffffffda RBX: 00007fef2b215fa0 RCX: 00007fef2af9ce59 [ 831.163740][T18763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 831.171721][T18763] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 831.179697][T18763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.187683][T18763] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 831.195696][T18763] [ 831.200615][T18763] Mem-Info: [ 831.204080][T18763] active_anon:5734 inactive_anon:0 isolated_anon:0 [ 831.204080][T18763] active_file:19329 inactive_file:40243 isolated_file:0 [ 831.204080][T18763] unevictable:768 dirty:368 writeback:0 [ 831.204080][T18763] slab_reclaimable:10535 slab_unreclaimable:98794 [ 831.204080][T18763] mapped:24883 shmem:1361 pagetables:534 [ 831.204080][T18763] sec_pagetables:0 bounce:0 [ 831.204080][T18763] kernel_misc_reclaimable:0 [ 831.204080][T18763] free:1341388 free_pcp:7204 free_cma:0 [ 831.260171][T18763] Node 0 active_anon:22936kB inactive_anon:0kB active_file:77316kB inactive_file:160772kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99532kB dirty:1472kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11196kB pagetables:2136kB sec_pagetables:0kB all_unreclaimable? no [ 831.303155][T18763] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 831.338120][T18763] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 831.380885][T18763] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 831.387208][T18763] Node 0 DMA32 free:1444564kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:22900kB inactive_anon:0kB active_file:77316kB inactive_file:159944kB unevictable:1536kB writepending:1472kB present:3129332kB managed:2586936kB mlocked:0kB bounce:0kB free_pcp:16740kB local_pcp:11084kB free_cma:0kB [ 831.418790][T18763] lowmem_reserve[]: 0 0 0 0 0 [ 831.423587][T18763] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 831.466934][T18763] lowmem_reserve[]: 0 0 0 0 0 [ 831.471763][T18763] Node 1 Normal free:3905628kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12960kB local_pcp:2112kB free_cma:0kB [ 831.505524][T18769] FAULT_INJECTION: forcing a failure. [ 831.505524][T18769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.520450][T18763] lowmem_reserve[]: 0 0 0 0 0 [ 831.520576][T18763] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 831.520860][T18763] Node 0 DMA32: 549*4kB (ME) 1040*8kB (UME) 746*16kB (UME) 1025*32kB (UME) 268*64kB (UME) 190*128kB (UME) 191*256kB (UM) 127*512kB (UME) 65*1024kB (UME) 10*2048kB (UME) 280*4096kB (UM) = 1444564kB [ 831.521233][T18763] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 831.521452][T18763] Node 1 Normal: 215*4kB (UE) 52*8kB (UE) 36*16kB (UE) 193*32kB (UE) 48*64kB (UME) 12*128kB (UME) 1*256kB (U) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3905628kB [ 831.521829][T18763] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 831.521854][T18763] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 831.521878][T18763] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 831.521902][T18763] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 831.521926][T18763] 60933 total pagecache pages [ 831.521942][T18763] 0 pages in swap cache [ 831.521957][T18763] Free swap = 124996kB [ 831.521972][T18763] Total swap = 124996kB [ 831.521988][T18763] 2097051 pages RAM [ 831.522003][T18763] 0 pages HighMem/MovableOnly [ 831.522016][T18763] 416931 pages reserved [ 831.522032][T18763] 0 pages cma reserved [ 831.693125][T18769] CPU: 0 PID: 18769 Comm: syz.3.4632 Not tainted syzkaller #0 [ 831.700676][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 831.710741][T18769] Call Trace: [ 831.714020][T18769] [ 831.716949][T18769] dump_stack_lvl+0x18c/0x250 [ 831.721666][T18769] ? show_regs_print_info+0x20/0x20 [ 831.726885][T18769] ? load_image+0x420/0x420 [ 831.731396][T18769] ? __lock_acquire+0x7d80/0x7d80 [ 831.736432][T18769] should_fail_ex+0x394/0x4c0 [ 831.741119][T18769] _copy_from_user+0x2f/0xe0 [ 831.745713][T18769] bpf_prog_test_run_skb+0x267/0x18f0 [ 831.751093][T18769] ? __fget_files+0x28/0x460 [ 831.755686][T18769] ? __fget_files+0x3fc/0x460 [ 831.760370][T18769] ? cpu_online+0x60/0x60 [ 831.764698][T18769] bpf_prog_test_run+0x31f/0x390 [ 831.769644][T18769] __sys_bpf+0x49d/0x890 [ 831.773888][T18769] ? bpf_link_show_fdinfo+0x390/0x390 [ 831.779265][T18769] ? lock_chain_count+0x20/0x20 [ 831.784113][T18769] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 831.790098][T18769] __x64_sys_bpf+0x7c/0x90 [ 831.794516][T18769] do_syscall_64+0x55/0xb0 [ 831.798935][T18769] ? clear_bhb_loop+0x40/0x90 [ 831.803607][T18769] ? clear_bhb_loop+0x40/0x90 [ 831.808284][T18769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 831.814206][T18769] RIP: 0033:0x7fefda39ce59 [ 831.818620][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.838234][T18769] RSP: 002b:00007fefdb28f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 831.846650][T18769] RAX: ffffffffffffffda RBX: 00007fefda615fa0 RCX: 00007fefda39ce59 [ 831.854622][T18769] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 831.862597][T18769] RBP: 00007fefdb28f090 R08: 0000000000000000 R09: 0000000000000000 [ 831.870568][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.878544][T18769] R13: 00007fefda616038 R14: 00007fefda615fa0 R15: 00007ffcf47130e8 [ 831.886527][T18769] [ 831.926123][T18777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4633'. [ 832.415517][T18795] sit0: left promiscuous mode [ 832.525320][T18796] sit0: entered promiscuous mode [ 833.796161][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 833.814909][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 833.826569][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 833.835412][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 833.856113][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 833.865033][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 834.155293][T18820] chnl_net:caif_netlink_parms(): no params data found [ 834.292028][T18840] sit0: left promiscuous mode [ 834.335886][T18820] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.345928][T18820] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.353347][T18820] bridge_slave_0: entered allmulticast mode [ 834.367833][T18820] bridge_slave_0: entered promiscuous mode [ 834.377700][T18820] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.385039][T18820] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.392343][T18820] bridge_slave_1: entered allmulticast mode [ 834.399892][T18820] bridge_slave_1: entered promiscuous mode [ 834.428601][T18843] sit0: entered promiscuous mode [ 834.710997][T18848] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4659'. [ 835.075907][T18820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.099035][T18848] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 835.110787][T18848] CPU: 0 PID: 18848 Comm: syz.1.4659 Not tainted syzkaller #0 [ 835.118339][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 835.128460][T18848] Call Trace: [ 835.131780][T18848] [ 835.134741][T18848] dump_stack_lvl+0x18c/0x250 [ 835.139490][T18848] ? show_regs_print_info+0x20/0x20 [ 835.144748][T18848] ? load_image+0x420/0x420 [ 835.149349][T18848] sysfs_warn_dup+0x8e/0xa0 [ 835.153913][T18848] sysfs_do_create_link_sd+0xc0/0x110 [ 835.159524][T18848] device_add_class_symlinks+0x1cf/0x240 [ 835.165213][T18848] device_add+0x4f9/0xc40 [ 835.169829][T18848] wiphy_register+0x1d99/0x2ac0 [ 835.174709][T18848] ? cfg80211_event_work+0x40/0x40 [ 835.179829][T18848] ? minstrel_ht_alloc+0x88a/0x990 [ 835.184967][T18848] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 835.191062][T18848] ieee80211_register_hw+0x2dd8/0x3b30 [ 835.196557][T18848] ? ieee80211_register_hw+0xfc1/0x3b30 [ 835.202123][T18848] ? ieee80211_tasklet_handler+0x20/0x20 [ 835.207772][T18848] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 835.213711][T18848] ? __debug_object_init+0xec/0x450 [ 835.218960][T18848] ? __asan_memset+0x22/0x40 [ 835.223567][T18848] ? __hrtimer_init+0x189/0x270 [ 835.228436][T18848] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 835.234207][T18848] ? mac80211_hwsim_free+0x220/0x220 [ 835.239506][T18848] ? rcu_is_watching+0x15/0xb0 [ 835.244329][T18848] ? kstrndup+0xbd/0x140 [ 835.248601][T18848] hwsim_new_radio_nl+0xdad/0x1a70 [ 835.253736][T18848] ? __nla_validate+0x50/0x50 [ 835.258445][T18848] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 835.264808][T18848] ? __nla_parse+0x40/0x50 [ 835.269243][T18848] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 835.275600][T18848] genl_family_rcv_msg_doit+0x21a/0x310 [ 835.281176][T18848] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 835.287103][T18848] ? bpf_lsm_capable+0x9/0x10 [ 835.291802][T18848] ? security_capable+0x89/0xb0 [ 835.296680][T18848] genl_rcv_msg+0x611/0x7a0 [ 835.301245][T18848] ? genl_bind+0x360/0x360 [ 835.305675][T18848] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 835.312022][T18848] ? perf_trace_lock+0x303/0x3b0 [ 835.316976][T18848] ? __kasan_kmalloc_large+0x8b/0xa0 [ 835.322299][T18848] netlink_rcv_skb+0x235/0x4c0 [ 835.327117][T18848] ? genl_bind+0x360/0x360 [ 835.331552][T18848] ? netlink_ack+0x1160/0x1160 [ 835.336358][T18848] ? __lock_acquire+0x7d80/0x7d80 [ 835.341419][T18848] ? down_read+0x1ac/0x2e0 [ 835.345858][T18848] genl_rcv+0x28/0x40 [ 835.349861][T18848] netlink_unicast+0x7b1/0x930 [ 835.354659][T18848] netlink_sendmsg+0x8d0/0xbf0 [ 835.359477][T18848] ? perf_trace_lock+0x303/0x3b0 [ 835.364454][T18848] ? netlink_getsockopt+0x590/0x590 [ 835.369681][T18848] ? aa_sock_msg_perm+0x94/0x150 [ 835.374645][T18848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 835.379947][T18848] ? security_socket_sendmsg+0x80/0xa0 [ 835.385416][T18848] ? netlink_getsockopt+0x590/0x590 [ 835.390629][T18848] ____sys_sendmsg+0x61b/0x980 [ 835.395419][T18848] ? __asan_memset+0x22/0x40 [ 835.400027][T18848] ? __sys_sendmsg_sock+0x30/0x30 [ 835.405062][T18848] ? __import_iovec+0x5f2/0x850 [ 835.409939][T18848] ? import_iovec+0x73/0xa0 [ 835.414457][T18848] ___sys_sendmsg+0x2a6/0x360 [ 835.419190][T18848] ? __sys_sendmsg+0x2b0/0x2b0 [ 835.424044][T18848] __se_sys_sendmsg+0x1d0/0x2c0 [ 835.428914][T18848] ? __x64_sys_sendmsg+0x80/0x80 [ 835.433888][T18848] ? lockdep_hardirqs_on+0x98/0x150 [ 835.439108][T18848] do_syscall_64+0x55/0xb0 [ 835.443531][T18848] ? clear_bhb_loop+0x40/0x90 [ 835.448220][T18848] ? clear_bhb_loop+0x40/0x90 [ 835.452913][T18848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 835.458825][T18848] RIP: 0033:0x7f6b0f79ce59 [ 835.463252][T18848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.482877][T18848] RSP: 002b:00007f6b1064a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.491324][T18848] RAX: ffffffffffffffda RBX: 00007f6b0fa16090 RCX: 00007f6b0f79ce59 [ 835.499312][T18848] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 835.507297][T18848] RBP: 00007f6b0f832e6f R08: 0000000000000000 R09: 0000000000000000 [ 835.515278][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.523294][T18848] R13: 00007f6b0fa16128 R14: 00007f6b0fa16090 R15: 00007fffdb5e4298 [ 835.531306][T18848] [ 835.555661][T18820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.636163][T18820] team0: Port device team_slave_0 added [ 835.660045][T18820] team0: Port device team_slave_1 added [ 835.713397][T18820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.726410][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.802700][T18820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 835.816617][T18820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 835.823583][T18820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.851056][T18820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 835.905557][T18820] hsr_slave_0: entered promiscuous mode [ 835.926635][ T5779] Bluetooth: hci1: command tx timeout [ 835.940751][T18820] hsr_slave_1: entered promiscuous mode [ 835.949820][T18820] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 835.958174][T18820] Cannot create hsr debugfs directory [ 836.012046][T18869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.055292][T18869] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4667'. [ 836.084005][T18869] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 836.161282][T18820] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.231963][T18875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 836.258850][T18875] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4676'. [ 836.271297][T18875] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 836.282807][T18820] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.299631][T18876] sit0: left promiscuous mode [ 836.492953][T18820] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.528650][T18876] sit0: entered promiscuous mode [ 836.594537][T18820] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 836.603691][T18820] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 836.634205][T18820] team0: Port device netdevsim0 removed [ 836.645902][T18820] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.671749][T18879] sit0: left promiscuous mode [ 836.742911][T18880] sit0: entered promiscuous mode [ 837.330523][T18889] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.4674'. [ 837.397352][T18889] netlink: zone id is out of range [ 837.402545][T18889] netlink: zone id is out of range [ 837.462880][T18889] netlink: zone id is out of range [ 837.489479][T18889] netlink: zone id is out of range [ 837.494762][T18889] netlink: zone id is out of range [ 837.503435][T18889] netlink: zone id is out of range [ 837.509212][T18889] netlink: zone id is out of range [ 837.514543][T18889] netlink: zone id is out of range [ 838.006599][ T5779] Bluetooth: hci1: command tx timeout [ 840.086827][ T5779] Bluetooth: hci1: command tx timeout [ 840.125240][T18901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 840.200267][T18901] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4679'. [ 840.210794][T18906] FAULT_INJECTION: forcing a failure. [ 840.210794][T18906] name failslab, interval 1, probability 0, space 0, times 0 [ 840.223799][T18906] CPU: 0 PID: 18906 Comm: syz.0.4680 Not tainted syzkaller #0 [ 840.231284][T18906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.241349][T18906] Call Trace: [ 840.244628][T18906] [ 840.247571][T18906] dump_stack_lvl+0x18c/0x250 [ 840.252256][T18906] ? show_regs_print_info+0x20/0x20 [ 840.257451][T18906] ? load_image+0x420/0x420 [ 840.261961][T18906] should_fail_ex+0x394/0x4c0 [ 840.266746][T18906] should_failslab+0x9/0x20 [ 840.271292][T18906] slab_pre_alloc_hook+0x59/0x300 [ 840.276338][T18906] ? ida_alloc_range+0x5e7/0x860 [ 840.281535][T18906] __kmem_cache_alloc_node+0x53/0x250 [ 840.286915][T18906] ? ida_alloc_range+0x5e7/0x860 [ 840.291877][T18906] kmalloc_trace+0x2a/0xe0 [ 840.296337][T18906] ida_alloc_range+0x5e7/0x860 [ 840.301125][T18906] ? __xdp_reg_mem_model+0x1fd/0x5a0 [ 840.306414][T18906] ? idr_replace+0x1b0/0x1b0 [ 840.311015][T18906] __xdp_reg_mem_model+0x219/0x5a0 [ 840.316125][T18906] ? kvmalloc_node+0x70/0x180 [ 840.320801][T18906] ? kvmalloc_node+0x70/0x180 [ 840.325479][T18906] ? xdp_reg_mem_model+0x40/0x40 [ 840.330437][T18906] xdp_reg_mem_model+0x22/0x40 [ 840.335200][T18906] bpf_test_run_xdp_live+0x262/0x1b30 [ 840.340588][T18906] ? 0xffffffffa0004740 [ 840.344741][T18906] ? 0xffffffffa0004740 [ 840.348895][T18906] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 840.354793][T18906] ? xdp_convert_md_to_buff+0x330/0x330 [ 840.360368][T18906] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 840.366610][T18906] ? _copy_from_user+0xa5/0xe0 [ 840.371375][T18906] ? bpf_test_init+0x119/0x140 [ 840.376135][T18906] ? xdp_convert_md_to_buff+0x5b/0x330 [ 840.381601][T18906] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 840.386980][T18906] ? __lock_acquire+0x7d80/0x7d80 [ 840.392012][T18906] ? dev_put+0x80/0x80 [ 840.396088][T18906] ? dev_put+0x80/0x80 [ 840.400182][T18906] bpf_prog_test_run+0x31f/0x390 [ 840.405133][T18906] __sys_bpf+0x49d/0x890 [ 840.409378][T18906] ? bpf_link_show_fdinfo+0x390/0x390 [ 840.414760][T18906] ? lock_chain_count+0x20/0x20 [ 840.419623][T18906] __x64_sys_bpf+0x7c/0x90 [ 840.424090][T18906] do_syscall_64+0x55/0xb0 [ 840.428506][T18906] ? clear_bhb_loop+0x40/0x90 [ 840.433178][T18906] ? clear_bhb_loop+0x40/0x90 [ 840.437854][T18906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 840.443771][T18906] RIP: 0033:0x7fef2af9ce59 [ 840.448184][T18906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.467790][T18906] RSP: 002b:00007fef2be26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 840.476210][T18906] RAX: ffffffffffffffda RBX: 00007fef2b215fa0 RCX: 00007fef2af9ce59 [ 840.484190][T18906] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 840.492157][T18906] RBP: 00007fef2be26090 R08: 0000000000000000 R09: 0000000000000000 [ 840.500124][T18906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.508093][T18906] R13: 00007fef2b216038 R14: 00007fef2b215fa0 R15: 00007ffea4ee7ff8 [ 840.516076][T18906] [ 840.560816][T18820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 840.579460][T18820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 840.654241][T18820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 840.680653][T18820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 840.918941][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4683'. [ 840.953586][T18820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 840.974472][T18820] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.989607][ T9842] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.996848][ T9842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.020993][ T9834] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.028188][ T9834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.360765][T18820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 841.398868][T18820] veth0_vlan: entered promiscuous mode [ 841.411020][T18820] veth1_vlan: entered promiscuous mode [ 841.474412][T18820] veth0_macvtap: entered promiscuous mode [ 841.487798][T18820] veth1_macvtap: entered promiscuous mode [ 841.522082][T18820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.552870][T18820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 841.569253][T18820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 841.584644][T18820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.602702][T18932] sit0: left promiscuous mode [ 841.729876][T18935] sit0: entered promiscuous mode [ 842.182326][ T5779] Bluetooth: hci1: command tx timeout [ 842.260652][T18943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.293212][T18943] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4690'. [ 842.304916][T18943] net_ratelimit: 205 callbacks suppressed [ 842.304951][T18943] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 842.446702][T18820] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.462670][T18820] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.472682][T18820] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.516449][T18820] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.136072][ T9830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.185648][ T9830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.337842][ T9834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.346965][T18951] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4694'. [ 843.364429][ T9834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.279937][T18956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4648'. [ 846.449257][T18964] sit0: left promiscuous mode [ 846.530977][T18968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.657017][T18967] sit0: entered allmulticast mode [ 846.695840][T18969] sit0: entered promiscuous mode [ 846.696030][T18968] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4699'. [ 846.713000][T18968] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 847.402977][T18971] sit0: entered promiscuous mode [ 847.620636][T18990] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4706'. [ 848.796930][ C1] [ 848.796940][ C1] ================================ [ 848.796945][ C1] WARNING: inconsistent lock state [ 848.796975][ C1] syzkaller #0 Not tainted [ 848.796984][ C1] -------------------------------- [ 848.796989][ C1] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 848.796996][ C1] syz.3.4711/18999 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 848.797015][ C1] ffff88802e5c3420 (&htab->lockdep_key#2){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 848.797065][ C1] {INITIAL USE} state was registered at: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 848.797072][ C1] lock_acquire+0x19e/0x420 [ 848.797094][ C1] _raw_spin_lock+0x2e/0x40 [ 848.797115][ C1] htab_lock_bucket+0x17d/0x300 [ 848.797131][ C1] htab_lru_map_update_elem+0x2be/0x990 [ 848.797147][ C1] bpf_map_update_value+0x64b/0x710 [ 848.797161][ C1] map_update_elem+0x586/0x710 [ 848.797176][ C1] __sys_bpf+0x6b5/0x890 [ 848.797190][ C1] __x64_sys_bpf+0x7c/0x90 [ 848.797204][ C1] do_syscall_64+0x55/0xb0 [ 848.797221][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.797248][ C1] irq event stamp: 678 [ 848.797254][ C1] hardirqs last enabled at (677): [] __kmalloc_large_node+0x112/0x1f0 [ 848.797280][ C1] hardirqs last disabled at (678): [] exc_debug+0x73/0x140 [ 848.797302][ C1] softirqs last enabled at (386): [] bpf_prog_load+0x1204/0x1610 [ 848.797321][ C1] softirqs last disabled at (384): [] bpf_ksym_add+0x2c/0x330 [ 848.797341][ C1] [ 848.797341][ C1] other info that might help us debug this: [ 848.797346][ C1] Possible unsafe locking scenario: [ 848.797346][ C1] [ 848.797350][ C1] CPU0 [ 848.797352][ C1] ---- [ 848.797355][ C1] lock(&htab->lockdep_key#2); [ 848.797368][ C1] [ 848.797371][ C1] lock(&htab->lockdep_key#2); [ 848.797382][ C1] [ 848.797382][ C1] *** DEADLOCK *** [ 848.797382][ C1] [ 848.797385][ C1] no locks held by syz.3.4711/18999. [ 848.797392][ C1] [ 848.797392][ C1] stack backtrace: [ 848.797397][ C1] CPU: 1 PID: 18999 Comm: syz.3.4711 Not tainted syzkaller #0 [ 848.797411][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 848.797420][ C1] Call Trace: [ 848.797426][ C1] <#DB> [ 848.797432][ C1] dump_stack_lvl+0x18c/0x250 [ 848.797452][ C1] ? show_regs_print_info+0x20/0x20 [ 848.797472][ C1] ? print_usage_bug+0x43d/0x6a0 [ 848.797490][ C1] ? verify_lock_unused+0x15/0x140 [ 848.797509][ C1] lock_acquire+0x2c2/0x420 [ 848.797526][ C1] ? look_up_lock_class+0x75/0x140 [ 848.797548][ C1] ? htab_lock_bucket+0x17d/0x300 [ 848.797566][ C1] ? read_lock_is_recursive+0x20/0x20 [ 848.797591][ C1] _raw_spin_lock+0x2e/0x40 [ 848.797611][ C1] ? htab_lock_bucket+0x17d/0x300 [ 848.797628][ C1] htab_lock_bucket+0x17d/0x300 [ 848.797647][ C1] ? htab_lru_map_delete_node+0x770/0x770 [ 848.797666][ C1] ? look_up_lock_class+0x75/0x140 [ 848.797688][ C1] ? verify_lock_unused+0x15/0x140 [ 848.797706][ C1] ? jhash+0x34e/0x740 [ 848.797724][ C1] htab_lru_map_delete_elem+0x19f/0x640 [ 848.797744][ C1] ? htab_lru_map_update_elem+0x990/0x990 [ 848.797761][ C1] ? perf_callchain+0x220/0x220 [ 848.797782][ C1] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 848.797800][ C1] bpf_overflow_handler+0x1fc/0x510 [ 848.797822][ C1] ? perf_prepare_header+0x1e0/0x1e0 [ 848.797839][ C1] ? bpf_overflow_handler+0xde/0x510 [ 848.797859][ C1] ? tp_perf_event_destroy+0x20/0x20 [ 848.797884][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 848.797904][ C1] __perf_event_overflow+0x461/0x660 [ 848.797925][ C1] perf_swevent_event+0x319/0x570 [ 848.797944][ C1] ? perf_tp_event+0x1550/0x1550 [ 848.797970][ C1] ? perf_trace_buf_alloc+0x290/0x290 [ 848.797995][ C1] perf_bp_event+0x319/0x430 [ 848.798016][ C1] ? perf_event_free_bpf_prog+0x120/0x120 [ 848.798049][ C1] ? lock_acquire+0x2c2/0x420 [ 848.798070][ C1] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 848.798094][ C1] notifier_call_chain+0x18f/0x380 [ 848.798115][ C1] ? atomic_notifier_call_chain+0x26/0x180 [ 848.798136][ C1] atomic_notifier_call_chain+0xda/0x180 [ 848.798157][ C1] notify_die+0x145/0x1a0 [ 848.798177][ C1] ? srcu_init_notifier_head+0x90/0x90 [ 848.798201][ C1] ? rcu_is_watching+0x15/0xb0 [ 848.798222][ C1] notify_debug+0x2e/0x50 [ 848.798270][ C1] exc_debug+0xde/0x140 [ 848.798291][ C1] asm_exc_debug+0x1e/0x40 [ 848.798312][ C1] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 848.798335][ C1] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 848.798349][ C1] RSP: 0018:ffffc9000461fbd0 EFLAGS: 00050206 [ 848.798363][ C1] RAX: ffffffff84294d01 RBX: 000000000000ffd0 RCX: 000000000000ff10 [ 848.798375][ C1] RDX: 0000000000000001 RSI: 0000200000000340 RDI: ffff88805e0600c0 [ 848.798387][ C1] RBP: ffffc9000461fd20 R08: ffff88805e06ffcf R09: 1ffff1100bc0dff9 [ 848.798399][ C1] R10: dffffc0000000000 R11: ffffed100bc0dffa R12: 0000200000010250 [ 848.798412][ C1] R13: 1ffff920008c3fbd R14: ffff88805e060000 R15: 0000200000000280 [ 848.798428][ C1] ? rcuref_put_slowpath+0x141/0x150 [ 848.798452][ C1] [ 848.798457][ C1] [ 848.798462][ C1] _copy_from_user+0x8b/0xe0 [ 848.798482][ C1] generic_map_update_batch+0x58c/0x800 [ 848.798503][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 848.798521][ C1] ? __fdget+0x180/0x210 [ 848.798542][ C1] ? rcu_read_unlock+0xa0/0xa0 [ 848.798557][ C1] bpf_map_do_batch+0x3f2/0x600 [ 848.798575][ C1] ? bpf_lsm_audit_rule_free+0x10/0x10 [ 848.798599][ C1] __sys_bpf+0x381/0x890 [ 848.798617][ C1] ? bpf_link_show_fdinfo+0x390/0x390 [ 848.798641][ C1] ? lock_chain_count+0x20/0x20 [ 848.798663][ C1] __x64_sys_bpf+0x7c/0x90 [ 848.798680][ C1] do_syscall_64+0x55/0xb0 [ 848.798698][ C1] ? clear_bhb_loop+0x40/0x90 [ 848.798713][ C1] ? clear_bhb_loop+0x40/0x90 [ 848.798728][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 848.798751][ C1] RIP: 0033:0x7fa24019ce59 [ 848.798764][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 848.798777][ C1] RSP: 002b:00007fa23e3b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 848.798793][ C1] RAX: ffffffffffffffda RBX: 00007fa240416180 RCX: 00007fa24019ce59 [ 848.798805][ C1] RDX: 0000000000000038 RSI: 0000200000000340 RDI: 000000000000001a [ 848.798834][ C1] RBP: 00007fa240232e6f R08: 0000000000000000 R09: 0000000000000000 [ 848.798845][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 848.798854][ C1] R13: 00007fa240416218 R14: 00007fa240416180 R15: 00007ffff4758e78 [ 848.798873][ C1] [ 850.505688][ T9838] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.589654][ T9838] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.662695][ T9838] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.741331][ T9838] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.515293][ T9838] hsr_slave_0: left promiscuous mode [ 851.524670][ T9838] hsr_slave_1: left promiscuous mode [ 851.534645][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.546487][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.554413][ T9838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.570447][ T9838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 851.579103][ T9838] bridge_slave_1: left allmulticast mode [ 851.584786][ T9838] bridge_slave_1: left promiscuous mode [ 851.591035][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.601364][ T9838] bridge_slave_0: left allmulticast mode [ 851.607320][ T9838] bridge_slave_0: left promiscuous mode [ 851.613054][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.625042][ T9838] veth1_macvtap: left promiscuous mode [ 851.630900][ T9838] veth0_macvtap: left promiscuous mode [ 851.636869][ T9838] veth1_vlan: left promiscuous mode [ 851.642182][ T9838] veth0_vlan: left promiscuous mode [ 851.843323][ T9838] team0 (unregistering): Port device team_slave_1 removed [ 851.872313][ T9838] team0 (unregistering): Port device team_slave_0 removed [ 851.883495][ T9838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.896645][ T9838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.953195][ T9838] bond0 (unregistering): Released all slaves [ 852.362620][ T9838] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.412833][ T9838] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.483403][ T9838] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.662439][ T9838] tipc: Left network mode [ 853.489293][ T9838] veth1_macvtap: left promiscuous mode [ 853.494870][ T9838] veth0_macvtap: left promiscuous mode [ 853.719423][ T9838] team0 (unregistering): Port device team_slave_1 removed [ 853.778534][ T9838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.876420][ T9838] bond0 (unregistering): Released all slaves