last executing test programs: 10m24.817133883s ago: executing program 0 (id=857): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a", 0x23}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 10m24.724789415s ago: executing program 0 (id=858): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 10m24.589739568s ago: executing program 0 (id=860): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x454, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x400, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x230}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x8, 0x7, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100), 0x120) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef400000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x11, 0x4, 0x4, 0xfffffffe}, 0x50) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20880, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8940, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, 0x0, 0x0}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 10m24.410033032s ago: executing program 0 (id=861): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 10m24.259778735s ago: executing program 0 (id=862): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00030010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 10m24.171593477s ago: executing program 0 (id=863): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) (async) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 10m9.150611847s ago: executing program 32 (id=863): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x73) (async) socket$kcm(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x2f) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff, 0x6, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) socket$kcm(0x10, 0x2, 0x10) (async) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003567d25a806f8c6394f96724fc60", 0x14}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="1c00000018"], 0xfe33) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) 4.09586616s ago: executing program 3 (id=7353): socket$kcm(0x2b, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="1838000000000000000000000800000018100000", @ANYRES32, @ANYBLOB="00040000000000009500000000710000"], &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8918, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000010080000850000002d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x8000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r0, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000011c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, &(0x7f00000012c0), &(0x7f0000001300), 0x8, 0xa7, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000020000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) recvmsg$kcm(r5, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec0}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc5e48aa31086b87003000000000000000160af365040014000d0002008be3a0e640940800000000001282bb2352d1f006baa45e0d501e2494acf1566e000a84c9", 0x4c}, {&(0x7f0000000140)="d8661035880157", 0x7}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x24044054) 3.558717262s ago: executing program 3 (id=7358): sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="ff4567", 0x3}], 0x1}, 0x24004000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37f10c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 3.557399372s ago: executing program 4 (id=7359): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xfffffffffffffe22, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffff", @ANYRES16=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x1006, &(0x7f0000002500)=""/4102}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x242, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x10000}, 0x481, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7}) close(r6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xb}, {0x0, [0x0, 0x5f, 0x61, 0x5f, 0x2e, 0x2e, 0x5f, 0x30, 0x5f]}}, &(0x7f0000000580)=""/249, 0x23, 0xf9, 0x1}, 0x28) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002480)={&(0x7f00000000c0)="117b5d3e6fb8bec8a0bf34d16f0e97894024", &(0x7f0000001340)=""/4096, &(0x7f0000002340)="b0df4a11f7e12e94cbef522eacff33db7410c2a9489162014bfa31ae81ee63c2f93b251961de57dcbbe47659ba19b243568bf301f74fcd8df38571ba688ab8ef1b4c84ae4d2b95ad4a2e86de034e6607365770e1ece3815a72a7ca022899b432b318b78e8c97806ccfaeb5cc9f070a2fe769a865fb616506", &(0x7f00000023c0)="752cab968014bd2ccb31bf13cf82fc4b1f72af023e337cdf9cadd55541b6aa630cafd34faa1694446e240aeaf832f41ec8f42b99641bf0806c6ba57bda79a51b1b323ace860cfdf37c80fec2b04bc22bdbeb37c9eac3bc3e1e771e3efe017a77472ab593a91321deefc1aea794fa3d526c6db4071b04481bbb0bbde9dbf0d18db3d3749f90040b5619f9ba5ce40085bfc99afdadd1c8e8ef42", 0x401, r0, 0x4}, 0x38) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x2}, {}]}]}, {0x0, [0x0, 0x61, 0x5d]}}, &(0x7f0000000340)=""/149, 0x39, 0x95, 0x1}, 0x28) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) close(r1) 3.421871255s ago: executing program 3 (id=7362): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) 3.299527057s ago: executing program 3 (id=7365): socket$kcm(0xf, 0x3, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0xd4, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x404, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffbffbff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3fa4, 0x400}, 0x0, 0x5cf, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 2.646498381s ago: executing program 4 (id=7371): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x50d77f243c125666) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a7645100b2ffbdb0ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14faecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9cf53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437"], 0x0}, 0x94) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x20, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x4}, 0x2) close(0x3) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r0}, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02000000000000000100000d0100000000000000000000000000005f"], &(0x7f0000000340)=""/220, 0x3d, 0xdc, 0x1}, 0x28) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r10 = openat$cgroup_devices(r9, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r10, &(0x7f0000000280)=ANY=[@ANYBLOB='b *:4\trrw'], 0xa) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xe, @dev, 0x6, 0x10000}, 0x80, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x7, [@type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x8}}, @ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x5f, 0x30, 0x71, 0x5f, 0x0]}}, &(0x7f0000000280)=""/121, 0x5b, 0x79, 0x0, 0x1, 0x10000, @value=r8}, 0x28) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001e4691f9ce5a0aa7e2bf7ebfc7af00c1af7409d30d47da673ab00e77a62fc4e7b21b04f08dd95d1259f5c0ee8dbe0f78a91433b2856a8084512822ebd0a8709d75b68c76bd74309de45750b1a64ffb"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000001a80)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r11}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r12}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r12, r11}, 0xc) socket$kcm(0x10, 0x2, 0x0) 1.528357256s ago: executing program 5 (id=7386): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="ff4567", 0x3}], 0x1}, 0x24004000) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37f10c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.408087299s ago: executing program 4 (id=7388): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)}], 0x1}, 0x60044084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 1.367927099s ago: executing program 1 (id=7389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, 0x0) 1.307407351s ago: executing program 5 (id=7391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0), 0xc) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21ca0000cf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a66"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xb, 0xb, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}, [@tail_call, @ldst={0x1, 0x2, 0x4, 0x6, 0x6, 0x30, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x50, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000b40)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b80)={0x1, 0xf, 0x400, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000c00)=[{0x1, 0x2, 0xb, 0xa}, {0x0, 0x3, 0xb, 0x2}, {0x0, 0x4, 0x1, 0x5}, {0x1, 0x1, 0x7, 0xa}, {0x2, 0x3, 0x3, 0x4}, {0x1, 0x5, 0x1, 0x7}], 0x10, 0xffff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000380e00000900000000000000", @ANYRES32, @ANYBLOB="fdffffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) close(r3) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07000006007c09e8fc55a10a0015000600142603600e120800020081000401a8000180f2ffffff000000fd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) 1.291073621s ago: executing program 4 (id=7392): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7b3, 0x0, @perf_bp={0x0}, 0x800, 0xc8, 0x0, 0x7, 0x91, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e4000d6317ce"], 0xfdef) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 1.247220702s ago: executing program 1 (id=7393): socket$kcm(0x23, 0x2, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x22, 0x2, 0x21) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0), 0x3e) 1.106449155s ago: executing program 2 (id=7394): socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xca, 0x0, 0x0, 0x0, 0x4000, 0x46020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xea}, 0x8, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x400000002, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8122031100fe08000e400002000100000000000000ff0200000000000000000001ffaaaaaa"], 0xfdef) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce81020329"], 0xfdef) 1.041369257s ago: executing program 1 (id=7395): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x1, 0x8f54}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180200002020702500000000002020207b0af8ff00000000bda100000000000026010000f8ffffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0}, 0x90) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) close(r3) socket$kcm(0x29, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000880)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, &(0x7f0000000000)) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000140079104800000000007900280000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x6, &(0x7f00000021c0)=ANY=[@ANYRES32, @ANYBLOB="000000000000000063001700010000009500"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x65}, 0x94) socket$kcm(0x10, 0x400000005, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008040) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], 0x0, 0x5, 0xca, &(0x7f0000000540)=""/202, 0x0, 0x21, '\x00', 0x0, @fallback=0x29}, 0x94) 1.040917137s ago: executing program 4 (id=7396): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0xf1, 0x7, 0x0, 0x0, 0x7, 0x1c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, @perf_bp={0x0, 0x2}, 0x1088, 0x105, 0x0, 0x0, 0x4000, 0xffff0000, 0x0, 0x0, 0x102ff, 0x0, 0x5}, 0x0, 0xffffffffdffffffc, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2, 0x200000000000006, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={&(0x7f0000000200)="976308d89c4a454dbfcf9d17a73a03bdd8a6d81d2b26d0893493eae1634252f4b4e665861d210360d0c86346e4144f96bef13fabf3cbf92f100ed5b4714e65912936101d0a9973758f3b6301f2d09390327b80cacad15f7bed0a27aefbf2537f91a46d885da2086442c55f7ab07ff2037e09ce6d641696340642709bd1ac6cd26796cf512f2391796c4a58059f919b7aced53f7ffca0607c6e8a236b51dd5606f3063f782966aa42567ad66a98e15d3c9566e2076848e7af57e68341661622b11eca05d156c4c7ec66adc50bb8c5c4089e5f003edc167ebf", &(0x7f0000000340)=""/57, &(0x7f0000000380)="2988474403c486e0ae5d6b152ed0011b3c614992d1035162be03516f37fba86418b6ea518294cfd4fd01714e10f5228a6012e0d5a6847e63d0fcd2fdc70588626d9ae648699d418c64d51f3f89967a84f696602d2196899c7f6328e510619bc323bbc7512392059d6262f8025cf2d5f2042d9be1943b1e77e43c4420ef6022ecdb952d59b9002af22343ff79fa5b13e31ceb91b73101ab248e2b66693916fdb05d777847bebc827abbc87c67c7907277691ce7414ea90088cb100b0c28288bd088239fa6e318f8068c1eb496a066422c", &(0x7f0000000500)="1ddb1554f160d6e4e681b4d69078830e46d7d0792f", 0x7, r2}, 0x38) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r3, 0x0, 0x0}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={&(0x7f0000000240)="68b50e17a1bfcd2e34e5a83ff2b993a02c7b27c0b99e5fad3f064a9eda89305ee9044e7880fdfef19fc90284e8d3ad926094e2bc4d05d44c9d036ba47e8cb1c4bdc2d8a8259a693f701235d47e29d42b2e7b81b8223a3d7ab8bc8b4b0c04e4753eeaff9d", &(0x7f0000000600)=""/4, &(0x7f00000008c0), &(0x7f0000000dc0)="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", 0x7, r3}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000040)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc1, &(0x7f00000006c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000580), 0x8, 0x68, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000900)=r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000090850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x12, &(0x7f0000000240)=@raw=[@map_idx={0x18, 0x8, 0x5, 0x0, 0xa}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff}}, @generic={0xff, 0x7, 0x6, 0xf, 0xb2}, @ldst={0x0, 0x2, 0x1, 0x8, 0xa, 0xfffffffffffffff0, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x5, 0x7, 0x5, 0xffffffffffffffc0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}, @alu={0x4, 0x1, 0x2, 0x5, 0x2, 0xffffffffffffffff, 0xfffffffffffffff0}], &(0x7f0000000300)='GPL\x00', 0x9, 0x8c, &(0x7f0000000380)=""/140, 0x41100, 0x7d, '\x00', r4, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 850.72553ms ago: executing program 4 (id=7398): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa9, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x50d77f243c125666) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xf6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_config_ext, 0x20, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86\xae\xa5\xea?\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xff06, &(0x7f000000cf3d)=""/195}, 0x48) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e80f782db44b9040a1d080000000000000055a10a0015400100142603600e1208009e00000004010400160040000540fec00000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409fd2ee0125b91643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d28a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3060000000000000081ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337812398", 0xd8}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003567d25a806f8c6394f96724fc60050011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(r6, &(0x7f00000004c0)={[{0x2b, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'rdma'}, {0x2d, 'hugetlb'}, {0x2d, 'net_cls'}, {0x2d, 'rdma'}, {0x2b, 'freezer'}, {0x2b, 'freezer'}]}, 0x43) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xe, 0x2de, 0x100, 0x7ff, 0x949, 0xffffffffffffffff, 0x9, '\x00', 0x0, r0, 0x3, 0x4, 0x2}, 0x50) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000011008188040f46ecdb00e3bd6efb4400080000000a000f00000aba8000001201", 0x24}, {&(0x7f0000000200)="cc182c338cba61617516", 0xa}], 0x2}, 0x0) recvmsg$kcm(r8, &(0x7f00000002c0)={&(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/198, 0xc6}], 0x1, &(0x7f0000000280)=""/19, 0x13}, 0x40) 520.763748ms ago: executing program 2 (id=7400): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169b740ac03d7c64cee49ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d54f45a24effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c7724e9e7e7babf61fe358ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261ed1d4515f46290d5c6579b63358fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f13dff7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63e774e940bfeb0de83f42fd565a299f741f9b00be4e8fcaf4ec85daceb16d9e8a438e3eb2556570e381b03d9e3c245728648ed9ff22dc963ed105c851c3481125b4c0c8a08a0c9930190902af109fc56b64cc952f298ebe73d7b18052e0147356228ca171b06274a871e2cf9609e0b4cdad36c3250bc8f56f95a6ed"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) 384.530711ms ago: executing program 2 (id=7401): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1000000000005}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, &(0x7f0000000100)=r3, 0x120) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) getpid() socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000140), 0x4) 287.322803ms ago: executing program 1 (id=7402): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)}], 0x1}, 0x60044084) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8924, &(0x7f0000000080)) 262.241184ms ago: executing program 2 (id=7403): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0xa, 0x6, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, 0x0) 174.599426ms ago: executing program 3 (id=7404): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000006000009000000000800000040000000834d9d410ef482789c3678d27c8b177ee21d718a276441c0bef6180285745b21a90562f5009862f262dc3c87f90c230d84b399", @ANYRES32, @ANYBLOB, @ANYBLOB='\x00\x00\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000002a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0x12b) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), 0x0}, 0x20) r3 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000380e00000900000000000000", @ANYRES32, @ANYBLOB="fdffffff00000000000000000000020000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) 130.588647ms ago: executing program 2 (id=7405): socket$kcm(0x23, 0x2, 0x0) r0 = socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x22, 0x2, 0x21) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4001a050) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) setsockopt$sock_attach_bpf(r0, 0x107, 0x5, &(0x7f00000000c0), 0x3e) 46.785538ms ago: executing program 1 (id=7406): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1000000000005}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, &(0x7f0000000100)=r3, 0x120) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) getpid() socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) (fail_nth: 1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r6, 0x29, 0x11, &(0x7f0000000140), 0x4) 10.883359ms ago: executing program 3 (id=7407): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x1000000000005}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp=0x25}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000060ff850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) setsockopt$sock_attach_bpf(r2, 0x29, 0x3b, &(0x7f0000000100)=r3, 0x120) socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90424fc60100c034002bc0100feff000037153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) getpid() socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8b05, &(0x7f0000000000)={'wlan1\x00', @broadcast}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000200)}, {&(0x7f0000001300)=""/20, 0x14}], 0x3}, 0x2) r9 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0), 0x4) setsockopt$sock_attach_bpf(r9, 0x29, 0x11, &(0x7f0000000140), 0x4) 0s ago: executing program 2 (id=7408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c1000000000008001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) r5 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x4, 0x6d, 0x3, 0x2}]}}}], 0x38}, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x29, 0x1a, &(0x7f0000000140), 0x4) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000580)}, 0xc800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', r7, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000280)={r9}) sendmsg$kcm(r10, &(0x7f0000000f40)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000003c0)="a0b1d7431bb41dfd241eba19a5782d3e940494ce17879444965b7f7a418d9a9b07f35614b2d31a9660c17e01311a9ec0291b876a92d95722e3f0674f3df0227b1178d6919d45fff490131c612ec7174894f0596b2ea551e869a590077b93e50d114b06edefe26737c7ac6fd5d91a6c470293859ae02db9b9acdaa423d71c9d5cce0186e61315bdac1cd90c68abfde58de4054377e496bda8da92250b987dbfd7dbec9a84bd443be1e3c9599c9d4d47d1320d0c479b753ce0f54bf1e4b790ce896cf359009da452c7501d5845e7777a7e26525ec573dd66fba2f6cc0bc6d487d5f910f0e481f8ec25", 0xe8}, {&(0x7f00000004c0)="23ef870eff7502a5f1650e5cd31b7790d8ef111dd9911be8201b152f013bf6bbf85786a25831a03511c2f025201491aca3c0a789d3428a1ad0018bea4a6d7246cbeb4d0e6b8678541c25b6851438805eb36480d489befb2f2c6785ee068caaeb1e7d61fc67d5a818acabe088566dff0d7c6b2fe67bfa55547545d10f418f6815f7e12b5cdc382a6b62afc3970e0f1129e35c0893b3bddc676e8fcdcb561a700d9fe0f0d7bcaab7cb418ef7d11c7ee5d9358c187c6f168f7338adbec7a1d76ef331dc40c1f932d3424d6c00d9a24b8a33cd0d8305890959284efb49e9f0f70d516a", 0xe1}, {&(0x7f0000000640)="d9b5868dea775f754853a3a1b90a629183d3f4731bcaca8acdab35dd875b7a174c4236a2ef19a9bef71fa60d06fb366c5a36941f208d2d3e5d45280773a895a5aba80c420b6e6efe661c50b4f15f735dc5f0bdbcb75e596238542096b8f1703611e18304f97c67c19633f5860557a9eb3d0bb59ea3d30fd7ed41998e77f64b96b66bbead2a614e2ee77b305dc218bf4a9c18adeb3460c9ddac752818b3f5986d7a7f8f246bfcd915a69d0fe356847cc663cf8e3f1d35ca5af8d08e135afefac8bdcf4547fa48e6f0af4781c04b90026ce935804968878eeb622f9b4707fda461115f70fb", 0xe4}, {&(0x7f0000001000)="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", 0x101}, {&(0x7f0000000840)="59613c17b237e31f5b66b3e54073ed4037995c5e579a219d86fdb09b70f5c7e247b2779ebc157b2e88e484fd83d7470c1c05d83c11195e37966aa67dfc97d1508a76fb959865335f0706fb4f191679284ad253021cb6c61585c67b2a275f0ef7d62cf445502e5acb10f89090d7037fb90542fba1ea4ee850d4982bec843e250989f2262e9ffefa5dc4788b6a4cfb2092013a0ca987d7a4c58766c3c2812fb060ace3421a13acfac0def55fd13430f18d281c6c451a132ebfcd34145f4d383ff76cba93288827a6800838f9051d0687be3e13d4dabd49908f4d330993dc8db77d57789fe932", 0xe5}, {&(0x7f0000000940)="f3027ac77e73aca8202c07a539c37188ef456629d3fdae1e69aeb6f5b8fdf62982ee7d828cbe27bc5a8279ef0c4aa45e9eea8a1ee11a8993dd467db3e3d360856d143cced03a4fc0b3d6c5d29cb6de39fdcd2b7e456ac8f7539ec624cc1485486d17b30f048b83338025bd02923cc645bf77019d2d17beaa70b248c2c7de03995abe86ac5afb97af45908c012dcbf862e89fec990c8d061585a1732528653b9b2b1005cbecb94ab62be9fe73e58fef71e6dbe4e31cd46e84f2d27b82aea22997fd632022f6d6ba52212426ec6f56b399", 0xd0}], 0x6, &(0x7f0000000ac0)=[{0x60, 0x102, 0x9, "90323f5dcf41f30e0d6e8e7ce2502f9163192a9857ba2a9ae25c8cee603e3167368ec1b1209b8f85451af5b26b9115779921f011a4aa7e7aae569f0ef39e852e4de9995b43242f6a64"}, {0x40, 0x10e, 0x7e18, "a712a819fa7c4d524a8bb75463384bb115c83e0cacc1214c5777bbad6291bfa1a28b19e239e1193dad6f3a"}, {0x28, 0x107, 0x1000, "04d0587ec7dabc44a8581470dd94bd3d6f39765b22ac725c"}, {0x78, 0x103, 0x0, "be0ad42d277f96d819eff677e12bfdfa96fcb95746d4973874b8af5d798e488204cd907e156a771ac922c391b8b2a81ee7b844673101137932e007d889bbc6323417f880a211f02d8cc1dda324c20725ba755dc7fa0ac6090bfb162774e21cbe36a6c7"}, {0x80, 0x10f, 0x8, "75dfaf6b3b7fbb7b39b9995c0cb6cd6fa27167a95cbad390c96092e5f41faa5fd5ca322fd1e72ccf560a9bdb1a05876dcc273ecd4595854bab53c5e648aeb0dd583e144e34390f408752011ef82aab572612d7ad9ac0f4077df702c78100b6573fd1667fd0ca5f0ead4abaded5fa0d36"}, {0xd0, 0x110, 0x100, "6ee89ed4d92a31f1e291b6288fccfff6e2f74e73eae2da394bedc1e081aa99c5cf0be9b8e1928de6f28af9ea2a11d39f5eae6d787f5814b8406d6c9f089b753c0e126ee425e8431ab412210a179842132c0a637d52be3524fc3de6db572979b5cd0c17de55a77f7dea43e27f15f7801cfea7b98707dfdb943f682f427db86933a3f9794897d9f27888c7ecffe1f5fc740b8222b78bdedded9172dfe4a68249cb9c6a860f63b17fd637d89c23bf5bc3ab0f8d76658970ad8ebcc0476b01"}, {0x10, 0x6, 0x46fa}, {0x70, 0x118, 0x6, "d3ec6bee422caec5b59feab7536dcf87907725c59761cb72bb6b1839e7d06382e7e30e99cb46ac60f7d57132383358e8a7069aa65bf65d0ed66c2e6ad07a5e757bb64ad41c72cf653d3b395cd4f38d4de95f317f9c7400e5520317"}, {0x98, 0x118, 0x7, "47365a63882fc20a20c9ba90736cad84397d3f6484f1c6a51dc8dbc70b21fa16d050522f413c95737700edc312cf47179ac46096b11687d2dea5e0b8668951186a6115ee106f127589e4850175d84e96ae04dab62d21e2007208901adebf0906dd5676fcbf1e389c3ad45fa9c59531f9a4e0f820b52ad375f441d596e596cfb87aad14ece785"}, {0x98, 0x10a, 0x8, "ba51310ac83c40c341083fbb8813209bec86bd229546e8bdc9c8390a3f27eba9bd65675e12aca185c21040ef39d3df99282a2b05a05f37e447a52eb416b5f5c69b9cb7fcd2f076baa6ff8026744c2f2ca6a1b0d4bdb4dd1aadd39d8acaeb84e45cfa21675b3364072c1aa02596faf273a3f1f7e71a8518420106fec7ba77c72295f480"}], 0x440}, 0x82) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) r11 = perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)}, 0x40000000) r12 = getpid() perf_event_open(&(0x7f0000000f80)={0x3, 0x80, 0x3, 0x2, 0x2, 0x3, 0x0, 0x2, 0x420, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3253, 0x2, @perf_bp={&(0x7f00000002c0), 0x8}, 0x80a0, 0x5, 0x2, 0x2, 0x2, 0x3ad06055, 0x3, 0x0, 0x6, 0x0, 0xf}, r12, 0xc, r11, 0x1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r13, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRESHEX=0x0], 0x50) kernel console output (not intermixed with test programs): f_link_show_fdinfo+0x380/0x380 [ 684.131798][T22166] __x64_sys_bpf+0x78/0x90 [ 684.136234][T22166] do_syscall_64+0x4c/0xa0 [ 684.140812][T22166] ? clear_bhb_loop+0x30/0x80 [ 684.145481][T22166] ? clear_bhb_loop+0x30/0x80 [ 684.150329][T22166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 684.156265][T22166] RIP: 0033:0x7f2d21d10e59 [ 684.160840][T22166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.180710][T22166] RSP: 002b:00007f2d1ff69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.189283][T22166] RAX: ffffffffffffffda RBX: 00007f2d21f98fa0 RCX: 00007f2d21d10e59 [ 684.197271][T22166] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 684.205242][T22166] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 684.213217][T22166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 684.221275][T22166] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 684.229269][T22166] [ 684.441997][T22172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 685.275968][T22202] FAULT_INJECTION: forcing a failure. [ 685.275968][T22202] name failslab, interval 1, probability 0, space 0, times 0 [ 685.319660][T22200] validate_nla: 8 callbacks suppressed [ 685.319747][T22200] netlink: 'syz.1.6312': attribute type 4 has an invalid length. [ 685.330127][T22202] CPU: 0 PID: 22202 Comm: syz.5.6311 Not tainted syzkaller #0 [ 685.341824][T22202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.352173][T22202] Call Trace: [ 685.356145][T22202] [ 685.358541][T22200] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6312'. [ 685.359294][T22202] dump_stack_lvl+0x188/0x250 [ 685.359341][T22202] ? show_regs_print_info+0x20/0x20 [ 685.359370][T22202] ? load_image+0x410/0x410 [ 685.384801][T22202] ? __might_sleep+0xf0/0xf0 [ 685.389445][T22202] ? __lock_acquire+0x7b50/0x7b50 [ 685.394624][T22202] should_fail+0x383/0x4b0 [ 685.399329][T22202] should_failslab+0x5/0x20 [ 685.404310][T22202] slab_pre_alloc_hook+0x51/0xc0 [ 685.409742][T22202] kmem_cache_alloc_trace+0x47/0x290 [ 685.415078][T22202] ? genl_start+0x14e/0x490 [ 685.419724][T22202] genl_start+0x14e/0x490 [ 685.424214][T22202] __netlink_dump_start+0x3df/0x700 [ 685.429499][T22202] genl_rcv_msg+0xa2e/0xfa0 [ 685.434137][T22202] ? genl_bind+0x370/0x370 [ 685.438694][T22202] ? __bpf_trace_bpf_trace_printk+0x20/0x20 [ 685.444741][T22202] ? genl_rcv_msg+0xfa0/0xfa0 [ 685.449467][T22202] ? genl_start+0x490/0x490 [ 685.454142][T22202] ? genl_lock_dumpit+0x90/0x90 [ 685.459123][T22202] ? perf_trace_lock+0x301/0x390 [ 685.464245][T22202] ? smc_clc_prfx_set4_rcu+0x490/0x490 [ 685.469867][T22202] netlink_rcv_skb+0x1e9/0x430 [ 685.474887][T22202] ? genl_bind+0x370/0x370 [ 685.479375][T22202] ? netlink_ack+0xb10/0xb10 [ 685.485150][T22202] ? down_read+0x1aa/0x2e0 [ 685.490051][T22202] genl_rcv+0x24/0x40 [ 685.494711][T22202] netlink_unicast+0x78f/0x940 [ 685.499836][T22202] netlink_sendmsg+0x8ba/0xbe0 [ 685.504759][T22202] ? netlink_getsockopt+0x570/0x570 [ 685.510545][T22202] ? aa_sock_msg_perm+0x94/0x150 [ 685.515704][T22202] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 685.521110][T22202] ? security_socket_sendmsg+0x7c/0xa0 [ 685.526800][T22202] ? netlink_getsockopt+0x570/0x570 [ 685.532314][T22202] ____sys_sendmsg+0x5be/0x8f0 [ 685.537147][T22202] ? __sys_sendmsg_sock+0x30/0x30 [ 685.542318][T22202] ? import_iovec+0x6f/0xa0 [ 685.547129][T22202] ___sys_sendmsg+0x236/0x2e0 [ 685.552045][T22202] ? __sys_sendmsg+0x290/0x290 [ 685.557056][T22202] ? trace_event_raw_event_lock+0x250/0x250 [ 685.563327][T22202] __se_sys_sendmsg+0x1b7/0x2a0 [ 685.568318][T22202] ? __x64_sys_sendmsg+0x80/0x80 [ 685.573538][T22202] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 685.579851][T22202] ? lockdep_hardirqs_on+0x94/0x140 [ 685.585280][T22202] do_syscall_64+0x4c/0xa0 [ 685.590054][T22202] ? clear_bhb_loop+0x30/0x80 [ 685.594913][T22202] ? clear_bhb_loop+0x30/0x80 [ 685.600840][T22202] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 685.606779][T22202] RIP: 0033:0x7f2ca9d93e59 [ 685.611534][T22202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.631289][T22202] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.640015][T22202] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 685.648115][T22202] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 685.656440][T22202] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 685.664772][T22202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.672950][T22202] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 685.681508][T22202] [ 686.352144][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.358581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.640897][T22232] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 687.378609][T22244] netlink: 'syz.4.6324': attribute type 4 has an invalid length. [ 687.390548][T22244] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6324'. [ 687.427322][T22248] FAULT_INJECTION: forcing a failure. [ 687.427322][T22248] name failslab, interval 1, probability 0, space 0, times 0 [ 687.540931][T22248] CPU: 0 PID: 22248 Comm: syz.5.6326 Not tainted syzkaller #0 [ 687.548460][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 687.558628][T22248] Call Trace: [ 687.561942][T22248] [ 687.564891][T22248] dump_stack_lvl+0x188/0x250 [ 687.569602][T22248] ? show_regs_print_info+0x20/0x20 [ 687.574820][T22248] ? load_image+0x410/0x410 [ 687.579521][T22248] ? __might_sleep+0xf0/0xf0 [ 687.584123][T22248] ? __lock_acquire+0x7b50/0x7b50 [ 687.589444][T22248] should_fail+0x383/0x4b0 [ 687.594109][T22248] should_failslab+0x5/0x20 [ 687.598841][T22248] slab_pre_alloc_hook+0x51/0xc0 [ 687.603909][T22248] kmem_cache_alloc_node+0x47/0x2c0 [ 687.609557][T22248] ? __alloc_skb+0xf4/0x750 [ 687.614072][T22248] __alloc_skb+0xf4/0x750 [ 687.618527][T22248] alloc_skb_with_frags+0xa7/0x720 [ 687.623677][T22248] ? stack_trace_save+0xa6/0xf0 [ 687.628652][T22248] sock_alloc_send_pskb+0x87f/0x9a0 [ 687.633959][T22248] ? verify_lock_unused+0x140/0x140 [ 687.639211][T22248] ? sock_kzfree_s+0x50/0x50 [ 687.643800][T22248] ? trace_event_raw_event_lock+0x250/0x250 [ 687.649694][T22248] __ip_append_data+0x2089/0x3320 [ 687.654710][T22248] ? lock_chain_count+0x20/0x20 [ 687.659561][T22248] ? _local_bh_enable+0xa0/0xa0 [ 687.664548][T22248] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 687.669390][T22248] ? rcu_lock_release+0x9/0x20 [ 687.674402][T22248] ? ip_setup_cork+0x870/0x870 [ 687.679158][T22248] ? ip_setup_cork+0x48f/0x870 [ 687.683928][T22248] ip_make_skb+0x227/0x440 [ 687.688466][T22248] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 687.693389][T22248] ? ip_flush_pending_frames+0x250/0x250 [ 687.699033][T22248] udp_sendmsg+0x1a85/0x2350 [ 687.703629][T22248] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 687.708556][T22248] ? udp_cmsg_send+0x350/0x350 [ 687.713318][T22248] ? mark_lock+0x94/0x320 [ 687.717667][T22248] ? verify_lock_unused+0x140/0x140 [ 687.723001][T22248] udpv6_sendmsg+0xac3/0x2520 [ 687.727809][T22248] ? reacquire_held_locks+0x319/0x5c0 [ 687.733280][T22248] ? udp_v6_early_demux+0xe10/0xe10 [ 687.738644][T22248] ? perf_trace_lock+0xe4/0x390 [ 687.743662][T22248] ? trace_event_raw_event_lock+0x250/0x250 [ 687.749559][T22248] ? lock_chain_count+0x20/0x20 [ 687.754401][T22248] ? __local_bh_enable_ip+0x136/0x1c0 [ 687.759854][T22248] ? lockdep_hardirqs_on+0x94/0x140 [ 687.765130][T22248] ? __local_bh_enable_ip+0x136/0x1c0 [ 687.770706][T22248] ? _local_bh_enable+0xa0/0xa0 [ 687.776099][T22248] ? do_raw_spin_unlock+0x11d/0x230 [ 687.781446][T22248] ? inet_send_prepare+0x1aa/0x250 [ 687.787263][T22248] ? inet_send_prepare+0x1aa/0x250 [ 687.792559][T22248] ? inet6_sendmsg+0x5b/0xd0 [ 687.797138][T22248] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 687.802454][T22248] ____sys_sendmsg+0x5be/0x8f0 [ 687.807248][T22248] ? __sys_sendmsg_sock+0x30/0x30 [ 687.812289][T22248] ? import_iovec+0x6f/0xa0 [ 687.816792][T22248] ___sys_sendmsg+0x236/0x2e0 [ 687.821463][T22248] ? __sys_sendmsg+0x290/0x290 [ 687.826232][T22248] ? trace_event_raw_event_lock+0x250/0x250 [ 687.832304][T22248] __se_sys_sendmsg+0x1b7/0x2a0 [ 687.837149][T22248] ? __x64_sys_sendmsg+0x80/0x80 [ 687.842077][T22248] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 687.848372][T22248] ? lockdep_hardirqs_on+0x94/0x140 [ 687.853655][T22248] do_syscall_64+0x4c/0xa0 [ 687.858096][T22248] ? clear_bhb_loop+0x30/0x80 [ 687.862769][T22248] ? clear_bhb_loop+0x30/0x80 [ 687.867529][T22248] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.873411][T22248] RIP: 0033:0x7f2ca9d93e59 [ 687.877821][T22248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.897419][T22248] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 687.905835][T22248] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 687.913798][T22248] RDX: 0000000000000000 RSI: 0000200000001b80 RDI: 0000000000000003 [ 687.921769][T22248] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 687.929935][T22248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 687.937984][T22248] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 687.945962][T22248] [ 688.091294][T22258] device syzkaller0 entered promiscuous mode [ 688.785792][T22278] netlink: 'syz.3.6339': attribute type 10 has an invalid length. [ 688.801567][T22278] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6339'. [ 688.947512][T22287] netlink: 'syz.2.6340': attribute type 10 has an invalid length. [ 689.024905][T22289] netlink: 'syz.3.6342': attribute type 4 has an invalid length. [ 689.076845][T22289] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6342'. [ 689.422162][T22303] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 689.453329][T22305] netlink: 'syz.1.6347': attribute type 25 has an invalid length. [ 689.481215][T22305] FAULT_INJECTION: forcing a failure. [ 689.481215][T22305] name failslab, interval 1, probability 0, space 0, times 0 [ 689.533926][T22305] CPU: 0 PID: 22305 Comm: syz.1.6347 Not tainted syzkaller #0 [ 689.541760][T22305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.552513][T22305] Call Trace: [ 689.556419][T22305] [ 689.559444][T22305] dump_stack_lvl+0x188/0x250 [ 689.564354][T22305] ? show_regs_print_info+0x20/0x20 [ 689.569822][T22305] ? load_image+0x410/0x410 [ 689.574437][T22305] ? __might_sleep+0xf0/0xf0 [ 689.579227][T22305] ? __lock_acquire+0x7b50/0x7b50 [ 689.584347][T22305] ? __local_bh_enable_ip+0x136/0x1c0 [ 689.589719][T22305] ? lockdep_hardirqs_on+0x94/0x140 [ 689.594912][T22305] should_fail+0x383/0x4b0 [ 689.599348][T22305] should_failslab+0x5/0x20 [ 689.603841][T22305] slab_pre_alloc_hook+0x51/0xc0 [ 689.608780][T22305] kmem_cache_alloc_node+0x47/0x2c0 [ 689.613984][T22305] ? __alloc_skb+0xf4/0x750 [ 689.618589][T22305] __alloc_skb+0xf4/0x750 [ 689.622943][T22305] netlink_ack+0x35c/0xb10 [ 689.627360][T22305] ? trace_event_raw_event_lock+0x250/0x250 [ 689.633244][T22305] ? netlink_dump+0xcd0/0xcd0 [ 689.638082][T22305] ? __copy_skb_header+0x3ba/0x4f0 [ 689.643365][T22305] netlink_rcv_skb+0x267/0x430 [ 689.648381][T22305] ? rtnetlink_bind+0x80/0x80 [ 689.653214][T22305] ? netlink_ack+0xb10/0xb10 [ 689.657803][T22305] netlink_unicast+0x78f/0x940 [ 689.662657][T22305] netlink_sendmsg+0x8ba/0xbe0 [ 689.667419][T22305] ? netlink_getsockopt+0x570/0x570 [ 689.672616][T22305] ? aa_sock_msg_perm+0x94/0x150 [ 689.677721][T22305] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 689.683000][T22305] ? security_socket_sendmsg+0x7c/0xa0 [ 689.688901][T22305] ? netlink_getsockopt+0x570/0x570 [ 689.694114][T22305] ____sys_sendmsg+0x5be/0x8f0 [ 689.699125][T22305] ? __sys_sendmsg_sock+0x30/0x30 [ 689.704166][T22305] ? import_iovec+0x6f/0xa0 [ 689.708675][T22305] ___sys_sendmsg+0x236/0x2e0 [ 689.713347][T22305] ? __sys_sendmsg+0x290/0x290 [ 689.718518][T22305] __se_sys_sendmsg+0x1b7/0x2a0 [ 689.723953][T22305] ? __x64_sys_sendmsg+0x80/0x80 [ 689.728955][T22305] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 689.735047][T22305] ? lockdep_hardirqs_on+0x94/0x140 [ 689.740427][T22305] do_syscall_64+0x4c/0xa0 [ 689.744836][T22305] ? clear_bhb_loop+0x30/0x80 [ 689.749502][T22305] ? clear_bhb_loop+0x30/0x80 [ 689.754168][T22305] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 689.760144][T22305] RIP: 0033:0x7f724d71ae59 [ 689.764563][T22305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.784647][T22305] RSP: 002b:00007f724b973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 689.793623][T22305] RAX: ffffffffffffffda RBX: 00007f724d9a2fa0 RCX: 00007f724d71ae59 [ 689.801970][T22305] RDX: 0000000004004004 RSI: 0000200000000040 RDI: 0000000000000003 [ 689.810056][T22305] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 689.818040][T22305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.826257][T22305] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 689.834268][T22305] [ 690.670517][T22322] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 690.801415][T22324] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 690.907325][T22324] FAULT_INJECTION: forcing a failure. [ 690.907325][T22324] name failslab, interval 1, probability 0, space 0, times 0 [ 690.958252][T22324] CPU: 1 PID: 22324 Comm: syz.2.6353 Not tainted syzkaller #0 [ 690.966350][T22324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.976927][T22324] Call Trace: [ 690.980211][T22324] [ 690.983222][T22324] dump_stack_lvl+0x188/0x250 [ 690.987984][T22324] ? show_regs_print_info+0x20/0x20 [ 690.993171][T22324] ? load_image+0x410/0x410 [ 690.997676][T22324] ? __might_sleep+0xf0/0xf0 [ 691.002349][T22324] ? __lock_acquire+0x7b50/0x7b50 [ 691.007388][T22324] should_fail+0x383/0x4b0 [ 691.011831][T22324] should_failslab+0x5/0x20 [ 691.016433][T22324] slab_pre_alloc_hook+0x51/0xc0 [ 691.021549][T22324] __kmalloc+0x6b/0x340 [ 691.025782][T22324] ? tomoyo_encode+0x28a/0x550 [ 691.030544][T22324] tomoyo_encode+0x28a/0x550 [ 691.035376][T22324] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 691.041341][T22324] tomoyo_path_number_perm+0x251/0x6b0 [ 691.046996][T22324] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 691.052592][T22324] ? verify_lock_unused+0x140/0x140 [ 691.058339][T22324] ? hrtimer_interrupt+0x4c1/0x8b0 [ 691.064078][T22324] ? ktime_get+0x7b/0x270 [ 691.068634][T22324] security_file_ioctl+0x6c/0xa0 [ 691.074063][T22324] __se_sys_ioctl+0x48/0x170 [ 691.078829][T22324] do_syscall_64+0x4c/0xa0 [ 691.083230][T22324] ? clear_bhb_loop+0x30/0x80 [ 691.088105][T22324] ? clear_bhb_loop+0x30/0x80 [ 691.092774][T22324] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 691.098685][T22324] RIP: 0033:0x7ff8ea8d3e59 [ 691.103097][T22324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.122871][T22324] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.131391][T22324] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 691.139351][T22324] RDX: 0000200000000000 RSI: 000000000000891c RDI: 000000000000000a [ 691.147584][T22324] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 691.155731][T22324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.163831][T22324] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 691.172084][T22324] [ 691.186257][T22324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.423666][T22343] netlink: 'syz.2.6359': attribute type 4 has an invalid length. [ 691.440705][T22343] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6359'. [ 693.890521][T22437] netlink: 'syz.1.6388': attribute type 25 has an invalid length. [ 694.816604][T22458] netlink: 199824 bytes leftover after parsing attributes in process `syz.5.6395'. [ 696.635884][T22513] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6414'. [ 696.996355][T22530] netlink: 'syz.3.6421': attribute type 4 has an invalid length. [ 697.056747][T22530] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6421'. [ 698.583052][T22593] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.6444'. [ 699.013110][T22617] netlink: 'syz.4.6450': attribute type 21 has an invalid length. [ 699.028156][T22617] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.044132][T22617] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 699.051740][T22617] IPv6: NLM_F_CREATE should be set when creating new route [ 699.059116][T22617] IPv6: NLM_F_CREATE should be set when creating new route [ 702.450257][T22647] netlink: 'syz.4.6462': attribute type 21 has an invalid length. [ 702.471204][T22647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.895610][T22660] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6467'. [ 703.156342][T22672] FAULT_INJECTION: forcing a failure. [ 703.156342][T22672] name failslab, interval 1, probability 0, space 0, times 0 [ 703.203918][T22672] CPU: 0 PID: 22672 Comm: syz.3.6470 Not tainted syzkaller #0 [ 703.211695][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 703.221775][T22672] Call Trace: [ 703.225067][T22672] [ 703.228005][T22672] dump_stack_lvl+0x188/0x250 [ 703.232878][T22672] ? show_regs_print_info+0x20/0x20 [ 703.238104][T22672] ? load_image+0x410/0x410 [ 703.242724][T22672] ? __might_sleep+0xf0/0xf0 [ 703.247528][T22672] ? __lock_acquire+0x7b50/0x7b50 [ 703.253321][T22672] ? netlink_insert+0xe90/0x11f0 [ 703.258475][T22672] should_fail+0x383/0x4b0 [ 703.263010][T22672] should_failslab+0x5/0x20 [ 703.267724][T22672] slab_pre_alloc_hook+0x51/0xc0 [ 703.272733][T22672] kmem_cache_alloc_node+0x47/0x2c0 [ 703.277965][T22672] ? __alloc_skb+0xf4/0x750 [ 703.282581][T22672] __alloc_skb+0xf4/0x750 [ 703.286924][T22672] netlink_sendmsg+0x654/0xbe0 [ 703.291716][T22672] ? netlink_getsockopt+0x570/0x570 [ 703.296928][T22672] ? aa_sock_msg_perm+0x94/0x150 [ 703.301879][T22672] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 703.307198][T22672] ? security_socket_sendmsg+0x7c/0xa0 [ 703.312644][T22672] ? netlink_getsockopt+0x570/0x570 [ 703.317834][T22672] ____sys_sendmsg+0x5be/0x8f0 [ 703.322685][T22672] ? __sys_sendmsg_sock+0x30/0x30 [ 703.327699][T22672] ? import_iovec+0x6f/0xa0 [ 703.332198][T22672] ___sys_sendmsg+0x236/0x2e0 [ 703.336952][T22672] ? __sys_sendmsg+0x290/0x290 [ 703.341834][T22672] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 703.348279][T22672] __se_sys_sendmsg+0x1b7/0x2a0 [ 703.353132][T22672] ? __x64_sys_sendmsg+0x80/0x80 [ 703.358057][T22672] ? lockdep_hardirqs_on+0x94/0x140 [ 703.363927][T22672] do_syscall_64+0x4c/0xa0 [ 703.368360][T22672] ? clear_bhb_loop+0x30/0x80 [ 703.373109][T22672] ? clear_bhb_loop+0x30/0x80 [ 703.377859][T22672] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 703.383740][T22672] RIP: 0033:0x7f2d21d10e59 [ 703.388144][T22672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 703.407753][T22672] RSP: 002b:00007f2d1ff69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 703.416161][T22672] RAX: ffffffffffffffda RBX: 00007f2d21f98fa0 RCX: 00007f2d21d10e59 [ 703.424124][T22672] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 703.432089][T22672] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 703.440289][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 703.448555][T22672] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 703.456849][T22672] [ 703.608402][T22683] netlink: 'syz.3.6474': attribute type 21 has an invalid length. [ 703.648211][T22683] IPv6: NLM_F_CREATE should be specified when creating new route [ 703.707514][T22683] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 703.715063][T22683] IPv6: NLM_F_CREATE should be set when creating new route [ 703.722834][T22683] IPv6: NLM_F_CREATE should be set when creating new route [ 704.835791][T22725] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.6484'. [ 704.982387][T22731] netlink: 'syz.5.6488': attribute type 21 has an invalid length. [ 705.028992][T22731] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 705.678951][T22755] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.6497'. [ 706.013808][T22765] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.6500'. [ 706.185662][T22774] syz.3.6503[22774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.185803][T22774] syz.3.6503[22774] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 706.795435][T22790] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.6511'. [ 706.864511][T22790] openvswitch: netlink: Message has 20476 unknown bytes. [ 707.176988][T22793] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.6512'. [ 709.148768][T22773] delete_channel: no stack [ 709.616625][T22818] netlink: 209860 bytes leftover after parsing attributes in process `syz.1.6522'. [ 709.651027][T22818] openvswitch: netlink: Message has 4 unknown bytes. [ 709.680540][T22818] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 709.691398][T22818] syzkaller1: linktype set to 825 [ 709.735609][T22818] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 709.762367][T22818] netlink: 611 bytes leftover after parsing attributes in process `syz.1.6522'. [ 710.145283][T22829] netlink: 'syz.1.6525': attribute type 10 has an invalid length. [ 710.258256][T22829] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.296747][T22829] bond0: (slave team0): Enslaving as an active interface with an up link [ 710.515547][T22838] syz.1.6528[22838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 710.515693][T22838] syz.1.6528[22838] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 713.470098][T22837] delete_channel: no stack [ 713.676080][T22875] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.6542'. [ 714.282934][T22894] netlink: 'syz.1.6549': attribute type 21 has an invalid length. [ 714.323101][T22894] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 714.554294][T22906] syz.2.6551[22906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.554429][T22906] syz.2.6551[22906] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 714.635470][T22909] IPv6: Can't replace route, no match found [ 715.441133][T22917] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.6554'. [ 716.146631][T22916] netlink: 'syz.1.6555': attribute type 10 has an invalid length. [ 716.240521][T22916] team0: Port device wlan1 added [ 716.365135][T22919] device syzkaller0 entered promiscuous mode [ 717.603868][T22904] delete_channel: no stack [ 717.945406][T22949] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6566'. [ 718.141819][T22954] netlink: 'syz.4.6568': attribute type 21 has an invalid length. [ 718.160343][T22954] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 720.225407][T23068] netlink: 'syz.1.6590': attribute type 21 has an invalid length. [ 720.540458][T23074] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6593'. [ 720.762677][T23087] netlink: 'syz.5.6597': attribute type 4 has an invalid length. [ 720.770469][T23087] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6597'. [ 720.841495][T23087] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 720.923136][T23086] netlink: 'syz.3.6598': attribute type 10 has an invalid length. [ 721.050423][T23086] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.107479][T23086] bond0: (slave team0): Enslaving as an active interface with an up link [ 721.149972][T23090] netlink: 'syz.4.6599': attribute type 10 has an invalid length. [ 721.264693][T23090] team0: Port device geneve1 added [ 721.529710][T23103] device syzkaller0 entered promiscuous mode [ 721.540742][T23109] netlink: 'syz.4.6603': attribute type 21 has an invalid length. [ 722.003575][T23119] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6606'. [ 722.200045][T23128] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6610'. [ 722.542327][T23139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6613'. [ 722.636792][T23137] netlink: 'syz.1.6613': attribute type 13 has an invalid length. [ 722.671214][T23137] netlink: 160 bytes leftover after parsing attributes in process `syz.1.6613'. [ 722.710255][T23144] netlink: 207508 bytes leftover after parsing attributes in process `syz.5.6615'. [ 722.842361][T23137] erspan0: refused to change device tx_queue_len [ 722.849236][T23137] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 723.117159][T23149] device syzkaller0 entered promiscuous mode [ 723.606879][T23161] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.6621'. [ 723.710641][T23167] netlink: 'syz.3.6620': attribute type 21 has an invalid length. [ 724.119231][T23182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6627'. [ 724.660778][T23196] netlink: 'syz.1.6631': attribute type 4 has an invalid length. [ 724.688817][T23196] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6631'. [ 724.883657][T23196] wlan1: mtu less than device minimum [ 724.900651][T23196] team0: Device wlan1 failed to change mtu [ 725.568357][T23231] FAULT_INJECTION: forcing a failure. [ 725.568357][T23231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 725.651075][T23231] CPU: 1 PID: 23231 Comm: syz.2.6643 Not tainted syzkaller #0 [ 725.658590][T23231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 725.668651][T23231] Call Trace: [ 725.671930][T23231] [ 725.674875][T23231] dump_stack_lvl+0x188/0x250 [ 725.679571][T23231] ? show_regs_print_info+0x20/0x20 [ 725.685025][T23231] ? load_image+0x410/0x410 [ 725.689763][T23231] ? __lock_acquire+0x7b50/0x7b50 [ 725.694960][T23231] should_fail+0x383/0x4b0 [ 725.699390][T23231] _copy_from_user+0x2e/0x170 [ 725.704391][T23231] __sys_bpf+0x26d/0x6f0 [ 725.708656][T23231] ? bpf_link_show_fdinfo+0x380/0x380 [ 725.714220][T23231] __x64_sys_bpf+0x78/0x90 [ 725.718656][T23231] do_syscall_64+0x4c/0xa0 [ 725.723250][T23231] ? clear_bhb_loop+0x30/0x80 [ 725.728229][T23231] ? clear_bhb_loop+0x30/0x80 [ 725.732917][T23231] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 725.738809][T23231] RIP: 0033:0x7ff8ea8d3e59 [ 725.743239][T23231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.764260][T23231] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 725.772800][T23231] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 725.781073][T23231] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 725.789537][T23231] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 725.797910][T23231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 725.806183][T23231] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 725.814357][T23231] [ 725.831065][T23235] __nla_validate_parse: 1 callbacks suppressed [ 725.831099][T23235] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6642'. [ 726.282040][T23245] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.6646'. [ 726.577657][T23258] netlink: 'syz.5.6650': attribute type 3 has an invalid length. [ 726.586765][T23258] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.6650'. [ 726.714415][T23258] netlink: 'syz.5.6650': attribute type 39 has an invalid length. [ 726.934608][T23265] netlink: 'syz.2.6654': attribute type 4 has an invalid length. [ 726.981137][T23265] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6654'. [ 727.118946][T23265] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 727.424798][T23287] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6661'. [ 727.612278][T23294] netlink: 'syz.5.6663': attribute type 21 has an invalid length. [ 727.655347][T23294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.148514][T23311] netlink: 'syz.4.6670': attribute type 4 has an invalid length. [ 728.178446][T23311] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6670'. [ 728.227653][T23311] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 728.515346][T23326] netlink: 4079 bytes leftover after parsing attributes in process `syz.2.6675'. [ 728.646419][T23328] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6676'. [ 728.672852][T23332] FAULT_INJECTION: forcing a failure. [ 728.672852][T23332] name failslab, interval 1, probability 0, space 0, times 0 [ 728.694538][T23330] netlink: 'syz.1.6677': attribute type 21 has an invalid length. [ 728.717371][T23330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 728.741707][T23332] CPU: 1 PID: 23332 Comm: syz.5.6678 Not tainted syzkaller #0 [ 728.749579][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 728.759758][T23332] Call Trace: [ 728.763170][T23332] [ 728.766457][T23332] dump_stack_lvl+0x188/0x250 [ 728.771162][T23332] ? show_regs_print_info+0x20/0x20 [ 728.777826][T23332] ? load_image+0x410/0x410 [ 728.782479][T23332] ? __might_sleep+0xf0/0xf0 [ 728.787597][T23332] ? __lock_acquire+0x7b50/0x7b50 [ 728.793161][T23332] ? __local_bh_enable_ip+0x136/0x1c0 [ 728.798867][T23332] should_fail+0x383/0x4b0 [ 728.803340][T23332] should_failslab+0x5/0x20 [ 728.808631][T23332] slab_pre_alloc_hook+0x51/0xc0 [ 728.813969][T23332] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 728.819877][T23332] ? __get_vm_area_node+0x119/0x2d0 [ 728.825612][T23332] __get_vm_area_node+0x119/0x2d0 [ 728.831014][T23332] __vmalloc_node_range+0xef/0x8b0 [ 728.837047][T23332] ? netlink_sendmsg+0x5ec/0xbe0 [ 728.842378][T23332] ? netlink_data_ready+0x10/0x10 [ 728.847721][T23332] ? netlink_sendmsg+0x5ec/0xbe0 [ 728.852695][T23332] vmalloc+0x75/0x80 [ 728.856602][T23332] ? netlink_sendmsg+0x5ec/0xbe0 [ 728.862010][T23332] netlink_sendmsg+0x5ec/0xbe0 [ 728.866908][T23332] ? netlink_getsockopt+0x570/0x570 [ 728.872208][T23332] ? aa_sock_msg_perm+0x94/0x150 [ 728.877150][T23332] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 728.882436][T23332] ? security_socket_sendmsg+0x7c/0xa0 [ 728.887994][T23332] sock_write_iter+0x2a6/0x3a0 [ 728.892775][T23332] ? sock_read_iter+0x380/0x380 [ 728.898023][T23332] ? memset+0x1e/0x40 [ 728.902025][T23332] ? iov_iter_init+0xb4/0x170 [ 728.907077][T23332] vfs_write+0x748/0xd70 [ 728.911778][T23332] ? file_end_write+0x250/0x250 [ 728.916792][T23332] ? __fget_files+0x402/0x470 [ 728.921517][T23332] ? __fdget_pos+0x1e2/0x370 [ 728.926118][T23332] ? ksys_write+0x70/0x260 [ 728.930719][T23332] ksys_write+0x153/0x260 [ 728.935687][T23332] ? __ia32_sys_read+0x80/0x80 [ 728.941489][T23332] ? lockdep_hardirqs_on+0x94/0x140 [ 728.946881][T23332] do_syscall_64+0x4c/0xa0 [ 728.951380][T23332] ? clear_bhb_loop+0x30/0x80 [ 728.956056][T23332] ? clear_bhb_loop+0x30/0x80 [ 728.960767][T23332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 728.966677][T23332] RIP: 0033:0x7f2ca9d93e59 [ 728.971187][T23332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.991536][T23332] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.000205][T23332] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 729.008196][T23332] RDX: 000000000000fe33 RSI: 00002000000004c0 RDI: 0000000000000003 [ 729.017247][T23332] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 729.025455][T23332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.033843][T23332] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 729.041970][T23332] [ 729.089679][T23332] syz.5.6678: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 729.126055][T23332] CPU: 1 PID: 23332 Comm: syz.5.6678 Not tainted syzkaller #0 [ 729.133717][T23332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 729.144209][T23332] Call Trace: [ 729.147517][T23332] [ 729.150687][T23332] dump_stack_lvl+0x188/0x250 [ 729.155678][T23332] ? rcu_lock_release+0x5/0x20 [ 729.160469][T23332] ? show_regs_print_info+0x20/0x20 [ 729.166053][T23332] ? load_image+0x410/0x410 [ 729.170620][T23332] warn_alloc+0x245/0x320 [ 729.175111][T23332] ? zone_watermark_ok_safe+0x250/0x250 [ 729.180797][T23332] ? kmem_cache_alloc_node_trace+0x1bc/0x2f0 [ 729.187009][T23332] ? __get_vm_area_node+0x119/0x2d0 [ 729.192309][T23332] __vmalloc_node_range+0x2b1/0x8b0 [ 729.197528][T23332] ? netlink_data_ready+0x10/0x10 [ 729.202615][T23332] ? netlink_sendmsg+0x5ec/0xbe0 [ 729.207635][T23332] vmalloc+0x75/0x80 [ 729.211575][T23332] ? netlink_sendmsg+0x5ec/0xbe0 [ 729.216656][T23332] netlink_sendmsg+0x5ec/0xbe0 [ 729.221506][T23332] ? netlink_getsockopt+0x570/0x570 [ 729.226758][T23332] ? aa_sock_msg_perm+0x94/0x150 [ 729.231748][T23332] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 729.237080][T23332] ? security_socket_sendmsg+0x7c/0xa0 [ 729.242592][T23332] sock_write_iter+0x2a6/0x3a0 [ 729.247394][T23332] ? sock_read_iter+0x380/0x380 [ 729.252384][T23332] ? memset+0x1e/0x40 [ 729.256398][T23332] ? iov_iter_init+0xb4/0x170 [ 729.261122][T23332] vfs_write+0x748/0xd70 [ 729.265421][T23332] ? file_end_write+0x250/0x250 [ 729.270596][T23332] ? __fget_files+0x402/0x470 [ 729.275584][T23332] ? __fdget_pos+0x1e2/0x370 [ 729.280328][T23332] ? ksys_write+0x70/0x260 [ 729.284871][T23332] ksys_write+0x153/0x260 [ 729.289236][T23332] ? __ia32_sys_read+0x80/0x80 [ 729.294035][T23332] ? lockdep_hardirqs_on+0x94/0x140 [ 729.299450][T23332] do_syscall_64+0x4c/0xa0 [ 729.303897][T23332] ? clear_bhb_loop+0x30/0x80 [ 729.308595][T23332] ? clear_bhb_loop+0x30/0x80 [ 729.313385][T23332] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 729.319772][T23332] RIP: 0033:0x7f2ca9d93e59 [ 729.324229][T23332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.343975][T23332] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.352427][T23332] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 729.361059][T23332] RDX: 000000000000fe33 RSI: 00002000000004c0 RDI: 0000000000000003 [ 729.369072][T23332] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 729.377346][T23332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.385342][T23332] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 729.393606][T23332] [ 729.461045][T23332] Mem-Info: [ 729.464382][T23332] active_anon:285 inactive_anon:11864 isolated_anon:0 [ 729.464382][T23332] active_file:22406 inactive_file:39235 isolated_file:0 [ 729.464382][T23332] unevictable:768 dirty:342 writeback:0 [ 729.464382][T23332] slab_reclaimable:21012 slab_unreclaimable:97645 [ 729.464382][T23332] mapped:30265 shmem:1643 pagetables:739 bounce:0 [ 729.464382][T23332] kernel_misc_reclaimable:0 [ 729.464382][T23332] free:1361412 free_pcp:11162 free_cma:0 [ 729.512617][T23332] Node 0 active_anon:1108kB inactive_anon:46944kB active_file:89424kB inactive_file:156940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121060kB dirty:1368kB writeback:0kB shmem:4492kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:13012kB pagetables:2956kB all_unreclaimable? no [ 729.548621][T23332] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 729.626334][T23332] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 729.679751][T23332] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 729.692306][T23332] Node 0 DMA32 free:1510644kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1108kB inactive_anon:46744kB active_file:89424kB inactive_file:156940kB unevictable:1536kB writepending:1368kB present:3129332kB managed:2606524kB mlocked:0kB bounce:0kB free_pcp:41184kB local_pcp:21416kB free_cma:0kB [ 729.759195][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 729.766782][T23332] Node 0 Normal free:8kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB [ 729.804267][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 729.809385][T23332] Node 1 Normal free:3920300kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:3868kB local_pcp:3868kB free_cma:0kB [ 729.848910][T23332] lowmem_reserve[]: 0 0 0 0 0 [ 729.876176][T23332] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 729.923589][T23332] Node 0 DMA32: 1377*4kB (UME) 1122*8kB (UME) 1402*16kB (UME) 942*32kB (UME) 293*64kB (UME) 278*128kB (UME) 66*256kB (UM) 20*512kB (UM) 4*1024kB (UM) 7*2048kB (ME) 328*4096kB (M) = 1510452kB [ 729.976046][T23351] FAULT_INJECTION: forcing a failure. [ 729.976046][T23351] name failslab, interval 1, probability 0, space 0, times 0 [ 730.025028][T23332] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 730.031286][T23351] CPU: 1 PID: 23351 Comm: syz.1.6684 Not tainted syzkaller #0 [ 730.045188][T23351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 730.055264][T23351] Call Trace: [ 730.058565][T23351] [ 730.061601][T23351] dump_stack_lvl+0x188/0x250 [ 730.066067][T23332] Node 1 Normal: [ 730.066299][T23351] ? show_regs_print_info+0x20/0x20 [ 730.066308][T23332] 187*4kB [ 730.066323][T23351] ? load_image+0x410/0x410 [ 730.082942][T23351] ? __might_sleep+0xf0/0xf0 [ 730.087667][T23351] ? __lock_acquire+0x7b50/0x7b50 [ 730.088538][T23332] (UME) [ 730.092739][T23351] ? netlink_insert+0xe90/0x11f0 [ 730.092769][T23351] should_fail+0x383/0x4b0 [ 730.092793][T23351] should_failslab+0x5/0x20 [ 730.092808][T23351] slab_pre_alloc_hook+0x51/0xc0 [ 730.092826][T23351] kmem_cache_alloc_node+0x47/0x2c0 [ 730.092840][T23351] ? __alloc_skb+0xf4/0x750 [ 730.092858][T23351] __alloc_skb+0xf4/0x750 [ 730.092877][T23351] netlink_sendmsg+0x654/0xbe0 [ 730.092902][T23351] ? netlink_getsockopt+0x570/0x570 [ 730.092929][T23351] ? aa_sock_msg_perm+0x94/0x150 [ 730.092947][T23351] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 730.114742][T23332] 48*8kB [ 730.115781][T23351] ? security_socket_sendmsg+0x7c/0xa0 [ 730.115809][T23351] ? netlink_getsockopt+0x570/0x570 [ 730.162973][T23332] (UME) [ 730.165084][T23351] ____sys_sendmsg+0x5be/0x8f0 [ 730.165119][T23351] ? __sys_sendmsg_sock+0x30/0x30 [ 730.177782][T23351] ? import_iovec+0x6f/0xa0 [ 730.179975][T23332] 28*16kB [ 730.182301][T23351] ___sys_sendmsg+0x236/0x2e0 [ 730.182333][T23351] ? __sys_sendmsg+0x290/0x290 [ 730.182361][T23351] ? trace_event_raw_event_lock+0x250/0x250 [ 730.182378][T23351] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 730.182415][T23351] __se_sys_sendmsg+0x1b7/0x2a0 [ 730.182435][T23351] ? __x64_sys_sendmsg+0x80/0x80 [ 730.194754][T23332] (UME) [ 730.195033][T23351] ? syscall_enter_from_user_mode+0x2a/0x70 [ 730.220586][T23332] 190*32kB [ 730.220745][T23351] do_syscall_64+0x4c/0xa0 [ 730.234604][T23351] ? clear_bhb_loop+0x30/0x80 [ 730.239305][T23351] ? clear_bhb_loop+0x30/0x80 [ 730.244264][T23351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 730.249296][T23332] (UME) [ 730.250455][T23351] RIP: 0033:0x7f724d71ae59 [ 730.250479][T23351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.267743][T23332] 71*64kB [ 730.277767][T23351] RSP: 002b:00007f724b973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 730.277795][T23351] RAX: ffffffffffffffda RBX: 00007f724d9a2fa0 RCX: 00007f724d71ae59 [ 730.277807][T23351] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 730.277817][T23351] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 730.277828][T23351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.277838][T23351] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 730.277864][T23351] [ 730.347294][T23332] (UME) 26*128kB (UE) 11*256kB (UME) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UM) 951*4096kB (M) = 3920300kB [ 730.360751][T23332] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.388146][T23353] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6685'. [ 730.399773][T23332] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 730.427840][T23332] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 730.448895][T23353] netlink: 'syz.1.6685': attribute type 9 has an invalid length. [ 730.479335][T23332] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 730.492078][T23353] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6685'. [ 730.509018][T23332] 63284 total pagecache pages [ 730.516420][T23332] 0 pages in swap cache [ 730.527945][T23332] Swap cache stats: add 0, delete 0, find 0/0 [ 730.537357][T23332] Free swap = 124996kB [ 730.571128][T23332] Total swap = 124996kB [ 730.580485][T23332] 2097051 pages RAM [ 730.597905][T23332] 0 pages HighMem/MovableOnly [ 730.617087][T23332] 411497 pages reserved [ 730.629123][T23332] 0 pages cma reserved [ 730.777825][T23363] netlink: 'syz.5.6690': attribute type 21 has an invalid length. [ 730.789086][T23363] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 730.933340][T23369] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.6692'. [ 730.969500][T23371] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6693'. [ 731.026164][T23371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.071375][T23371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.100207][T23371] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 731.128964][T23371] bond0 (unregistering): Released all slaves [ 731.245908][T23384] netlink: 1010 bytes leftover after parsing attributes in process `syz.4.6697'. [ 731.406914][T23388] FAULT_INJECTION: forcing a failure. [ 731.406914][T23388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.461794][T23383] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6697'. [ 731.524623][T23388] CPU: 0 PID: 23388 Comm: syz.5.6698 Not tainted syzkaller #0 [ 731.532840][T23388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 731.543227][T23388] Call Trace: [ 731.546612][T23388] [ 731.549753][T23388] dump_stack_lvl+0x188/0x250 [ 731.554678][T23388] ? show_regs_print_info+0x20/0x20 [ 731.559916][T23388] ? load_image+0x410/0x410 [ 731.564449][T23388] ? __lock_acquire+0x7b50/0x7b50 [ 731.569587][T23388] should_fail+0x383/0x4b0 [ 731.574031][T23388] _copy_from_user+0x2e/0x170 [ 731.578822][T23388] iovec_from_user+0x142/0x370 [ 731.583794][T23388] __import_iovec+0x70/0x490 [ 731.588413][T23388] import_iovec+0x6f/0xa0 [ 731.592858][T23388] ___sys_sendmsg+0x1fd/0x2e0 [ 731.597558][T23388] ? __sys_sendmsg+0x290/0x290 [ 731.602533][T23388] ? trace_event_raw_event_lock+0x250/0x250 [ 731.608483][T23388] __se_sys_sendmsg+0x1b7/0x2a0 [ 731.613455][T23388] ? __x64_sys_sendmsg+0x80/0x80 [ 731.619937][T23388] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 731.626086][T23388] ? lockdep_hardirqs_on+0x94/0x140 [ 731.631703][T23388] do_syscall_64+0x4c/0xa0 [ 731.636232][T23388] ? clear_bhb_loop+0x30/0x80 [ 731.640931][T23388] ? clear_bhb_loop+0x30/0x80 [ 731.645631][T23388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 731.651547][T23388] RIP: 0033:0x7f2ca9d93e59 [ 731.656063][T23388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.675948][T23388] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.684468][T23388] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 731.692731][T23388] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 731.700813][T23388] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 731.708805][T23388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.717320][T23388] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 731.725448][T23388] [ 731.928147][T23390] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.937046][T23390] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.077299][T23399] netlink: 'syz.2.6703': attribute type 21 has an invalid length. [ 732.111347][T23399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 732.298215][T23410] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.6708'. [ 732.326520][T23411] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.6707'. [ 732.341964][T23410] openvswitch: netlink: Message has 20476 unknown bytes. [ 732.840622][T23431] netlink: 'syz.4.6717': attribute type 21 has an invalid length. [ 732.862731][T23431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 733.751842][T23442] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.6720'. [ 733.772200][T23442] openvswitch: netlink: Duplicate key (type 0). [ 733.842973][T23445] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6722'. [ 733.865478][T23445] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6722'. [ 733.879339][T23447] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.6721'. [ 734.463112][T23467] netlink: 'syz.3.6728': attribute type 21 has an invalid length. [ 734.474749][T23467] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 735.098062][T23483] netlink: 'syz.5.6744': attribute type 4 has an invalid length. [ 735.717047][T23496] FAULT_INJECTION: forcing a failure. [ 735.717047][T23496] name failslab, interval 1, probability 0, space 0, times 0 [ 735.908068][T23496] CPU: 1 PID: 23496 Comm: syz.3.6736 Not tainted syzkaller #0 [ 735.915857][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 735.925930][T23496] Call Trace: [ 735.929221][T23496] [ 735.932246][T23496] dump_stack_lvl+0x188/0x250 [ 735.937040][T23496] ? show_regs_print_info+0x20/0x20 [ 735.942253][T23496] ? load_image+0x410/0x410 [ 735.946864][T23496] ? __might_sleep+0xf0/0xf0 [ 735.951564][T23496] ? __lock_acquire+0x7b50/0x7b50 [ 735.956716][T23496] should_fail+0x383/0x4b0 [ 735.961351][T23496] should_failslab+0x5/0x20 [ 735.965879][T23496] slab_pre_alloc_hook+0x51/0xc0 [ 735.970834][T23496] ? __alloc_file+0x25/0x240 [ 735.975458][T23496] kmem_cache_alloc+0x3d/0x280 [ 735.980326][T23496] ? mark_lock+0x94/0x320 [ 735.984717][T23496] __alloc_file+0x25/0x240 [ 735.989172][T23496] alloc_empty_file+0x90/0x180 [ 735.993951][T23496] path_openat+0x11c/0x2fb0 [ 735.998483][T23496] ? __lock_acquire+0x13dc/0x7b50 [ 736.003528][T23496] ? stack_trace_snprint+0xe0/0xe0 [ 736.008830][T23496] ? verify_lock_unused+0x140/0x140 [ 736.014305][T23496] ? perf_trace_lock+0xe4/0x390 [ 736.019301][T23496] ? slab_post_alloc_hook+0x4c/0x380 [ 736.024605][T23496] ? verify_lock_unused+0x140/0x140 [ 736.029823][T23496] ? trace_event_raw_event_lock+0x250/0x250 [ 736.035729][T23496] ? do_filp_open+0x400/0x400 [ 736.040423][T23496] ? perf_trace_lock+0xe4/0x390 [ 736.045301][T23496] ? trace_event_raw_event_lock+0x250/0x250 [ 736.051310][T23496] do_filp_open+0x1df/0x400 [ 736.056095][T23496] ? vfs_tmpfile+0x300/0x300 [ 736.060983][T23496] ? _raw_spin_unlock+0x24/0x40 [ 736.065842][T23496] ? alloc_fd+0x59e/0x650 [ 736.070477][T23496] do_sys_openat2+0x14b/0x500 [ 736.075164][T23496] ? __lock_acquire+0x7b50/0x7b50 [ 736.080298][T23496] ? do_sys_open+0xe0/0xe0 [ 736.084819][T23496] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 736.090825][T23496] ? lock_chain_count+0x20/0x20 [ 736.095704][T23496] __x64_sys_openat+0x135/0x160 [ 736.100577][T23496] do_syscall_64+0x4c/0xa0 [ 736.105010][T23496] ? clear_bhb_loop+0x30/0x80 [ 736.109699][T23496] ? clear_bhb_loop+0x30/0x80 [ 736.114569][T23496] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 736.120471][T23496] RIP: 0033:0x7f2d21cd168e [ 736.125004][T23496] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 736.145234][T23496] RSP: 002b:00007f2d1ff68ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 736.153965][T23496] RAX: ffffffffffffffda RBX: 00007f2d1ff696c0 RCX: 00007f2d21cd168e [ 736.162218][T23496] RDX: 0000000000000000 RSI: 00007f2d1ff68f90 RDI: ffffffffffffff9c [ 736.170299][T23496] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 736.178379][T23496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 736.186631][T23496] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 736.194727][T23496] [ 736.616440][T23508] netlink: 'syz.4.6741': attribute type 21 has an invalid length. [ 736.662180][T23508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 736.897444][T23517] netlink: 'syz.3.6746': attribute type 4 has an invalid length. [ 736.915692][T23524] __nla_validate_parse: 2 callbacks suppressed [ 736.915710][T23524] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.6749'. [ 736.929459][T23517] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.6746'. [ 736.991144][T23529] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6746'. [ 737.020939][T23525] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.6746'. [ 737.107655][T23532] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.115228][T23532] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.721885][T23553] netlink: 'syz.4.6759': attribute type 21 has an invalid length. [ 737.777124][T23553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.075506][T23561] netlink: 65055 bytes leftover after parsing attributes in process `syz.5.6762'. [ 738.300791][T23571] netlink: 'syz.1.6764': attribute type 4 has an invalid length. [ 738.344881][T23574] netlink: 1010 bytes leftover after parsing attributes in process `syz.1.6764'. [ 738.377557][T23571] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.6764'. [ 738.383433][T23574] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6764'. [ 738.912347][T23590] netlink: 'syz.3.6771': attribute type 21 has an invalid length. [ 738.954594][T23590] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 738.991760][T23592] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.000699][T23592] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.087407][T23621] netlink: 1010 bytes leftover after parsing attributes in process `syz.2.6780'. [ 740.110635][T23618] netlink: 'syz.2.6780': attribute type 4 has an invalid length. [ 740.119413][T23618] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.6780'. [ 740.145767][T23625] netlink: 'syz.3.6786': attribute type 21 has an invalid length. [ 740.175793][T23625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 740.825454][T23641] netlink: 'syz.1.6791': attribute type 9 has an invalid length. [ 741.563414][T23659] FAULT_INJECTION: forcing a failure. [ 741.563414][T23659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.591132][T23659] CPU: 1 PID: 23659 Comm: syz.5.6796 Not tainted syzkaller #0 [ 741.598642][T23659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 741.608709][T23659] Call Trace: [ 741.612000][T23659] [ 741.614939][T23659] dump_stack_lvl+0x188/0x250 [ 741.619643][T23659] ? show_regs_print_info+0x20/0x20 [ 741.625347][T23659] ? load_image+0x410/0x410 [ 741.629900][T23659] ? __lock_acquire+0x7b50/0x7b50 [ 741.635018][T23659] should_fail+0x383/0x4b0 [ 741.639738][T23659] strncpy_from_user+0x32/0x350 [ 741.644608][T23659] getname_flags+0xf2/0x4f0 [ 741.649227][T23659] do_sys_openat2+0xdd/0x500 [ 741.653831][T23659] ? do_sys_open+0xe0/0xe0 [ 741.658278][T23659] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 741.664746][T23659] __x64_sys_openat+0x135/0x160 [ 741.669627][T23659] do_syscall_64+0x4c/0xa0 [ 741.674063][T23659] ? clear_bhb_loop+0x30/0x80 [ 741.678924][T23659] ? clear_bhb_loop+0x30/0x80 [ 741.683631][T23659] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 741.689945][T23659] RIP: 0033:0x7f2ca9d93e59 [ 741.694386][T23659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.714277][T23659] RSP: 002b:00007f2ca7fec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 741.722809][T23659] RAX: ffffffffffffffda RBX: 00007f2caa01bfa0 RCX: 00007f2ca9d93e59 [ 741.730901][T23659] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 741.738980][T23659] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 741.747112][T23659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.755186][T23659] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 741.763463][T23659] [ 741.853139][T23647] device syzkaller0 entered promiscuous mode [ 742.201122][T23675] netlink: 'syz.4.6800': attribute type 21 has an invalid length. [ 742.211077][T23675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 742.453916][T23681] netlink: 'syz.1.6803': attribute type 4 has an invalid length. [ 742.499687][T23681] __nla_validate_parse: 4 callbacks suppressed [ 742.500460][T23681] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6803'. [ 742.678131][T23688] netlink: 'syz.1.6804': attribute type 4 has an invalid length. [ 742.696241][T23688] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6804'. [ 742.784168][T23688] wlan1: mtu less than device minimum [ 742.790186][T23688] team0: Device wlan1 failed to change mtu [ 742.954683][T23692] netlink: 'syz.1.6805': attribute type 4 has an invalid length. [ 742.997408][T23692] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.6805'. [ 744.047594][T23714] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6811'. [ 744.126641][T23718] netlink: 'syz.5.6812': attribute type 21 has an invalid length. [ 744.183900][T23718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 744.276850][T23731] netlink: 'syz.2.6819': attribute type 4 has an invalid length. [ 744.303535][T23731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6819'. [ 744.380558][T23731] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 745.736149][T23775] netlink: 'syz.5.6831': attribute type 21 has an invalid length. [ 745.764049][T23775] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.288908][T23798] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6839'. [ 746.316779][T23798] openvswitch: netlink: Message has 20476 unknown bytes. [ 746.458153][T23808] netlink: 'syz.1.6845': attribute type 21 has an invalid length. [ 746.550145][T23808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.702282][T23819] FAULT_INJECTION: forcing a failure. [ 746.702282][T23819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.758077][T23820] netlink: 'syz.5.6847': attribute type 4 has an invalid length. [ 746.790374][T23819] CPU: 0 PID: 23819 Comm: syz.2.6849 Not tainted syzkaller #0 [ 746.798248][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 746.808413][T23819] Call Trace: [ 746.811718][T23819] [ 746.814668][T23819] dump_stack_lvl+0x188/0x250 [ 746.819379][T23819] ? show_regs_print_info+0x20/0x20 [ 746.824873][T23819] ? load_image+0x410/0x410 [ 746.829490][T23819] ? __lock_acquire+0x7b50/0x7b50 [ 746.834552][T23819] should_fail+0x383/0x4b0 [ 746.839187][T23819] _copy_from_user+0x2e/0x170 [ 746.841355][T23820] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6847'. [ 746.844212][T23819] iovec_from_user+0x142/0x370 [ 746.844250][T23819] __import_iovec+0x70/0x490 [ 746.844274][T23819] import_iovec+0x6f/0xa0 [ 746.844291][T23819] ___sys_sendmsg+0x1fd/0x2e0 [ 746.844317][T23819] ? __sys_sendmsg+0x290/0x290 [ 746.844347][T23819] ? trace_event_raw_event_lock+0x250/0x250 [ 746.844392][T23819] __se_sys_sendmsg+0x1b7/0x2a0 [ 746.844413][T23819] ? __x64_sys_sendmsg+0x80/0x80 [ 746.844429][T23819] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 746.844498][T23819] ? lockdep_hardirqs_on+0x94/0x140 [ 746.905869][T23819] do_syscall_64+0x4c/0xa0 [ 746.910302][T23819] ? clear_bhb_loop+0x30/0x80 [ 746.915071][T23819] ? clear_bhb_loop+0x30/0x80 [ 746.919843][T23819] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 746.925807][T23819] RIP: 0033:0x7ff8ea8d3e59 [ 746.930400][T23819] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 746.950196][T23819] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 746.958727][T23819] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 746.967139][T23819] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 746.975299][T23819] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 746.983927][T23819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.992382][T23819] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 747.000461][T23819] [ 747.638342][T23849] netlink: 'syz.5.6858': attribute type 21 has an invalid length. [ 747.651083][T23849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.743825][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.754511][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.200214][T23863] netlink: 'syz.1.6865': attribute type 4 has an invalid length. [ 748.255645][T23863] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6865'. [ 748.299734][T23867] netlink: 'syz.5.6867': attribute type 33 has an invalid length. [ 748.339048][T23867] netlink: 152 bytes leftover after parsing attributes in process `syz.5.6867'. [ 748.655655][T23887] netlink: 'syz.5.6871': attribute type 21 has an invalid length. [ 748.686837][T23887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 749.492612][T23917] FAULT_INJECTION: forcing a failure. [ 749.492612][T23917] name failslab, interval 1, probability 0, space 0, times 0 [ 749.549801][T23917] CPU: 0 PID: 23917 Comm: syz.3.6883 Not tainted syzkaller #0 [ 749.558903][T23917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 749.570625][T23917] Call Trace: [ 749.573936][T23917] [ 749.576884][T23917] dump_stack_lvl+0x188/0x250 [ 749.581590][T23917] ? show_regs_print_info+0x20/0x20 [ 749.586990][T23917] ? load_image+0x410/0x410 [ 749.591978][T23917] ? __might_sleep+0xf0/0xf0 [ 749.596590][T23917] ? __lock_acquire+0x7b50/0x7b50 [ 749.601647][T23917] should_fail+0x383/0x4b0 [ 749.606096][T23917] should_failslab+0x5/0x20 [ 749.610626][T23917] slab_pre_alloc_hook+0x51/0xc0 [ 749.615679][T23917] __kmalloc+0x6b/0x340 [ 749.620064][T23917] ? bpf_test_init+0xf8/0x1b0 [ 749.624770][T23917] bpf_test_init+0xf8/0x1b0 [ 749.629388][T23917] bpf_prog_test_run_skb+0x181/0x1190 [ 749.634796][T23917] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 749.641011][T23917] ? bpf_prog_test_run+0x251/0x390 [ 749.646158][T23917] ? cpu_online+0x60/0x60 [ 749.650529][T23917] bpf_prog_test_run+0x31c/0x390 [ 749.655578][T23917] __sys_bpf+0x5a5/0x6f0 [ 749.659856][T23917] ? bpf_link_show_fdinfo+0x380/0x380 [ 749.665276][T23917] __x64_sys_bpf+0x78/0x90 [ 749.669722][T23917] do_syscall_64+0x4c/0xa0 [ 749.674166][T23917] ? clear_bhb_loop+0x30/0x80 [ 749.678861][T23917] ? clear_bhb_loop+0x30/0x80 [ 749.683612][T23917] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 749.689717][T23917] RIP: 0033:0x7f2d21d10e59 [ 749.694244][T23917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.714390][T23917] RSP: 002b:00007f2d1ff69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 749.723152][T23917] RAX: ffffffffffffffda RBX: 00007f2d21f98fa0 RCX: 00007f2d21d10e59 [ 749.731246][T23917] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 749.739328][T23917] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 749.747314][T23917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.755397][T23917] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 749.763594][T23917] [ 749.820987][ T4264] Bluetooth: hci2: command 0x0406 tx timeout [ 749.925396][T23924] netlink: 'syz.1.6885': attribute type 4 has an invalid length. [ 749.945991][T23924] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6885'. [ 750.011816][T23926] netlink: 'syz.5.6887': attribute type 21 has an invalid length. [ 750.050084][T23926] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 750.648781][T23962] FAULT_INJECTION: forcing a failure. [ 750.648781][T23962] name failslab, interval 1, probability 0, space 0, times 0 [ 750.716506][T23962] CPU: 0 PID: 23962 Comm: syz.2.6896 Not tainted syzkaller #0 [ 750.724454][T23962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 750.734703][T23962] Call Trace: [ 750.738090][T23962] [ 750.741036][T23962] dump_stack_lvl+0x188/0x250 [ 750.745835][T23962] ? show_regs_print_info+0x20/0x20 [ 750.751328][T23962] ? load_image+0x410/0x410 [ 750.756116][T23962] ? __might_sleep+0xf0/0xf0 [ 750.760748][T23962] ? __lock_acquire+0x7b50/0x7b50 [ 750.766135][T23962] should_fail+0x383/0x4b0 [ 750.771170][T23962] should_failslab+0x5/0x20 [ 750.776101][T23962] slab_pre_alloc_hook+0x51/0xc0 [ 750.781160][T23962] ? getname_flags+0xb7/0x4f0 [ 750.785956][T23962] kmem_cache_alloc+0x3d/0x280 [ 750.791518][T23962] getname_flags+0xb7/0x4f0 [ 750.796070][T23962] ? rcu_is_watching+0x11/0xa0 [ 750.801046][T23962] __x64_sys_unlink+0x38/0x50 [ 750.806026][T23962] do_syscall_64+0x4c/0xa0 [ 750.810561][T23962] ? clear_bhb_loop+0x30/0x80 [ 750.815442][T23962] ? clear_bhb_loop+0x30/0x80 [ 750.820432][T23962] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 750.826366][T23962] RIP: 0033:0x7ff8ea8d3e59 [ 750.830808][T23962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 750.851006][T23962] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 750.859564][T23962] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 750.867591][T23962] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 750.875714][T23962] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 750.883793][T23962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.891896][T23962] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 750.900085][T23962] [ 751.086317][T23972] netlink: 'syz.5.6899': attribute type 21 has an invalid length. [ 751.127420][T23972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.418565][T23981] netlink: 'syz.5.6913': attribute type 21 has an invalid length. [ 751.464397][T23981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 751.664566][T23987] netlink: 'syz.2.6904': attribute type 4 has an invalid length. [ 751.691193][T23987] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6904'. [ 752.384420][T24008] netlink: 'syz.3.6912': attribute type 7 has an invalid length. [ 752.602458][T24018] netlink: 'syz.3.6916': attribute type 21 has an invalid length. [ 752.641548][T24018] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 752.850649][T24024] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6919'. [ 754.428647][T24080] validate_nla: 1 callbacks suppressed [ 754.428751][T24080] netlink: 'syz.4.6936': attribute type 4 has an invalid length. [ 754.491687][T24080] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6936'. [ 755.149340][T24099] FAULT_INJECTION: forcing a failure. [ 755.149340][T24099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.209560][T24099] CPU: 0 PID: 24099 Comm: syz.3.6941 Not tainted syzkaller #0 [ 755.217269][T24099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 755.228407][T24099] Call Trace: [ 755.231706][T24099] [ 755.234733][T24099] dump_stack_lvl+0x188/0x250 [ 755.239445][T24099] ? show_regs_print_info+0x20/0x20 [ 755.244927][T24099] ? load_image+0x410/0x410 [ 755.249543][T24099] ? __lock_acquire+0x7b50/0x7b50 [ 755.254689][T24099] ? bpf_test_run+0x78e/0x800 [ 755.259568][T24099] should_fail+0x383/0x4b0 [ 755.264023][T24099] _copy_to_user+0x2e/0x130 [ 755.268636][T24099] bpf_test_finish+0x215/0x2f0 [ 755.273428][T24099] ? convert_skb_to___skb+0x360/0x360 [ 755.278827][T24099] ? convert_skb_to___skb+0x1ff/0x360 [ 755.284223][T24099] bpf_prog_test_run_skb+0xbc0/0x1190 [ 755.289627][T24099] ? cpu_online+0x60/0x60 [ 755.293983][T24099] bpf_prog_test_run+0x31c/0x390 [ 755.298952][T24099] __sys_bpf+0x5a5/0x6f0 [ 755.303311][T24099] ? bpf_link_show_fdinfo+0x380/0x380 [ 755.308726][T24099] __x64_sys_bpf+0x78/0x90 [ 755.313171][T24099] do_syscall_64+0x4c/0xa0 [ 755.317602][T24099] ? clear_bhb_loop+0x30/0x80 [ 755.322291][T24099] ? clear_bhb_loop+0x30/0x80 [ 755.326992][T24099] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 755.332904][T24099] RIP: 0033:0x7f2d21d10e59 [ 755.337341][T24099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.357578][T24099] RSP: 002b:00007f2d1ff69028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 755.366280][T24099] RAX: ffffffffffffffda RBX: 00007f2d21f98fa0 RCX: 00007f2d21d10e59 [ 755.374553][T24099] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 755.382547][T24099] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 755.390526][T24099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.398515][T24099] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 755.406515][T24099] [ 755.504125][T24103] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.6942'. [ 756.150575][T24119] netlink: 'syz.3.6949': attribute type 4 has an invalid length. [ 756.183138][T24119] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6949'. [ 757.626240][T24157] netlink: 'syz.1.6961': attribute type 4 has an invalid length. [ 757.637062][T24157] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6961'. [ 759.543042][T24208] netlink: 'syz.4.6975': attribute type 4 has an invalid length. [ 759.570468][T24208] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6975'. [ 760.195297][T24234] FAULT_INJECTION: forcing a failure. [ 760.195297][T24234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.257863][T24234] CPU: 1 PID: 24234 Comm: syz.3.6985 Not tainted syzkaller #0 [ 760.265665][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 760.276180][T24234] Call Trace: [ 760.279672][T24234] [ 760.282623][T24234] dump_stack_lvl+0x188/0x250 [ 760.287435][T24234] ? show_regs_print_info+0x20/0x20 [ 760.292835][T24234] ? load_image+0x410/0x410 [ 760.297371][T24234] ? __lock_acquire+0x7b50/0x7b50 [ 760.302681][T24234] should_fail+0x383/0x4b0 [ 760.307138][T24234] _copy_to_user+0x2e/0x130 [ 760.311669][T24234] simple_read_from_buffer+0xe3/0x150 [ 760.317085][T24234] proc_fail_nth_read+0x1a6/0x220 [ 760.322135][T24234] ? proc_fault_inject_write+0x310/0x310 [ 760.327816][T24234] ? fsnotify_perm+0x254/0x560 [ 760.332692][T24234] ? proc_fault_inject_write+0x310/0x310 [ 760.338357][T24234] vfs_read+0x2ff/0xd50 [ 760.342959][T24234] ? __lock_acquire+0x7b50/0x7b50 [ 760.348104][T24234] ? kernel_read+0x1e0/0x1e0 [ 760.352736][T24234] ? mutex_lock_nested+0x17/0x20 [ 760.357696][T24234] ? __fdget_pos+0x2bf/0x370 [ 760.362395][T24234] ? ksys_read+0x70/0x260 [ 760.366849][T24234] ksys_read+0x153/0x260 [ 760.371232][T24234] ? vfs_write+0xd70/0xd70 [ 760.375677][T24234] ? lockdep_hardirqs_on+0x94/0x140 [ 760.380894][T24234] do_syscall_64+0x4c/0xa0 [ 760.385340][T24234] ? clear_bhb_loop+0x30/0x80 [ 760.390062][T24234] ? clear_bhb_loop+0x30/0x80 [ 760.394770][T24234] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 760.400778][T24234] RIP: 0033:0x7f2d21cd168e [ 760.405229][T24234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 760.425438][T24234] RSP: 002b:00007f2d1ff68fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 760.433883][T24234] RAX: ffffffffffffffda RBX: 00007f2d1ff696c0 RCX: 00007f2d21cd168e [ 760.442073][T24234] RDX: 000000000000000f RSI: 00007f2d1ff690a0 RDI: 0000000000000004 [ 760.450417][T24234] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 760.458409][T24234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.466576][T24234] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 760.474712][T24234] [ 761.235588][T24263] netlink: 'syz.5.6991': attribute type 4 has an invalid length. [ 761.281062][T24263] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.6991'. [ 761.636639][T24283] netlink: 'syz.4.6998': attribute type 4 has an invalid length. [ 761.679377][T24283] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6998'. [ 761.715639][T24287] FAULT_INJECTION: forcing a failure. [ 761.715639][T24287] name failslab, interval 1, probability 0, space 0, times 0 [ 761.760255][T24283] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 761.762044][T24287] CPU: 0 PID: 24287 Comm: syz.5.6999 Not tainted syzkaller #0 [ 761.784278][T24287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 761.794742][T24287] Call Trace: [ 761.798213][T24287] [ 761.801153][T24287] dump_stack_lvl+0x188/0x250 [ 761.806293][T24287] ? show_regs_print_info+0x20/0x20 [ 761.811621][T24287] ? load_image+0x410/0x410 [ 761.816184][T24287] ? __lock_acquire+0x7b50/0x7b50 [ 761.821210][T24287] ? perf_trace_lock+0xe4/0x390 [ 761.826160][T24287] should_fail+0x383/0x4b0 [ 761.830573][T24287] should_failslab+0x5/0x20 [ 761.835066][T24287] slab_pre_alloc_hook+0x51/0xc0 [ 761.840134][T24287] ? getname_flags+0xb7/0x4f0 [ 761.845612][T24287] kmem_cache_alloc+0x3d/0x280 [ 761.850392][T24287] getname_flags+0xb7/0x4f0 [ 761.854899][T24287] do_sys_openat2+0xdd/0x500 [ 761.859620][T24287] ? __lock_acquire+0x7b50/0x7b50 [ 761.864671][T24287] ? do_sys_open+0xe0/0xe0 [ 761.869139][T24287] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 761.875235][T24287] ? lock_chain_count+0x20/0x20 [ 761.880170][T24287] __x64_sys_openat+0x135/0x160 [ 761.885196][T24287] do_syscall_64+0x4c/0xa0 [ 761.889806][T24287] ? clear_bhb_loop+0x30/0x80 [ 761.894507][T24287] ? clear_bhb_loop+0x30/0x80 [ 761.899180][T24287] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 761.905172][T24287] RIP: 0033:0x7f2ca9d5468e [ 761.909584][T24287] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.931906][T24287] RSP: 002b:00007f2ca7febec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 761.940610][T24287] RAX: ffffffffffffffda RBX: 00007f2ca7fec6c0 RCX: 00007f2ca9d5468e [ 761.948814][T24287] RDX: 0000000000000002 RSI: 00007f2ca7febf90 RDI: ffffffffffffff9c [ 761.956875][T24287] RBP: 00007f2ca7fec090 R08: 0000000000000000 R09: 0000000000000000 [ 761.964843][T24287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.972802][T24287] R13: 00007f2caa01c038 R14: 00007f2caa01bfa0 R15: 00007ffe6fa70308 [ 761.981139][T24287] [ 762.005545][T24281] netlink: 'syz.3.6997': attribute type 27 has an invalid length. [ 762.024184][T24281] netlink: 'syz.3.6997': attribute type 25 has an invalid length. [ 762.087823][T24288] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6997'. [ 762.545261][T24309] netlink: 'syz.5.7001': attribute type 21 has an invalid length. [ 762.622399][T24309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 763.214412][T24323] netlink: 209608 bytes leftover after parsing attributes in process `syz.4.7008'. [ 763.366880][T24329] netlink: 'syz.2.7009': attribute type 4 has an invalid length. [ 763.461113][T24329] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7009'. [ 763.521749][T24340] netlink: 'syz.3.7012': attribute type 4 has an invalid length. [ 763.568407][T24340] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7012'. [ 763.856165][T24340] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 764.529011][T24372] netlink: 'syz.5.7021': attribute type 21 has an invalid length. [ 764.566137][T24372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 765.116421][T24392] netlink: 'syz.1.7028': attribute type 4 has an invalid length. [ 765.145009][T24392] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7028'. [ 765.181379][T22468] Bluetooth: hci0: command 0x0406 tx timeout [ 765.356148][T24397] netlink: 'syz.4.7029': attribute type 4 has an invalid length. [ 765.388322][T24397] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7029'. [ 765.423290][T24397] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 765.925374][T24420] netlink: 'syz.5.7035': attribute type 21 has an invalid length. [ 765.958671][T24420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 766.193478][T24431] netlink: 'syz.5.7040': attribute type 4 has an invalid length. [ 766.210437][T24431] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7040'. [ 766.858213][T24455] netlink: 'syz.2.7048': attribute type 4 has an invalid length. [ 766.871297][T24455] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7048'. [ 766.901100][T24455] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 767.298027][T24462] netlink: 'syz.2.7051': attribute type 21 has an invalid length. [ 767.317088][T24462] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 769.430285][T24485] netlink: 'syz.4.7061': attribute type 4 has an invalid length. [ 769.459475][T24485] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7061'. [ 769.490533][T24485] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 769.699616][T24498] netlink: 'syz.5.7062': attribute type 4 has an invalid length. [ 769.713605][T24498] netlink: 208644 bytes leftover after parsing attributes in process `syz.5.7062'. [ 769.875866][T24506] netlink: 'syz.5.7065': attribute type 1 has an invalid length. [ 769.913052][T24506] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7065'. [ 769.945423][T24507] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7064'. [ 769.966312][T24503] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.7064'. [ 770.801379][T24533] netlink: 'syz.4.7073': attribute type 4 has an invalid length. [ 770.818839][T24533] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7073'. [ 770.830248][T24533] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 770.907556][T24537] FAULT_INJECTION: forcing a failure. [ 770.907556][T24537] name failslab, interval 1, probability 0, space 0, times 0 [ 770.921087][T24537] CPU: 1 PID: 24537 Comm: syz.4.7074 Not tainted syzkaller #0 [ 770.929046][T24537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 770.939356][T24537] Call Trace: [ 770.942660][T24537] [ 770.945605][T24537] dump_stack_lvl+0x188/0x250 [ 770.950575][T24537] ? show_regs_print_info+0x20/0x20 [ 770.955973][T24537] ? load_image+0x410/0x410 [ 770.960591][T24537] ? __might_sleep+0xf0/0xf0 [ 770.965200][T24537] ? __lock_acquire+0x7b50/0x7b50 [ 770.970422][T24537] should_fail+0x383/0x4b0 [ 770.975305][T24537] should_failslab+0x5/0x20 [ 770.980144][T24537] slab_pre_alloc_hook+0x51/0xc0 [ 770.985109][T24537] ? getname_flags+0xb7/0x4f0 [ 770.990019][T24537] kmem_cache_alloc+0x3d/0x280 [ 770.995140][T24537] getname_flags+0xb7/0x4f0 [ 770.999679][T24537] ? rcu_is_watching+0x11/0xa0 [ 771.004469][T24537] __x64_sys_unlink+0x38/0x50 [ 771.009177][T24537] do_syscall_64+0x4c/0xa0 [ 771.013945][T24537] ? clear_bhb_loop+0x30/0x80 [ 771.018735][T24537] ? clear_bhb_loop+0x30/0x80 [ 771.023435][T24537] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 771.029632][T24537] RIP: 0033:0x7f4e6fc0ee59 [ 771.034159][T24537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.054863][T24537] RSP: 002b:00007f4e6de67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 771.063827][T24537] RAX: ffffffffffffffda RBX: 00007f4e6fe96fa0 RCX: 00007f4e6fc0ee59 [ 771.072109][T24537] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 771.080427][T24537] RBP: 00007f4e6de67090 R08: 0000000000000000 R09: 0000000000000000 [ 771.088416][T24537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.097381][T24537] R13: 00007f4e6fe97038 R14: 00007f4e6fe96fa0 R15: 00007ffd1a838da8 [ 771.105730][T24537] [ 771.385047][T24539] netlink: 'syz.5.7075': attribute type 4 has an invalid length. [ 771.395568][T24539] netlink: 208644 bytes leftover after parsing attributes in process `syz.5.7075'. [ 771.866278][T24557] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7081'. [ 771.967254][T24554] netlink: 9286 bytes leftover after parsing attributes in process `syz.5.7081'. [ 772.262810][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.301312][T24567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.378922][T24567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 772.399541][T24567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.517652][T24575] netlink: 'syz.1.7089': attribute type 29 has an invalid length. [ 772.600743][T24575] netlink: 'syz.1.7089': attribute type 29 has an invalid length. [ 772.692945][T24578] netlink: 'syz.1.7089': attribute type 29 has an invalid length. [ 772.962896][T24585] netlink: 209608 bytes leftover after parsing attributes in process `syz.2.7091'. [ 773.236847][T24590] netlink: 'syz.3.7094': attribute type 4 has an invalid length. [ 773.255846][T24590] netlink: 208644 bytes leftover after parsing attributes in process `syz.3.7094'. [ 773.375009][T24596] FAULT_INJECTION: forcing a failure. [ 773.375009][T24596] name failslab, interval 1, probability 0, space 0, times 0 [ 773.401273][T24596] CPU: 0 PID: 24596 Comm: syz.4.7096 Not tainted syzkaller #0 [ 773.408980][T24596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 773.419254][T24596] Call Trace: [ 773.422567][T24596] [ 773.425554][T24596] dump_stack_lvl+0x188/0x250 [ 773.430469][T24596] ? show_regs_print_info+0x20/0x20 [ 773.435723][T24596] ? load_image+0x410/0x410 [ 773.440565][T24596] ? __might_sleep+0xf0/0xf0 [ 773.445511][T24596] ? __lock_acquire+0x7b50/0x7b50 [ 773.451327][T24596] should_fail+0x383/0x4b0 [ 773.459365][T24596] should_failslab+0x5/0x20 [ 773.464627][T24596] slab_pre_alloc_hook+0x51/0xc0 [ 773.469706][T24596] __kmalloc_node_track_caller+0x68/0x3a0 [ 773.476415][T24596] ? netlink_sendmsg+0x654/0xbe0 [ 773.483415][T24596] ? __alloc_skb+0xf4/0x750 [ 773.490568][T24596] ? netlink_sendmsg+0x654/0xbe0 [ 773.495944][T24596] __alloc_skb+0x22c/0x750 [ 773.501320][T24596] netlink_sendmsg+0x654/0xbe0 [ 773.507577][T24596] ? netlink_getsockopt+0x570/0x570 [ 773.513644][T24596] ? aa_sock_msg_perm+0x94/0x150 [ 773.519136][T24596] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 773.525215][T24596] ? security_socket_sendmsg+0x7c/0xa0 [ 773.532570][T24596] ? netlink_getsockopt+0x570/0x570 [ 773.539712][T24596] ____sys_sendmsg+0x5be/0x8f0 [ 773.545315][T24596] ? __sys_sendmsg_sock+0x30/0x30 [ 773.551023][T24596] ? import_iovec+0x6f/0xa0 [ 773.555570][T24596] ___sys_sendmsg+0x236/0x2e0 [ 773.560368][T24596] ? __sys_sendmsg+0x290/0x290 [ 773.565716][T24596] ? trace_event_raw_event_lock+0x250/0x250 [ 773.571915][T24596] __se_sys_sendmsg+0x1b7/0x2a0 [ 773.576890][T24596] ? __x64_sys_sendmsg+0x80/0x80 [ 773.581839][T24596] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 773.587866][T24596] ? lockdep_hardirqs_on+0x94/0x140 [ 773.593082][T24596] do_syscall_64+0x4c/0xa0 [ 773.597519][T24596] ? clear_bhb_loop+0x30/0x80 [ 773.602347][T24596] ? clear_bhb_loop+0x30/0x80 [ 773.607036][T24596] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 773.612945][T24596] RIP: 0033:0x7f4e6fc0ee59 [ 773.617754][T24596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.637785][T24596] RSP: 002b:00007f4e6de67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.646600][T24596] RAX: ffffffffffffffda RBX: 00007f4e6fe96fa0 RCX: 00007f4e6fc0ee59 [ 773.654590][T24596] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 773.662750][T24596] RBP: 00007f4e6de67090 R08: 0000000000000000 R09: 0000000000000000 [ 773.670728][T24596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.678710][T24596] R13: 00007f4e6fe97038 R14: 00007f4e6fe96fa0 R15: 00007ffd1a838da8 [ 773.686914][T24596] [ 773.928810][T24609] netlink: 'syz.2.7100': attribute type 4 has an invalid length. [ 773.965533][T24609] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7100'. [ 774.194839][T24602] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7098'. [ 774.259173][T24617] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.7098'. [ 774.916867][T24631] netlink: 'syz.2.7109': attribute type 4 has an invalid length. [ 774.926798][T24631] netlink: 208644 bytes leftover after parsing attributes in process `syz.2.7109'. [ 775.189746][T24653] FAULT_INJECTION: forcing a failure. [ 775.189746][T24653] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 775.218465][T24653] CPU: 0 PID: 24653 Comm: syz.2.7115 Not tainted syzkaller #0 [ 775.226229][T24653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 775.236561][T24653] Call Trace: [ 775.240071][T24653] [ 775.243076][T24653] dump_stack_lvl+0x188/0x250 [ 775.247896][T24653] ? show_regs_print_info+0x20/0x20 [ 775.253640][T24653] ? load_image+0x410/0x410 [ 775.258560][T24653] ? __lock_acquire+0x7b50/0x7b50 [ 775.263977][T24653] ? slab_post_alloc_hook+0x4c/0x380 [ 775.269313][T24653] ? __alloc_skb+0xf4/0x750 [ 775.274516][T24653] ? alloc_skb_with_frags+0xa7/0x720 [ 775.280377][T24653] ? sock_alloc_send_pskb+0x87f/0x9a0 [ 775.285829][T24653] should_fail+0x383/0x4b0 [ 775.290511][T24653] prepare_alloc_pages+0x1e3/0x5b0 [ 775.295693][T24653] __alloc_pages+0x11b/0x480 [ 775.300349][T24653] ? zone_statistics+0x170/0x170 [ 775.305413][T24653] kmalloc_large_node+0x7d/0x1a0 [ 775.310427][T24653] __kmalloc_node_track_caller+0x219/0x3a0 [ 775.316272][T24653] ? alloc_skb_with_frags+0xa7/0x720 [ 775.321600][T24653] ? __alloc_skb+0xf4/0x750 [ 775.326353][T24653] ? alloc_skb_with_frags+0xa7/0x720 [ 775.331714][T24653] __alloc_skb+0x22c/0x750 [ 775.336278][T24653] alloc_skb_with_frags+0xa7/0x720 [ 775.341647][T24653] sock_alloc_send_pskb+0x87f/0x9a0 [ 775.347183][T24653] ? sock_kzfree_s+0x50/0x50 [ 775.351915][T24653] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 775.357801][T24653] tun_get_user+0x8f7/0x3b40 [ 775.362469][T24653] ? trace_event_raw_event_lock+0x250/0x250 [ 775.368532][T24653] ? tun_ring_recv+0xc90/0xc90 [ 775.373375][T24653] ? rcu_lock_release+0x5/0x20 [ 775.378194][T24653] ? __lock_acquire+0x7b50/0x7b50 [ 775.383283][T24653] ? trace_event_raw_event_lock+0x250/0x250 [ 775.389426][T24653] tun_chr_write_iter+0x112/0x1e0 [ 775.394692][T24653] vfs_write+0x748/0xd70 [ 775.399117][T24653] ? file_end_write+0x250/0x250 [ 775.404042][T24653] ? __fget_files+0x402/0x470 [ 775.408916][T24653] ? __fdget_pos+0x1e2/0x370 [ 775.413728][T24653] ? ksys_write+0x70/0x260 [ 775.418646][T24653] ksys_write+0x153/0x260 [ 775.423188][T24653] ? __ia32_sys_read+0x80/0x80 [ 775.428002][T24653] ? lockdep_hardirqs_on+0x94/0x140 [ 775.433352][T24653] do_syscall_64+0x4c/0xa0 [ 775.438265][T24653] ? clear_bhb_loop+0x30/0x80 [ 775.443102][T24653] ? clear_bhb_loop+0x30/0x80 [ 775.448157][T24653] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 775.454440][T24653] RIP: 0033:0x7ff8ea8d3e59 [ 775.458995][T24653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.480314][T24653] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 775.489397][T24653] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 775.498435][T24653] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 775.507068][T24653] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 775.515317][T24653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.523683][T24653] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 775.531880][T24653] [ 777.317960][T24711] netlink: 'syz.2.7132': attribute type 1 has an invalid length. [ 777.335536][T24711] __nla_validate_parse: 1 callbacks suppressed [ 777.335580][T24711] netlink: 126632 bytes leftover after parsing attributes in process `syz.2.7132'. [ 777.381365][T24711] netlink: 'syz.2.7132': attribute type 4 has an invalid length. [ 777.423254][T24711] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.7132'. [ 777.571386][T24723] netlink: 209608 bytes leftover after parsing attributes in process `syz.3.7134'. [ 778.099542][T24745] FAULT_INJECTION: forcing a failure. [ 778.099542][T24745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.131501][T24745] CPU: 0 PID: 24745 Comm: syz.4.7144 Not tainted syzkaller #0 [ 778.139167][T24745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 778.149620][T24745] Call Trace: [ 778.153034][T24745] [ 778.156062][T24745] dump_stack_lvl+0x188/0x250 [ 778.160757][T24745] ? show_regs_print_info+0x20/0x20 [ 778.165977][T24745] ? load_image+0x410/0x410 [ 778.170498][T24745] ? __lock_acquire+0x7b50/0x7b50 [ 778.175736][T24745] should_fail+0x383/0x4b0 [ 778.180258][T24745] _copy_from_user+0x2e/0x170 [ 778.185352][T24745] __copy_msghdr_from_user+0xc9/0x630 [ 778.190753][T24745] ? verify_lock_unused+0x140/0x140 [ 778.196142][T24745] ? mark_lock+0x94/0x320 [ 778.200788][T24745] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 778.206804][T24745] ___sys_sendmsg+0x19a/0x2e0 [ 778.211520][T24745] ? __sys_sendmsg+0x290/0x290 [ 778.216331][T24745] ? trace_event_raw_event_lock+0x250/0x250 [ 778.222323][T24745] __se_sys_sendmsg+0x1b7/0x2a0 [ 778.227211][T24745] ? __x64_sys_sendmsg+0x80/0x80 [ 778.232177][T24745] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 778.238443][T24745] ? lockdep_hardirqs_on+0x94/0x140 [ 778.243685][T24745] do_syscall_64+0x4c/0xa0 [ 778.248123][T24745] ? clear_bhb_loop+0x30/0x80 [ 778.253086][T24745] ? clear_bhb_loop+0x30/0x80 [ 778.257910][T24745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 778.263840][T24745] RIP: 0033:0x7f4e6fc0ee59 [ 778.268405][T24745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.288903][T24745] RSP: 002b:00007f4e6de67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 778.297698][T24745] RAX: ffffffffffffffda RBX: 00007f4e6fe96fa0 RCX: 00007f4e6fc0ee59 [ 778.305778][T24745] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 778.313971][T24745] RBP: 00007f4e6de67090 R08: 0000000000000000 R09: 0000000000000000 [ 778.323016][T24745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.331184][T24745] R13: 00007f4e6fe97038 R14: 00007f4e6fe96fa0 R15: 00007ffd1a838da8 [ 778.339278][T24745] [ 778.664832][T24758] delete_channel: no stack [ 778.875899][T24774] netlink: 'syz.1.7155': attribute type 1 has an invalid length. [ 778.892947][T24774] netlink: 126632 bytes leftover after parsing attributes in process `syz.1.7155'. [ 778.978225][T24774] netlink: 'syz.1.7155': attribute type 4 has an invalid length. [ 778.982558][T24776] netlink: 209608 bytes leftover after parsing attributes in process `syz.3.7156'. [ 779.043216][T24774] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.7155'. [ 779.574606][T24812] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7168'. [ 779.835478][T24818] FAULT_INJECTION: forcing a failure. [ 779.835478][T24818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 779.933285][T24818] CPU: 1 PID: 24818 Comm: syz.3.7170 Not tainted syzkaller #0 [ 779.941246][T24818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 779.951438][T24818] Call Trace: [ 779.954727][T24818] [ 779.958008][T24818] dump_stack_lvl+0x188/0x250 [ 779.963008][T24818] ? show_regs_print_info+0x20/0x20 [ 779.968343][T24818] ? load_image+0x410/0x410 [ 779.973292][T24818] ? __lock_acquire+0x7b50/0x7b50 [ 779.978543][T24818] should_fail+0x383/0x4b0 [ 779.983273][T24818] copy_page_to_iter+0x3d8/0x930 [ 779.988259][T24818] sk_msg_recvmsg+0x243/0xc20 [ 779.993155][T24818] unix_bpf_recvmsg+0x526/0xd30 [ 779.998045][T24818] ? aa_sk_perm+0x910/0x910 [ 780.002779][T24818] ? unix_stream_bpf_update_proto+0x170/0x170 [ 780.008870][T24818] ? wait_woken+0x1b0/0x1b0 [ 780.013410][T24818] ? trace_event_raw_event_lock+0x250/0x250 [ 780.019367][T24818] unix_stream_recvmsg+0x156/0x1d0 [ 780.024653][T24818] ? unix_stream_sendmsg+0xc90/0xc90 [ 780.030036][T24818] ? __unix_stream_recvmsg+0x150/0x150 [ 780.035519][T24818] ? aa_sock_msg_perm+0x94/0x150 [ 780.040554][T24818] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 780.045974][T24818] ? security_socket_recvmsg+0x85/0xb0 [ 780.051559][T24818] ? unix_stream_sendmsg+0xc90/0xc90 [ 780.056873][T24818] ____sys_recvmsg+0x2ca/0x5b0 [ 780.061664][T24818] ? __might_fault+0xb3/0x110 [ 780.066365][T24818] ? __sys_recvmsg_sock+0x40/0x40 [ 780.071555][T24818] ? import_iovec+0x6f/0xa0 [ 780.076088][T24818] ___sys_recvmsg+0x213/0x5c0 [ 780.080798][T24818] ? __sys_recvmsg+0x280/0x280 [ 780.085600][T24818] ? __fget_files+0x402/0x470 [ 780.090565][T24818] __x64_sys_recvmsg+0x201/0x2d0 [ 780.096138][T24818] ? ___sys_recvmsg+0x5c0/0x5c0 [ 780.101283][T24818] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 780.107398][T24818] ? lockdep_hardirqs_on+0x94/0x140 [ 780.112902][T24818] do_syscall_64+0x4c/0xa0 [ 780.117318][T24818] ? clear_bhb_loop+0x30/0x80 [ 780.122081][T24818] ? clear_bhb_loop+0x30/0x80 [ 780.126761][T24818] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 780.132651][T24818] RIP: 0033:0x7f2d21d10e59 [ 780.137156][T24818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.157010][T24818] RSP: 002b:00007f2d1ff69028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 780.165545][T24818] RAX: ffffffffffffffda RBX: 00007f2d21f98fa0 RCX: 00007f2d21d10e59 [ 780.173631][T24818] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000004 [ 780.181703][T24818] RBP: 00007f2d1ff69090 R08: 0000000000000000 R09: 0000000000000000 [ 780.189769][T24818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 780.197914][T24818] R13: 00007f2d21f99038 R14: 00007f2d21f98fa0 R15: 00007ffd991f82d8 [ 780.206015][T24818] [ 780.250436][T24824] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 780.332383][T24824] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 780.541007][T22468] Bluetooth: hci1: command 0x0406 tx timeout [ 780.731938][T24840] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7178'. [ 780.760321][T24849] FAULT_INJECTION: forcing a failure. [ 780.760321][T24849] name failslab, interval 1, probability 0, space 0, times 0 [ 780.773983][T24849] CPU: 1 PID: 24849 Comm: syz.4.7181 Not tainted syzkaller #0 [ 780.781742][T24849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 780.791903][T24849] Call Trace: [ 780.795211][T24849] [ 780.798288][T24849] dump_stack_lvl+0x188/0x250 [ 780.803082][T24849] ? trace_event_raw_event_lock+0x250/0x250 [ 780.809047][T24849] ? show_regs_print_info+0x20/0x20 [ 780.814274][T24849] ? load_image+0x410/0x410 [ 780.818819][T24849] should_fail+0x383/0x4b0 [ 780.823367][T24849] should_failslab+0x5/0x20 [ 780.827899][T24849] slab_pre_alloc_hook+0x51/0xc0 [ 780.832866][T24849] ? skb_clone+0x1bd/0x350 [ 780.837418][T24849] kmem_cache_alloc+0x3d/0x280 [ 780.842495][T24849] skb_clone+0x1bd/0x350 [ 780.846856][T24849] ? packet_rcv+0x4a4/0x1260 [ 780.851567][T24849] packet_rcv+0x629/0x1260 [ 780.856013][T24849] ? packet_sock_destruct+0x160/0x160 [ 780.861418][T24849] __netif_receive_skb_core+0xd29/0x3670 [ 780.867519][T24849] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 780.873544][T24849] ? lock_chain_count+0x20/0x20 [ 780.878428][T24849] ? set_rps_cpu+0x660/0x660 [ 780.883130][T24849] ? ktime_get_with_offset+0xff/0x320 [ 780.888649][T24849] ? read_lock_is_recursive+0x10/0x10 [ 780.894067][T24849] __netif_receive_skb+0x74/0x290 [ 780.899110][T24849] ? ktime_get_with_offset+0x2d7/0x320 [ 780.904688][T24849] netif_receive_skb+0x19e/0x700 [ 780.909792][T24849] ? __bpf_trace_softirq+0x10/0x10 [ 780.915010][T24849] ? netif_receive_skb_core+0x210/0x210 [ 780.920714][T24849] tun_rx_batched+0x606/0x760 [ 780.925505][T24849] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 780.931599][T24849] ? local_bh_enable+0x20/0x20 [ 780.936380][T24849] ? __local_bh_enable_ip+0x136/0x1c0 [ 780.941857][T24849] ? read_lock_is_recursive+0x10/0x10 [ 780.947333][T24849] ? __local_bh_enable_ip+0x136/0x1c0 [ 780.950729][T24848] netlink: 209608 bytes leftover after parsing attributes in process `syz.3.7180'. [ 780.952904][T24849] ? _local_bh_enable+0xa0/0xa0 [ 780.952953][T24849] tun_get_user+0x25bf/0x3b40 [ 780.952984][T24849] ? trace_event_raw_event_lock+0x250/0x250 [ 780.953016][T24849] ? tun_ring_recv+0xc90/0xc90 [ 780.953042][T24849] ? rcu_lock_release+0x5/0x20 [ 780.953063][T24849] ? __lock_acquire+0x7b50/0x7b50 [ 780.953083][T24849] ? trace_event_raw_event_lock+0x250/0x250 [ 780.953112][T24849] tun_chr_write_iter+0x112/0x1e0 [ 780.953131][T24849] vfs_write+0x748/0xd70 [ 780.953156][T24849] ? file_end_write+0x250/0x250 [ 780.953181][T24849] ? __fget_files+0x402/0x470 [ 780.953206][T24849] ? __fdget_pos+0x1e2/0x370 [ 780.953221][T24849] ? ksys_write+0x70/0x260 [ 780.953241][T24849] ksys_write+0x153/0x260 [ 780.953260][T24849] ? __ia32_sys_read+0x80/0x80 [ 780.953283][T24849] ? lockdep_hardirqs_on+0x94/0x140 [ 780.953307][T24849] do_syscall_64+0x4c/0xa0 [ 780.953323][T24849] ? clear_bhb_loop+0x30/0x80 [ 780.953341][T24849] ? clear_bhb_loop+0x30/0x80 [ 780.953359][T24849] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 780.953377][T24849] RIP: 0033:0x7f4e6fc0ee59 [ 780.953396][T24849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.953412][T24849] RSP: 002b:00007f4e6de46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 780.953433][T24849] RAX: ffffffffffffffda RBX: 00007f4e6fe97090 RCX: 00007f4e6fc0ee59 [ 780.953447][T24849] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 780.953459][T24849] RBP: 00007f4e6de46090 R08: 0000000000000000 R09: 0000000000000000 [ 780.953472][T24849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.953483][T24849] R13: 00007f4e6fe97128 R14: 00007f4e6fe97090 R15: 00007ffd1a838da8 [ 780.953512][T24849] [ 781.404080][T24870] FAULT_INJECTION: forcing a failure. [ 781.404080][T24870] name failslab, interval 1, probability 0, space 0, times 0 [ 781.417228][T24870] CPU: 1 PID: 24870 Comm: syz.1.7186 Not tainted syzkaller #0 [ 781.424706][T24870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 781.434761][T24870] Call Trace: [ 781.438054][T24870] [ 781.439307][T24872] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.7188'. [ 781.441000][T24870] dump_stack_lvl+0x188/0x250 [ 781.441077][T24870] ? lock_chain_count+0x20/0x20 [ 781.441098][T24870] ? show_regs_print_info+0x20/0x20 [ 781.441115][T24870] ? load_image+0x410/0x410 [ 781.469828][T24870] ? sctp_get_port_local+0x335/0x1530 [ 781.475231][T24870] should_fail+0x383/0x4b0 [ 781.479682][T24870] should_failslab+0x5/0x20 [ 781.484208][T24870] slab_pre_alloc_hook+0x51/0xc0 [ 781.489260][T24870] ? sctp_get_port_local+0x6b4/0x1530 [ 781.494747][T24870] kmem_cache_alloc+0x3d/0x280 [ 781.499541][T24870] sctp_get_port_local+0x6b4/0x1530 [ 781.504772][T24870] ? sctp_do_bind+0x8f0/0x8f0 [ 781.509464][T24870] ? sctp_bind_addr_match+0x249/0x260 [ 781.515123][T24870] sctp_do_bind+0x4c0/0x8f0 [ 781.519671][T24870] sctp_connect_new_asoc+0x266/0x6a0 [ 781.525094][T24870] ? __sctp_connect+0xd80/0xd80 [ 781.529974][T24870] ? __local_bh_enable_ip+0x136/0x1c0 [ 781.535353][T24870] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 781.541231][T24870] ? security_sctp_bind_connect+0x85/0xb0 [ 781.547229][T24870] sctp_sendmsg+0x15e1/0x2940 [ 781.551936][T24870] ? sctp_getsockopt+0x8a0/0x8a0 [ 781.556983][T24870] ? aa_af_perm+0x340/0x340 [ 781.561491][T24870] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 781.567924][T24870] ? sock_rps_record_flow+0x17/0x3b0 [ 781.573233][T24870] ? inet_sendmsg+0xca/0x2a0 [ 781.577914][T24870] ? inet_send_prepare+0x250/0x250 [ 781.583032][T24870] ____sys_sendmsg+0x5be/0x8f0 [ 781.587976][T24870] ? __sys_sendmsg_sock+0x30/0x30 [ 781.593028][T24870] ? import_iovec+0x6f/0xa0 [ 781.597551][T24870] ___sys_sendmsg+0x236/0x2e0 [ 781.602240][T24870] ? __sys_sendmsg+0x290/0x290 [ 781.607009][T24870] ? trace_event_raw_event_lock+0x250/0x250 [ 781.613018][T24870] __se_sys_sendmsg+0x1b7/0x2a0 [ 781.617867][T24870] ? __x64_sys_sendmsg+0x80/0x80 [ 781.622887][T24870] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 781.629091][T24870] ? lockdep_hardirqs_on+0x94/0x140 [ 781.634289][T24870] do_syscall_64+0x4c/0xa0 [ 781.638951][T24870] ? clear_bhb_loop+0x30/0x80 [ 781.643646][T24870] ? clear_bhb_loop+0x30/0x80 [ 781.648427][T24870] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 781.654598][T24870] RIP: 0033:0x7f724d71ae59 [ 781.659194][T24870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 781.679400][T24870] RSP: 002b:00007f724b973028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 781.688251][T24870] RAX: ffffffffffffffda RBX: 00007f724d9a2fa0 RCX: 00007f724d71ae59 [ 781.696258][T24870] RDX: 0000000000000041 RSI: 0000200000000600 RDI: 0000000000000003 [ 781.704409][T24870] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 781.712391][T24870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 781.720538][T24870] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 781.728982][T24870] [ 782.688594][T24897] netlink: 'syz.4.7196': attribute type 10 has an invalid length. [ 782.742479][T24897] team0: Port device virt_wifi0 added [ 783.047081][T24905] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7200'. [ 783.299519][T24907] netlink: 209608 bytes leftover after parsing attributes in process `syz.5.7202'. [ 783.461323][T24912] delete_channel: no stack [ 783.525973][T24916] netlink: 'syz.3.7205': attribute type 3 has an invalid length. [ 783.583755][T24916] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7205'. [ 783.813163][T24930] netlink: 'syz.5.7210': attribute type 4 has an invalid length. [ 783.832628][T24930] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.7210'. [ 783.871488][T24915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 783.950209][T24937] netlink: 'syz.2.7212': attribute type 17 has an invalid length. [ 783.978847][T24937] netlink: 'syz.2.7212': attribute type 16 has an invalid length. [ 784.030967][T24937] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7212'. [ 784.083197][T24946] netlink: 155704 bytes leftover after parsing attributes in process `syz.4.7214'. [ 784.363055][T24955] sctp: [Deprecated]: syz.4.7218 (pid 24955) Use of struct sctp_assoc_value in delayed_ack socket option. [ 784.363055][T24955] Use struct sctp_sack_info instead [ 784.432626][T24953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 784.633846][T24961] delete_channel: no stack [ 784.892330][T24969] netlink: 132 bytes leftover after parsing attributes in process `syz.5.7222'. [ 785.167489][T24974] FAULT_INJECTION: forcing a failure. [ 785.167489][T24974] name failslab, interval 1, probability 0, space 0, times 0 [ 785.233289][T24974] CPU: 0 PID: 24974 Comm: syz.2.7225 Not tainted syzkaller #0 [ 785.241103][T24974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 785.251213][T24974] Call Trace: [ 785.254525][T24974] [ 785.257488][T24974] dump_stack_lvl+0x188/0x250 [ 785.262219][T24974] ? show_regs_print_info+0x20/0x20 [ 785.267472][T24974] ? load_image+0x410/0x410 [ 785.272056][T24974] should_fail+0x383/0x4b0 [ 785.276548][T24974] should_failslab+0x5/0x20 [ 785.281085][T24974] slab_pre_alloc_hook+0x51/0xc0 [ 785.286076][T24974] kmem_cache_alloc_trace+0x47/0x290 [ 785.291488][T24974] ? sctp_add_bind_addr+0x89/0x350 [ 785.296631][T24974] sctp_add_bind_addr+0x89/0x350 [ 785.301593][T24974] sctp_copy_local_addr_list+0x2f1/0x4c0 [ 785.307514][T24974] ? sctp_do_8_2_transport_strike+0x8b0/0x8b0 [ 785.313835][T24974] ? sctp_v4_is_any+0x31/0x50 [ 785.318558][T24974] ? sctp_copy_one_addr+0x93/0x660 [ 785.323697][T24974] sctp_bind_addr_copy+0xaf/0x3c0 [ 785.328741][T24974] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 785.335101][T24974] sctp_connect_new_asoc+0x2f5/0x6a0 [ 785.340412][T24974] ? __sctp_connect+0xd80/0xd80 [ 785.345270][T24974] ? __local_bh_enable_ip+0x136/0x1c0 [ 785.350671][T24974] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 785.356224][T24974] ? security_sctp_bind_connect+0x85/0xb0 [ 785.362132][T24974] sctp_sendmsg+0x15e1/0x2940 [ 785.366841][T24974] ? sctp_getsockopt+0x8a0/0x8a0 [ 785.371871][T24974] ? aa_af_perm+0x340/0x340 [ 785.377049][T24974] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 785.383600][T24974] ? sock_rps_record_flow+0x17/0x3b0 [ 785.388977][T24974] ? inet_sendmsg+0xca/0x2a0 [ 785.393599][T24974] ? inet_send_prepare+0x250/0x250 [ 785.398753][T24974] ____sys_sendmsg+0x5be/0x8f0 [ 785.403539][T24974] ? __sys_sendmsg_sock+0x30/0x30 [ 785.408591][T24974] ? import_iovec+0x6f/0xa0 [ 785.413132][T24974] ___sys_sendmsg+0x236/0x2e0 [ 785.417862][T24974] ? __sys_sendmsg+0x290/0x290 [ 785.422737][T24974] __se_sys_sendmsg+0x1b7/0x2a0 [ 785.427829][T24974] ? __x64_sys_sendmsg+0x80/0x80 [ 785.432783][T24974] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 785.440109][T24974] ? lockdep_hardirqs_on+0x94/0x140 [ 785.446439][T24974] do_syscall_64+0x4c/0xa0 [ 785.451398][T24974] ? clear_bhb_loop+0x30/0x80 [ 785.456779][T24974] ? clear_bhb_loop+0x30/0x80 [ 785.462901][T24974] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 785.469089][T24974] RIP: 0033:0x7ff8ea8d3e59 [ 785.473975][T24974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.497514][T24974] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.507796][T24974] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 785.516458][T24974] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000003 [ 785.525284][T24974] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 785.533910][T24974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.542001][T24974] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 785.550310][T24974] [ 785.633744][T24972] netlink: 'syz.4.7224': attribute type 9 has an invalid length. [ 785.671307][T24978] netlink: 'syz.4.7224': attribute type 10 has an invalid length. [ 785.696869][T24972] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7224'. [ 785.728928][T24978] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7224'. [ 785.758369][T24978] device hsr0 entered promiscuous mode [ 785.775071][T24978] bridge0: port 3(hsr0) entered blocking state [ 785.800142][T24982] netlink: 'syz.3.7227': attribute type 4 has an invalid length. [ 785.817608][T24978] bridge0: port 3(hsr0) entered disabled state [ 785.864515][T24982] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7227'. [ 785.871730][T24978] bridge0: port 3(hsr0) entered blocking state [ 785.880896][T24978] bridge0: port 3(hsr0) entered forwarding state [ 787.121355][T25026] netlink: 'syz.2.7241': attribute type 10 has an invalid length. [ 787.520963][T25034] netlink: 'syz.3.7243': attribute type 4 has an invalid length. [ 788.064275][T25054] __nla_validate_parse: 4 callbacks suppressed [ 788.064295][T25054] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7247'. [ 788.109725][T25054] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 788.137361][T25054] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 788.349980][T25064] validate_nla: 1 callbacks suppressed [ 788.350024][T25064] netlink: 'syz.2.7256': attribute type 4 has an invalid length. [ 788.381101][T25064] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.7256'. [ 788.570735][T25075] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7258'. [ 788.634180][T25075] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 788.671992][T25075] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 788.836470][T25081] netlink: 'syz.2.7260': attribute type 4 has an invalid length. [ 788.891894][T25081] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7260'. [ 789.727914][T25109] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7266'. [ 789.893035][T25111] netlink: 'syz.3.7267': attribute type 4 has an invalid length. [ 789.922682][T25111] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.7267'. [ 789.971971][T25117] device syzkaller0 entered promiscuous mode [ 790.157667][T25121] delete_channel: no stack [ 790.612840][T25147] netlink: 'syz.4.7279': attribute type 4 has an invalid length. [ 790.831854][ T5109] Bluetooth: hci5: command 0x0406 tx timeout [ 791.004577][T25156] delete_channel: no stack [ 791.174608][T25151] netlink: 'syz.2.7281': attribute type 4 has an invalid length. [ 791.185922][T25151] netlink: 208188 bytes leftover after parsing attributes in process `syz.2.7281'. [ 791.254826][T25161] FAULT_INJECTION: forcing a failure. [ 791.254826][T25161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 791.286637][T25161] CPU: 0 PID: 25161 Comm: syz.1.7285 Not tainted syzkaller #0 [ 791.294600][T25161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 791.304807][T25161] Call Trace: [ 791.308102][T25161] [ 791.311044][T25161] dump_stack_lvl+0x188/0x250 [ 791.315947][T25161] ? show_regs_print_info+0x20/0x20 [ 791.321264][T25161] ? load_image+0x410/0x410 [ 791.325836][T25161] ? __lock_acquire+0x7b50/0x7b50 [ 791.331080][T25161] should_fail+0x383/0x4b0 [ 791.335529][T25161] _copy_to_user+0x2e/0x130 [ 791.340139][T25161] simple_read_from_buffer+0xe3/0x150 [ 791.345723][T25161] proc_fail_nth_read+0x1a6/0x220 [ 791.351044][T25161] ? proc_fault_inject_write+0x310/0x310 [ 791.356975][T25161] ? fsnotify_perm+0x254/0x560 [ 791.361785][T25161] ? proc_fault_inject_write+0x310/0x310 [ 791.367549][T25161] vfs_read+0x2ff/0xd50 [ 791.371744][T25161] ? __lock_acquire+0x7b50/0x7b50 [ 791.376810][T25161] ? kernel_read+0x1e0/0x1e0 [ 791.381470][T25161] ? mutex_lock_nested+0x17/0x20 [ 791.386444][T25161] ? __fdget_pos+0x2bf/0x370 [ 791.391151][T25161] ? ksys_read+0x70/0x260 [ 791.395570][T25161] ksys_read+0x153/0x260 [ 791.399849][T25161] ? vfs_write+0xd70/0xd70 [ 791.404291][T25161] ? lockdep_hardirqs_on+0x94/0x140 [ 791.409527][T25161] do_syscall_64+0x4c/0xa0 [ 791.414046][T25161] ? clear_bhb_loop+0x30/0x80 [ 791.418729][T25161] ? clear_bhb_loop+0x30/0x80 [ 791.423417][T25161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 791.429323][T25161] RIP: 0033:0x7f724d6db68e [ 791.433836][T25161] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 791.453906][T25161] RSP: 002b:00007f724b972fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 791.462930][T25161] RAX: ffffffffffffffda RBX: 00007f724b9736c0 RCX: 00007f724d6db68e [ 791.471210][T25161] RDX: 000000000000000f RSI: 00007f724b9730a0 RDI: 0000000000000005 [ 791.479401][T25161] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 791.487552][T25161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.496645][T25161] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 791.504857][T25161] [ 791.525529][T25166] netlink: 'syz.2.7287': attribute type 39 has an invalid length. [ 792.191068][T25166] device hsr_slave_0 left promiscuous mode [ 792.210259][T25171] netlink: 'syz.2.7287': attribute type 20 has an invalid length. [ 792.231861][T25179] netlink: 'syz.5.7291': attribute type 10 has an invalid length. [ 792.393619][T25179] device wlan1 entered promiscuous mode [ 792.435192][T25179] team0: Port device wlan1 added [ 792.447700][T25177] netlink: 'syz.4.7289': attribute type 10 has an invalid length. [ 792.740936][T25188] netlink: 'syz.1.7293': attribute type 21 has an invalid length. [ 792.748889][T25188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 792.902239][T25192] delete_channel: no stack [ 793.041537][T25205] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.7297'. [ 793.112518][T25208] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7300'. [ 794.076588][T25225] validate_nla: 1 callbacks suppressed [ 794.076608][T25225] netlink: 'syz.2.7305': attribute type 10 has an invalid length. [ 794.841727][T25233] delete_channel: no stack [ 794.959155][T25236] netlink: 'syz.3.7309': attribute type 21 has an invalid length. [ 794.985505][T25236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 795.111588][T25247] netlink: 'syz.2.7311': attribute type 21 has an invalid length. [ 795.119879][T25247] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 795.127214][T25247] IPv6: NLM_F_CREATE should be set when creating new route [ 795.134485][T25247] IPv6: NLM_F_CREATE should be set when creating new route [ 795.188504][T25248] netlink: 'syz.5.7312': attribute type 4 has an invalid length. [ 795.211497][T25240] netlink: 'syz.2.7311': attribute type 2 has an invalid length. [ 795.219471][T25240] netlink: 16386 bytes leftover after parsing attributes in process `syz.2.7311'. [ 795.245814][T25243] netlink: 'syz.1.7314': attribute type 4 has an invalid length. [ 795.254436][T25248] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.7312'. [ 795.261219][T25243] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7314'. [ 795.707478][T25267] delete_channel: no stack [ 795.783050][T25273] FAULT_INJECTION: forcing a failure. [ 795.783050][T25273] name failslab, interval 1, probability 0, space 0, times 0 [ 795.848271][T25273] CPU: 0 PID: 25273 Comm: syz.1.7322 Not tainted syzkaller #0 [ 795.855798][T25273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.867054][T25273] Call Trace: [ 795.870372][T25273] [ 795.873354][T25273] dump_stack_lvl+0x188/0x250 [ 795.878130][T25273] ? show_regs_print_info+0x20/0x20 [ 795.883389][T25273] ? load_image+0x410/0x410 [ 795.887950][T25273] ? __might_sleep+0xf0/0xf0 [ 795.892865][T25273] ? __lock_acquire+0x7b50/0x7b50 [ 795.897949][T25273] should_fail+0x383/0x4b0 [ 795.902499][T25273] should_failslab+0x5/0x20 [ 795.907043][T25273] slab_pre_alloc_hook+0x51/0xc0 [ 795.912046][T25273] __kmalloc+0x6b/0x340 [ 795.916239][T25273] ? tomoyo_encode+0x28a/0x550 [ 795.921274][T25273] tomoyo_encode+0x28a/0x550 [ 795.926135][T25273] tomoyo_realpath_from_path+0x5a2/0x5e0 [ 795.932143][T25273] tomoyo_path_number_perm+0x251/0x6b0 [ 795.937756][T25273] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 795.943500][T25273] ? perf_trace_lock+0xe4/0x390 [ 795.948983][T25273] security_file_ioctl+0x6c/0xa0 [ 795.953962][T25273] __se_sys_ioctl+0x48/0x170 [ 795.958597][T25273] do_syscall_64+0x4c/0xa0 [ 795.963115][T25273] ? clear_bhb_loop+0x30/0x80 [ 795.968102][T25273] ? clear_bhb_loop+0x30/0x80 [ 795.973335][T25273] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 795.979261][T25273] RIP: 0033:0x7f724d71ae59 [ 795.983709][T25273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.003631][T25273] RSP: 002b:00007f724b973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 796.012161][T25273] RAX: ffffffffffffffda RBX: 00007f724d9a2fa0 RCX: 00007f724d71ae59 [ 796.020176][T25273] RDX: 0000200000000340 RSI: 0000000000008b15 RDI: 0000000000000003 [ 796.028273][T25273] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 796.036427][T25273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.044652][T25273] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 796.052643][T25273] [ 796.095736][T25273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 796.258809][T25285] FAULT_INJECTION: forcing a failure. [ 796.258809][T25285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.328896][T25285] CPU: 0 PID: 25285 Comm: syz.4.7326 Not tainted syzkaller #0 [ 796.336531][T25285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 796.346606][T25285] Call Trace: [ 796.349896][T25285] [ 796.352914][T25285] dump_stack_lvl+0x188/0x250 [ 796.357603][T25285] ? show_regs_print_info+0x20/0x20 [ 796.362808][T25285] ? load_image+0x410/0x410 [ 796.367514][T25285] ? __lock_acquire+0x7b50/0x7b50 [ 796.372545][T25285] ? seqcount_lockdep_reader_access+0x177/0x1d0 [ 796.378812][T25285] should_fail+0x383/0x4b0 [ 796.383336][T25285] _copy_from_user+0x2e/0x170 [ 796.388021][T25285] __sys_bpf+0x26d/0x6f0 [ 796.392443][T25285] ? bpf_link_show_fdinfo+0x380/0x380 [ 796.397900][T25285] __x64_sys_bpf+0x78/0x90 [ 796.402410][T25285] do_syscall_64+0x4c/0xa0 [ 796.406907][T25285] ? clear_bhb_loop+0x30/0x80 [ 796.411675][T25285] ? clear_bhb_loop+0x30/0x80 [ 796.416401][T25285] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 796.422312][T25285] RIP: 0033:0x7f4e6fc0ee59 [ 796.426736][T25285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 796.446627][T25285] RSP: 002b:00007f4e6de67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 796.455858][T25285] RAX: ffffffffffffffda RBX: 00007f4e6fe96fa0 RCX: 00007f4e6fc0ee59 [ 796.463844][T25285] RDX: 0000000000000028 RSI: 00002000000000c0 RDI: 000000000000000a [ 796.472052][T25285] RBP: 00007f4e6de67090 R08: 0000000000000000 R09: 0000000000000000 [ 796.481174][T25285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.489456][T25285] R13: 00007f4e6fe97038 R14: 00007f4e6fe96fa0 R15: 00007ffd1a838da8 [ 796.498008][T25285] [ 796.512449][T25283] netlink: 'syz.3.7325': attribute type 21 has an invalid length. [ 796.520708][T25283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 796.685395][T25296] netlink: 'syz.2.7329': attribute type 21 has an invalid length. [ 796.737145][T25299] netlink: 'syz.4.7330': attribute type 4 has an invalid length. [ 796.743205][T25296] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7329'. [ 796.793421][T25299] netlink: 208188 bytes leftover after parsing attributes in process `syz.4.7330'. [ 796.812186][T25300] delete_channel: no stack [ 796.813259][T25304] netlink: 'syz.3.7332': attribute type 4 has an invalid length. [ 796.861760][T25304] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7332'. [ 796.871559][T25302] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7329'. [ 796.973592][T25314] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7336'. [ 796.980203][T25318] FAULT_INJECTION: forcing a failure. [ 796.980203][T25318] name failslab, interval 1, probability 0, space 0, times 0 [ 797.006110][T25318] CPU: 1 PID: 25318 Comm: syz.2.7337 Not tainted syzkaller #0 [ 797.013633][T25318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 797.023704][T25318] Call Trace: [ 797.027100][T25318] [ 797.030228][T25318] dump_stack_lvl+0x188/0x250 [ 797.034944][T25318] ? show_regs_print_info+0x20/0x20 [ 797.040821][T25318] ? load_image+0x410/0x410 [ 797.046296][T25318] ? __might_sleep+0xf0/0xf0 [ 797.051093][T25318] ? __lock_acquire+0x7b50/0x7b50 [ 797.056353][T25318] should_fail+0x383/0x4b0 [ 797.060872][T25318] should_failslab+0x5/0x20 [ 797.065541][T25318] slab_pre_alloc_hook+0x51/0xc0 [ 797.070601][T25318] __kmalloc_node+0x6d/0x3a0 [ 797.075205][T25318] ? kvmalloc_node+0x84/0x130 [ 797.080045][T25318] kvmalloc_node+0x84/0x130 [ 797.084564][T25318] btf_parse_type_sec+0x1aa/0x1ae0 [ 797.089680][T25318] ? btf_check_sec_info+0x29b/0x350 [ 797.094959][T25318] ? btf_verifier_log+0x2b0/0x2b0 [ 797.100124][T25318] ? btf_parse_hdr+0x63d/0x830 [ 797.105009][T25318] ? btf_parse_str_sec+0x20a/0x2a0 [ 797.110515][T25318] btf_new_fd+0x4a7/0x910 [ 797.114888][T25318] __sys_bpf+0x58c/0x6f0 [ 797.119144][T25318] ? bpf_link_show_fdinfo+0x380/0x380 [ 797.124653][T25318] __x64_sys_bpf+0x78/0x90 [ 797.129086][T25318] do_syscall_64+0x4c/0xa0 [ 797.134146][T25318] ? clear_bhb_loop+0x30/0x80 [ 797.138832][T25318] ? clear_bhb_loop+0x30/0x80 [ 797.143585][T25318] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 797.149659][T25318] RIP: 0033:0x7ff8ea8d3e59 [ 797.154171][T25318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.173771][T25318] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.182588][T25318] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 797.190658][T25318] RDX: 0000000000000028 RSI: 0000200000000000 RDI: 0000000000000012 [ 797.198806][T25318] RBP: 00007ff8e8b2c090 R08: 0000000000000000 R09: 0000000000000000 [ 797.206775][T25318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.214937][T25318] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 797.223285][T25318] [ 797.363913][T25326] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.7339'. [ 797.423005][T25332] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 797.510546][T25335] delete_channel: no stack [ 797.899481][T25346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.212483][T25365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 798.369679][T25360] __nla_validate_parse: 3 callbacks suppressed [ 798.369790][T25360] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.7353'. [ 798.575334][T25368] delete_channel: no stack [ 798.606730][T25374] netlink: 208188 bytes leftover after parsing attributes in process `syz.3.7358'. [ 798.992553][T25394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 799.521773][T25403] delete_channel: no stack [ 799.612684][T25409] validate_nla: 9 callbacks suppressed [ 799.612704][T25409] netlink: 'syz.1.7372': attribute type 4 has an invalid length. [ 799.677888][T25409] netlink: 208188 bytes leftover after parsing attributes in process `syz.1.7372'. [ 799.727954][T25412] netlink: 'syz.5.7373': attribute type 6 has an invalid length. [ 799.768282][T25414] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7374'. [ 800.028465][T25424] netlink: 'syz.1.7378': attribute type 21 has an invalid length. [ 800.058219][T25424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.180750][T25428] netlink: 16255 bytes leftover after parsing attributes in process `syz.5.7380'. [ 800.218463][T25428] netlink: 'syz.5.7380': attribute type 33 has an invalid length. [ 800.232733][T25428] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7380'. [ 800.332335][T25433] delete_channel: no stack [ 800.703338][T25443] netlink: 'syz.5.7386': attribute type 4 has an invalid length. [ 800.732128][T25443] netlink: 208188 bytes leftover after parsing attributes in process `syz.5.7386'. [ 800.887390][T25454] netlink: 'syz.5.7391': attribute type 21 has an invalid length. [ 800.939635][T25454] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.044782][T25457] delete_channel: no stack [ 801.696864][T25476] netlink: 'syz.1.7399': attribute type 21 has an invalid length. [ 801.711943][T25476] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7399'. [ 801.766399][T25476] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7399'. [ 802.029979][T25488] delete_channel: no stack [ 802.144453][ C0] [ 802.144466][ C0] ================================ [ 802.144472][ C0] WARNING: inconsistent lock state [ 802.144489][ C0] syzkaller #0 Not tainted [ 802.144498][ C0] -------------------------------- [ 802.144502][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 802.144509][ C0] syz.2.7408/25494 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 802.144525][ C0] ffff88807853e238 (&trie->lock){....}-{2:2}, at: trie_delete_elem+0x8f/0x690 [ 802.144644][ C0] {INITIAL USE} state was registered at: [ 802.144651][ C0] lock_acquire+0x19e/0x400 [ 802.144668][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 802.144685][ C0] trie_update_elem+0xc0/0xd50 [ 802.144699][ C0] bpf_map_update_value+0x57c/0x650 [ 802.144714][ C0] map_update_elem+0x603/0x760 [ 802.144728][ C0] __sys_bpf+0x46b/0x6f0 [ 802.144738][ C0] __x64_sys_bpf+0x78/0x90 [ 802.144750][ C0] do_syscall_64+0x4c/0xa0 [ 802.144760][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.144773][ C0] irq event stamp: 622 [ 802.144778][ C0] hardirqs last enabled at (621): [] seqcount_lockdep_reader_access+0x127/0x1d0 [ 802.144795][ C0] hardirqs last disabled at (622): [] exc_debug+0x6e/0x130 [ 802.144812][ C0] softirqs last enabled at (480): [] bpf_prog_load+0x10ee/0x14e0 [ 802.144830][ C0] softirqs last disabled at (478): [] bpf_ksym_add+0x28/0x330 [ 802.144845][ C0] [ 802.144845][ C0] other info that might help us debug this: [ 802.144849][ C0] Possible unsafe locking scenario: [ 802.144849][ C0] [ 802.144852][ C0] CPU0 [ 802.144855][ C0] ---- [ 802.144858][ C0] lock(&trie->lock); [ 802.144867][ C0] [ 802.144870][ C0] lock(&trie->lock); [ 802.144878][ C0] [ 802.144878][ C0] *** DEADLOCK *** [ 802.144878][ C0] [ 802.144881][ C0] no locks held by syz.2.7408/25494. [ 802.144888][ C0] [ 802.144888][ C0] stack backtrace: [ 802.144893][ C0] CPU: 0 PID: 25494 Comm: syz.2.7408 Not tainted syzkaller #0 [ 802.144907][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 802.144916][ C0] Call Trace: [ 802.144921][ C0] <#DB> [ 802.144928][ C0] dump_stack_lvl+0x188/0x250 [ 802.144946][ C0] ? show_regs_print_info+0x20/0x20 [ 802.144964][ C0] ? print_usage_bug+0x42a/0x690 [ 802.144977][ C0] ? verify_lock_unused+0x15/0x140 [ 802.144994][ C0] lock_acquire+0x2c3/0x400 [ 802.145029][ C0] ? rcu_lock_acquire+0x5/0x30 [ 802.145045][ C0] ? rcu_lock_release+0x5/0x40 [ 802.145058][ C0] ? trie_delete_elem+0x8f/0x690 [ 802.145073][ C0] ? read_lock_is_recursive+0x10/0x10 [ 802.145089][ C0] ? look_up_lock_class+0x71/0x110 [ 802.145109][ C0] ? look_up_lock_class+0x71/0x110 [ 802.145124][ C0] ? verify_lock_unused+0x15/0x140 [ 802.145141][ C0] _raw_spin_lock_irqsave+0xb0/0x100 [ 802.145157][ C0] ? trie_delete_elem+0x8f/0x690 [ 802.145172][ C0] ? _raw_spin_lock+0x40/0x40 [ 802.145189][ C0] ? rcu_lock_acquire+0x9/0x30 [ 802.145208][ C0] trie_delete_elem+0x8f/0x690 [ 802.145229][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0xdec [ 802.145243][ C0] bpf_overflow_handler+0x1c2/0x4a0 [ 802.145260][ C0] ? perf_get_page_size+0x430/0x430 [ 802.145276][ C0] ? perf_event_switch_output+0x730/0x730 [ 802.145291][ C0] ? trace_call_bpf+0x515/0x5b0 [ 802.145312][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 802.145426][ C0] __perf_event_overflow+0x35f/0x550 [ 802.145449][ C0] perf_bp_event+0x276/0x320 [ 802.145470][ C0] ? perf_trace_lock_acquire+0x341/0x3f0 [ 802.145491][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 802.145522][ C0] ? rcu_lock_acquire+0x9/0x30 [ 802.145612][ C0] ? read_lock_is_recursive+0x10/0x10 [ 802.145635][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 802.145666][ C0] atomic_notifier_call_chain+0x15d/0x280 [ 802.145685][ C0] notify_die+0x141/0x1a0 [ 802.145702][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 802.145722][ C0] ? exc_debug+0x6e/0x130 [ 802.145737][ C0] ? trace_hardirqs_off_finish+0x57/0x1f0 [ 802.145760][ C0] notify_debug+0x20/0x30 [ 802.145813][ C0] exc_debug+0xcf/0x130 [ 802.145832][ C0] asm_exc_debug+0x1a/0x40 [ 802.145847][ C0] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 802.145871][ C0] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 802.145885][ C0] RSP: 0018:ffffc9000306f458 EFLAGS: 00050206 [ 802.145902][ C0] RAX: ffffffff83e81a01 RBX: 0000000000000062 RCX: 0000000000000049 [ 802.145953][ C0] RDX: 0000000000000062 RSI: ffff888063498685 RDI: 0000200000000301 [ 802.145964][ C0] RBP: 0000000000000000 R08: ffff8880634986cd R09: 1ffff1100c6930d9 [ 802.145974][ C0] R10: dffffc0000000000 R11: ffffed100c6930da R12: 00007ffffffff000 [ 802.145983][ C0] R13: 000020000000034a R14: ffff88806349866c R15: 00002000000002e8 [ 802.145999][ C0] ? _copy_to_user+0x31/0x130 [ 802.146023][ C0] [ 802.146028][ C0] [ 802.146032][ C0] _copy_to_user+0xf0/0x130 [ 802.146049][ C0] bpf_verifier_vlog+0x1b5/0x350 [ 802.146070][ C0] verbose+0x1f0/0x2b0 [ 802.146086][ C0] ? verbose+0x1f0/0x2b0 [ 802.146102][ C0] ? bpf_check+0xf6b0/0xf6b0 [ 802.146125][ C0] bpf_check+0xb3b3/0xf6b0 [ 802.146152][ C0] ? mark_lock+0x94/0x320 [ 802.146168][ C0] ? bpf_get_btf_vmlinux+0x10/0x10 [ 802.146187][ C0] ? __lock_acquire+0x13dc/0x7b50 [ 802.146209][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 802.146226][ C0] ? verify_lock_unused+0x140/0x140 [ 802.146245][ C0] ? perf_trace_lock+0xe4/0x390 [ 802.146264][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 802.146282][ C0] ? rcu_lock_release+0x5/0x20 [ 802.146314][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 802.146334][ C0] ? lock_chain_count+0x20/0x20 [ 802.146355][ C0] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 802.146371][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 802.146386][ C0] ? ktime_get_with_offset+0xff/0x320 [ 802.146400][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 802.146413][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 802.146427][ C0] ? pcpu_alloc+0x11e6/0x16d0 [ 802.146447][ C0] ? __might_fault+0xb3/0x110 [ 802.146463][ C0] ? memset+0x1e/0x40 [ 802.146480][ C0] ? bpf_obj_name_cpy+0x190/0x1d0 [ 802.146498][ C0] bpf_prog_load+0xfdf/0x14e0 [ 802.146521][ C0] ? map_freeze+0x360/0x360 [ 802.146537][ C0] ? __might_fault+0xb7/0x110 [ 802.146558][ C0] ? __might_fault+0xb3/0x110 [ 802.146574][ C0] ? bpf_lsm_bpf+0x5/0x10 [ 802.146591][ C0] ? security_bpf+0x7a/0xa0 [ 802.146611][ C0] __sys_bpf+0x532/0x6f0 [ 802.146630][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 802.146657][ C0] __x64_sys_bpf+0x78/0x90 [ 802.146672][ C0] do_syscall_64+0x4c/0xa0 [ 802.146684][ C0] ? clear_bhb_loop+0x30/0x80 [ 802.146699][ C0] ? clear_bhb_loop+0x30/0x80 [ 802.146713][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 802.146727][ C0] RIP: 0033:0x7ff8ea8d3e59 [ 802.146743][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.146756][ C0] RSP: 002b:00007ff8e8b2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 802.146778][ C0] RAX: ffffffffffffffda RBX: 00007ff8eab5bfa0 RCX: 00007ff8ea8d3e59 [ 802.146788][ C0] RDX: 000000000000006d RSI: 00002000000000c0 RDI: 0000000000000005 [ 802.146798][ C0] RBP: 00007ff8ea969e6f R08: 0000000000000000 R09: 0000000000000000 [ 802.146807][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.146816][ C0] R13: 00007ff8eab5c038 R14: 00007ff8eab5bfa0 R15: 00007fff40838758 [ 802.146835][ C0] [ 802.951840][T25492] FAULT_INJECTION: forcing a failure. [ 802.951840][T25492] name failslab, interval 1, probability 0, space 0, times 0 [ 802.958849][T25498] netlink: 'syz.3.7407': attribute type 1 has an invalid length. [ 802.965303][T25492] CPU: 0 PID: 25492 Comm: syz.1.7406 Not tainted syzkaller #0 [ 802.965334][T25492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 802.965345][T25492] Call Trace: [ 802.965354][T25492] [ 802.965364][T25492] dump_stack_lvl+0x188/0x250 [ 802.965392][T25492] ? show_regs_print_info+0x20/0x20 [ 802.965412][T25492] ? load_image+0x410/0x410 [ 802.965439][T25492] ? __might_sleep+0xf0/0xf0 [ 803.017201][T25492] ? __lock_acquire+0x7b50/0x7b50 [ 803.022355][T25492] should_fail+0x383/0x4b0 [ 803.027558][T25492] should_failslab+0x5/0x20 [ 803.032148][T25492] slab_pre_alloc_hook+0x51/0xc0 [ 803.037197][T25492] __kmalloc+0x6b/0x340 [ 803.041701][T25492] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 803.047608][T25492] tomoyo_realpath_from_path+0xed/0x5e0 [ 803.053175][T25492] tomoyo_path_number_perm+0x251/0x6b0 [ 803.058805][T25492] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 803.064455][T25492] ? perf_trace_lock+0x301/0x390 [ 803.069590][T25492] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 803.075777][T25492] security_file_ioctl+0x6c/0xa0 [ 803.080993][T25492] __se_sys_ioctl+0x48/0x170 [ 803.085632][T25492] do_syscall_64+0x4c/0xa0 [ 803.090270][T25492] ? clear_bhb_loop+0x30/0x80 [ 803.095141][T25492] ? clear_bhb_loop+0x30/0x80 [ 803.100178][T25492] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 803.106196][T25492] RIP: 0033:0x7f724d71ae59 [ 803.111174][T25492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 803.131633][T25492] RSP: 002b:00007f724b973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 803.140448][T25492] RAX: ffffffffffffffda RBX: 00007f724d9a2fa0 RCX: 00007f724d71ae59 [ 803.148472][T25492] RDX: 0000200000000000 RSI: 0000000000008b05 RDI: 0000000000000008 [ 803.157669][T25492] RBP: 00007f724b973090 R08: 0000000000000000 R09: 0000000000000000 [ 803.166112][T25492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.174174][T25492] R13: 00007f724d9a3038 R14: 00007f724d9a2fa0 R15: 00007fff796ab548 [ 803.182357][T25492] [ 803.185523][T25492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 803.203627][T25498] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.7407'. [ 803.229383][T25473] chnl_net:caif_netlink_parms(): no params data found [ 803.308047][T13198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.324909][T25473] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.333289][T25473] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.342139][T25473] device bridge_slave_0 entered promiscuous mode [ 803.349873][T25473] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.357304][T25473] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.365753][T25473] device bridge_slave_1 entered promiscuous mode [ 803.381187][T25473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 803.394914][T13198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.407800][T25473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 803.426661][T25473] team0: Port device team_slave_0 added [ 803.436645][T25473] team0: Port device team_slave_1 added [ 803.454128][T25473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.462967][T25473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.498332][T25473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.514677][T13198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.530909][T25473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.538734][T25473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 803.568991][T25473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.595546][T25473] device hsr_slave_0 entered promiscuous mode [ 803.602404][T25473] device hsr_slave_1 entered promiscuous mode [ 803.616727][T13198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.671015][T22466] Bluetooth: hci3: command 0x0409 tx timeout [ 804.616865][T13198] device wlan1 left promiscuous mode [ 804.622893][T13198] team0: Port device wlan1 removed [ 804.726775][T13198] device hsr_slave_0 left promiscuous mode [ 804.733517][T13198] device hsr_slave_1 left promiscuous mode [ 804.740235][T13198] bridge0: port 3(team0) entered disabled state [ 804.748303][T13198] device bridge_slave_1 left promiscuous mode [ 804.755262][T13198] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.764117][T13198] device bridge_slave_0 left promiscuous mode [ 804.771671][T13198] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.781665][T13198] device veth1_macvtap left promiscuous mode [ 804.789052][T13198] device veth0_macvtap left promiscuous mode [ 804.795656][T13198] device veth1_vlan left promiscuous mode [ 804.802125][T13198] device veth0_vlan left promiscuous mode [ 804.884576][T13198] device team_slave_1 left promiscuous mode [ 804.893176][T13198] team0 (unregistering): Port device team_slave_1 removed [ 804.904208][T13198] device team_slave_0 left promiscuous mode [ 804.910667][T13198] team0 (unregistering): Port device team_slave_0 removed [ 805.004955][T25473] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 805.013611][T25473] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 805.023470][T25473] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 805.032773][T25473] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 805.095292][T25473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.107714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 805.117144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 805.128202][T25473] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.141852][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 805.151817][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 805.160733][ T1214] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.168024][ T1214] bridge0: port 1(bridge_slave_0) entered forwarding state [ 805.177477][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 805.188130][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 805.197045][ T1214] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.204143][ T1214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 805.221774][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 805.229948][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 805.239874][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 805.250116][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 805.265019][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 805.275398][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 805.284193][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 805.293138][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 805.309441][T25473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 805.321121][T25473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 805.351424][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 805.360239][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 805.369189][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 805.377764][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 805.386598][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 805.472912][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 805.483220][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 805.497151][T25473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.643323][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 805.653589][ T1214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 805.674030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 805.685312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 805.697196][T25473] device veth0_vlan entered promiscuous mode [ 805.705811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 805.715801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 805.728338][T25473] device veth1_vlan entered promiscuous mode [ 805.740873][T23209] Bluetooth: hci3: command 0x041b tx timeout [ 805.752771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 805.773591][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 805.785065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 805.795523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 805.807350][T25473] device veth0_macvtap entered promiscuous mode [ 805.818608][T25473] device veth1_macvtap entered promiscuous mode [ 805.836169][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.849786][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.860909][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.874985][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.885909][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.897592][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.909544][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.920255][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.935086][T25473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.943845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 805.953597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 805.962396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 805.971903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 805.985240][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.996431][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.007072][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.017896][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.027848][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.038505][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.048663][T25473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.060100][T25473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.073794][T25473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.083086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.094646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.106044][T25473] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.115713][T25473] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.125139][T25473] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.134697][T25473] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.159642][T25473] ieee80211 phy60: Selected rate control algorithm 'minstrel_ht' [ 806.177791][T13198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.178639][T25473] ieee80211 phy61: Selected rate control algorithm 'minstrel_ht' [ 806.191416][T13198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.206298][T13198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 806.220195][ T1214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 806.229856][ T1214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 806.239083][T13198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 807.821456][T23022] Bluetooth: hci3: command 0x040f tx timeout [ 809.183007][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.189315][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.911123][T23022] Bluetooth: hci3: command 0x0419 tx timeout