last executing test programs: 9m59.484466152s ago: executing program 3 (id=1297): mkdir(&(0x7f0000000dc0)='./cgroup/../file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000dc0)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x1f) (fail_nth: 6) 9m58.991139892s ago: executing program 3 (id=1301): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, &(0x7f0000001040)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000001d40)='syzkaller\x00'}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xc, 0x10, &(0x7f0000001e80)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7070000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000001f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f40)={{r3}, &(0x7f0000001f80), &(0x7f0000001fc0)=r2}, 0x20) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0x2}, 0x8, 0x10, &(0x7f0000000f40), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f80)={r6, 0x702, 0xe80, 0x0, &(0x7f0000001000)="e460334470d8d400eb00c15286dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9m55.906224251s ago: executing program 3 (id=1305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1052c3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000005c0)={0x4, &(0x7f0000000040)=[{0x15, 0x40, 0x5, 0x2}, {0x2, 0xa, 0x5, 0x3}, {0x101, 0x5, 0x7, 0x507}, {0x20e0, 0x40, 0xf9, 0x3}]}) ioctl$TUNGETVNETLE(r0, 0x800454dd, &(0x7f0000000000)) 9m55.831146928s ago: executing program 3 (id=1306): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) sendmsg$tipc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="596cdc", 0x3, 0xc0}, 0x4000010) r1 = socket$kcm(0x11, 0x2, 0x300) sendmsg(r1, &(0x7f0000002800)={&(0x7f0000000440)=@phonet={0x23, 0x70, 0x4, 0x1}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001540)="f16f90422d5b966825549549cfaf89b87950ef6181bad7cb5d3b5c91b0dfc95f0a4afd9c29c3efb31885119d99b910301711527224ede1c9747b6a2413e3d5625cdfc079b58adebb640af798f75311375680a14f8547ae7e295207db33874b32c89f662e58f1e96890cf5b7d8cd4155e9cdf31cb436233addb620859ab14fe0462b248bfa298a3c18e370f21a3a501668e3bbd581e5d2aface", 0x99}, {&(0x7f0000001600)="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", 0xf53}], 0x2}, 0x40000) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}, 0x102) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000240)=r0) 9m55.640311438s ago: executing program 3 (id=1308): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x1, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000bc0)=r4, 0x4) sendmsg$unix(r3, &(0x7f0000000c00)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0xd, 0x2004}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r6, 0xfca804a0, 0xe, 0x8, &(0x7f0000000540)="9a0000b0aa28637d698ccd000000", &(0x7f00000007c0)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYRES32=r8], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81e6978800fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 9m54.918028983s ago: executing program 3 (id=1312): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x300, &(0x7f0000000740)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009e000000720a00ff00000000790038000000000095"], 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'pim6reg\x00', 0x2000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r6}, &(0x7f0000000980), &(0x7f00000009c0)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r6}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r6, &(0x7f0000000b40)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)='%ps \x00'}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000a00)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x800) 9m39.275160177s ago: executing program 32 (id=1312): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe50b8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r2, 0x0, 0xe, 0x300, &(0x7f0000000740)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="850000009e000000720a00ff00000000790038000000000095"], 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000b40)={'pim6reg\x00', 0x2000}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r6}, &(0x7f0000000980), &(0x7f00000009c0)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r6}, &(0x7f0000000a80), &(0x7f0000000ac0)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000b00)={r6, &(0x7f0000000b40)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r6}, &(0x7f0000000bc0), &(0x7f0000000c00)='%ps \x00'}, 0x20) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000a00)={0x2, 0x4e21, @empty}, 0x10, 0x0}, 0x800) 21.561601186s ago: executing program 0 (id=3838): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) gettid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 21.410951141s ago: executing program 1 (id=3839): perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@phonet={0x23, 0x80, 0x0, 0x31}, 0x80, &(0x7f0000000d40)}, 0x480c1) 21.295524293s ago: executing program 0 (id=3840): r0 = perf_event_open(&(0x7f0000000f00)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x3}]}, @func_proto, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x57, 0x2e, 0x2e, 0x61]}}, 0x0, 0x4a, 0x0, 0x3}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000d80)={0x0, 0x7c, &(0x7f0000000dc0)=[{&(0x7f0000000e00)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 20.906151343s ago: executing program 1 (id=3841): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.708138024s ago: executing program 0 (id=3842): socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='GPL\x00', 0x4, 0x7, &(0x7f0000001600)=""/4101, 0x0, 0xc}, 0x94) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, 0x0) 20.707810224s ago: executing program 1 (id=3843): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) (async) close(r1) r2 = socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020000000000000000000007000000000000000002000006040000000000000000000000000000000000000000000000000000090000000000000000000009"], 0x0, 0x5a}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000940)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000882ba33c890000000000000000000000000000000000000000000000caae32edb448209a9671619cac11070c78f5dd98dec364f69d6a9feb5cc61ef3fdff3f7eb1fd976cad3f0603ad9012b79fc9a7c2e65d422d10b26c5b77908271a6f06e15508a2546890eab8afac94cc0ea85e5"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000882ba33c890000000000000000000000000000000000000000000000caae32edb448209a9671619cac11070c78f5dd98dec364f69d6a9feb5cc61ef3fdff3f7eb1fd976cad3f0603ad9012b79fc9a7c2e65d422d10b26c5b77908271a6f06e15508a2546890eab8afac94cc0ea85e5"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r4, 0xffffffffffffffff}, &(0x7f0000000a40), &(0x7f0000000a80)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r5}, &(0x7f0000000b00), &(0x7f0000000b40)=r3}, 0x20) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000300), 0x9c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a000"/40], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c209, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000001c0)=')%\'-\x00'}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000001c0)=')%\'-\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r7}, 0x4) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) (async) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r8, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0, 0xf3, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x51, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) socket$kcm(0x1e, 0x4, 0x0) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000800), 0x43) socket$kcm(0x1e, 0x1, 0x0) (async) r10 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000840), 0x43) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000900)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r6], 0x9a) 20.571792038s ago: executing program 2 (id=3844): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x8, 0x10, &(0x7f0000001240), 0x10}, 0x94) 20.333445882s ago: executing program 1 (id=3845): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000), 0xff0f000020008001) 20.280357558s ago: executing program 2 (id=3846): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) socket$kcm(0x23, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f0000000580), 0x161) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xa98f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 20.055440141s ago: executing program 1 (id=3847): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) gettid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 19.848261752s ago: executing program 2 (id=3848): perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@phonet={0x23, 0x80, 0x0, 0x31}, 0x80, &(0x7f0000000d40)}, 0x480c1) 19.726631205s ago: executing program 4 (id=3849): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="1800000072006bcd9e3fe3dc", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 19.657642552s ago: executing program 4 (id=3850): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) (fail_nth: 7) 19.622311986s ago: executing program 1 (id=3851): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x5, 0x252, &(0x7f0000001080)=""/195}, 0x48) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0x7fffffff, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 64) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="0207000902000000e4a17c45c8d260", 0xf}, {&(0x7f00000006c0)="f0", 0x1}], 0x2}, 0x4000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 19.572995431s ago: executing program 0 (id=3852): socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000015c0), 0x0, 0xff66, 0x10, 0x8, 0xffffffffffffff5a, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r3, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000b00)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000b80)='GPL\x00', 0x4, 0x7, &(0x7f0000001600)=""/4101, 0x0, 0xc}, 0x94) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, 0x0) 19.572867281s ago: executing program 2 (id=3853): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000003c0)={'ip6tnl0\x00', 0x210}) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f00000011c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001200), 0x8, 0x10, &(0x7f0000001240), 0x10}, 0x94) 19.044464965s ago: executing program 4 (id=3854): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000980)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) sendmsg$kcm(r0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0e0000000000000001000080"], 0x10}, 0x1) 19.044287945s ago: executing program 2 (id=3855): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_pktinfo={{0x1c, 0x1000000, 0x8, {0x0, @loopback, @multicast2}}}], 0x20}, 0x200040c4) 18.833578167s ago: executing program 4 (id=3856): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f0000000580), 0x161) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xa98f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 18.553140056s ago: executing program 4 (id=3857): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x40049409, 0x5) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f00000001c0), 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x8, 0x1, 0x1, 0x0, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000008c0), 0x4, r5, 0x4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x16c5, r5}, 0x38) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) socket$kcm(0x10, 0x2, 0x4) r7 = socket$kcm(0x2b, 0x1, 0x0) close(r7) r8 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r8, 0x0, 0xe07e872420dfefca) recvmsg$kcm(r7, 0x0, 0x100) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r10, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000000)="b9ff03070000008ca8cc8bb89e0802c9fd424f73fc0cff8875b1c283ab5ac58554e5d41f0ecd60", 0x0, 0x9, 0x60000000, 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r12 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r11}, &(0x7f00000000c0), &(0x7f0000000100)=r12}, 0x20) close(0x3) close(r12) bpf$PROG_LOAD(0x5, 0x0, 0x0) 18.543767597s ago: executing program 2 (id=3865): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f0000000580), 0x161) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xa98f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 18.352450237s ago: executing program 0 (id=3858): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="1800000072006bcd9e3fe3dc", 0xc}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 18.272731745s ago: executing program 0 (id=3859): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) gettid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 15.427705808s ago: executing program 4 (id=3860): perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@phonet={0x23, 0x80, 0x0, 0x31}, 0x80, &(0x7f0000000d40)}, 0x480c1) 4.035946604s ago: executing program 33 (id=3851): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x5, 0x252, &(0x7f0000001080)=""/195}, 0x48) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) perf_event_open$cgroup(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x6, 0x82, 0xf7, 0x0, 0x9, 0x1300, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3e14, 0x3, @perf_config_ext={0x7fffffff, 0x18000000}, 0xa0, 0x8, 0x7, 0x2, 0xfffffffffffffffd, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r1 = socket$kcm(0x2b, 0x1, 0x0) close(r1) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200), 0xc) (async, rerun: 32) r2 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async, rerun: 64) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) (async) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="0207000902000000e4a17c45c8d260", 0xf}, {&(0x7f00000006c0)="f0", 0x1}], 0x2}, 0x4000000) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) socket$kcm(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r7, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 2.52121492s ago: executing program 34 (id=3859): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x5, &(0x7f0000000000)=@framed={{}, [@map_fd={0x18, 0xd, 0x1, 0x0, r2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) gettid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 2.413405381s ago: executing program 35 (id=3865): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000680)=ANY=[], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8001}, 0x0, 0x32, 0x43e1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0xf, &(0x7f0000000580), 0x161) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x4008040) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xa98f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 0s ago: executing program 36 (id=3860): perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@phonet={0x23, 0x80, 0x0, 0x31}, 0x80, &(0x7f0000000d40)}, 0x480c1) kernel console output (not intermixed with test programs): Google 10/07/2026 [ 773.765451][T15208] Call Trace: [ 773.768788][T15208] [ 773.771780][T15208] dump_stack_lvl+0x18c/0x250 [ 773.776549][T15208] ? show_regs_print_info+0x20/0x20 [ 773.781845][T15208] ? load_image+0x420/0x420 [ 773.786424][T15208] ? verify_lock_unused+0x140/0x140 [ 773.791690][T15208] ? perf_trace_lock+0x303/0x3b0 [ 773.796705][T15208] should_fail_ex+0x394/0x4c0 [ 773.801512][T15208] should_failslab+0x9/0x20 [ 773.806080][T15208] slab_pre_alloc_hook+0x59/0x300 [ 773.811178][T15208] kmem_cache_alloc+0x5a/0x2d0 [ 773.816004][T15208] ? skb_clone+0x1eb/0x370 [ 773.820497][T15208] skb_clone+0x1eb/0x370 [ 773.824794][T15208] __netlink_deliver_tap+0x411/0x7f0 [ 773.830134][T15208] ? netlink_deliver_tap+0x2e/0x1b0 [ 773.835372][T15208] netlink_deliver_tap+0x19c/0x1b0 [ 773.840518][T15208] netlink_unicast+0x82f/0x9e0 [ 773.845358][T15208] netlink_sendmsg+0x8d0/0xbf0 [ 773.850171][T15208] ? netlink_getsockopt+0x590/0x590 [ 773.855415][T15208] ? apparmor_socket_sendmsg+0x8e/0x330 [ 773.861016][T15208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 773.866373][T15208] ? security_socket_sendmsg+0x80/0xa0 [ 773.871875][T15208] ? netlink_getsockopt+0x590/0x590 [ 773.877114][T15208] ____sys_sendmsg+0x61b/0x980 [ 773.881944][T15208] ? __asan_memset+0x22/0x40 [ 773.886575][T15208] ? __sys_sendmsg_sock+0x30/0x30 [ 773.891636][T15208] ? __import_iovec+0x5f2/0x850 [ 773.896570][T15208] ? import_iovec+0x73/0xa0 [ 773.901129][T15208] ___sys_sendmsg+0x2a6/0x360 [ 773.905858][T15208] ? __sys_sendmsg+0x2b0/0x2b0 [ 773.910724][T15208] ? trace_call_bpf+0xc3/0x6c0 [ 773.915614][T15208] __se_sys_sendmsg+0x1d0/0x2c0 [ 773.920526][T15208] ? perf_trace_preemptirq_template+0x269/0x330 [ 773.926832][T15208] ? __x64_sys_sendmsg+0x80/0x80 [ 773.931844][T15208] ? lockdep_hardirqs_on+0x98/0x150 [ 773.937091][T15208] do_syscall_64+0x55/0xb0 [ 773.941550][T15208] ? clear_bhb_loop+0x40/0x90 [ 773.946265][T15208] ? clear_bhb_loop+0x40/0x90 [ 773.950996][T15208] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 773.956935][T15208] RIP: 0033:0x7f3d0f19f559 [ 773.961391][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.981052][T15208] RSP: 002b:00007f3d100d2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 773.989517][T15208] RAX: ffffffffffffffda RBX: 00007f3d0f425fa0 RCX: 00007f3d0f19f559 [ 773.997529][T15208] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000005 [ 774.005561][T15208] RBP: 00007f3d100d2090 R08: 0000000000000000 R09: 0000000000000000 [ 774.013572][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 774.021583][T15208] R13: 00007f3d0f426038 R14: 00007f3d0f425fa0 R15: 00007ffc0b50e258 [ 774.029617][T15208] [ 774.472873][T15229] netlink: 'syz.0.2955': attribute type 21 has an invalid length. [ 774.992601][T15255] netlink: 'syz.2.2967': attribute type 21 has an invalid length. [ 775.002992][T15255] __nla_validate_parse: 10 callbacks suppressed [ 775.003010][T15255] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2967'. [ 775.054915][T13177] Bluetooth: hci0: command 0x0406 tx timeout [ 775.210090][T15261] FAULT_INJECTION: forcing a failure. [ 775.210090][T15261] name failslab, interval 1, probability 0, space 0, times 0 [ 775.231054][T15261] CPU: 1 PID: 15261 Comm: syz.2.2970 Not tainted syzkaller #0 [ 775.238603][T15261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 775.248721][T15261] Call Trace: [ 775.252051][T15261] [ 775.255025][T15261] dump_stack_lvl+0x18c/0x250 [ 775.259778][T15261] ? show_regs_print_info+0x20/0x20 [ 775.265050][T15261] ? load_image+0x420/0x420 [ 775.269624][T15261] ? __might_sleep+0xe0/0xe0 [ 775.274272][T15261] ? __lock_acquire+0x7eb0/0x7eb0 [ 775.279357][T15261] ? stack_trace_save+0xaa/0x100 [ 775.284356][T15261] ? stack_trace_snprint+0xf0/0xf0 [ 775.289567][T15261] should_fail_ex+0x394/0x4c0 [ 775.294309][T15261] should_failslab+0x9/0x20 [ 775.298855][T15261] slab_pre_alloc_hook+0x59/0x300 [ 775.303938][T15261] ? __kasan_kmalloc+0x8f/0xa0 [ 775.308756][T15261] ? __inet_diag_dump_start+0x8b/0x9f0 [ 775.314288][T15261] ? __netlink_dump_start+0x43c/0x7a0 [ 775.319713][T15261] kmem_cache_alloc_node+0x5e/0x320 [ 775.325026][T15261] ? ___sys_sendmsg+0x2a6/0x360 [ 775.329934][T15261] ? __alloc_skb+0x103/0x2c0 [ 775.334581][T15261] __alloc_skb+0x103/0x2c0 [ 775.339053][T15261] netlink_dump+0x1ee/0xec0 [ 775.343603][T15261] ? end_current_label_crit_section+0x170/0x170 [ 775.349916][T15261] ? end_current_label_crit_section+0x170/0x170 [ 775.356239][T15261] ? netlink_lookup+0x200/0x200 [ 775.361160][T15261] ? ns_capable+0x89/0xe0 [ 775.365559][T15261] ? __inet_diag_dump_start+0x886/0x9f0 [ 775.371166][T15261] __netlink_dump_start+0x57c/0x7a0 [ 775.376421][T15261] inet_diag_rcv_msg_compat+0x215/0x440 [ 775.382044][T15261] ? __inet_diag_dump+0x380/0x380 [ 775.387125][T15261] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 775.392215][T15261] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 775.397991][T15261] ? inet_diag_dump_start_compat+0x20/0x20 [ 775.403841][T15261] ? inet_diag_dump+0x50/0x50 [ 775.408583][T15261] ? __inet_diag_dump+0x380/0x380 [ 775.413660][T15261] sock_diag_rcv_msg+0x3d3/0x5f0 [ 775.418664][T15261] netlink_rcv_skb+0x235/0x4c0 [ 775.423478][T15261] ? sock_diag_bind+0xb0/0xb0 [ 775.428241][T15261] ? netlink_ack+0x1160/0x1160 [ 775.433056][T15261] ? __lock_acquire+0x7eb0/0x7eb0 [ 775.438135][T15261] ? netlink_deliver_tap+0x2e/0x1b0 [ 775.443374][T15261] sock_diag_rcv+0x2a/0x40 [ 775.447855][T15261] netlink_unicast+0x856/0x9e0 [ 775.452691][T15261] netlink_sendmsg+0x8d0/0xbf0 [ 775.457503][T15261] ? netlink_getsockopt+0x590/0x590 [ 775.462747][T15261] ? apparmor_socket_sendmsg+0x170/0x330 [ 775.468455][T15261] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 775.473809][T15261] ? security_socket_sendmsg+0x80/0xa0 [ 775.479319][T15261] ? netlink_getsockopt+0x590/0x590 [ 775.484567][T15261] ____sys_sendmsg+0x61b/0x980 [ 775.489405][T15261] ? __asan_memset+0x22/0x40 [ 775.494064][T15261] ? __sys_sendmsg_sock+0x30/0x30 [ 775.499129][T15261] ? __import_iovec+0x5f2/0x850 [ 775.504040][T15261] ? import_iovec+0x73/0xa0 [ 775.508601][T15261] ___sys_sendmsg+0x2a6/0x360 [ 775.513323][T15261] ? get_pid_task+0x20/0x1e0 [ 775.517972][T15261] ? __sys_sendmsg+0x2b0/0x2b0 [ 775.522797][T15261] ? __lock_acquire+0x7eb0/0x7eb0 [ 775.527896][T15261] __se_sys_sendmsg+0x1d0/0x2c0 [ 775.532790][T15261] ? __x64_sys_sendmsg+0x80/0x80 [ 775.537804][T15261] ? lockdep_hardirqs_on+0x98/0x150 [ 775.543059][T15261] do_syscall_64+0x55/0xb0 [ 775.547543][T15261] ? clear_bhb_loop+0x40/0x90 [ 775.552272][T15261] ? clear_bhb_loop+0x40/0x90 [ 775.557000][T15261] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 775.562943][T15261] RIP: 0033:0x7f97a559f559 [ 775.567403][T15261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.587060][T15261] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 775.595551][T15261] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 775.603589][T15261] RDX: ff0f000020000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 775.611593][T15261] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 775.619600][T15261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.627632][T15261] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 775.635675][T15261] [ 775.823685][T15267] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2973'. [ 776.090873][T15282] netlink: 'syz.4.2978': attribute type 21 has an invalid length. [ 776.100280][T15282] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2978'. [ 776.391649][T15290] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2984'. [ 776.608666][T15305] netlink: 'syz.2.2988': attribute type 21 has an invalid length. [ 776.616710][T15305] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2988'. [ 777.457305][T15315] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2993'. [ 777.937896][T15328] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2996'. [ 778.311053][T15319] syzkaller0: entered promiscuous mode [ 778.329177][T15319] syzkaller0: entered allmulticast mode [ 778.358357][T15340] netlink: 'syz.2.2999': attribute type 21 has an invalid length. [ 778.381848][T15340] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2999'. [ 779.568872][T15355] FAULT_INJECTION: forcing a failure. [ 779.568872][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 779.609753][T15355] CPU: 0 PID: 15355 Comm: syz.2.3005 Not tainted syzkaller #0 [ 779.617320][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 779.627431][T15355] Call Trace: [ 779.630753][T15355] [ 779.633749][T15355] dump_stack_lvl+0x18c/0x250 [ 779.638492][T15355] ? show_regs_print_info+0x20/0x20 [ 779.643758][T15355] ? load_image+0x420/0x420 [ 779.648327][T15355] ? __might_sleep+0xe0/0xe0 [ 779.652990][T15355] ? __lock_acquire+0x7eb0/0x7eb0 [ 779.658068][T15355] ? stack_trace_save+0xaa/0x100 [ 779.663082][T15355] ? stack_trace_snprint+0xf0/0xf0 [ 779.668260][T15355] should_fail_ex+0x394/0x4c0 [ 779.673009][T15355] should_failslab+0x9/0x20 [ 779.677566][T15355] slab_pre_alloc_hook+0x59/0x300 [ 779.682649][T15355] ? __kasan_kmalloc+0x8f/0xa0 [ 779.687471][T15355] ? __inet_diag_dump_start+0x8b/0x9f0 [ 779.692992][T15355] ? __netlink_dump_start+0x43c/0x7a0 [ 779.698420][T15355] kmem_cache_alloc_node+0x5e/0x320 [ 779.703668][T15355] ? ___sys_sendmsg+0x2a6/0x360 [ 779.708573][T15355] ? __alloc_skb+0x103/0x2c0 [ 779.713241][T15355] __alloc_skb+0x103/0x2c0 [ 779.717713][T15355] netlink_dump+0x1ee/0xec0 [ 779.722297][T15355] ? end_current_label_crit_section+0x170/0x170 [ 779.728595][T15355] ? end_current_label_crit_section+0x170/0x170 [ 779.734923][T15355] ? netlink_lookup+0x200/0x200 [ 779.739841][T15355] ? ns_capable+0x89/0xe0 [ 779.744231][T15355] ? __inet_diag_dump_start+0x886/0x9f0 [ 779.749846][T15355] __netlink_dump_start+0x57c/0x7a0 [ 779.755107][T15355] inet_diag_rcv_msg_compat+0x215/0x440 [ 779.760716][T15355] ? __inet_diag_dump+0x380/0x380 [ 779.765800][T15355] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 779.770884][T15355] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 779.776655][T15355] ? inet_diag_dump_start_compat+0x20/0x20 [ 779.782510][T15355] ? inet_diag_dump+0x50/0x50 [ 779.787255][T15355] ? __inet_diag_dump+0x380/0x380 [ 779.792325][T15355] sock_diag_rcv_msg+0x3d3/0x5f0 [ 779.797350][T15355] netlink_rcv_skb+0x235/0x4c0 [ 779.802184][T15355] ? sock_diag_bind+0xb0/0xb0 [ 779.806920][T15355] ? netlink_ack+0x1160/0x1160 [ 779.811751][T15355] ? __lock_acquire+0x7eb0/0x7eb0 [ 779.816845][T15355] ? netlink_deliver_tap+0x2e/0x1b0 [ 779.822109][T15355] sock_diag_rcv+0x2a/0x40 [ 779.826586][T15355] netlink_unicast+0x856/0x9e0 [ 779.831439][T15355] netlink_sendmsg+0x8d0/0xbf0 [ 779.836263][T15355] ? netlink_getsockopt+0x590/0x590 [ 779.841542][T15355] ? apparmor_socket_sendmsg+0x170/0x330 [ 779.847244][T15355] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 779.852589][T15355] ? security_socket_sendmsg+0x80/0xa0 [ 779.858104][T15355] ? netlink_getsockopt+0x590/0x590 [ 779.863359][T15355] ____sys_sendmsg+0x61b/0x980 [ 779.868185][T15355] ? __asan_memset+0x22/0x40 [ 779.872840][T15355] ? __sys_sendmsg_sock+0x30/0x30 [ 779.877912][T15355] ? __import_iovec+0x5f2/0x850 [ 779.882826][T15355] ? import_iovec+0x73/0xa0 [ 779.887398][T15355] ___sys_sendmsg+0x2a6/0x360 [ 779.892131][T15355] ? get_pid_task+0x20/0x1e0 [ 779.896781][T15355] ? __sys_sendmsg+0x2b0/0x2b0 [ 779.901623][T15355] ? __lock_acquire+0x7eb0/0x7eb0 [ 779.906743][T15355] __se_sys_sendmsg+0x1d0/0x2c0 [ 779.911667][T15355] ? __x64_sys_sendmsg+0x80/0x80 [ 779.916679][T15355] ? lockdep_hardirqs_on+0x98/0x150 [ 779.921931][T15355] do_syscall_64+0x55/0xb0 [ 779.926413][T15355] ? clear_bhb_loop+0x40/0x90 [ 779.931158][T15355] ? clear_bhb_loop+0x40/0x90 [ 779.935910][T15355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 779.941878][T15355] RIP: 0033:0x7f97a559f559 [ 779.946346][T15355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 779.966018][T15355] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 779.974528][T15355] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 779.982558][T15355] RDX: 0000000020040842 RSI: 0000200000000880 RDI: 0000000000000003 [ 779.990591][T15355] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 779.998640][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.006675][T15355] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 780.014735][T15355] [ 781.607803][T15362] netlink: 'syz.0.3008': attribute type 21 has an invalid length. [ 781.616033][T15362] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3008'. [ 782.272290][T15384] netlink: 'syz.0.3018': attribute type 21 has an invalid length. [ 782.280368][T15384] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3018'. [ 782.939634][T15388] FAULT_INJECTION: forcing a failure. [ 782.939634][T15388] name failslab, interval 1, probability 0, space 0, times 0 [ 782.958814][T15388] CPU: 0 PID: 15388 Comm: syz.0.3019 Not tainted syzkaller #0 [ 782.966456][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 782.976574][T15388] Call Trace: [ 782.979904][T15388] [ 782.982885][T15388] dump_stack_lvl+0x18c/0x250 [ 782.987626][T15388] ? show_regs_print_info+0x20/0x20 [ 782.992897][T15388] ? load_image+0x420/0x420 [ 782.997459][T15388] ? __might_sleep+0xe0/0xe0 [ 783.002117][T15388] ? __lock_acquire+0x7eb0/0x7eb0 [ 783.007210][T15388] should_fail_ex+0x394/0x4c0 [ 783.011971][T15388] should_failslab+0x9/0x20 [ 783.016539][T15388] slab_pre_alloc_hook+0x59/0x300 [ 783.021631][T15388] ? d_instantiate+0x6f/0x90 [ 783.026287][T15388] kmem_cache_alloc+0x5a/0x2d0 [ 783.031114][T15388] ? alloc_empty_file+0x9e/0x1d0 [ 783.036116][T15388] alloc_empty_file+0x9e/0x1d0 [ 783.040943][T15388] alloc_file+0x5b/0x600 [ 783.045251][T15388] alloc_file_pseudo+0x184/0x210 [ 783.050271][T15388] ? fput+0x1a0/0x1a0 [ 783.054308][T15388] ? alloc_fd+0x590/0x640 [ 783.058796][T15388] anon_inode_getfd+0xca/0x1c0 [ 783.063628][T15388] map_create+0xf13/0x12f0 [ 783.068116][T15388] __sys_bpf+0x651/0x890 [ 783.072420][T15388] ? read_tsc+0x9/0x20 [ 783.076564][T15388] ? bpf_link_show_fdinfo+0x560/0x560 [ 783.082023][T15388] ? lock_chain_count+0x20/0x20 [ 783.086933][T15388] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 783.092978][T15388] __x64_sys_bpf+0x7c/0x90 [ 783.097467][T15388] do_syscall_64+0x55/0xb0 [ 783.101947][T15388] ? clear_bhb_loop+0x40/0x90 [ 783.106690][T15388] ? clear_bhb_loop+0x40/0x90 [ 783.111428][T15388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 783.117374][T15388] RIP: 0033:0x7fea7cb9f559 [ 783.121834][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.141540][T15388] RSP: 002b:00007fea7d9dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 783.150025][T15388] RAX: ffffffffffffffda RBX: 00007fea7ce25fa0 RCX: 00007fea7cb9f559 [ 783.158078][T15388] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 2000000000000000 [ 783.166104][T15388] RBP: 00007fea7d9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 783.174126][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.182155][T15388] R13: 00007fea7ce26038 R14: 00007fea7ce25fa0 R15: 00007ffead3f0838 [ 783.190207][T15388] [ 783.496021][T15403] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3025'. [ 783.767416][T15407] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3026'. [ 784.075338][T15407] netlink: 'syz.4.3026': attribute type 10 has an invalid length. [ 784.100377][T15407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3026'. [ 784.125119][T15407] team0: entered promiscuous mode [ 784.139367][T15407] team_slave_0: entered promiscuous mode [ 784.153940][T15407] team_slave_1: entered promiscuous mode [ 784.171219][T15407] bond0: entered promiscuous mode [ 784.181197][T15407] bond_slave_0: entered promiscuous mode [ 784.205200][T15407] bond_slave_1: entered promiscuous mode [ 784.231687][T15407] team0: entered allmulticast mode [ 784.241184][T15407] team_slave_0: entered allmulticast mode [ 784.255864][T15407] team_slave_1: entered allmulticast mode [ 784.272327][T15407] bond0: entered allmulticast mode [ 784.287642][T15407] bond_slave_0: entered allmulticast mode [ 784.296033][T15407] bond_slave_1: entered allmulticast mode [ 784.367648][T15407] bridge0: port 3(team0) entered blocking state [ 784.380991][T15407] bridge0: port 3(team0) entered disabled state [ 784.481863][T15407] bridge0: port 3(team0) entered blocking state [ 784.488568][T15407] bridge0: port 3(team0) entered forwarding state [ 784.833337][T15428] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.3033'. [ 784.945380][T15433] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3034'. [ 785.157185][T15439] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3037'. [ 785.897035][T15448] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3040'. [ 785.913716][T15448] openvswitch: netlink: Key type 8208 is out of range max 32 [ 786.237206][T15448] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3040'. [ 786.821503][T15460] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3043'. [ 787.046396][T15460] netlink: 'syz.2.3043': attribute type 10 has an invalid length. [ 787.078332][T15460] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3043'. [ 787.109426][T15460] team0: entered promiscuous mode [ 787.134459][T15460] team_slave_0: entered promiscuous mode [ 787.157484][T15460] team_slave_1: entered promiscuous mode [ 787.198287][T15460] bond0: entered promiscuous mode [ 787.246187][T15460] bond_slave_0: entered promiscuous mode [ 787.285947][T15460] bond_slave_1: entered promiscuous mode [ 787.305922][T15460] team0: entered allmulticast mode [ 787.311415][T15460] team_slave_0: entered allmulticast mode [ 787.344536][T15460] team_slave_1: entered allmulticast mode [ 787.351196][T15460] bond0: entered allmulticast mode [ 787.357727][T15460] bond_slave_0: entered allmulticast mode [ 787.368916][T15460] bond_slave_1: entered allmulticast mode [ 787.376287][T15460] bridge0: port 3(team0) entered blocking state [ 787.382900][T15460] bridge0: port 3(team0) entered disabled state [ 787.403908][T15460] bridge0: port 3(team0) entered blocking state [ 787.410492][T15460] bridge0: port 3(team0) entered forwarding state [ 787.485002][T15470] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3047'. [ 788.018006][T15482] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3051'. [ 788.114714][T15486] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3052'. [ 789.499707][T15504] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3057'. [ 789.736987][T15514] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3062'. [ 789.810259][T15514] netlink: 'syz.1.3062': attribute type 10 has an invalid length. [ 789.818836][T15514] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3062'. [ 792.559679][T15517] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.3064'. [ 792.630631][T15524] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3063'. [ 793.835794][T15541] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3073'. [ 793.851587][T15541] openvswitch: netlink: Key type 8208 is out of range max 32 [ 794.232898][T15547] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3076'. [ 794.423399][T15541] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3073'. [ 794.842672][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3077'. [ 795.195341][T15566] netlink: 'syz.1.3080': attribute type 10 has an invalid length. [ 795.320702][T15566] bridge0: port 3(team0) entered disabled state [ 795.358881][T15566] team0: left allmulticast mode [ 795.367401][T15566] team_slave_0: left allmulticast mode [ 795.375511][T15566] team_slave_1: left allmulticast mode [ 795.381947][T15566] team0: left promiscuous mode [ 795.388866][T15566] team_slave_0: left promiscuous mode [ 795.448041][T15566] team_slave_1: left promiscuous mode [ 795.466328][T15566] bridge0: port 3(team0) entered disabled state [ 795.535580][T13177] Bluetooth: hci2: command 0x0406 tx timeout [ 795.601598][T15566] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.691862][T15566] bond0: (slave team0): Enslaving as an active interface with an up link [ 796.890819][T15592] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3088'. [ 796.901587][T15592] openvswitch: netlink: Key type 8208 is out of range max 32 [ 797.084240][T15594] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3088'. [ 797.229007][T15597] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3089'. [ 797.483444][T15604] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3091'. [ 797.540965][T15608] FAULT_INJECTION: forcing a failure. [ 797.540965][T15608] name failslab, interval 1, probability 0, space 0, times 0 [ 797.572389][T15608] CPU: 0 PID: 15608 Comm: syz.2.3093 Not tainted syzkaller #0 [ 797.579998][T15608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 797.590113][T15608] Call Trace: [ 797.593448][T15608] [ 797.596426][T15608] dump_stack_lvl+0x18c/0x250 [ 797.601179][T15608] ? show_regs_print_info+0x20/0x20 [ 797.606444][T15608] ? load_image+0x420/0x420 [ 797.611020][T15608] ? __lock_acquire+0x7eb0/0x7eb0 [ 797.616105][T15608] ? switchdev_port_obj_add+0x219/0x320 [ 797.621806][T15608] should_fail_ex+0x394/0x4c0 [ 797.626571][T15608] should_failslab+0x9/0x20 [ 797.631156][T15608] slab_pre_alloc_hook+0x59/0x300 [ 797.636255][T15608] ? vlan_vid_add+0x313/0x750 [ 797.641008][T15608] __kmem_cache_alloc_node+0x53/0x260 [ 797.646454][T15608] ? vlan_vid_add+0x313/0x750 [ 797.651237][T15608] kmalloc_trace+0x2a/0xe0 [ 797.655732][T15608] vlan_vid_add+0x313/0x750 [ 797.660307][T15608] __vlan_add+0x31c/0x2630 [ 797.664932][T15608] ? br_vlan_add+0x940/0x940 [ 797.669605][T15608] nbp_vlan_add+0x262/0x3c0 [ 797.674178][T15608] br_vlan_info+0x101/0x460 [ 797.678740][T15608] ? br_process_vlan_info+0x8a0/0x8a0 [ 797.684172][T15608] ? verify_lock_unused+0x140/0x140 [ 797.689421][T15608] br_process_vlan_info+0x316/0x8a0 [ 797.694678][T15608] ? br_getlink+0x180/0x180 [ 797.699215][T15608] ? __lock_acquire+0x1431/0x7eb0 [ 797.704288][T15608] br_afspec+0x399/0x5f0 [ 797.708579][T15608] ? br_setport+0x1680/0x1680 [ 797.713306][T15608] br_setlink+0x355/0x860 [ 797.717665][T15608] ? is_bpf_text_address+0x28f/0x2a0 [ 797.722990][T15608] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.729136][T15608] ? br_vlan_info+0x460/0x460 [ 797.733910][T15608] ? trace_contention_end+0x39/0xe0 [ 797.739155][T15608] ? __mutex_lock+0x30d/0xce0 [ 797.743868][T15608] ? mutex_is_locked+0x12/0x40 [ 797.748675][T15608] rtnl_bridge_setlink+0x5b2/0x7d0 [ 797.753826][T15608] ? mutex_lock_nested+0x20/0x20 [ 797.758825][T15608] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 797.764211][T15608] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 797.769545][T15608] rtnetlink_rcv_msg+0x843/0xf90 [ 797.774540][T15608] ? rtnetlink_rcv_msg+0x220/0xf90 [ 797.779697][T15608] ? rtnetlink_bind+0x80/0x80 [ 797.784408][T15608] ? kasan_quarantine_put+0xd8/0x220 [ 797.789733][T15608] ? lockdep_hardirqs_on+0x98/0x150 [ 797.794985][T15608] ? perf_trace_preemptirq_template+0xac/0x330 [ 797.801194][T15608] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 797.807218][T15608] ? lock_chain_count+0x20/0x20 [ 797.812112][T15608] ? __local_bh_enable_ip+0x13a/0x1c0 [ 797.817517][T15608] ? lockdep_hardirqs_on+0x98/0x150 [ 797.822755][T15608] ? __local_bh_enable_ip+0x13a/0x1c0 [ 797.828158][T15608] ? _local_bh_enable+0xa0/0xa0 [ 797.833048][T15608] ? __dev_queue_xmit+0x1481/0x3a30 [ 797.838293][T15608] ? __dev_queue_xmit+0x6d1/0x3a30 [ 797.843458][T15608] ? ref_tracker_free+0x686/0x830 [ 797.848534][T15608] netlink_rcv_skb+0x235/0x4c0 [ 797.853341][T15608] ? rtnetlink_bind+0x80/0x80 [ 797.858057][T15608] ? netlink_ack+0x1160/0x1160 [ 797.862860][T15608] ? __lock_acquire+0x7eb0/0x7eb0 [ 797.867929][T15608] ? netlink_deliver_tap+0x2e/0x1b0 [ 797.873182][T15608] netlink_unicast+0x856/0x9e0 [ 797.878019][T15608] netlink_sendmsg+0x8d0/0xbf0 [ 797.882821][T15608] ? netlink_getsockopt+0x590/0x590 [ 797.888056][T15608] ? apparmor_socket_sendmsg+0x8e/0x330 [ 797.893643][T15608] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 797.898969][T15608] ? security_socket_sendmsg+0x80/0xa0 [ 797.904465][T15608] ? netlink_getsockopt+0x590/0x590 [ 797.909715][T15608] ____sys_sendmsg+0x61b/0x980 [ 797.914552][T15608] ? __asan_memset+0x22/0x40 [ 797.919194][T15608] ? __sys_sendmsg_sock+0x30/0x30 [ 797.924256][T15608] ? __import_iovec+0x5f2/0x850 [ 797.929150][T15608] ? import_iovec+0x73/0xa0 [ 797.933695][T15608] ___sys_sendmsg+0x2a6/0x360 [ 797.938404][T15608] ? get_pid_task+0x20/0x1e0 [ 797.943088][T15608] ? __sys_sendmsg+0x2b0/0x2b0 [ 797.947907][T15608] ? __lock_acquire+0x7eb0/0x7eb0 [ 797.952997][T15608] __se_sys_sendmsg+0x1d0/0x2c0 [ 797.957892][T15608] ? __x64_sys_sendmsg+0x80/0x80 [ 797.962876][T15608] ? lockdep_hardirqs_on+0x98/0x150 [ 797.968114][T15608] do_syscall_64+0x55/0xb0 [ 797.972573][T15608] ? clear_bhb_loop+0x40/0x90 [ 797.977310][T15608] ? clear_bhb_loop+0x40/0x90 [ 797.982034][T15608] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 797.987965][T15608] RIP: 0033:0x7f97a559f559 [ 797.992424][T15608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 798.012066][T15608] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 798.020516][T15608] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 798.028523][T15608] RDX: 0000000000000000 RSI: 0000200000002280 RDI: 0000000000000003 [ 798.036529][T15608] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 798.044535][T15608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.052534][T15608] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 798.060547][T15608] [ 798.227222][T15614] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3096'. [ 798.237706][T15613] netlink: 'syz.1.3095': attribute type 29 has an invalid length. [ 798.252015][T15613] netlink: 'syz.1.3095': attribute type 29 has an invalid length. [ 798.261923][T15616] netlink: 'syz.1.3095': attribute type 29 has an invalid length. [ 798.285264][T15613] netlink: 'syz.1.3095': attribute type 29 has an invalid length. [ 798.312918][T15613] netlink: 'syz.1.3095': attribute type 29 has an invalid length. [ 798.359499][T15613] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3095'. [ 799.028995][T15626] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3099'. [ 799.053058][T15626] openvswitch: netlink: Key type 8208 is out of range max 32 [ 799.083351][T15630] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3101'. [ 799.866364][T15626] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3099'. [ 799.877839][T15626] bridge_slave_1: default FDB implementation only supports local addresses [ 800.109061][T15641] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3105'. [ 800.329470][T15646] netlink: 'syz.0.3106': attribute type 10 has an invalid length. [ 800.498859][T15646] 8021q: adding VLAN 0 to HW filter on device team0 [ 800.811419][T15662] netlink: 'syz.0.3110': attribute type 29 has an invalid length. [ 800.830817][T15662] netlink: 'syz.0.3110': attribute type 29 has an invalid length. [ 800.842856][T15663] netlink: 'syz.0.3110': attribute type 29 has an invalid length. [ 800.875307][T15662] netlink: 'syz.0.3110': attribute type 29 has an invalid length. [ 800.909380][T15662] netlink: 'syz.0.3110': attribute type 29 has an invalid length. [ 800.968506][T15662] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3110'. [ 801.271407][T15675] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3115'. [ 801.487896][T15681] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3116'. [ 803.450127][T15701] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3125'. [ 803.645462][T15706] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3127'. [ 804.147113][T15717] netlink: 'syz.2.3132': attribute type 39 has an invalid length. [ 804.358901][T15726] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3135'. [ 804.373678][T15726] bridge_slave_1: default FDB implementation only supports local addresses [ 804.602024][T15734] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 804.618137][T15734] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 804.638920][T15735] netlink: 'syz.4.3137': attribute type 29 has an invalid length. [ 804.753724][T15739] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3139'. [ 804.771603][T15734] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3137'. [ 805.455961][T15757] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3144'. [ 805.729516][T15762] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3145'. [ 805.784056][T15762] openvswitch: netlink: Key type 8208 is out of range max 32 [ 806.579241][T15773] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3150'. [ 806.838575][T15788] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3156'. [ 807.643298][T15800] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3159'. [ 807.653377][T15800] openvswitch: netlink: Key type 8208 is out of range max 32 [ 808.370092][T15811] validate_nla: 2 callbacks suppressed [ 808.370113][T15811] netlink: 'syz.4.3162': attribute type 39 has an invalid length. [ 808.598321][T15821] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3166'. [ 808.821445][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.830062][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.913410][T15829] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 808.920269][T15829] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 809.081119][T15834] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3171'. [ 809.122712][T15834] openvswitch: netlink: Key type 8208 is out of range max 32 [ 810.765344][T15861] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3180'. [ 810.932502][T15868] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3181'. [ 810.967676][T15868] openvswitch: netlink: Key type 8208 is out of range max 32 [ 811.232122][T15870] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3181'. [ 811.399749][T15873] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3182'. [ 813.446270][T15906] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3193'. [ 813.618296][T15908] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3194'. [ 815.818574][T15919] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3198'. [ 816.844925][T15947] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3206'. [ 818.009894][T15959] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3211'. [ 818.070749][T15959] openvswitch: netlink: Key type 8208 is out of range max 32 [ 818.178759][T15959] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3211'. [ 818.249674][T15963] FAULT_INJECTION: forcing a failure. [ 818.249674][T15963] name failslab, interval 1, probability 0, space 0, times 0 [ 818.269782][T15964] ƒ: renamed from tunl0 (while UP) [ 818.285438][T15963] CPU: 0 PID: 15963 Comm: syz.2.3212 Not tainted syzkaller #0 [ 818.292979][T15963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 818.303095][T15963] Call Trace: [ 818.306419][T15963] [ 818.309394][T15963] dump_stack_lvl+0x18c/0x250 [ 818.314135][T15963] ? show_regs_print_info+0x20/0x20 [ 818.319400][T15963] ? load_image+0x420/0x420 [ 818.323960][T15963] ? __might_sleep+0xe0/0xe0 [ 818.328610][T15963] ? __lock_acquire+0x7eb0/0x7eb0 [ 818.333715][T15963] should_fail_ex+0x394/0x4c0 [ 818.338451][T15963] should_failslab+0x9/0x20 [ 818.343001][T15963] slab_pre_alloc_hook+0x59/0x300 [ 818.348065][T15963] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 818.353822][T15963] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 818.359668][T15963] __kmem_cache_alloc_node+0x53/0x260 [ 818.365077][T15963] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 818.370827][T15963] __kmalloc+0xa7/0x240 [ 818.375021][T15963] tomoyo_realpath_from_path+0xe6/0x5c0 [ 818.380602][T15963] ? tomoyo_domain+0xd6/0x120 [ 818.385316][T15963] tomoyo_path_number_perm+0x248/0x5e0 [ 818.390801][T15963] ? tomoyo_path_number_perm+0x217/0x5e0 [ 818.396473][T15963] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 818.401967][T15963] ? ksys_write+0x1d2/0x260 [ 818.406529][T15963] ? __fget_files+0x28/0x460 [ 818.411184][T15963] security_file_ioctl+0x70/0xa0 [ 818.416189][T15963] __se_sys_ioctl+0x48/0x170 [ 818.420818][T15963] do_syscall_64+0x55/0xb0 [ 818.425291][T15963] ? clear_bhb_loop+0x40/0x90 [ 818.429998][T15963] ? clear_bhb_loop+0x40/0x90 [ 818.434710][T15963] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 818.440635][T15963] RIP: 0033:0x7f97a559f559 [ 818.445091][T15963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.464746][T15963] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.473192][T15963] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 818.481283][T15963] RDX: 0000200000000400 RSI: 00000000000089fb RDI: 0000000000000004 [ 818.489282][T15963] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 818.497283][T15963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.505275][T15963] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 818.513290][T15963] [ 818.562348][T15963] ERROR: Out of memory at tomoyo_realpath_from_path. [ 819.103535][T15977] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3217'. [ 819.788344][T15988] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3223'. [ 819.810300][T15988] openvswitch: netlink: Key type 8208 is out of range max 32 [ 820.113139][T15988] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3223'. [ 820.418520][T15993] FAULT_INJECTION: forcing a failure. [ 820.418520][T15993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.446217][T15993] CPU: 0 PID: 15993 Comm: syz.2.3225 Not tainted syzkaller #0 [ 820.453779][T15993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 820.463889][T15993] Call Trace: [ 820.467221][T15993] [ 820.470199][T15993] dump_stack_lvl+0x18c/0x250 [ 820.474948][T15993] ? show_regs_print_info+0x20/0x20 [ 820.480208][T15993] ? load_image+0x420/0x420 [ 820.484786][T15993] ? __might_fault+0xaa/0x120 [ 820.489517][T15993] ? __lock_acquire+0x7eb0/0x7eb0 [ 820.494596][T15993] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 820.500472][T15993] should_fail_ex+0x394/0x4c0 [ 820.505226][T15993] _copy_from_user+0x2f/0xe0 [ 820.509879][T15993] wext_handle_ioctl+0xc8/0x1e0 [ 820.514821][T15993] ? call_commit_handler+0xf0/0xf0 [ 820.520010][T15993] sock_ioctl+0x15d/0x7e0 [ 820.524397][T15993] ? sock_poll+0x460/0x460 [ 820.528881][T15993] ? bpf_lsm_file_ioctl+0x9/0x10 [ 820.533874][T15993] ? security_file_ioctl+0x80/0xa0 [ 820.539042][T15993] ? sock_poll+0x460/0x460 [ 820.543505][T15993] __se_sys_ioctl+0xfd/0x170 [ 820.548183][T15993] do_syscall_64+0x55/0xb0 [ 820.552654][T15993] ? clear_bhb_loop+0x40/0x90 [ 820.557388][T15993] ? clear_bhb_loop+0x40/0x90 [ 820.562160][T15993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.568124][T15993] RIP: 0033:0x7f97a559f559 [ 820.572592][T15993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.592254][T15993] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.600729][T15993] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 820.608753][T15993] RDX: 0000200000000800 RSI: 0000000000008b2b RDI: 0000000000000003 [ 820.616774][T15993] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 820.624791][T15993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.632818][T15993] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 820.640865][T15993] [ 820.878341][T15999] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3227'. [ 821.136806][T13177] Bluetooth: hci3: command 0x0406 tx timeout [ 822.811909][T16007] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.3228'. [ 823.682310][T16020] netlink: 'syz.4.3235': attribute type 29 has an invalid length. [ 823.690794][T16020] netlink: 'syz.4.3235': attribute type 29 has an invalid length. [ 823.720037][T16020] netlink: 'syz.4.3235': attribute type 29 has an invalid length. [ 823.736530][T16020] netlink: 'syz.4.3235': attribute type 29 has an invalid length. [ 823.756530][T16020] netlink: 'syz.4.3235': attribute type 29 has an invalid length. [ 823.931042][T16028] FAULT_INJECTION: forcing a failure. [ 823.931042][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 824.007891][T16028] CPU: 0 PID: 16028 Comm: syz.4.3237 Not tainted syzkaller #0 [ 824.015459][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 824.025566][T16028] Call Trace: [ 824.028881][T16028] [ 824.031853][T16028] dump_stack_lvl+0x18c/0x250 [ 824.036592][T16028] ? show_regs_print_info+0x20/0x20 [ 824.041837][T16028] ? load_image+0x420/0x420 [ 824.046395][T16028] ? __lock_acquire+0x7eb0/0x7eb0 [ 824.051482][T16028] should_fail_ex+0x394/0x4c0 [ 824.056226][T16028] should_failslab+0x9/0x20 [ 824.060778][T16028] slab_pre_alloc_hook+0x59/0x300 [ 824.065851][T16028] ? bpf_prog_alloc+0x3d/0x1a0 [ 824.070697][T16028] ? bpf_prog_load+0x6b2/0x1610 [ 824.075602][T16028] ? __sys_bpf+0x5ba/0x890 [ 824.080054][T16028] kmem_cache_alloc_node+0x5e/0x320 [ 824.085458][T16028] ? alloc_vmap_area+0x1b4/0x1e50 [ 824.090540][T16028] alloc_vmap_area+0x1b4/0x1e50 [ 824.095449][T16028] ? vm_map_ram+0xcf0/0xcf0 [ 824.099989][T16028] ? rcu_is_watching+0x15/0xb0 [ 824.104795][T16028] __get_vm_area_node+0x162/0x370 [ 824.109865][T16028] __vmalloc_node_range+0x36f/0x1320 [ 824.115184][T16028] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 824.120766][T16028] ? mark_lock+0x94/0x320 [ 824.125139][T16028] ? __lock_acquire+0x1431/0x7eb0 [ 824.130210][T16028] ? aa_get_newest_label+0xfd/0x5c0 [ 824.135441][T16028] ? free_vm_area+0x50/0x50 [ 824.139976][T16028] ? end_current_label_crit_section+0x170/0x170 [ 824.146362][T16028] ? verify_lock_unused+0x140/0x140 [ 824.151633][T16028] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 824.157250][T16028] __vmalloc+0x7a/0x90 [ 824.161363][T16028] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 824.166949][T16028] bpf_prog_alloc_no_stats+0x46/0x460 [ 824.172357][T16028] bpf_prog_alloc+0x3d/0x1a0 [ 824.176982][T16028] bpf_prog_load+0x6b2/0x1610 [ 824.181702][T16028] ? map_freeze+0x420/0x420 [ 824.186244][T16028] ? __might_fault+0xaa/0x120 [ 824.190972][T16028] ? __lock_acquire+0x7eb0/0x7eb0 [ 824.196033][T16028] ? file_end_write+0x159/0x250 [ 824.200925][T16028] ? __might_fault+0xaa/0x120 [ 824.205644][T16028] ? __might_fault+0xc6/0x120 [ 824.210370][T16028] ? __might_fault+0xaa/0x120 [ 824.215091][T16028] ? bpf_lsm_bpf+0x9/0x10 [ 824.219461][T16028] ? security_bpf+0x7e/0xa0 [ 824.223998][T16028] __sys_bpf+0x5ba/0x890 [ 824.228271][T16028] ? bpf_link_show_fdinfo+0x560/0x560 [ 824.233693][T16028] ? lock_chain_count+0x20/0x20 [ 824.238603][T16028] __x64_sys_bpf+0x7c/0x90 [ 824.243047][T16028] do_syscall_64+0x55/0xb0 [ 824.247498][T16028] ? clear_bhb_loop+0x40/0x90 [ 824.252210][T16028] ? clear_bhb_loop+0x40/0x90 [ 824.256959][T16028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.262906][T16028] RIP: 0033:0x7f3d0f19f559 [ 824.267356][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.286997][T16028] RSP: 002b:00007f3d100d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.295533][T16028] RAX: ffffffffffffffda RBX: 00007f3d0f425fa0 RCX: 00007f3d0f19f559 [ 824.303543][T16028] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 824.311550][T16028] RBP: 00007f3d100d2090 R08: 0000000000000000 R09: 0000000000000000 [ 824.319546][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.327544][T16028] R13: 00007f3d0f426038 R14: 00007f3d0f425fa0 R15: 00007ffc0b50e258 [ 824.335590][T16028] [ 824.531759][T16028] syz.4.3237: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 824.551874][T16028] CPU: 1 PID: 16028 Comm: syz.4.3237 Not tainted syzkaller #0 [ 824.559418][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 824.569550][T16028] Call Trace: [ 824.572874][T16028] [ 824.575871][T16028] dump_stack_lvl+0x18c/0x250 [ 824.580613][T16028] ? show_regs_print_info+0x20/0x20 [ 824.585875][T16028] ? load_image+0x420/0x420 [ 824.590431][T16028] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 824.596890][T16028] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 824.603426][T16028] warn_alloc+0x246/0x340 [ 824.607818][T16028] ? slab_free_freelist_hook+0x154/0x240 [ 824.613503][T16028] ? zone_watermark_ok_safe+0x230/0x230 [ 824.619077][T16028] ? __get_vm_area_node+0x17b/0x370 [ 824.624327][T16028] ? __get_vm_area_node+0x17b/0x370 [ 824.629566][T16028] __vmalloc_node_range+0x394/0x1320 [ 824.634889][T16028] ? mark_lock+0x94/0x320 [ 824.639250][T16028] ? __lock_acquire+0x1431/0x7eb0 [ 824.644317][T16028] ? aa_get_newest_label+0xfd/0x5c0 [ 824.649541][T16028] ? free_vm_area+0x50/0x50 [ 824.654083][T16028] ? end_current_label_crit_section+0x170/0x170 [ 824.660358][T16028] ? verify_lock_unused+0x140/0x140 [ 824.665593][T16028] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 824.671202][T16028] __vmalloc+0x7a/0x90 [ 824.675317][T16028] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 824.680989][T16028] bpf_prog_alloc_no_stats+0x46/0x460 [ 824.686403][T16028] bpf_prog_alloc+0x3d/0x1a0 [ 824.691027][T16028] bpf_prog_load+0x6b2/0x1610 [ 824.695745][T16028] ? map_freeze+0x420/0x420 [ 824.700289][T16028] ? __might_fault+0xaa/0x120 [ 824.704995][T16028] ? __lock_acquire+0x7eb0/0x7eb0 [ 824.710049][T16028] ? file_end_write+0x159/0x250 [ 824.714962][T16028] ? __might_fault+0xaa/0x120 [ 824.719668][T16028] ? __might_fault+0xc6/0x120 [ 824.724386][T16028] ? __might_fault+0xaa/0x120 [ 824.729096][T16028] ? bpf_lsm_bpf+0x9/0x10 [ 824.733461][T16028] ? security_bpf+0x7e/0xa0 [ 824.738017][T16028] __sys_bpf+0x5ba/0x890 [ 824.742294][T16028] ? bpf_link_show_fdinfo+0x560/0x560 [ 824.747714][T16028] ? lock_chain_count+0x20/0x20 [ 824.752601][T16028] __x64_sys_bpf+0x7c/0x90 [ 824.757067][T16028] do_syscall_64+0x55/0xb0 [ 824.761528][T16028] ? clear_bhb_loop+0x40/0x90 [ 824.766274][T16028] ? clear_bhb_loop+0x40/0x90 [ 824.771008][T16028] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 824.776933][T16028] RIP: 0033:0x7f3d0f19f559 [ 824.781390][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.801026][T16028] RSP: 002b:00007f3d100d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.809470][T16028] RAX: ffffffffffffffda RBX: 00007f3d0f425fa0 RCX: 00007f3d0f19f559 [ 824.817470][T16028] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 824.825467][T16028] RBP: 00007f3d100d2090 R08: 0000000000000000 R09: 0000000000000000 [ 824.833468][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.841464][T16028] R13: 00007f3d0f426038 R14: 00007f3d0f425fa0 R15: 00007ffc0b50e258 [ 824.849480][T16028] [ 824.956016][T16028] Mem-Info: [ 824.959226][T16028] active_anon:19274 inactive_anon:0 isolated_anon:0 [ 824.959226][T16028] active_file:17650 inactive_file:40239 isolated_file:0 [ 824.959226][T16028] unevictable:768 dirty:540 writeback:0 [ 824.959226][T16028] slab_reclaimable:10667 slab_unreclaimable:96938 [ 824.959226][T16028] mapped:25973 shmem:1376 pagetables:661 [ 824.959226][T16028] sec_pagetables:0 bounce:0 [ 824.959226][T16028] kernel_misc_reclaimable:0 [ 824.959226][T16028] free:1329925 free_pcp:5705 free_cma:0 [ 825.092325][T16028] Node 0 active_anon:76928kB inactive_anon:0kB active_file:70600kB inactive_file:160752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99532kB dirty:2156kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10548kB pagetables:2496kB sec_pagetables:0kB all_unreclaimable? no [ 825.202268][T16028] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 825.318612][T16028] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 825.351569][T16028] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 825.397966][T16028] Node 0 DMA32 free:1393600kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:76792kB inactive_anon:0kB active_file:70600kB inactive_file:159928kB unevictable:1536kB writepending:2156kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:11264kB local_pcp:7920kB free_cma:0kB [ 825.483341][T16028] lowmem_reserve[]: 0 0 0 0 0 [ 825.498172][T16028] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 825.546976][T16028] lowmem_reserve[]: 0 0 0 0 0 [ 825.551889][T16028] Node 1 Normal free:3910740kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:12704kB local_pcp:5760kB free_cma:0kB [ 825.602112][T16028] lowmem_reserve[]: 0 0 0 0 0 [ 825.607740][T16028] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 825.632391][T16028] Node 0 DMA32: 382*4kB (UM) 1109*8kB (UME) 462*16kB (UME) 1162*32kB (UME) 388*64kB (UME) 160*128kB (UME) 148*256kB (UME) 56*512kB (UME) 42*1024kB (UME) 18*2048kB (UME) 280*4096kB (UM) = 1393600kB [ 825.677266][T16028] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 825.689527][T16028] Node 1 Normal: 195*4kB (UME) 51*8kB (UME) 45*16kB (UME) 201*32kB (UME) 53*64kB (UE) 9*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 1*2048kB (U) 951*4096kB (ME) = 3910740kB [ 825.714568][T16028] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.729224][T16028] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.742164][T16028] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 825.755634][T16028] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 825.766460][T16028] 59265 total pagecache pages [ 825.774885][T16028] 0 pages in swap cache [ 825.779179][T16028] Free swap = 124996kB [ 825.790558][T16028] Total swap = 124996kB [ 825.823357][T16028] 2097051 pages RAM [ 825.833511][T16028] 0 pages HighMem/MovableOnly [ 825.838259][T16028] 421729 pages reserved [ 825.851005][T16028] 0 pages cma reserved [ 825.973421][T16046] FAULT_INJECTION: forcing a failure. [ 825.973421][T16046] name failslab, interval 1, probability 0, space 0, times 0 [ 826.000876][T16046] CPU: 1 PID: 16046 Comm: syz.0.3245 Not tainted syzkaller #0 [ 826.008446][T16046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 826.018558][T16046] Call Trace: [ 826.021878][T16046] [ 826.024843][T16046] dump_stack_lvl+0x18c/0x250 [ 826.029594][T16046] ? show_regs_print_info+0x20/0x20 [ 826.034849][T16046] ? load_image+0x420/0x420 [ 826.039400][T16046] ? __might_sleep+0xe0/0xe0 [ 826.044035][T16046] ? __lock_acquire+0x7eb0/0x7eb0 [ 826.049111][T16046] should_fail_ex+0x394/0x4c0 [ 826.053838][T16046] should_failslab+0x9/0x20 [ 826.058373][T16046] slab_pre_alloc_hook+0x59/0x300 [ 826.063447][T16046] kmem_cache_alloc_node+0x5e/0x320 [ 826.068796][T16046] ? __alloc_skb+0x103/0x2c0 [ 826.073458][T16046] __alloc_skb+0x103/0x2c0 [ 826.077962][T16046] alloc_skb_with_frags+0xcd/0x7a0 [ 826.083151][T16046] ? trace_event_raw_event_lock+0x240/0x240 [ 826.089100][T16046] ? perf_trace_buf_update+0xac/0x230 [ 826.094539][T16046] ? perf_tp_event+0x1550/0x1550 [ 826.099534][T16046] ? perf_swevent_event+0x1ca/0x570 [ 826.104804][T16046] sock_alloc_send_pskb+0x969/0xa80 [ 826.110098][T16046] ? sock_kzfree_s+0x50/0x50 [ 826.114748][T16046] ? perf_tp_event+0x13f5/0x1550 [ 826.119781][T16046] ? dev_get_by_index+0x22/0x2d0 [ 826.124782][T16046] ? dev_get_by_index+0x22/0x2d0 [ 826.129835][T16046] packet_sendmsg+0x2f58/0x49d0 [ 826.134792][T16046] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 826.140619][T16046] ? aa_sk_perm+0x7bb/0x8e0 [ 826.145190][T16046] ? packet_getsockopt+0xad0/0xad0 [ 826.150374][T16046] ? tomoyo_del_condition+0xf0/0x3e0 [ 826.155710][T16046] ? aa_sock_msg_perm+0x94/0x150 [ 826.160695][T16046] ? apparmor_socket_sendmsg+0x8e/0x330 [ 826.166295][T16046] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 826.171636][T16046] ? security_socket_sendmsg+0x80/0xa0 [ 826.177141][T16046] ? packet_getsockopt+0xad0/0xad0 [ 826.182310][T16046] ____sys_sendmsg+0x61b/0x980 [ 826.187142][T16046] ? __asan_memset+0x22/0x40 [ 826.191810][T16046] ? __sys_sendmsg_sock+0x30/0x30 [ 826.196895][T16046] ? __import_iovec+0x5f2/0x850 [ 826.201826][T16046] ? import_iovec+0x73/0xa0 [ 826.206397][T16046] ___sys_sendmsg+0x2a6/0x360 [ 826.211134][T16046] ? __sys_sendmsg+0x2b0/0x2b0 [ 826.216016][T16046] ? __lock_acquire+0x7eb0/0x7eb0 [ 826.221165][T16046] __se_sys_sendmsg+0x1d0/0x2c0 [ 826.226141][T16046] ? __x64_sys_sendmsg+0x80/0x80 [ 826.231170][T16046] ? lockdep_hardirqs_on+0x98/0x150 [ 826.236439][T16046] do_syscall_64+0x55/0xb0 [ 826.241092][T16046] ? clear_bhb_loop+0x40/0x90 [ 826.245854][T16046] ? clear_bhb_loop+0x40/0x90 [ 826.250596][T16046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.256587][T16046] RIP: 0033:0x7fea7cb9f559 [ 826.261059][T16046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.280799][T16046] RSP: 002b:00007fea7d9dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.289263][T16046] RAX: ffffffffffffffda RBX: 00007fea7ce25fa0 RCX: 00007fea7cb9f559 [ 826.297274][T16046] RDX: 0000000000000005 RSI: 0000200000001200 RDI: 0000000000000003 [ 826.305290][T16046] RBP: 00007fea7d9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 826.313304][T16046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.321315][T16046] R13: 00007fea7ce26038 R14: 00007fea7ce25fa0 R15: 00007ffead3f0838 [ 826.329357][T16046] [ 826.932929][T16054] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 826.940845][T16054] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 827.269828][T16057] sit0: entered promiscuous mode [ 827.308827][T16057] sit0: entered allmulticast mode [ 827.541111][T16065] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3251'. [ 827.631150][T16071] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3254'. [ 827.735018][T16071] openvswitch: netlink: Key type 8208 is out of range max 32 [ 828.189359][T16071] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3254'. [ 828.229035][T16071] bridge_slave_1: default FDB implementation only supports local addresses [ 828.267278][T16079] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3255'. [ 828.291866][T16079] openvswitch: netlink: Key type 8208 is out of range max 32 [ 828.573486][T16080] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3255'. [ 829.891995][T16095] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 829.898574][T16095] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 830.031838][T16097] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3262'. [ 830.282571][T16106] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3265'. [ 830.360695][T16111] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3267'. [ 830.372724][T16111] openvswitch: netlink: Key type 8208 is out of range max 32 [ 830.695559][T16114] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3267'. [ 830.927724][T16119] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3270'. [ 830.972744][T16119] openvswitch: netlink: Key type 8208 is out of range max 32 [ 831.478912][T16127] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 831.485806][T16127] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 832.587479][T16143] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 832.594836][T16143] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 832.728529][T16148] __nla_validate_parse: 2 callbacks suppressed [ 832.728550][T16148] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3282'. [ 832.878775][T16150] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 832.885432][T16150] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 833.399691][T16161] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3288'. [ 833.438659][T16161] openvswitch: netlink: Key type 8208 is out of range max 32 [ 834.083136][T16162] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3288'. [ 834.152576][T16162] bridge_slave_1: default FDB implementation only supports local addresses [ 834.524415][T16171] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.3290'. [ 834.921480][T16178] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3292'. [ 834.972439][T16180] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3293'. [ 835.261864][T16184] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 835.268493][T16184] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 835.334431][T16185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 835.341069][T16185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 835.758640][T16191] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3299'. [ 835.812652][T16191] openvswitch: netlink: Key type 8208 is out of range max 32 [ 836.199581][T16193] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3299'. [ 836.910662][T16204] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3303'. [ 837.554785][T16213] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3306'. [ 838.119948][T16223] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3310'. [ 838.130183][T16221] net_ratelimit: 2 callbacks suppressed [ 838.130205][T16221] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 838.142663][T16221] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 838.162726][T16223] openvswitch: netlink: Key type 8208 is out of range max 32 [ 838.367473][T16224] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3310'. [ 838.891299][T16231] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3320'. [ 839.070559][T16233] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 839.077113][T16233] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 840.039305][T16248] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3321'. [ 840.073231][T16248] openvswitch: netlink: Key type 8208 is out of range max 32 [ 840.474644][T16248] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3321'. [ 840.757719][T16252] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 840.764387][T16252] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 840.854963][T16256] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3323'. [ 841.386002][T16260] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3325'. [ 841.789515][T16277] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 841.796109][T16277] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 842.204552][T16292] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3332'. [ 842.454533][T16294] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3332'. [ 845.372396][T16302] net_ratelimit: 1 callbacks suppressed [ 845.372418][T16302] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 845.384823][T16302] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 846.034005][T16311] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3342'. [ 846.422949][T16325] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3349'. [ 846.443601][T16325] openvswitch: netlink: Key type 8208 is out of range max 32 [ 846.619825][T16328] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3349'. [ 847.172006][T16334] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3351'. [ 847.248352][T16334] openvswitch: netlink: Key type 8208 is out of range max 32 [ 847.524195][T16334] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3351'. [ 849.701375][T16338] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 849.707998][T16338] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 849.808576][T16342] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3355'. [ 851.211535][T16359] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3362'. [ 851.247976][T16359] openvswitch: netlink: Key type 8208 is out of range max 32 [ 851.469708][T16364] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3362'. [ 851.536319][T16364] bridge_slave_1: default FDB implementation only supports local addresses [ 851.785139][T16368] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3366'. [ 851.915434][T16373] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 851.922347][T16373] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 853.639083][T16398] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3380'. [ 854.144595][T16406] FAULT_INJECTION: forcing a failure. [ 854.144595][T16406] name failslab, interval 1, probability 0, space 0, times 0 [ 854.165770][T16406] CPU: 0 PID: 16406 Comm: syz.2.3383 Not tainted syzkaller #0 [ 854.173324][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 854.183435][T16406] Call Trace: [ 854.186762][T16406] [ 854.189742][T16406] dump_stack_lvl+0x18c/0x250 [ 854.194507][T16406] ? show_regs_print_info+0x20/0x20 [ 854.199774][T16406] ? load_image+0x420/0x420 [ 854.204359][T16406] ? __might_sleep+0xe0/0xe0 [ 854.209008][T16406] ? __lock_acquire+0x7eb0/0x7eb0 [ 854.214085][T16406] should_fail_ex+0x394/0x4c0 [ 854.218822][T16406] should_failslab+0x9/0x20 [ 854.223373][T16406] slab_pre_alloc_hook+0x59/0x300 [ 854.228444][T16406] ? br_vlan_lookup+0x8b/0x710 [ 854.233293][T16406] ? nbp_vlan_add+0x20f/0x3c0 [ 854.238021][T16406] __kmem_cache_alloc_node+0x53/0x260 [ 854.243424][T16406] ? __vlan_flush+0x3e0/0x3e0 [ 854.248138][T16406] ? nbp_vlan_add+0x20f/0x3c0 [ 854.252846][T16406] kmalloc_trace+0x2a/0xe0 [ 854.257294][T16406] nbp_vlan_add+0x20f/0x3c0 [ 854.261832][T16406] br_vlan_info+0x101/0x460 [ 854.266364][T16406] ? br_process_vlan_info+0x8a0/0x8a0 [ 854.271770][T16406] ? verify_lock_unused+0x140/0x140 [ 854.277005][T16406] br_process_vlan_info+0x316/0x8a0 [ 854.282244][T16406] ? br_getlink+0x180/0x180 [ 854.286772][T16406] ? __lock_acquire+0x1431/0x7eb0 [ 854.291838][T16406] br_afspec+0x399/0x5f0 [ 854.296123][T16406] ? br_setport+0x1680/0x1680 [ 854.300840][T16406] br_setlink+0x355/0x860 [ 854.305205][T16406] ? br_vlan_info+0x460/0x460 [ 854.309944][T16406] ? trace_contention_end+0x39/0xe0 [ 854.315171][T16406] ? __mutex_lock+0x30d/0xce0 [ 854.319878][T16406] ? mutex_is_locked+0x12/0x40 [ 854.324674][T16406] rtnl_bridge_setlink+0x5b2/0x7d0 [ 854.329816][T16406] ? mutex_lock_nested+0x20/0x20 [ 854.334798][T16406] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 854.340112][T16406] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 854.345423][T16406] rtnetlink_rcv_msg+0x843/0xf90 [ 854.350386][T16406] ? rtnetlink_rcv_msg+0x220/0xf90 [ 854.355525][T16406] ? rtnetlink_bind+0x80/0x80 [ 854.360233][T16406] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 854.366070][T16406] ? perf_trace_preemptirq_template+0x269/0x330 [ 854.372351][T16406] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 854.378404][T16406] ? lock_chain_count+0x20/0x20 [ 854.383293][T16406] ? __local_bh_enable_ip+0x13a/0x1c0 [ 854.388689][T16406] ? lockdep_hardirqs_on+0x98/0x150 [ 854.393909][T16406] ? __local_bh_enable_ip+0x13a/0x1c0 [ 854.399312][T16406] ? _local_bh_enable+0xa0/0xa0 [ 854.404203][T16406] ? __dev_queue_xmit+0x1481/0x3a30 [ 854.409440][T16406] ? __dev_queue_xmit+0x6d1/0x3a30 [ 854.414588][T16406] ? ref_tracker_free+0x686/0x830 [ 854.419649][T16406] netlink_rcv_skb+0x235/0x4c0 [ 854.424440][T16406] ? rtnetlink_bind+0x80/0x80 [ 854.429148][T16406] ? netlink_ack+0x1160/0x1160 [ 854.433946][T16406] ? __lock_acquire+0x7eb0/0x7eb0 [ 854.439093][T16406] ? netlink_deliver_tap+0x2e/0x1b0 [ 854.444317][T16406] netlink_unicast+0x856/0x9e0 [ 854.449128][T16406] netlink_sendmsg+0x8d0/0xbf0 [ 854.453931][T16406] ? netlink_getsockopt+0x590/0x590 [ 854.459156][T16406] ? apparmor_socket_sendmsg+0x8e/0x330 [ 854.464734][T16406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 854.470046][T16406] ? security_socket_sendmsg+0x80/0xa0 [ 854.475557][T16406] ? netlink_getsockopt+0x590/0x590 [ 854.480779][T16406] ____sys_sendmsg+0x61b/0x980 [ 854.485573][T16406] ? __asan_memset+0x22/0x40 [ 854.490194][T16406] ? __sys_sendmsg_sock+0x30/0x30 [ 854.495251][T16406] ? __import_iovec+0x5f2/0x850 [ 854.500139][T16406] ? import_iovec+0x73/0xa0 [ 854.504676][T16406] ___sys_sendmsg+0x2a6/0x360 [ 854.509384][T16406] ? __sys_sendmsg+0x2b0/0x2b0 [ 854.514191][T16406] ? trace_call_bpf+0xc3/0x6c0 [ 854.518994][T16406] __se_sys_sendmsg+0x1d0/0x2c0 [ 854.523866][T16406] ? perf_trace_preemptirq_template+0x269/0x330 [ 854.530145][T16406] ? __x64_sys_sendmsg+0x80/0x80 [ 854.535120][T16406] ? lockdep_hardirqs_on+0x98/0x150 [ 854.540343][T16406] do_syscall_64+0x55/0xb0 [ 854.544789][T16406] ? clear_bhb_loop+0x40/0x90 [ 854.549500][T16406] ? clear_bhb_loop+0x40/0x90 [ 854.554208][T16406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 854.560126][T16406] RIP: 0033:0x7f97a559f559 [ 854.564569][T16406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.584230][T16406] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.592678][T16406] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 854.600681][T16406] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 854.608681][T16406] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 854.616678][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 854.624693][T16406] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 854.632707][T16406] [ 854.953373][T16409] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 854.959933][T16409] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 855.973157][T16432] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3394'. [ 855.992001][T16432] openvswitch: netlink: Key type 8208 is out of range max 32 [ 856.432052][T16448] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 856.438745][T16448] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 857.203022][T16451] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3402'. [ 857.252015][T16451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 857.324039][T16457] netlink: 'syz.1.3405': attribute type 2 has an invalid length. [ 857.332003][T16457] netlink: 'syz.1.3405': attribute type 8 has an invalid length. [ 857.342222][T16457] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3405'. [ 857.357820][T16457] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3405'. [ 857.406649][T16460] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3406'. [ 857.422477][T16460] openvswitch: netlink: Key type 8208 is out of range max 32 [ 857.538908][T16460] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3406'. [ 857.559102][T16460] bridge_slave_1: default FDB implementation only supports local addresses [ 858.166967][T16478] syzkaller0: entered promiscuous mode [ 858.173988][T16478] syzkaller0: entered allmulticast mode [ 860.074883][T16501] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3424'. [ 860.308046][T16506] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3427'. [ 860.323564][T16506] openvswitch: netlink: Key type 8208 is out of range max 32 [ 860.736118][T16506] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3427'. [ 861.408926][T16527] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3436'. [ 861.847168][T16538] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3441'. [ 861.885419][T16538] openvswitch: netlink: Key type 8208 is out of range max 32 [ 861.935287][T16538] bridge_slave_1: default FDB implementation only supports local addresses [ 862.575234][T16549] __nla_validate_parse: 1 callbacks suppressed [ 862.575269][T16549] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3446'. [ 863.446869][T16567] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3455'. [ 863.466987][T16567] openvswitch: netlink: Key type 8208 is out of range max 32 [ 863.556681][T16567] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3455'. [ 863.741041][T16573] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3456'. [ 864.932137][T16595] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3467'. [ 865.034792][T16597] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3468'. [ 865.071765][T16597] openvswitch: netlink: Key type 8208 is out of range max 32 [ 865.114935][T16598] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3468'. [ 865.717159][T16615] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 865.723795][T16615] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 866.154050][T16619] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3478'. [ 866.591283][T16626] netlink: 192436 bytes leftover after parsing attributes in process `syz.4.3480'. [ 866.634619][T16627] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3480'. [ 866.659018][T16626] openvswitch: netlink: Key type 8208 is out of range max 32 [ 867.318015][T16649] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 867.324635][T16649] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 868.450229][T16666] __nla_validate_parse: 1 callbacks suppressed [ 868.450296][T16666] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3499'. [ 868.505891][T16668] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3500'. [ 868.532387][T16668] openvswitch: netlink: Key type 8208 is out of range max 32 [ 868.567592][T16668] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3500'. [ 870.188083][T16695] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3511'. [ 870.313504][T16701] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.3513'. [ 870.334218][T16701] openvswitch: netlink: Key type 8208 is out of range max 32 [ 870.369327][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.377849][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.408057][T16700] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3513'. [ 870.430105][T16703] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 870.436734][T16703] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 871.854616][T16719] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3522'. [ 872.411450][T16733] syzkaller0: entered promiscuous mode [ 872.421373][T16733] syzkaller0: entered allmulticast mode [ 877.255046][T16747] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3533'. [ 878.020587][T16784] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3546'. [ 878.426892][T16788] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3547'. [ 881.016541][T16808] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 881.023262][T16808] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 881.501306][T16814] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3558'. [ 884.982821][T16848] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3572'. [ 889.993199][T16904] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 889.999803][T16904] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 891.181006][T16922] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3600'. [ 894.542027][T16947] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3609'. [ 894.561733][T16948] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3608'. [ 894.710115][T16955] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3612'. [ 895.684424][T16974] netlink: 166260 bytes leftover after parsing attributes in process `syz.4.3621'. [ 898.371551][T16978] syzkaller0: entered promiscuous mode [ 898.382477][T16978] syzkaller0: entered allmulticast mode [ 898.392548][T16984] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3625'. [ 898.402519][T16988] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3627'. [ 898.778327][T17001] FAULT_INJECTION: forcing a failure. [ 898.778327][T17001] name failslab, interval 1, probability 0, space 0, times 0 [ 898.791166][T17001] CPU: 1 PID: 17001 Comm: syz.0.3631 Not tainted syzkaller #0 [ 898.798678][T17001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 898.808781][T17001] Call Trace: [ 898.812122][T17001] [ 898.815092][T17001] dump_stack_lvl+0x18c/0x250 [ 898.819856][T17001] ? show_regs_print_info+0x20/0x20 [ 898.825116][T17001] ? load_image+0x420/0x420 [ 898.829667][T17001] ? verify_lock_unused+0x140/0x140 [ 898.834930][T17001] should_fail_ex+0x394/0x4c0 [ 898.839672][T17001] should_failslab+0x9/0x20 [ 898.844219][T17001] slab_pre_alloc_hook+0x59/0x300 [ 898.849333][T17001] kmem_cache_alloc+0x5a/0x2d0 [ 898.854144][T17001] ? skb_clone+0x1eb/0x370 [ 898.858604][T17001] skb_clone+0x1eb/0x370 [ 898.862876][T17001] __netlink_deliver_tap+0x411/0x7f0 [ 898.868208][T17001] ? netlink_deliver_tap+0x2e/0x1b0 [ 898.873506][T17001] netlink_deliver_tap+0x19c/0x1b0 [ 898.878639][T17001] netlink_unicast+0x82f/0x9e0 [ 898.883492][T17001] netlink_sendmsg+0x8d0/0xbf0 [ 898.888327][T17001] ? netlink_getsockopt+0x590/0x590 [ 898.893585][T17001] ? apparmor_socket_sendmsg+0x8e/0x330 [ 898.899185][T17001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 898.904507][T17001] ? security_socket_sendmsg+0x80/0xa0 [ 898.910019][T17001] ? netlink_getsockopt+0x590/0x590 [ 898.915267][T17001] ____sys_sendmsg+0x61b/0x980 [ 898.920094][T17001] ? __asan_memset+0x22/0x40 [ 898.924742][T17001] ? __sys_sendmsg_sock+0x30/0x30 [ 898.929819][T17001] ? __import_iovec+0x5f2/0x850 [ 898.934828][T17001] ? import_iovec+0x73/0xa0 [ 898.939387][T17001] ___sys_sendmsg+0x2a6/0x360 [ 898.944141][T17001] ? get_pid_task+0x20/0x1e0 [ 898.948787][T17001] ? __sys_sendmsg+0x2b0/0x2b0 [ 898.953624][T17001] ? __lock_acquire+0x7eb0/0x7eb0 [ 898.958730][T17001] __se_sys_sendmsg+0x1d0/0x2c0 [ 898.963640][T17001] ? __x64_sys_sendmsg+0x80/0x80 [ 898.968641][T17001] ? lockdep_hardirqs_on+0x98/0x150 [ 898.973925][T17001] do_syscall_64+0x55/0xb0 [ 898.978402][T17001] ? clear_bhb_loop+0x40/0x90 [ 898.983130][T17001] ? clear_bhb_loop+0x40/0x90 [ 898.987867][T17001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 898.993812][T17001] RIP: 0033:0x7fea7cb9f559 [ 898.998303][T17001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.017969][T17001] RSP: 002b:00007fea7d9dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.026444][T17001] RAX: ffffffffffffffda RBX: 00007fea7ce25fa0 RCX: 00007fea7cb9f559 [ 899.034468][T17001] RDX: 0000000000000000 RSI: 0000200000001900 RDI: 0000000000000003 [ 899.042516][T17001] RBP: 00007fea7d9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 899.050528][T17001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.058524][T17001] R13: 00007fea7ce26038 R14: 00007fea7ce25fa0 R15: 00007ffead3f0838 [ 899.066576][T17001] [ 900.962778][T17015] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3637'. [ 901.127472][T17018] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3638'. [ 901.261264][T17023] netlink: 'syz.0.3640': attribute type 10 has an invalid length. [ 901.271241][T17023] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3640'. [ 901.284526][T17023] bond0: entered promiscuous mode [ 901.289752][T17023] bond_slave_0: entered promiscuous mode [ 901.304982][T17023] bond_slave_1: entered promiscuous mode [ 901.311330][T17023] bridge_slave_1: entered promiscuous mode [ 903.771906][T17023] team0: Port device bond0 removed [ 903.803190][T17023] bridge0: port 2(bond0) entered blocking state [ 903.809677][T17023] bridge0: port 2(bond0) entered disabled state [ 903.843237][T17023] bond0: entered allmulticast mode [ 903.848457][T17023] bond_slave_0: entered allmulticast mode [ 903.873237][T17023] bond_slave_1: entered allmulticast mode [ 903.879904][T17023] bridge_slave_1: entered allmulticast mode [ 904.327168][T17039] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3646'. [ 904.556142][T17047] netlink: 'syz.4.3651': attribute type 21 has an invalid length. [ 904.564706][T17047] netlink: 13070 bytes leftover after parsing attributes in process `syz.4.3651'. [ 904.575736][T17045] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3649'. [ 904.766910][T17053] FAULT_INJECTION: forcing a failure. [ 904.766910][T17053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.812913][T17053] CPU: 1 PID: 17053 Comm: syz.4.3652 Not tainted syzkaller #0 [ 904.820471][T17053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 904.830621][T17053] Call Trace: [ 904.833954][T17053] [ 904.836925][T17053] dump_stack_lvl+0x18c/0x250 [ 904.841665][T17053] ? show_regs_print_info+0x20/0x20 [ 904.846929][T17053] ? load_image+0x420/0x420 [ 904.851473][T17053] ? __lock_acquire+0x7eb0/0x7eb0 [ 904.856538][T17053] ? snprintf+0xe9/0x140 [ 904.860812][T17053] should_fail_ex+0x394/0x4c0 [ 904.865530][T17053] _copy_to_user+0x2f/0xa0 [ 904.869974][T17053] simple_read_from_buffer+0xe7/0x150 [ 904.875376][T17053] proc_fail_nth_read+0x1e8/0x260 [ 904.880442][T17053] ? proc_fault_inject_write+0x360/0x360 [ 904.886124][T17053] ? fsnotify_perm+0x271/0x5e0 [ 904.890942][T17053] ? proc_fault_inject_write+0x360/0x360 [ 904.896619][T17053] vfs_read+0x298/0x990 [ 904.900814][T17053] ? kernel_read+0x1e0/0x1e0 [ 904.905444][T17053] ? __fget_files+0x28/0x460 [ 904.910087][T17053] ? __fget_files+0x3fc/0x460 [ 904.914822][T17053] ? __fdget_pos+0x2a3/0x330 [ 904.919457][T17053] ? ksys_read+0x74/0x260 [ 904.923841][T17053] ksys_read+0x151/0x260 [ 904.928133][T17053] ? vfs_write+0x9a0/0x9a0 [ 904.932598][T17053] ? lockdep_hardirqs_on+0x98/0x150 [ 904.937834][T17053] do_syscall_64+0x55/0xb0 [ 904.942297][T17053] ? clear_bhb_loop+0x40/0x90 [ 904.947017][T17053] ? clear_bhb_loop+0x40/0x90 [ 904.951738][T17053] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.957682][T17053] RIP: 0033:0x7f3d0f15fd8e [ 904.962139][T17053] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 904.981789][T17053] RSP: 002b:00007f3d100d1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 904.990243][T17053] RAX: ffffffffffffffda RBX: 00007f3d100d26c0 RCX: 00007f3d0f15fd8e [ 904.998267][T17053] RDX: 000000000000000f RSI: 00007f3d100d20a0 RDI: 0000000000000009 [ 905.006267][T17053] RBP: 00007f3d100d2090 R08: 0000000000000000 R09: 0000000000000000 [ 905.014269][T17053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.022271][T17053] R13: 00007f3d0f426038 R14: 00007f3d0f425fa0 R15: 00007ffc0b50e258 [ 905.030290][T17053] [ 905.159692][T17057] netlink: 'syz.1.3654': attribute type 10 has an invalid length. [ 905.179323][T17057] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3654'. [ 905.204640][T17057] bond0: entered promiscuous mode [ 905.220494][T17057] bond_slave_0: entered promiscuous mode [ 905.268413][T17057] bond_slave_1: entered promiscuous mode [ 905.367166][T17057] team0: entered promiscuous mode [ 905.421272][T17057] team_slave_0: entered promiscuous mode [ 905.428069][T17057] team_slave_1: entered promiscuous mode [ 905.435144][T17057] bridge0: port 3(bond0) entered blocking state [ 905.441815][T17057] bridge0: port 3(bond0) entered disabled state [ 905.449142][T17057] bond0: entered allmulticast mode [ 905.455144][T17057] bond_slave_0: entered allmulticast mode [ 905.460964][T17057] bond_slave_1: entered allmulticast mode [ 905.467682][T17057] team0: entered allmulticast mode [ 905.482651][T17057] team_slave_0: entered allmulticast mode [ 905.498921][T17057] team_slave_1: entered allmulticast mode [ 905.518123][T17057] bridge0: port 3(bond0) entered blocking state [ 905.524751][T17057] bridge0: port 3(bond0) entered forwarding state [ 905.562360][T17064] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3658'. [ 905.704660][T17071] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3661'. [ 905.800594][T17074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 905.807155][T17074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 906.344012][T17093] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3670'. [ 906.455808][T17095] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3672'. [ 906.553550][T17099] netlink: 'syz.2.3673': attribute type 10 has an invalid length. [ 906.561471][T17099] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3673'. [ 906.589279][T17099] bond0: left allmulticast mode [ 906.601475][T17099] bond_slave_0: left allmulticast mode [ 906.647019][T17099] bond_slave_1: left allmulticast mode [ 906.791763][T17099] team0: Port device bond0 removed [ 906.824379][T17099] bridge0: port 4(bond0) entered blocking state [ 906.831131][T17099] bridge0: port 4(bond0) entered disabled state [ 906.851806][T17099] bond0: entered allmulticast mode [ 906.861485][T17099] bond_slave_0: entered allmulticast mode [ 906.868108][T17099] bond_slave_1: entered allmulticast mode [ 907.225622][T17118] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3681'. [ 907.753063][T17132] �2žÿ: renamed from vlan1 (while UP) [ 907.973245][T17136] FAULT_INJECTION: forcing a failure. [ 907.973245][T17136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.987723][T17136] CPU: 1 PID: 17136 Comm: syz.2.3690 Not tainted syzkaller #0 [ 907.995249][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 908.005348][T17136] Call Trace: [ 908.008678][T17136] [ 908.011738][T17136] dump_stack_lvl+0x18c/0x250 [ 908.016478][T17136] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 908.022725][T17136] ? show_regs_print_info+0x20/0x20 [ 908.027979][T17136] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 908.034187][T17136] ? dump_stack+0x9/0x20 [ 908.038479][T17136] should_fail_ex+0x394/0x4c0 [ 908.043223][T17136] _copy_to_user+0x2f/0xa0 [ 908.047688][T17136] simple_read_from_buffer+0xe7/0x150 [ 908.053106][T17136] proc_fail_nth_read+0x1e8/0x260 [ 908.058178][T17136] ? proc_fault_inject_write+0x360/0x360 [ 908.063863][T17136] ? fsnotify_perm+0x271/0x5e0 [ 908.068657][T17136] ? proc_fault_inject_write+0x360/0x360 [ 908.074329][T17136] vfs_read+0x298/0x990 [ 908.078529][T17136] ? kernel_read+0x1e0/0x1e0 [ 908.083153][T17136] ? __fget_files+0x28/0x460 [ 908.087774][T17136] ? __fget_files+0x3fc/0x460 [ 908.092493][T17136] ? __fdget_pos+0x2a3/0x330 [ 908.097124][T17136] ? ksys_read+0x74/0x260 [ 908.101509][T17136] ksys_read+0x151/0x260 [ 908.105789][T17136] ? vfs_write+0x9a0/0x9a0 [ 908.110250][T17136] do_syscall_64+0x55/0xb0 [ 908.114693][T17136] ? clear_bhb_loop+0x40/0x90 [ 908.119400][T17136] ? clear_bhb_loop+0x40/0x90 [ 908.124105][T17136] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 908.130033][T17136] RIP: 0033:0x7f97a555fd8e [ 908.134472][T17136] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.154538][T17136] RSP: 002b:00007f97a652efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.162978][T17136] RAX: ffffffffffffffda RBX: 00007f97a652f6c0 RCX: 00007f97a555fd8e [ 908.170989][T17136] RDX: 000000000000000f RSI: 00007f97a652f0a0 RDI: 000000000000000e [ 908.179003][T17136] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 908.187010][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.195009][T17136] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 908.203038][T17136] [ 909.368649][T17151] FAULT_INJECTION: forcing a failure. [ 909.368649][T17151] name failslab, interval 1, probability 0, space 0, times 0 [ 909.381547][T17151] CPU: 0 PID: 17151 Comm: syz.1.3696 Not tainted syzkaller #0 [ 909.389057][T17151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 909.399167][T17151] Call Trace: [ 909.402493][T17151] [ 909.405470][T17151] dump_stack_lvl+0x18c/0x250 [ 909.410217][T17151] ? show_regs_print_info+0x20/0x20 [ 909.415474][T17151] ? load_image+0x420/0x420 [ 909.420028][T17151] ? __might_sleep+0xe0/0xe0 [ 909.424673][T17151] ? __lock_acquire+0x7eb0/0x7eb0 [ 909.429747][T17151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 909.435786][T17151] should_fail_ex+0x394/0x4c0 [ 909.440523][T17151] should_failslab+0x9/0x20 [ 909.445056][T17151] slab_pre_alloc_hook+0x59/0x300 [ 909.450106][T17151] ? lockdep_hardirqs_on+0x98/0x150 [ 909.455329][T17151] kmem_cache_alloc+0x5a/0x2d0 [ 909.460114][T17151] ? taskstats_exit+0x14d/0xce0 [ 909.464994][T17151] taskstats_exit+0x14d/0xce0 [ 909.469702][T17151] ? sysctl_delayacct+0x220/0x220 [ 909.474760][T17151] ? tty_audit_exit+0x14d/0x1f0 [ 909.479694][T17151] do_exit+0x8fc/0x2530 [ 909.483902][T17151] ? put_task_struct+0xc0/0xc0 [ 909.488733][T17151] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 909.494749][T17151] ? get_signal+0x100e/0x1390 [ 909.499456][T17151] ? lock_chain_count+0x20/0x20 [ 909.504338][T17151] ? _raw_spin_lock_irq+0xbb/0xf0 [ 909.509392][T17151] do_group_exit+0x22d/0x2f0 [ 909.514004][T17151] ? lockdep_hardirqs_on+0x98/0x150 [ 909.519241][T17151] get_signal+0x12a6/0x1390 [ 909.523788][T17151] arch_do_signal_or_restart+0xc2/0x7b0 [ 909.529394][T17151] ? get_sigframe_size+0x20/0x20 [ 909.534381][T17151] ? exit_to_user_mode_loop+0x3b/0x110 [ 909.539876][T17151] exit_to_user_mode_loop+0x70/0x110 [ 909.545200][T17151] exit_to_user_mode_prepare+0xee/0x180 [ 909.550777][T17151] syscall_exit_to_user_mode+0x1a/0x50 [ 909.556266][T17151] do_syscall_64+0x61/0xb0 [ 909.560726][T17151] ? clear_bhb_loop+0x40/0x90 [ 909.565448][T17151] ? clear_bhb_loop+0x40/0x90 [ 909.570176][T17151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.576102][T17151] RIP: 0033:0x7fb54fd9f559 [ 909.580543][T17151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.600176][T17151] RSP: 002b:00007fb550cbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 909.608621][T17151] RAX: fffffffffffffffc RBX: 00007fb550025fa0 RCX: 00007fb54fd9f559 [ 909.616615][T17151] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 909.624611][T17151] RBP: 00007fb550cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 909.632609][T17151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.640612][T17151] R13: 00007fb550026038 R14: 00007fb550025fa0 R15: 00007ffdb21066b8 [ 909.648624][T17151] [ 910.184424][T17171] __nla_validate_parse: 3 callbacks suppressed [ 910.184442][T17171] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3704'. [ 910.388233][T17175] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3706'. [ 910.906545][T17194] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3715'. [ 910.940711][T17194] bridge_slave_1: default FDB implementation only supports local addresses [ 911.181932][T17201] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3718'. [ 911.642140][T17215] FAULT_INJECTION: forcing a failure. [ 911.642140][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 911.672344][T17215] CPU: 0 PID: 17215 Comm: syz.0.3724 Not tainted syzkaller #0 [ 911.679886][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 911.690025][T17215] Call Trace: [ 911.693351][T17215] [ 911.696324][T17215] dump_stack_lvl+0x18c/0x250 [ 911.701060][T17215] ? show_regs_print_info+0x20/0x20 [ 911.706300][T17215] ? load_image+0x420/0x420 [ 911.710839][T17215] ? __might_sleep+0xe0/0xe0 [ 911.715459][T17215] ? __lock_acquire+0x7eb0/0x7eb0 [ 911.720513][T17215] should_fail_ex+0x394/0x4c0 [ 911.725220][T17215] should_failslab+0x9/0x20 [ 911.729766][T17215] slab_pre_alloc_hook+0x59/0x300 [ 911.734830][T17215] ? kasan_quarantine_put+0xd8/0x220 [ 911.740176][T17215] kmem_cache_alloc_node+0x5e/0x320 [ 911.745424][T17215] ? __alloc_skb+0x103/0x2c0 [ 911.750052][T17215] __alloc_skb+0x103/0x2c0 [ 911.754496][T17215] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 911.760430][T17215] addrconf_ifdown+0x155c/0x18a0 [ 911.765403][T17215] ? addrconf_cleanup+0x1e0/0x1e0 [ 911.770477][T17215] addrconf_notify+0x6c6/0x1010 [ 911.775364][T17215] notifier_call_chain+0x18f/0x380 [ 911.780527][T17215] unregister_netdevice_many_notify+0x1037/0x1910 [ 911.786983][T17215] ? unregister_netdevice_many+0x20/0x20 [ 911.792658][T17215] ? ip6_tnl_locate+0x62d/0x830 [ 911.797631][T17215] unregister_netdevice_queue+0x2e9/0x330 [ 911.803388][T17215] ? list_netdevice+0x730/0x730 [ 911.808262][T17215] ? ip6_tnl_parm_from_user+0x41/0x340 [ 911.813764][T17215] ? ip6_tnl_siocdevprivate+0x6ba/0xab0 [ 911.819348][T17215] ip6_tnl_siocdevprivate+0x3ec/0xab0 [ 911.824765][T17215] ? ip6_tnl_start_xmit+0x1230/0x1230 [ 911.830171][T17215] ? dev_ioctl+0x83c/0x1140 [ 911.834707][T17215] ? __lock_acquire+0x7eb0/0x7eb0 [ 911.839810][T17215] ? dev_ifsioc+0x957/0xc40 [ 911.844372][T17215] dev_ioctl+0x84c/0x1140 [ 911.848749][T17215] sock_ioctl+0x74c/0x7e0 [ 911.853123][T17215] ? sock_poll+0x460/0x460 [ 911.857593][T17215] ? bpf_lsm_file_ioctl+0x9/0x10 [ 911.862597][T17215] ? security_file_ioctl+0x80/0xa0 [ 911.867768][T17215] ? sock_poll+0x460/0x460 [ 911.872226][T17215] __se_sys_ioctl+0xfd/0x170 [ 911.876863][T17215] do_syscall_64+0x55/0xb0 [ 911.881432][T17215] ? clear_bhb_loop+0x40/0x90 [ 911.886148][T17215] ? clear_bhb_loop+0x40/0x90 [ 911.890890][T17215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.896820][T17215] RIP: 0033:0x7fea7cb9f559 [ 911.901272][T17215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 911.920906][T17215] RSP: 002b:00007fea7d9dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 911.929373][T17215] RAX: ffffffffffffffda RBX: 00007fea7ce25fa0 RCX: 00007fea7cb9f559 [ 911.937377][T17215] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 911.945386][T17215] RBP: 00007fea7d9dd090 R08: 0000000000000000 R09: 0000000000000000 [ 911.953388][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.961409][T17215] R13: 00007fea7ce26038 R14: 00007fea7ce25fa0 R15: 00007ffead3f0838 [ 911.969424][T17215] [ 912.093538][T17219] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3726'. [ 912.269351][T17223] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3728'. [ 913.045432][T17246] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3738'. [ 913.111420][T17252] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3740'. [ 913.121654][T17252] : renamed from caif0 [ 913.128594][T17252] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 913.148539][T17248] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3739'. [ 913.163236][T17249] netlink: 'syz.0.3737': attribute type 41 has an invalid length. [ 913.182595][T17251] netlink: 'syz.0.3737': attribute type 41 has an invalid length. [ 913.215309][T17249] netlink: 'syz.0.3737': attribute type 21 has an invalid length. [ 913.255928][T17249] netlink: 'syz.0.3737': attribute type 12 has an invalid length. [ 913.265435][T17249] netlink: 'syz.0.3737': attribute type 13 has an invalid length. [ 913.273423][T17249] netlink: 'syz.0.3737': attribute type 14 has an invalid length. [ 913.282288][T17249] netlink: 'syz.0.3737': attribute type 15 has an invalid length. [ 913.312514][T17249] netlink: 'syz.0.3737': attribute type 16 has an invalid length. [ 913.332480][T17249] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.3737'. [ 913.350890][T17256] FAULT_INJECTION: forcing a failure. [ 913.350890][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 913.363638][T17256] CPU: 0 PID: 17256 Comm: syz.2.3742 Not tainted syzkaller #0 [ 913.371155][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 913.381266][T17256] Call Trace: [ 913.384601][T17256] [ 913.387577][T17256] dump_stack_lvl+0x18c/0x250 [ 913.392315][T17256] ? show_regs_print_info+0x20/0x20 [ 913.397585][T17256] ? load_image+0x420/0x420 [ 913.402157][T17256] should_fail_ex+0x394/0x4c0 [ 913.406892][T17256] should_failslab+0x9/0x20 [ 913.411441][T17256] slab_pre_alloc_hook+0x59/0x300 [ 913.416518][T17256] ? perf_trace_lock_acquire+0x105/0x400 [ 913.422206][T17256] kmem_cache_alloc+0x5a/0x2d0 [ 913.427019][T17256] ? skb_clone+0x1eb/0x370 [ 913.431502][T17256] skb_clone+0x1eb/0x370 [ 913.435801][T17256] bpf_clone_redirect+0x16d/0x4a0 [ 913.440902][T17256] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 913.446420][T17256] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 913.452467][T17256] ? __lock_acquire+0x7eb0/0x7eb0 [ 913.457554][T17256] ? lock_chain_count+0x20/0x20 [ 913.462470][T17256] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 913.468756][T17256] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 913.474099][T17256] ? ktime_get+0x7f/0x280 [ 913.478471][T17256] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 913.484765][T17256] ? ktime_get_real_ts64+0x440/0x440 [ 913.490083][T17256] ? __x64_sys_bpf+0x7c/0x90 [ 913.494703][T17256] ? __local_bh_disable_ip+0x108/0x1a0 [ 913.500186][T17256] ? __cant_sleep+0x220/0x220 [ 913.504904][T17256] ? read_tsc+0x9/0x20 [ 913.509044][T17256] ? ktime_get+0x24b/0x280 [ 913.513497][T17256] ? bpf_test_run+0x174/0x870 [ 913.518203][T17256] bpf_test_run+0x2df/0x870 [ 913.522753][T17256] ? bpf_test_run+0x174/0x870 [ 913.527466][T17256] ? dst_hold+0x70/0x70 [ 913.531656][T17256] ? eth_get_headlen+0x210/0x210 [ 913.536656][T17256] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 913.542098][T17256] ? cpu_online+0x60/0x60 [ 913.546459][T17256] bpf_prog_test_run+0x31f/0x390 [ 913.551431][T17256] __sys_bpf+0x49d/0x890 [ 913.555714][T17256] ? bpf_link_show_fdinfo+0x560/0x560 [ 913.561128][T17256] ? lock_chain_count+0x20/0x20 [ 913.566016][T17256] __x64_sys_bpf+0x7c/0x90 [ 913.570464][T17256] do_syscall_64+0x55/0xb0 [ 913.574911][T17256] ? clear_bhb_loop+0x40/0x90 [ 913.579632][T17256] ? clear_bhb_loop+0x40/0x90 [ 913.584352][T17256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 913.590290][T17256] RIP: 0033:0x7f97a559f559 [ 913.594735][T17256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.614391][T17256] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 913.622833][T17256] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 913.630837][T17256] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 913.638832][T17256] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 913.646844][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.654841][T17256] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 913.662852][T17256] [ 913.686308][T17244] netlink: 'syz.0.3737': attribute type 21 has an invalid length. [ 913.696265][T17244] netlink: 'syz.0.3737': attribute type 12 has an invalid length. [ 914.530266][T17280] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 914.536870][T17280] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 915.044401][T17302] IPv6: Can't replace route, no match found [ 915.384474][T17300] rxe_eth0 speed is unknown, defaulting to 1000 [ 915.508649][T17316] __nla_validate_parse: 3 callbacks suppressed [ 915.509559][T17316] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3765'. [ 915.745688][T17321] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 915.752317][T17321] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 916.252722][T17337] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3774'. [ 916.426247][T17340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 916.432820][T17340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 916.642092][T17344] FAULT_INJECTION: forcing a failure. [ 916.642092][T17344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 916.690022][T17344] CPU: 0 PID: 17344 Comm: syz.1.3778 Not tainted syzkaller #0 [ 916.697600][T17344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 916.707691][T17344] Call Trace: [ 916.711013][T17344] [ 916.713988][T17344] dump_stack_lvl+0x18c/0x250 [ 916.718720][T17344] ? show_regs_print_info+0x20/0x20 [ 916.723963][T17344] ? load_image+0x420/0x420 [ 916.728518][T17344] ? __might_fault+0xaa/0x120 [ 916.733249][T17344] ? __lock_acquire+0x7eb0/0x7eb0 [ 916.738330][T17344] should_fail_ex+0x394/0x4c0 [ 916.743063][T17344] _copy_from_user+0x2f/0xe0 [ 916.747729][T17344] ___sys_sendmsg+0x1c7/0x360 [ 916.752463][T17344] ? __sys_sendmsg+0x2b0/0x2b0 [ 916.757292][T17344] ? ktime_get+0x7f/0x280 [ 916.761671][T17344] ? trace_call_bpf+0xc3/0x6c0 [ 916.766509][T17344] __se_sys_sendmsg+0x1d0/0x2c0 [ 916.771411][T17344] ? perf_trace_preemptirq_template+0x269/0x330 [ 916.777702][T17344] ? __x64_sys_sendmsg+0x80/0x80 [ 916.782711][T17344] ? lockdep_hardirqs_on+0x98/0x150 [ 916.787962][T17344] do_syscall_64+0x55/0xb0 [ 916.792432][T17344] ? clear_bhb_loop+0x40/0x90 [ 916.797191][T17344] ? clear_bhb_loop+0x40/0x90 [ 916.801926][T17344] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.807880][T17344] RIP: 0033:0x7fb54fd9f559 [ 916.812343][T17344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.831998][T17344] RSP: 002b:00007fb550cbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 916.840459][T17344] RAX: ffffffffffffffda RBX: 00007fb550025fa0 RCX: 00007fb54fd9f559 [ 916.848478][T17344] RDX: 0000000004040040 RSI: 0000200000000700 RDI: 000000000000000a [ 916.856492][T17344] RBP: 00007fb550cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 916.864514][T17344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 916.872534][T17344] R13: 00007fb550026038 R14: 00007fb550025fa0 R15: 00007ffdb21066b8 [ 916.880574][T17344] [ 917.440933][T13177] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 917.454908][T13177] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 917.480751][T13177] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 917.495392][T13177] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 917.524445][T13177] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 917.534431][T13177] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 917.649111][T17358] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3784'. [ 917.688418][T17358] bridge_slave_1: default FDB implementation only supports local addresses [ 917.743794][T17355] rxe_eth0 speed is unknown, defaulting to 1000 [ 917.991230][ T3479] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.205014][ T3479] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.396557][ T3479] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.469521][T17381] netlink: 15487 bytes leftover after parsing attributes in process `syz.0.3789'. [ 918.541391][ T3479] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.679609][T17355] chnl_net:caif_netlink_parms(): no params data found [ 918.858222][T17355] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.865848][T17355] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.873871][T17355] bridge_slave_0: entered allmulticast mode [ 918.881517][T17355] bridge_slave_0: entered promiscuous mode [ 918.970747][T17397] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3794'. [ 919.083967][T17355] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.108739][T17355] bridge0: port 2(bridge_slave_1) entered disabled state [ 919.130518][T17355] bridge_slave_1: entered allmulticast mode [ 919.139876][T17355] bridge_slave_1: entered promiscuous mode [ 919.232800][T17355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.286814][T17355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.417452][T17355] team0: Port device team_slave_0 added [ 919.448021][T17355] team0: Port device team_slave_1 added [ 919.618171][ T5797] Bluetooth: hci1: command tx timeout [ 919.746176][T17355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.755243][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.781656][T17355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.873141][T17355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.882084][T17355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.954064][T17355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.491151][T17439] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3802'. [ 920.524659][T17439] bridge_slave_1: default FDB implementation only supports local addresses [ 920.748068][T17355] hsr_slave_0: entered promiscuous mode [ 920.782927][T17444] FAULT_INJECTION: forcing a failure. [ 920.782927][T17444] name failslab, interval 1, probability 0, space 0, times 0 [ 920.795722][T17444] CPU: 1 PID: 17444 Comm: syz.2.3803 Not tainted syzkaller #0 [ 920.803251][T17444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 920.813478][T17444] Call Trace: [ 920.816808][T17444] [ 920.819796][T17444] dump_stack_lvl+0x18c/0x250 [ 920.824547][T17444] ? show_regs_print_info+0x20/0x20 [ 920.829792][T17444] ? load_image+0x420/0x420 [ 920.834338][T17444] ? __might_sleep+0xe0/0xe0 [ 920.838971][T17444] ? __lock_acquire+0x7eb0/0x7eb0 [ 920.844066][T17444] should_fail_ex+0x394/0x4c0 [ 920.848792][T17444] should_failslab+0x9/0x20 [ 920.853337][T17444] slab_pre_alloc_hook+0x59/0x300 [ 920.858409][T17444] kmem_cache_alloc+0x5a/0x2d0 [ 920.863207][T17444] ? sk_prot_alloc+0x57/0x210 [ 920.867935][T17444] sk_prot_alloc+0x57/0x210 [ 920.872482][T17444] ? sk_alloc+0x24/0x350 [ 920.876769][T17444] sk_alloc+0x3a/0x350 [ 920.880885][T17444] inet6_create+0x7d3/0x1160 [ 920.885515][T17444] ? inet6_create+0x80/0x1160 [ 920.890242][T17444] __sock_create+0x49e/0x940 [ 920.894884][T17444] udp_sock_create6+0xd3/0x650 [ 920.899689][T17444] ? lockdep_softirqs_off+0x440/0x440 [ 920.905103][T17444] ? inet6_hash+0x80/0x80 [ 920.909588][T17444] ? rxrpc_lookup_local+0xc84/0x1700 [ 920.915011][T17444] rxrpc_lookup_local+0xcfa/0x1700 [ 920.920164][T17444] ? rxrpc_local_dont_fragment+0x70/0x70 [ 920.925838][T17444] ? __local_bh_enable_ip+0x13a/0x1c0 [ 920.931253][T17444] ? __local_bh_enable_ip+0x13a/0x1c0 [ 920.936662][T17444] ? do_raw_spin_unlock+0x121/0x230 [ 920.941901][T17444] rxrpc_sendmsg+0x2f3/0x5b0 [ 920.946586][T17444] ? rxrpc_getsockopt+0x150/0x150 [ 920.951657][T17444] ____sys_sendmsg+0x61b/0x980 [ 920.956462][T17444] ? __sys_sendmsg_sock+0x30/0x30 [ 920.961510][T17444] ? __import_iovec+0x3fa/0x850 [ 920.966402][T17444] ? import_iovec+0x73/0xa0 [ 920.970938][T17444] ___sys_sendmsg+0x2a6/0x360 [ 920.975645][T17444] ? get_pid_task+0x20/0x1e0 [ 920.980267][T17444] ? __sys_sendmsg+0x2b0/0x2b0 [ 920.985071][T17444] ? __lock_acquire+0x7eb0/0x7eb0 [ 920.990163][T17444] __se_sys_sendmsg+0x1d0/0x2c0 [ 920.995043][T17444] ? __x64_sys_sendmsg+0x80/0x80 [ 921.000026][T17444] ? lockdep_hardirqs_on+0x98/0x150 [ 921.005253][T17444] do_syscall_64+0x55/0xb0 [ 921.009706][T17444] ? clear_bhb_loop+0x40/0x90 [ 921.014418][T17444] ? clear_bhb_loop+0x40/0x90 [ 921.019131][T17444] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 921.025063][T17444] RIP: 0033:0x7f97a559f559 [ 921.029503][T17444] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 921.049152][T17444] RSP: 002b:00007f97a652f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.057598][T17444] RAX: ffffffffffffffda RBX: 00007f97a5825fa0 RCX: 00007f97a559f559 [ 921.065610][T17444] RDX: 000000000000fc40 RSI: 0000200000000000 RDI: 0000000000000004 [ 921.073621][T17444] RBP: 00007f97a652f090 R08: 0000000000000000 R09: 0000000000000000 [ 921.081622][T17444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.089622][T17444] R13: 00007f97a5826038 R14: 00007f97a5825fa0 R15: 00007ffecd506418 [ 921.097639][T17444] [ 921.130068][T17355] hsr_slave_1: entered promiscuous mode [ 921.693801][ T5797] Bluetooth: hci1: command tx timeout [ 922.722569][ T3479] hsr_slave_0: left promiscuous mode [ 922.734801][ T3479] hsr_slave_1: left promiscuous mode [ 922.746821][ T3479] bridge0: port 3(team0) entered disabled state [ 922.787738][ T3479] bridge_slave_1: left allmulticast mode [ 922.798627][ T3479] bridge_slave_1: left promiscuous mode [ 922.808948][ T3479] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.828754][ T3479] bridge_slave_0: left allmulticast mode [ 922.837944][ T3479] bridge_slave_0: left promiscuous mode [ 922.848706][ T3479] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.901337][ T3479] veth0_macvtap: left promiscuous mode [ 922.909321][ T3479] veth1_vlan: left promiscuous mode [ 922.920018][ T3479] ªªªªª0: left promiscuous mode [ 923.709839][ T3479] team_slave_1 (unregistering): left promiscuous mode [ 923.721450][ T3479] team_slave_1 (unregistering): left allmulticast mode [ 923.735510][ T3479] team0 (unregistering): Port device team_slave_1 removed [ 923.777782][ T5797] Bluetooth: hci1: command tx timeout [ 923.784042][ T3479] team_slave_0 (unregistering): left promiscuous mode [ 923.790906][ T3479] team_slave_0 (unregistering): left allmulticast mode [ 923.802396][ T3479] team0 (unregistering): Port device team_slave_0 removed [ 923.849206][ T3479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.859360][ T3479] bond_slave_1 (unregistering): left promiscuous mode [ 923.866325][ T3479] bond_slave_1 (unregistering): left allmulticast mode [ 923.909654][ T3479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.919469][ T3479] bond_slave_0 (unregistering): left promiscuous mode [ 923.928711][ T3479] bond_slave_0 (unregistering): left allmulticast mode [ 924.233105][ T3479] bond0 (unregistering): left promiscuous mode [ 924.239390][ T3479] bond0 (unregistering): left allmulticast mode [ 924.249131][ T3479] team0 (unregistering): Port device bond0 removed [ 924.283589][ T3479] bond0 (unregistering): Released all slaves [ 924.643784][T17355] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 924.719762][T17355] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 925.022336][T17355] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 925.088266][T17355] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 925.140238][T17527] validate_nla: 4 callbacks suppressed [ 925.140256][T17527] netlink: 'syz.1.3824': attribute type 4 has an invalid length. [ 925.166412][T17517] rxe_eth0 speed is unknown, defaulting to 1000 [ 925.418911][T17355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.513071][T17355] 8021q: adding VLAN 0 to HW filter on device team0 [ 925.581315][ T9987] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.588592][ T9987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 925.677119][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.684417][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 925.713669][T17540] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 925.720202][T17540] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 925.852801][ T5797] Bluetooth: hci1: command tx timeout [ 926.840241][T17355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 927.295167][T17577] FAULT_INJECTION: forcing a failure. [ 927.295167][T17577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.339904][T17577] CPU: 1 PID: 17577 Comm: syz.1.3833 Not tainted syzkaller #0 [ 927.347459][T17577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 927.357563][T17577] Call Trace: [ 927.360884][T17577] [ 927.363853][T17577] dump_stack_lvl+0x18c/0x250 [ 927.368595][T17577] ? show_regs_print_info+0x20/0x20 [ 927.373843][T17577] ? load_image+0x420/0x420 [ 927.378398][T17577] ? __lock_acquire+0x7eb0/0x7eb0 [ 927.383473][T17577] ? snprintf+0xe9/0x140 [ 927.387764][T17577] should_fail_ex+0x394/0x4c0 [ 927.392495][T17577] _copy_to_user+0x2f/0xa0 [ 927.396989][T17577] simple_read_from_buffer+0xe7/0x150 [ 927.402440][T17577] proc_fail_nth_read+0x1e8/0x260 [ 927.407524][T17577] ? proc_fault_inject_write+0x360/0x360 [ 927.413224][T17577] ? fsnotify_perm+0x271/0x5e0 [ 927.418047][T17577] ? proc_fault_inject_write+0x360/0x360 [ 927.423741][T17577] vfs_read+0x298/0x990 [ 927.427963][T17577] ? kernel_read+0x1e0/0x1e0 [ 927.432641][T17577] ? __fget_files+0x28/0x460 [ 927.437295][T17577] ? __fget_files+0x3fc/0x460 [ 927.442060][T17577] ? __fdget_pos+0x2a3/0x330 [ 927.446704][T17577] ? ksys_read+0x74/0x260 [ 927.451087][T17577] ksys_read+0x151/0x260 [ 927.455395][T17577] ? vfs_write+0x9a0/0x9a0 [ 927.459849][T17577] ? lockdep_hardirqs_on+0x98/0x150 [ 927.465073][T17577] do_syscall_64+0x55/0xb0 [ 927.469522][T17577] ? clear_bhb_loop+0x40/0x90 [ 927.474231][T17577] ? clear_bhb_loop+0x40/0x90 [ 927.478960][T17577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 927.484882][T17577] RIP: 0033:0x7fb54fd5fd8e [ 927.489318][T17577] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 927.508949][T17577] RSP: 002b:00007fb550cbefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 927.517391][T17577] RAX: ffffffffffffffda RBX: 00007fb550cbf6c0 RCX: 00007fb54fd5fd8e [ 927.525389][T17577] RDX: 000000000000000f RSI: 00007fb550cbf0a0 RDI: 0000000000000004 [ 927.533383][T17577] RBP: 00007fb550cbf090 R08: 0000000000000000 R09: 0000000000000000 [ 927.541375][T17577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.549379][T17577] R13: 00007fb550026038 R14: 00007fb550025fa0 R15: 00007ffdb21066b8 [ 927.557389][T17577] [ 927.808178][T17355] veth0_vlan: entered promiscuous mode [ 927.868141][T17355] veth1_vlan: entered promiscuous mode [ 927.972370][T17591] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3838'. [ 928.036578][T17355] veth0_macvtap: entered promiscuous mode [ 928.096255][T17355] veth1_macvtap: entered promiscuous mode [ 928.208591][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.252867][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.292585][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.324665][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.337888][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 928.348444][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.360896][T17355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 928.372550][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.386209][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.396740][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.407641][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.418781][T17355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 928.430284][T17355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 928.457216][T17355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 928.478388][T17600] netlink: 'syz.0.3840': attribute type 4 has an invalid length. [ 928.508658][T17355] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.542981][T17355] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.559693][T17355] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.578174][T17355] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.818223][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.876700][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.960339][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 928.984827][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 929.572122][T17633] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3847'. [ 929.782002][T17639] FAULT_INJECTION: forcing a failure. [ 929.782002][T17639] name failslab, interval 1, probability 0, space 0, times 0 [ 929.803609][T17639] CPU: 1 PID: 17639 Comm: syz.4.3850 Not tainted syzkaller #0 [ 929.811149][T17639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 929.821248][T17639] Call Trace: [ 929.824567][T17639] [ 929.827537][T17639] dump_stack_lvl+0x18c/0x250 [ 929.832271][T17639] ? show_regs_print_info+0x20/0x20 [ 929.837522][T17639] ? load_image+0x420/0x420 [ 929.842081][T17639] ? __might_sleep+0xe0/0xe0 [ 929.846724][T17639] ? __lock_acquire+0x7eb0/0x7eb0 [ 929.851804][T17639] ? stack_trace_save+0xaa/0x100 [ 929.856802][T17639] ? stack_trace_snprint+0xf0/0xf0 [ 929.861974][T17639] should_fail_ex+0x394/0x4c0 [ 929.866713][T17639] should_failslab+0x9/0x20 [ 929.871268][T17639] slab_pre_alloc_hook+0x59/0x300 [ 929.876340][T17639] ? __kasan_kmalloc+0x8f/0xa0 [ 929.881156][T17639] ? __inet_diag_dump_start+0x8b/0x9f0 [ 929.886659][T17639] ? __netlink_dump_start+0x43c/0x7a0 [ 929.892076][T17639] kmem_cache_alloc_node+0x5e/0x320 [ 929.897318][T17639] ? ___sys_sendmsg+0x2a6/0x360 [ 929.902217][T17639] ? __alloc_skb+0x103/0x2c0 [ 929.906865][T17639] __alloc_skb+0x103/0x2c0 [ 929.911337][T17639] netlink_dump+0x1ee/0xec0 [ 929.915887][T17639] ? end_current_label_crit_section+0x170/0x170 [ 929.922176][T17639] ? end_current_label_crit_section+0x170/0x170 [ 929.928479][T17639] ? netlink_lookup+0x200/0x200 [ 929.933386][T17639] ? ns_capable+0x89/0xe0 [ 929.937775][T17639] ? __inet_diag_dump_start+0x886/0x9f0 [ 929.943385][T17639] __netlink_dump_start+0x57c/0x7a0 [ 929.948719][T17639] inet_diag_rcv_msg_compat+0x215/0x440 [ 929.954334][T17639] ? __inet_diag_dump+0x380/0x380 [ 929.959413][T17639] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 929.964527][T17639] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 929.970294][T17639] ? inet_diag_dump_start_compat+0x20/0x20 [ 929.976141][T17639] ? inet_diag_dump+0x50/0x50 [ 929.980904][T17639] ? __inet_diag_dump+0x380/0x380 [ 929.985971][T17639] sock_diag_rcv_msg+0x3d3/0x5f0 [ 929.990967][T17639] netlink_rcv_skb+0x235/0x4c0 [ 929.995789][T17639] ? sock_diag_bind+0xb0/0xb0 [ 930.000520][T17639] ? netlink_ack+0x1160/0x1160 [ 930.005335][T17639] ? __lock_acquire+0x7eb0/0x7eb0 [ 930.010420][T17639] ? netlink_deliver_tap+0x2e/0x1b0 [ 930.015664][T17639] sock_diag_rcv+0x2a/0x40 [ 930.020136][T17639] netlink_unicast+0x856/0x9e0 [ 930.024993][T17639] netlink_sendmsg+0x8d0/0xbf0 [ 930.029814][T17639] ? netlink_getsockopt+0x590/0x590 [ 930.035097][T17639] ? apparmor_socket_sendmsg+0x170/0x330 [ 930.040787][T17639] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 930.046131][T17639] ? security_socket_sendmsg+0x80/0xa0 [ 930.051638][T17639] ? netlink_getsockopt+0x590/0x590 [ 930.056884][T17639] ____sys_sendmsg+0x61b/0x980 [ 930.061711][T17639] ? __asan_memset+0x22/0x40 [ 930.066368][T17639] ? __sys_sendmsg_sock+0x30/0x30 [ 930.071456][T17639] ? __import_iovec+0x5f2/0x850 [ 930.076368][T17639] ? import_iovec+0x73/0xa0 [ 930.080926][T17639] ___sys_sendmsg+0x2a6/0x360 [ 930.085675][T17639] ? get_pid_task+0x20/0x1e0 [ 930.090327][T17639] ? __sys_sendmsg+0x2b0/0x2b0 [ 930.095167][T17639] ? __lock_acquire+0x7eb0/0x7eb0 [ 930.100290][T17639] __se_sys_sendmsg+0x1d0/0x2c0 [ 930.105201][T17639] ? __x64_sys_sendmsg+0x80/0x80 [ 930.110205][T17639] ? lockdep_hardirqs_on+0x98/0x150 [ 930.115456][T17639] do_syscall_64+0x55/0xb0 [ 930.119926][T17639] ? clear_bhb_loop+0x40/0x90 [ 930.124666][T17639] ? clear_bhb_loop+0x40/0x90 [ 930.129404][T17639] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 930.135346][T17639] RIP: 0033:0x7f23d319f559 [ 930.139797][T17639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.159437][T17639] RSP: 002b:00007f23d3f94028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.167889][T17639] RAX: ffffffffffffffda RBX: 00007f23d3425fa0 RCX: 00007f23d319f559 [ 930.175898][T17639] RDX: ff0f000020000080 RSI: 0000200000000200 RDI: 0000000000000003 [ 930.183920][T17639] RBP: 00007f23d3f94090 R08: 0000000000000000 R09: 0000000000000000 [ 930.191928][T17639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.199936][T17639] R13: 00007f23d3426038 R14: 00007f23d3425fa0 R15: 00007ffd42712518 [ 930.207987][T17639] [ 931.745461][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.751842][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 946.094099][T13177] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 946.104804][T13177] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 946.113363][T13177] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 946.123022][T13177] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 946.131691][T13177] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 946.139905][T13177] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 948.262310][ T5797] Bluetooth: hci4: command tx timeout [ 948.433655][T13177] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 948.444436][T13177] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 948.453852][T13177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 948.462527][T13177] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 948.473170][T13177] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 948.480711][T13177] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 948.575452][ T5797] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 948.592366][ T5797] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 948.608400][ T5797] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 948.617766][ T5797] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 948.626078][ T5797] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 948.634766][ T5797] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 950.332319][T13177] Bluetooth: hci4: command tx timeout [ 950.356066][ T5797] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 950.366272][ T5797] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 950.374971][ T5797] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 950.385094][ T5797] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 950.400620][ T5797] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 950.408833][ T5797] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 950.572852][ T5797] Bluetooth: hci5: command tx timeout [ 950.652632][ T5797] Bluetooth: hci6: command tx timeout [ 952.412596][ T5797] Bluetooth: hci4: command tx timeout [ 952.499202][ T5797] Bluetooth: hci7: command tx timeout [ 952.652782][ T5797] Bluetooth: hci5: command tx timeout [ 952.734298][ T5797] Bluetooth: hci6: command tx timeout [ 954.492438][ T5797] Bluetooth: hci4: command tx timeout [ 954.572452][ T5797] Bluetooth: hci7: command tx timeout [ 954.742081][ T5797] Bluetooth: hci5: command tx timeout [ 954.812572][ T5797] Bluetooth: hci6: command tx timeout [ 956.657565][T13177] Bluetooth: hci7: command tx timeout [ 956.816986][ T5797] Bluetooth: hci5: command tx timeout [ 956.892530][ T5797] Bluetooth: hci6: command tx timeout [ 958.732361][ T5797] Bluetooth: hci7: command tx timeout [ 993.152972][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.159410][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1007.069214][T13177] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1007.079559][T13177] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1007.087708][T13177] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1007.097153][T13177] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1007.105593][T13177] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1007.113454][T13177] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1008.563654][ T5797] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1008.582977][ T5797] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1008.591233][ T5797] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1008.601526][ T5797] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1008.609862][ T5797] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1008.618332][ T5797] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1008.823662][ T5797] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1008.835030][ T5797] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1008.850062][ T5797] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1008.861903][ T5797] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1008.870941][ T5797] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1008.881963][ T5797] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1009.212412][T13177] Bluetooth: hci8: command tx timeout [ 1010.732392][T13177] Bluetooth: hci9: command tx timeout [ 1010.972407][T13177] Bluetooth: hci10: command tx timeout [ 1011.173642][ T5797] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1011.183988][ T5797] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1011.192320][ T5797] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1011.201969][ T5797] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1011.212529][ T5797] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1011.221034][ T5797] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1011.292356][ T5797] Bluetooth: hci8: command tx timeout [ 1012.812445][ T5797] Bluetooth: hci9: command tx timeout [ 1013.052829][ T5797] Bluetooth: hci10: command tx timeout [ 1013.292432][ T5797] Bluetooth: hci11: command tx timeout [ 1013.372289][ T5797] Bluetooth: hci8: command tx timeout [ 1014.892493][ T5797] Bluetooth: hci9: command tx timeout [ 1015.132890][ T5797] Bluetooth: hci10: command tx timeout [ 1015.372477][ T5797] Bluetooth: hci11: command tx timeout [ 1015.452394][ T5797] Bluetooth: hci8: command tx timeout [ 1016.972479][ T5797] Bluetooth: hci9: command tx timeout [ 1017.222317][ T5797] Bluetooth: hci10: command tx timeout [ 1017.452658][ T5797] Bluetooth: hci11: command tx timeout [ 1019.532304][T13177] Bluetooth: hci11: command tx timeout [ 1041.292490][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 1054.582677][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.589093][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1067.613517][T17764] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1067.623444][T17764] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1067.631825][T17764] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1067.643656][T17764] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1067.651740][T17764] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1067.662714][T17764] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1069.231818][T17770] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1069.249674][T17770] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1069.258143][T17770] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1069.267556][T17770] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1069.276419][T17770] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1069.284645][T17770] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1069.422903][T17773] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1069.433209][T17773] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1069.441276][T17773] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1069.451110][T17773] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1069.472918][T17773] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1069.480636][T17773] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1071.525166][T17781] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1071.535222][T17781] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1071.545983][T17781] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1071.562401][T17781] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1071.570994][T17781] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1071.581594][T17781] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1072.020969][T17776] Bluetooth: hci5: command 0x0406 tx timeout [ 1072.027895][T17777] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.034827][T17776] Bluetooth: hci6: command 0x0406 tx timeout [ 1077.133028][T17783] Bluetooth: hci7: command 0x0406 tx timeout [ 1087.852497][ T29] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 1087.860038][ T29] Not tainted syzkaller #0 [ 1087.874673][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.883953][ T29] task:kworker/0:1 state:D stack:23592 pid:9 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1087.902826][ T29] Workqueue: events switchdev_deferred_process_work [ 1087.925227][ T29] Call Trace: [ 1087.928579][ T29] [ 1087.931583][ T29] __schedule+0x156f/0x4720 [ 1087.952424][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1087.958439][ T29] ? mark_lock+0x94/0x320 [ 1087.977799][ T29] ? asan.module_dtor+0x20/0x20 [ 1087.992311][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 1087.997456][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1088.017836][ T29] schedule+0xbd/0x170 [ 1088.032280][ T29] schedule_preempt_disabled+0x13/0x20 [ 1088.037838][ T29] __mutex_lock+0x689/0xce0 [ 1088.062330][ T29] ? __mutex_lock+0x4d2/0xce0 [ 1088.067105][ T29] ? switchdev_deferred_process_work+0xe/0x20 [ 1088.082297][ T29] ? mutex_lock_nested+0x20/0x20 [ 1088.087332][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.112152][ T29] ? process_scheduled_works+0x975/0x1600 [ 1088.118097][ T29] ? process_scheduled_works+0x975/0x1600 [ 1088.152265][ T29] switchdev_deferred_process_work+0xe/0x20 [ 1088.158348][ T29] process_scheduled_works+0xa60/0x1600 [ 1088.187421][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1088.193505][ T29] ? assign_work+0x3cc/0x5d0 [ 1088.198183][ T29] worker_thread+0xa5e/0xfe0 [ 1088.217498][ T29] ? _raw_spin_unlock+0x40/0x40 [ 1088.232296][ T29] ? __kthread_parkme+0x71/0x1c0 [ 1088.237415][ T29] kthread+0x2fa/0x390 [ 1088.241539][ T29] ? pr_cont_work+0x550/0x550 [ 1088.275892][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1088.280667][ T29] ret_from_fork+0x48/0x80 [ 1088.297910][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1088.318089][ T29] ret_from_fork_asm+0x11/0x20 [ 1088.332341][ T29] [ 1088.335531][ T29] INFO: task kworker/u4:36:9987 blocked for more than 143 seconds. [ 1088.355354][ T29] Not tainted syzkaller #0 [ 1088.360438][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1088.397207][ T29] task:kworker/u4:36 state:D stack:21992 pid:9987 ppid:2 flags:0x00004000 [ 1088.422271][ T29] Workqueue: ipv6_addrconf addrconf_dad_work [ 1088.428463][ T29] Call Trace: [ 1088.431790][ T29] [ 1088.462464][ T29] __schedule+0x156f/0x4720 [ 1088.467096][ T29] ? register_lock_class+0xc4/0x8a0 [ 1088.512297][ T29] ? asan.module_dtor+0x20/0x20 [ 1088.517364][ T29] ? __mutex_lock+0x684/0xce0 [ 1088.527370][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1088.542376][ T29] ? kthread_data+0x4f/0xc0 [ 1088.547060][ T29] ? wq_worker_sleeping+0x63/0x240 [ 1088.569229][ T29] schedule+0xbd/0x170 [ 1088.582460][ T29] schedule_preempt_disabled+0x13/0x20 [ 1088.588021][ T29] __mutex_lock+0x689/0xce0 [ 1088.612219][ T29] ? __mutex_lock+0x4d2/0xce0 [ 1088.617005][ T29] ? addrconf_dad_work+0xce/0x1550 [ 1088.638636][ T29] ? mutex_lock_nested+0x20/0x20 [ 1088.658273][ T29] addrconf_dad_work+0xce/0x1550 [ 1088.672354][ T29] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 1088.677825][ T29] ? read_lock_is_recursive+0x20/0x20 [ 1088.702328][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 1088.707620][ T29] ? process_scheduled_works+0x975/0x1600 [ 1088.732197][ T29] ? process_scheduled_works+0x975/0x1600 [ 1088.738024][ T29] process_scheduled_works+0xa60/0x1600 [ 1088.762403][ T29] ? worker_attach_to_pool+0x370/0x370 [ 1088.767978][ T29] ? assign_work+0x3cc/0x5d0 [ 1088.782228][ T29] worker_thread+0xa5e/0xfe0 [ 1088.786994][ T29] kthread+0x2fa/0x390 [ 1088.791124][ T29] ? pr_cont_work+0x550/0x550 [ 1088.832595][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1088.837375][ T29] ret_from_fork+0x48/0x80 [ 1088.841849][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1088.862187][ T29] ret_from_fork_asm+0x11/0x20 [ 1088.867081][ T29] [ 1088.870169][ T29] INFO: task syz.1.3851:17667 blocked for more than 144 seconds. [ 1088.942604][ T29] Not tainted syzkaller #0 [ 1088.947634][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.009473][ T29] task:syz.1.3851 state:D stack:28328 pid:17667 ppid:13755 flags:0x00004004 [ 1089.025041][ T29] Call Trace: [ 1089.028413][ T29] [ 1089.031453][ T29] __schedule+0x156f/0x4720 [ 1089.036914][ T29] ? asan.module_dtor+0x20/0x20 [ 1089.041861][ T29] ? __mutex_lock+0x684/0xce0 [ 1089.060009][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1089.068392][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1089.079525][ T29] schedule+0xbd/0x170 [ 1089.085646][ T29] schedule_preempt_disabled+0x13/0x20 [ 1089.091187][ T29] __mutex_lock+0x689/0xce0 [ 1089.100678][ T29] ? __mutex_lock+0x4d2/0xce0 [ 1089.105892][ T29] ? dev_ioctl+0x7a4/0x1140 [ 1089.110487][ T29] ? mutex_lock_nested+0x20/0x20 [ 1089.121767][ T29] ? dev_load+0x21/0x1f0 [ 1089.126649][ T29] ? dev_load+0x21/0x1f0 [ 1089.130987][ T29] dev_ioctl+0x7a4/0x1140 [ 1089.142249][ T29] sock_do_ioctl+0x239/0x310 [ 1089.146947][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 1089.151896][ T29] sock_ioctl+0x5be/0x7e0 [ 1089.166994][ T29] ? sock_poll+0x460/0x460 [ 1089.171596][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1089.180636][ T29] ? security_file_ioctl+0x80/0xa0 [ 1089.188979][ T29] ? sock_poll+0x460/0x460 [ 1089.193877][ T29] __se_sys_ioctl+0xfd/0x170 [ 1089.198554][ T29] do_syscall_64+0x55/0xb0 [ 1089.209050][ T29] ? clear_bhb_loop+0x40/0x90 [ 1089.214160][ T29] ? clear_bhb_loop+0x40/0x90 [ 1089.218899][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.225434][ T29] RIP: 0033:0x7fb54fd9f559 [ 1089.229903][ T29] RSP: 002b:00007fb550c3b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1089.262320][ T29] RAX: ffffffffffffffda RBX: 00007fb550026360 RCX: 00007fb54fd9f559 [ 1089.270388][ T29] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 000000000000006e [ 1089.305977][ T29] RBP: 00007fb54fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1089.326091][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.347499][ T29] R13: 00007fb5500263f8 R14: 00007fb550026360 R15: 00007ffdb21066b8 [ 1089.371959][ T29] [ 1089.375756][ T29] INFO: task syz.0.3859:17673 blocked for more than 144 seconds. [ 1089.391434][ T29] Not tainted syzkaller #0 [ 1089.401581][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.416254][ T29] task:syz.0.3859 state:D stack:23464 pid:17673 ppid:13175 flags:0x00004004 [ 1089.425987][ T29] Call Trace: [ 1089.429322][ T29] [ 1089.438057][ T29] __schedule+0x156f/0x4720 [ 1089.443894][ T29] ? asan.module_dtor+0x20/0x20 [ 1089.448841][ T29] ? __mutex_lock+0x684/0xce0 [ 1089.458874][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1089.464755][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1089.470986][ T29] schedule+0xbd/0x170 [ 1089.475713][ T29] schedule_preempt_disabled+0x13/0x20 [ 1089.481272][ T29] __mutex_lock+0x689/0xce0 [ 1089.491319][ T29] ? __mutex_lock+0x4d2/0xce0 [ 1089.498715][ T29] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 1089.513640][ T29] ? mutex_lock_nested+0x20/0x20 [ 1089.518689][ T29] rtnetlink_rcv_msg+0x7ed/0xf90 [ 1089.529477][ T29] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1089.540081][ T29] ? rtnetlink_bind+0x80/0x80 [ 1089.548921][ T29] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1089.556457][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 1089.566730][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1089.574377][ T29] ? lock_chain_count+0x20/0x20 [ 1089.579331][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1089.589039][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1089.595886][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1089.601324][ T29] ? _local_bh_enable+0xa0/0xa0 [ 1089.616892][ T29] ? __dev_queue_xmit+0x1481/0x3a30 [ 1089.631102][ T29] ? __dev_queue_xmit+0x6d1/0x3a30 [ 1089.636737][ T29] ? ref_tracker_free+0x686/0x830 [ 1089.641836][ T29] ? __kasan_kmalloc_large+0x8b/0xa0 [ 1089.653567][ T29] netlink_rcv_skb+0x235/0x4c0 [ 1089.658400][ T29] ? rtnetlink_bind+0x80/0x80 [ 1089.667516][ T29] ? netlink_ack+0x1160/0x1160 [ 1089.673909][ T29] ? __lock_acquire+0x7eb0/0x7eb0 [ 1089.679000][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 1089.688469][ T29] netlink_unicast+0x856/0x9e0 [ 1089.693696][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 1089.698536][ T29] ? netlink_getsockopt+0x590/0x590 [ 1089.709402][ T29] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1089.718566][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1089.732537][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 1089.738095][ T29] ? netlink_getsockopt+0x590/0x590 [ 1089.748640][ T29] ____sys_sendmsg+0x61b/0x980 [ 1089.753931][ T29] ? __asan_memset+0x22/0x40 [ 1089.758594][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 1089.765885][ T29] ? __import_iovec+0x5f2/0x850 [ 1089.770813][ T29] ? import_iovec+0x73/0xa0 [ 1089.780153][ T29] ___sys_sendmsg+0x2a6/0x360 [ 1089.786586][ T29] ? __sys_sendmsg+0x2b0/0x2b0 [ 1089.791436][ T29] ? trace_call_bpf+0xc3/0x6c0 [ 1089.800476][ T29] __se_sys_sendmsg+0x1d0/0x2c0 [ 1089.805884][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 1089.810905][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 1089.821464][ T29] do_syscall_64+0x55/0xb0 [ 1089.828468][ T29] ? clear_bhb_loop+0x40/0x90 [ 1089.843114][ T29] ? clear_bhb_loop+0x40/0x90 [ 1089.847865][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1089.864651][ T29] RIP: 0033:0x7fea7cb9f559 [ 1089.869159][ T29] RSP: 002b:00007fea7d9dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.881049][ T29] RAX: ffffffffffffffda RBX: 00007fea7ce25fa0 RCX: 00007fea7cb9f559 [ 1089.889649][ T29] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1089.904272][ T29] RBP: 00007fea7cc36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1089.915335][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.926618][ T29] R13: 00007fea7ce26038 R14: 00007fea7ce25fa0 R15: 00007ffead3f0838 [ 1089.946423][ T29] [ 1089.949537][ T29] INFO: task syz.1.3851:17678 blocked for more than 145 seconds. [ 1089.963635][ T29] Not tainted syzkaller #0 [ 1089.968665][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1089.984007][ T29] task:syz.1.3851 state:D stack:27816 pid:17678 ppid:17647 flags:0x00004002 [ 1089.998008][ T29] Call Trace: [ 1090.001359][ T29] [ 1090.011083][ T29] __schedule+0x156f/0x4720 [ 1090.020798][ T29] ? lock_chain_count+0x20/0x20 [ 1090.028069][ T29] ? asan.module_dtor+0x20/0x20 [ 1090.037728][ T29] ? __mutex_lock+0x684/0xce0 [ 1090.043005][ T29] ? __mutex_trylock_common+0x8a/0x270 [ 1090.048570][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1090.065862][ T29] schedule+0xbd/0x170 [ 1090.070026][ T29] schedule_preempt_disabled+0x13/0x20 [ 1090.077391][ T29] __mutex_lock+0x689/0xce0 [ 1090.081963][ T29] ? __mutex_lock+0x4d2/0xce0 [ 1090.091026][ T29] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 1090.098638][ T29] ? mutex_lock_nested+0x20/0x20 [ 1090.107874][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1090.115210][ T29] perf_event_ctx_lock_nested+0x3b9/0x490 [ 1090.121008][ T29] ? slab_free_freelist_hook+0x154/0x240 [ 1090.127303][ T29] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 1090.139369][ T29] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 1090.146105][ T29] ? perf_remove_from_owner+0x22/0x4e0 [ 1090.151618][ T29] ? perf_remove_from_owner+0x22/0x4e0 [ 1090.167983][ T29] perf_event_release_kernel+0x17a/0x830 [ 1090.179189][ T29] ? __might_sleep+0xe0/0xe0 [ 1090.184343][ T29] ? calc_timer_values+0x400/0x400 [ 1090.189530][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 1090.196456][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1090.208129][ T29] ? perf_mmap+0x15e0/0x15e0 [ 1090.213098][ T29] perf_release+0x3b/0x40 [ 1090.217480][ T29] __fput+0x221/0x940 [ 1090.221517][ T29] task_work_run+0x1d4/0x260 [ 1090.231785][ T29] ? task_work_cancel+0x220/0x220 [ 1090.237246][ T29] do_exit+0x986/0x2530 [ 1090.241535][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 1090.248341][ T29] ? put_task_struct+0xc0/0xc0 [ 1090.259687][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1090.266121][ T29] ? lock_chain_count+0x20/0x20 [ 1090.271045][ T29] ? syscall_enter_from_user_mode+0x25/0x80 [ 1090.287655][ T29] __x64_sys_exit+0x40/0x40 [ 1090.295075][ T29] do_syscall_64+0x55/0xb0 [ 1090.299559][ T29] ? clear_bhb_loop+0x40/0x90 [ 1090.308347][ T29] ? clear_bhb_loop+0x40/0x90 [ 1090.314631][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.320588][ T29] RIP: 0033:0x7fb54fd9f559 [ 1090.329410][ T29] RSP: 002b:00007fb550c7cfd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 1090.339521][ T29] RAX: ffffffffffffffda RBX: 00007fb550026180 RCX: 00007fb54fd9f559 [ 1090.351689][ T29] RDX: 00007fb550c7d9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1090.360062][ T29] RBP: 00007fb54fe36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1090.374485][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.388717][ T29] R13: 00007fb550026218 R14: 00007fb550026180 R15: 00007ffdb21066b8 [ 1090.400940][ T29] [ 1090.408154][ T29] [ 1090.408154][ T29] Showing all locks held in the system: [ 1090.419656][ T29] 3 locks held by kworker/0:1/9: [ 1090.427654][ T29] #0: ffff888018c70d38 ((wq_completion)events#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.441592][ T29] #1: ffffc900000e7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.458210][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1090.469031][ T29] 1 lock held by rcu_tasks_trace/15: [ 1090.480173][ T29] #0: ffffffff8e133010 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xb11/0xdf0 [ 1090.501806][ T29] 1 lock held by khungtaskd/29: [ 1090.508181][ T29] #0: ffffffff8e1322e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1090.524945][ T29] 2 locks held by getty/5541: [ 1090.529705][ T29] #0: ffff8880338590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1090.541772][ T29] #1: ffffc9000327e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x43a/0x1400 [ 1090.557757][ T29] 4 locks held by kworker/u5:3/5797: [ 1090.563393][ T29] #0: ffff888059dab538 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.582380][ T29] #1: ffffc9000468fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.598839][ T29] #2: ffff8880363280b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1090.612939][ T29] #3: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1090.632919][ T29] 3 locks held by kworker/0:4/5874: [ 1090.638199][ T29] #0: ffff888018c72538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.660993][ T29] #1: ffffc900048afd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.672705][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 1090.687719][ T29] 3 locks held by kworker/u4:36/9987: [ 1090.693545][ T29] #0: ffff88802dd14938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.705700][ T29] #1: ffffc90003517d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.726326][ T29] #2: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 1090.741501][ T29] 2 locks held by kworker/0:3/10466: [ 1090.750684][ T29] #0: ffff888018c72d38 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.767178][ T29] #1: ffffc900051afd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.779654][ T29] 3 locks held by kworker/1:2/11861: [ 1090.785517][ T29] 7 locks held by kworker/u5:0/13177: [ 1090.790929][ T29] #0: ffff888019308d38 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.807480][ T29] #1: ffffc90003267d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1090.820565][ T29] #2: ffff888027dcce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x242/0x3c0 [ 1090.839218][ T29] #3: ffff888027dcc0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 1090.852377][ T29] #4: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 1090.868379][ T29] #5: ffff888026fadb38 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x7b/0x640 [ 1090.878156][ T29] #6: ffffffff8e137cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1090.895625][ T29] 3 locks held by syz.1.3851/17647: [ 1090.900876][ T29] 2 locks held by syz.1.3851/17652: [ 1090.906694][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1090.921139][ T29] #1: ffffffff8e137cb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 1090.937986][ T29] 1 lock held by syz.1.3851/17667: [ 1090.943701][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 1090.963261][ T29] 2 locks held by syz.2.3865/17668: [ 1090.968517][ T29] #0: ffff888076f30820 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x82/0x210 [ 1090.986679][ T29] #1: ffff888031ef45f0 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_unhash+0x2a/0x2e0 [ 1090.997072][ T29] 1 lock held by syz.0.3859/17672: [ 1091.007672][ T29] #0: ffffffff8e192848 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 1091.018704][ T29] 1 lock held by syz.0.3859/17673: [ 1091.029283][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.039182][ T29] 1 lock held by syz.1.3851/17678: [ 1091.044840][ T29] #0: ffff888023bc94a8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 1091.061773][ T29] 1 lock held by syz.4.3860/17717: [ 1091.070728][ T29] #0: ffffffff8e192848 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 1091.089594][ T29] 1 lock held by syz-executor/17723: [ 1091.096796][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.111824][ T29] 1 lock held by syz-executor/17729: [ 1091.117577][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.127602][ T29] 1 lock held by syz-executor/17731: [ 1091.138584][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.148493][ T29] 1 lock held by syz-executor/17734: [ 1091.159637][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.169727][ T29] 5 locks held by kworker/u5:1/17738: [ 1091.175672][ T29] #0: ffff88802d6b0d38 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.197411][ T29] #1: ffffc90004fa7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.216767][ T29] #2: ffff88805ac84e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x242/0x3c0 [ 1091.228623][ T29] #3: ffff88805ac840b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 1091.243760][ T29] #4: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 1091.256656][ T29] 1 lock held by syz-executor/17746: [ 1091.262021][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.277870][ T29] 1 lock held by syz-executor/17753: [ 1091.286056][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.301811][ T29] 1 lock held by syz-executor/17755: [ 1091.312254][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.321774][ T29] 1 lock held by syz-executor/17758: [ 1091.333380][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.347203][ T29] 1 lock held by syz-executor/17762: [ 1091.354227][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.368197][ T29] 4 locks held by kworker/u5:2/17764: [ 1091.375454][ T29] #0: ffff88802d6be538 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.390955][ T29] #1: ffffc900050bfd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.412011][ T29] #2: ffff888033a2c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1091.429958][ T29] #3: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1091.441760][ T29] 1 lock held by syz-executor/17769: [ 1091.453282][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.466906][ T29] 5 locks held by kworker/u5:4/17770: [ 1091.472706][ T29] #0: ffff888021d07938 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.489077][ T29] #1: ffffc9000510fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.507315][ T29] #2: ffff88805cfece70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x242/0x3c0 [ 1091.520501][ T29] #3: ffff88805cfec0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 1091.537903][ T29] #4: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 1091.549470][ T29] 1 lock held by syz-executor/17772: [ 1091.559499][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.571532][ T29] 4 locks held by kworker/u5:5/17773: [ 1091.581324][ T29] #0: ffff88805ce69938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.598094][ T29] #1: ffffc9000511fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.610675][ T29] #2: ffff888030ae80b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1091.632223][ T29] #3: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1091.651180][ T29] 5 locks held by kworker/u5:6/17775: [ 1091.656992][ T29] #0: ffff888024eed538 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.668342][ T29] #1: ffffc9000512fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.687374][ T29] #2: ffff88805a780e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x242/0x3c0 [ 1091.708654][ T29] #3: ffff88805a7800b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 1091.718978][ T29] #4: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 1091.729321][ T29] 1 lock held by syz-executor/17779: [ 1091.742157][ T29] #0: ffffffff8f3e83c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 1091.751674][ T29] 4 locks held by kworker/u5:9/17781: [ 1091.765437][ T29] #0: ffff888032d40938 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.779607][ T29] #1: ffffc9000517fd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.798498][ T29] #2: ffff8880274940b8 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0x900 [ 1091.808946][ T29] #3: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x535/0x900 [ 1091.825367][ T29] 5 locks held by kworker/u5:10/17782: [ 1091.830873][ T29] #0: ffff88801d665d38 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.850745][ T29] #1: ffffc90004f17d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1091.871132][ T29] #2: ffff888078540e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x242/0x3c0 [ 1091.881435][ T29] #3: ffff8880785400b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x864/0xe60 [ 1091.896804][ T29] #4: ffffffff8f557408 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x17b/0x330 [ 1091.908121][ T29] 1 lock held by dhcpcd/17784: [ 1091.918459][ T29] #0: ffff888080780130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1091.928745][ T29] 1 lock held by dhcpcd/17785: [ 1091.934319][ T29] #0: ffff88802a3ec130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1091.955879][ T29] 1 lock held by dhcpcd/17786: [ 1091.960717][ T29] #0: ffff88806577e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1091.979143][ T29] 1 lock held by dhcpcd/17787: [ 1091.985705][ T29] #0: ffff88802d73c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1091.999641][ T29] 1 lock held by dhcpcd/17788: [ 1092.006164][ T29] #0: ffff888057914130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xd40 [ 1092.021318][ T29] [ 1092.024114][ T29] ============================================= [ 1092.024114][ T29] [ 1092.038128][ T29] NMI backtrace for cpu 0 [ 1092.042502][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1092.049755][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1092.059859][ T29] Call Trace: [ 1092.063187][ T29] [ 1092.066160][ T29] dump_stack_lvl+0x18c/0x250 [ 1092.070894][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 1092.076091][ T29] ? show_regs_print_info+0x20/0x20 [ 1092.081350][ T29] ? load_image+0x420/0x420 [ 1092.085913][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1092.090913][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1092.097142][ T29] ? load_image+0x420/0x420 [ 1092.101707][ T29] ? wq_watchdog_touch+0xef/0x170 [ 1092.106786][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1092.112917][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1092.118987][ T29] watchdog+0xf59/0xfa0 [ 1092.123214][ T29] ? watchdog+0x1e1/0xfa0 [ 1092.127607][ T29] kthread+0x2fa/0x390 [ 1092.131746][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1092.136833][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1092.141506][ T29] ret_from_fork+0x48/0x80 [ 1092.145968][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1092.150615][ T29] ret_from_fork_asm+0x11/0x20 [ 1092.155453][ T29] [ 1092.159144][ T29] Sending NMI from CPU 0 to CPUs 1: [ 1092.164457][ C1] NMI backtrace for cpu 1 [ 1092.164469][ C1] CPU: 1 PID: 17647 Comm: syz.1.3851 Not tainted syzkaller #0 [ 1092.164486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1092.164496][ C1] RIP: 0010:lock_acquire+0x1d6/0x420 [ 1092.164521][ C1] Code: 2f 09 b8 ff ff ff ff 65 0f c1 05 cd aa 99 7e 83 f8 01 0f 85 03 01 00 00 43 c6 44 3c 04 00 48 c7 84 24 80 00 00 00 00 00 00 00 <9c> 8f 84 24 80 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 [ 1092.164537][ C1] RSP: 0018:ffffc900001f0340 EFLAGS: 00000046 [ 1092.164551][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: db4fcd93c20ec900 [ 1092.164569][ C1] RDX: 0000000000000000 RSI: ffffffff8aeae2c0 RDI: ffffffff8b3c5260 [ 1092.164581][ C1] RBP: ffffc900001f0448 R08: dffffc0000000000 R09: 1ffffffff24446a1 [ 1092.164594][ C1] R10: dffffc0000000000 R11: fffffbfff24446a2 R12: 1ffff9200003e074 [ 1092.164606][ C1] R13: ffffffff8e14be88 R14: 0000000000000046 R15: dffffc0000000000 [ 1092.164619][ C1] FS: 00007fb550c9e6c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 1092.164634][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.164645][ C1] CR2: 000055af88d36660 CR3: 000000006496b000 CR4: 00000000003506e0 [ 1092.164660][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1092.164670][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1092.164681][ C1] Call Trace: [ 1092.164687][ C1] [ 1092.164698][ C1] ? ktime_get_update_offsets_now+0x48/0x3f0 [ 1092.164725][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1092.164752][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1092.164777][ C1] seqcount_lockdep_reader_access+0xd1/0x1d0 [ 1092.164798][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 1092.164822][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1092.164852][ C1] ktime_get_update_offsets_now+0x99/0x3f0 [ 1092.164883][ C1] hrtimer_interrupt+0x11e/0x980 [ 1092.164902][ C1] ? sched_clock_cpu+0x75/0x430 [ 1092.164919][ C1] ? perf_trace_preemptirq_template+0x269/0x330 [ 1092.164948][ C1] ? irqentry_enter+0x37/0x50 [ 1092.164966][ C1] ? local_clock+0x20/0x20 [ 1092.164981][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1092.165002][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1092.165030][ C1] ? lock_chain_count+0x20/0x20 [ 1092.165055][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 1092.165081][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 1092.165109][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.165135][ C1] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 1092.165158][ C1] Code: 00 4d 85 e4 75 16 e8 65 d3 0f 00 eb 15 e8 5e d3 0f 00 e8 39 d7 1f 09 4d 85 e4 74 ea e8 4f d3 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 1092.165173][ C1] RSP: 0018:ffffc900001f0780 EFLAGS: 00000246 [ 1092.165187][ C1] RAX: ffffffff81780b51 RBX: 0000000000000000 RCX: ffff88802c4e8000 [ 1092.165199][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 1092.165209][ C1] RBP: ffffc900001f0838 R08: ffffffff92223607 R09: 1ffffffff24446c0 [ 1092.165222][ C1] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: 0000000000000200 [ 1092.165234][ C1] R13: 000001fb63109b96 R14: 1ffff9200003e0f0 R15: dffffc0000000000 [ 1092.165252][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1092.165280][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 1092.165301][ C1] ? free_unref_page+0x186/0x2e0 [ 1092.165324][ C1] ? dev_gro_receive+0x16ef/0x22a0 [ 1092.165344][ C1] ktime_get_with_offset+0x103/0x330 [ 1092.165370][ C1] netif_receive_skb_list_internal+0x34a/0xca0 [ 1092.165404][ C1] ? netif_receive_skb_core+0x230/0x230 [ 1092.165432][ C1] ? receive_buf+0x2109/0x3610 [ 1092.165458][ C1] napi_complete_done+0x329/0x820 [ 1092.165487][ C1] ? __napi_schedule_irqoff+0x90/0x90 [ 1092.165510][ C1] ? do_raw_spin_trylock+0xb2/0x190 [ 1092.165538][ C1] ? virtqueue_get_buf_ctx+0x475/0xd00 [ 1092.165566][ C1] ? virtqueue_enable_cb_prepare+0x205/0x4e0 [ 1092.165586][ C1] virtnet_poll+0xb6e/0x1300 [ 1092.165610][ C1] ? refill_work+0x220/0x220 [ 1092.165631][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.165657][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1092.165674][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.165704][ C1] __napi_poll+0xbb/0x460 [ 1092.165726][ C1] net_rx_action+0x65f/0xcc0 [ 1092.165756][ C1] ? net_tx_action+0x950/0x950 [ 1092.165776][ C1] ? detach_timer+0x2b0/0x2b0 [ 1092.165806][ C1] handle_softirqs+0x27d/0x820 [ 1092.165823][ C1] ? read_tsc+0x9/0x20 [ 1092.165842][ C1] ? ktime_get+0x24b/0x280 [ 1092.165864][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1092.165885][ C1] ? do_softirq+0x1a0/0x1a0 [ 1092.165906][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1092.165933][ C1] __irq_exit_rcu+0xd3/0x190 [ 1092.165950][ C1] ? irq_exit_rcu+0x20/0x20 [ 1092.165974][ C1] irq_exit_rcu+0x9/0x20 [ 1092.165990][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1092.166017][ C1] [ 1092.166022][ C1] [ 1092.166028][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.166052][ C1] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 1092.166072][ C1] Code: 39 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 33 7d 43 09 e8 3e 3e 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1092.166086][ C1] RSP: 0018:ffffc9000498f760 EFLAGS: 00000286 [ 1092.166099][ C1] RAX: db4fcd93c20ec900 RBX: 0000000000000000 RCX: db4fcd93c20ec900 [ 1092.166111][ C1] RDX: dffffc0000000000 RSI: ffffffff8aead140 RDI: ffffffff8b3c5260 [ 1092.166124][ C1] RBP: ffffc9000498f7b0 R08: ffffffff92223607 R09: 1ffffffff24446c0 [ 1092.166137][ C1] R10: dffffc0000000000 R11: fffffbfff24446c1 R12: ffff88802c4e8000 [ 1092.166149][ C1] R13: 1ffff110171a79a1 R14: dffffc0000000000 R15: ffff8880b8d3cd08 [ 1092.166180][ C1] __schedule+0x1577/0x4720 [ 1092.166214][ C1] ? mark_lock+0x94/0x320 [ 1092.166238][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1092.166267][ C1] ? lock_chain_count+0x20/0x20 [ 1092.166287][ C1] ? asan.module_dtor+0x20/0x20 [ 1092.166314][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1092.166339][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1092.166363][ C1] ? preempt_schedule+0xc0/0xd0 [ 1092.166389][ C1] preempt_schedule_common+0x82/0xc0 [ 1092.166416][ C1] preempt_schedule+0xc0/0xd0 [ 1092.166440][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1092.166465][ C1] ? event_function+0x300/0x300 [ 1092.166489][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 1092.166514][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1092.166542][ C1] ? smp_call_function_single+0x488/0x5a0 [ 1092.166570][ C1] smp_call_function_single+0x48d/0x5a0 [ 1092.166591][ C1] ? event_function+0x300/0x300 [ 1092.166614][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 1092.166636][ C1] ? event_function+0x300/0x300 [ 1092.166668][ C1] perf_install_in_context+0x5bb/0x920 [ 1092.166694][ C1] ? alloc_file_pseudo+0x1ae/0x210 [ 1092.166715][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 1092.166738][ C1] ? add_event_to_ctx+0x1170/0x1170 [ 1092.166763][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 1092.166778][ C1] ? perf_event__header_size+0x165/0x220 [ 1092.166805][ C1] __se_sys_perf_event_open+0x180d/0x1d40 [ 1092.166838][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1092.166869][ C1] ? lock_chain_count+0x20/0x20 [ 1092.166894][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1092.166909][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1092.166934][ C1] do_syscall_64+0x55/0xb0 [ 1092.166955][ C1] ? clear_bhb_loop+0x40/0x90 [ 1092.166978][ C1] ? clear_bhb_loop+0x40/0x90 [ 1092.167003][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1092.167027][ C1] RIP: 0033:0x7fb54fd9f559 [ 1092.167041][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1092.167055][ C1] RSP: 002b:00007fb550c9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1092.167072][ C1] RAX: ffffffffffffffda RBX: 00007fb550026090 RCX: 00007fb54fd9f559 [ 1092.167084][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000580 [ 1092.167095][ C1] RBP: 00007fb54fe36b20 R08: 000000000000000a R09: 0000000000000000 [ 1092.167106][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1092.167117][ C1] R13: 00007fb550026128 R14: 00007fb550026090 R15: 00007ffdb21066b8 [ 1092.167140][ C1] [ 1092.990909][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 1092.997806][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 1093.005042][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1093.015138][ T29] Call Trace: [ 1093.018455][ T29] [ 1093.021424][ T29] dump_stack_lvl+0x18c/0x250 [ 1093.026151][ T29] ? show_regs_print_info+0x20/0x20 [ 1093.031389][ T29] ? load_image+0x420/0x420 [ 1093.035956][ T29] panic+0x2ca/0x720 [ 1093.039897][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 1093.044434][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 1093.050038][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 1093.055472][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1093.061695][ T29] watchdog+0xf98/0xfa0 [ 1093.065910][ T29] ? watchdog+0x1e1/0xfa0 [ 1093.070320][ T29] kthread+0x2fa/0x390 [ 1093.074444][ T29] ? hungtask_pm_notify+0x50/0x50 [ 1093.079550][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1093.084219][ T29] ret_from_fork+0x48/0x80 [ 1093.088724][ T29] ? kthread_blkcg+0xd0/0xd0 [ 1093.093366][ T29] ret_from_fork_asm+0x11/0x20 [ 1093.098190][ T29] [ 1093.101885][ T29] Kernel Offset: disabled [ 1093.106230][ T29] Rebooting in 86400 seconds..