last executing test programs: 12.060058055s ago: executing program 2 (id=2271): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="06000000040000001810000089"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 11.648381145s ago: executing program 2 (id=2276): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) sendmsg$inet(r3, 0x0, 0x0) gettid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x10090) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x8b}, @exit], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0xac9}}]}}, 0x0, 0x32}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x10, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) r6 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000006000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e0000001000000002800000000000000000000000700000001441407716401010100000000ac14141d00000005000000"], 0x48}, 0x200040c4) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)=r8, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x0, 0x0, 0xb2}, [@ringbuf_query, @tail_call, @alu={0x4, 0x0, 0xa, 0x6, 0x1, 0xffffffffffffffe0, 0xc}]}, &(0x7f0000000580)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xd, 0xa, 0x31}, 0x10, 0x0, r2, 0x9, &(0x7f0000000340)=[r8, r8, r8, r8, r8, r8], &(0x7f0000000800)=[{0x10000, 0x1, 0xd, 0x6}, {0x3, 0x2, 0x5, 0x5}, {0x1, 0x3, 0xd, 0x5}, {0x3, 0x2, 0x2, 0xa}, {0x0, 0x2, 0x2, 0x9}, {0x1, 0x2, 0x8000006, 0xc}, {0x3, 0x5, 0x8, 0x3}, {0x0, 0x4, 0x6, 0x7}, {0x2, 0x1, 0xe, 0x8}], 0x10, 0x8001}, 0x94) perf_event_open$cgroup(&(0x7f0000000200)={0x4, 0x80, 0x10, 0x6, 0x9, 0x9, 0x0, 0x8, 0x2008, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe, 0x1, @perf_bp={&(0x7f0000000080), 0x3}, 0x1000, 0xff, 0x4, 0x1, 0xfffffffffffffffd, 0x6, 0xb45, 0x0, 0x0, 0x0, 0x4}, r7, 0xc, r6, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89a0, &(0x7f0000000140)='%d\xf1\xfa\xbc$j\xfef;q1\x95\xf4\xe4\x13\x95k#Jz.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcf\x01t\r%\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 8.628683466s ago: executing program 2 (id=2278): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair(0x1a, 0xa, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 8.49124643s ago: executing program 2 (id=2281): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x1804, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x2, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYRES32], 0xa8, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) 8.009052141s ago: executing program 2 (id=2284): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 7.678686609s ago: executing program 2 (id=2288): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYRES64=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000002300001801000025786c2500000000072020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x62) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000005000000ec0b000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000001100"/20, @ANYRESHEX=r4, @ANYBLOB, @ANYRES32=0x0, @ANYRES8=r2, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x11, 0x18, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000040000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000018000008500000082000000bf980000000000005608f36dc00000008501010000000000b7000000000000009560a20eab97cbdb193ee73951960d8da8"], &(0x7f0000002840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r2, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x133, 0x133, 0xc, [@restrict={0xd, 0x0, 0x0, 0xb, 0x5}, @union={0x5, 0x5, 0x0, 0x5, 0x0, 0x1, [{0x6, 0x2, 0x2}, {0x0, 0x3, 0x5}, {0x7, 0x1, 0x64}, {0x0, 0x4, 0x1}, {0xf, 0x2, 0x1aa9}]}, @var={0xd, 0x0, 0x0, 0xe, 0x2}, @struct={0x10, 0x8, 0x0, 0x4, 0x0, 0xc, [{0x4, 0x5, 0xc}, {0x7, 0x1, 0x2}, {0x1, 0x0, 0x4}, {0x3, 0x4, 0x4000000}, {0x6, 0x4, 0x8}, {0xa, 0x3, 0xbf}, {0x10, 0x0, 0xfffffffc}, {0x5, 0x5, 0x5}]}, @datasec={0x4, 0x7, 0x0, 0xf, 0x3, [{0x4, 0x7fff, 0x7}, {0x2, 0x7, 0x1}, {0x5, 0xa8c}, {0x4, 0x2, 0x7fff}, {0x5, 0x1b6f40, 0x7fff}, {0x1, 0x8, 0xffffffff}, {0x4, 0x200, 0x2}], "8193f9"}]}, {0x0, [0x5f, 0x0, 0x61, 0x0, 0x2e, 0x5f, 0x2e, 0x61, 0x0, 0x30]}}, &(0x7f0000000c40)=""/162, 0x158, 0xa2, 0x1, 0x6, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x1a, &(0x7f0000000680)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @exit], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', r8, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b00)={0x5, 0x6, 0x7d4ca952}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000b40)=[{0x0, 0x5, 0x0, 0x6}]}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10, r11}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.988556289s ago: executing program 0 (id=2302): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a", @ANYRES32=0x0, @ANYRES32=0x0], 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x200440e4) 2.654749267s ago: executing program 0 (id=2304): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 2.199248678s ago: executing program 0 (id=2308): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={&(0x7f0000000400), 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xd, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10000000, 0xfffffffe, 0x0, 0x4}, {0x10000002, 0xfffffffc, 0x0, 0x6}], 0x10, 0x1}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r3) (async) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0x1, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x1a, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ad0200000000000078ea9704950000000000000018250000", @ANYRES32=r2, @ANYBLOB="00000000fcffffff186600000c00b6f30001040000000000182a00fd", @ANYRES32=r3, @ANYBLOB="000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000057c100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000950000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000030190800f0ffffff9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x41, '\x00', r4, 0x25, r3, 0x8, &(0x7f0000000740)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x4, 0xffff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000800)=[r5, r3, r3, r3, r3, r3], &(0x7f0000000840), 0x10, 0x8}, 0x94) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x60a02, 0x0) (rerun: 64) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) (async) ioctl$TUNSETDEBUG(r6, 0x400454c9, 0xffffffffffffffff) (async, rerun: 32) ioctl$TUNGETIFF(r6, 0x800454d2, &(0x7f00000000c0)={'vlan0\x00'}) (async, rerun: 32) write$cgroup_subtree(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\a\x00\x00B\x00'], 0xfe33) 1.922185404s ago: executing program 3 (id=2310): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3, 0xffffffffffffffff}, 0x0, &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, r3}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x8}, 0x20) r6 = socket$kcm(0x28, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', r7, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) setsockopt$sock_attach_bpf(r6, 0x28, 0x8, 0x0, 0xff79) close(0xffffffffffffffff) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047440, &(0x7f0000001200)) 1.762399278s ago: executing program 0 (id=2311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000040)="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", 0x5e2}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000016000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000"], 0x4c}, 0x20001850) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r4, 0x4) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.473463555s ago: executing program 1 (id=2312): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000", 0x17}], 0x1}, 0x200000000000000) 1.414927416s ago: executing program 3 (id=2313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.25858743s ago: executing program 3 (id=2314): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.248577931s ago: executing program 0 (id=2315): socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040)=r1, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r1, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000840)=[0x0, 0x0], 0x0, 0x0, 0xf6, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), 0x0, 0x0, 0x76, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000400)={r1}, 0x8) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) close(0x3) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4020940d, &(0x7f00000005c0)=0x80000000000004) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYRESOCT=r6], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000380)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) r11 = socket$kcm(0x2, 0x200000000000006, 0x106) sendmsg$inet(r11, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0}, 0x34046000) write$cgroup_int(r4, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095000000000000002f81c4"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x4) 1.203642672s ago: executing program 1 (id=2316): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 1.066438304s ago: executing program 3 (id=2318): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x20000801) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000ac0), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e1ff00000000000000008500000053000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x7, 0x0, &(0x7f0000000000)="e0b9092dc1b6db", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYBLOB="3eca", @ANYRES8=r5], 0x9a) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x20040010) 1.047099075s ago: executing program 1 (id=2319): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x25, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x71, 0x0, &(0x7f0000001b00)="c8ea2f8a5e2f0338051bd60db11da78ee0a0ff8a0a78c91a0657cf0ac85d7b9740796a35a8a1630d37644522ad5579cf79c38e1e695d780dfd5856a80d218cc4c10096f3fc3594f1fc95934fb6866d67089ef21cf2c6db8ca265e50f126e9a964fb6c2ceb3cc76dacc9f16312b4ffcc52f", 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc, 0x0, 0x9}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000003c0)="1400000017000b63d25a80648c2594f934a3c92b", 0x14}], 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001b40), 0x80, r0, 0x0, 0x7}, 0x38) 856.89916ms ago: executing program 3 (id=2320): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x1, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[], 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x81, 0x105}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000140), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, r3}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x8}, 0x20) r4 = socket$kcm(0x28, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0x78, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xd, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7ff, '\x00', r5, 0xffffffffffffffff, 0x0, 0x2, 0x2}, 0x50) setsockopt$sock_attach_bpf(r4, 0x28, 0x8, 0x0, 0xff79) close(0xffffffffffffffff) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047440, &(0x7f0000001200)) 732.049502ms ago: executing program 1 (id=2321): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0xef) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x6, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042760590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="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", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0xfcb9}], 0x3}, 0x8045) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4077, 0xfed}, {&(0x7f0000003540)=""/4065, 0xfe1}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f00000002c0)=""/185, 0xb9}], 0x5}, 0x20) 446.684449ms ago: executing program 3 (id=2322): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 2) 445.618299ms ago: executing program 1 (id=2323): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000040)="9d5ceb997d8376c07732cc7348069b95dd798b959ae2855cf0fd398025fe23484cdb8ff22f56d9bcce4a872d41c7f65b4c9165189435540dd6c03dbca7555d0aaa755d2d737d187b72fa51aa0d8c8f22d09ffa994d5ee72e5b8b27e38009a530a976c7815d05515db3995a16d8563d801b52be99c5bb04a04ebc9e9d554ce3b4292107c46b4adf67a17245d16317f8c2407205c8786c17afdc37fa36f200327068af4ee81bd96e77722991331b217bad4eba1389d85cbf7e1be4d5cc"}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @fwd={0x6}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x30]}}, &(0x7f0000000480)=""/18, 0x43, 0x12, 0x1, 0x7f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000580)=[0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xa535, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001b00)={0x6, 0x26, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe9, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0xf}, @ldst={0x0, 0x0, 0x6, 0xa, 0x4, 0x1, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000009c0)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000000a00)=""/4096, 0x40f00, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001a00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001a40)={0x0, 0xe, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001a80)=[r0], &(0x7f0000001ac0)=[{0x5, 0x3}, {0x2, 0x1, 0xa, 0x6}, {0x3, 0x5, 0x9, 0xa}], 0x10, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0x14, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf84, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_idx={0x18, 0x0, 0x5, 0x0, 0x1}, @ldst={0x2, 0x2, 0x6, 0x9, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xa237, 0xc5, &(0x7f0000000300)=""/197, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, r2, 0x8, &(0x7f0000000500)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x1, &(0x7f0000001bc0)=[r0, r0, r0, r0, r0, r0], &(0x7f0000001c00)=[{0x4, 0x4, 0x5, 0x5}], 0x10, 0x648}, 0x94) mkdir(&(0x7f0000001d00)='./file0\x00', 0x140) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000001d40)=r6) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001f80)={0x18, 0xc, &(0x7f0000001d80)=@raw=[@generic={0xb, 0x5, 0xb, 0x8, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x1, 0x2, 0x8, 0x0, 0x50}, @jmp={0x5, 0x1, 0x1, 0x3, 0x4, 0xfffffffffffffff0, 0xffffffffffffffff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000001e00)='GPL\x00', 0x80000000, 0x7f, &(0x7f0000001e40)=""/127, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001ec0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001f00)={0x0, 0x5, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[r0, r1, r1, r0, r1, r1], 0x0, 0x10, 0x4}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000002040), 0x20000, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000002080)={'ip6_vti0\x00'}) ioctl$TUNGETVNETBE(r8, 0x800454df, &(0x7f00000020c0)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000032c0)={0x18, 0x14, &(0x7f0000002100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x401}, [@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xbbc3}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffa}]}, &(0x7f00000021c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000002200)=""/4096, 0x41000, 0x6, '\x00', r3, 0x0, r7, 0x8, &(0x7f0000003200)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000003240)={0x5, 0x7, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000003280)=[{0x4, 0x5, 0x3, 0xc}, {0x4, 0x1, 0x3, 0x3}, {0x2, 0x4, 0xc}, {0x3, 0x4, 0x1, 0x5}], 0x10, 0x1000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000033c0)=@generic={&(0x7f0000003380)='./file0\x00', r7}, 0x18) r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003400)={0x0, 0x1, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000034c0)={r10, 0x58, &(0x7f0000003440)}, 0x10) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000003500), 0x240, 0x0) ioctl$TUNGETFEATURES(r11, 0x800454cf, &(0x7f0000003540)) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003a00)=@bpf_tracing={0x1a, 0x19, &(0x7f0000003780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@jmp={0x5, 0x0, 0x4, 0x8, 0x6, 0x2, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003880)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', r3, 0x1c, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000038c0)={0x5, 0x2, 0x6c3, 0x10001}, 0x10, 0x2b4dd, r9, 0xa, &(0x7f0000003900)=[r10], &(0x7f0000003940)=[{0x1, 0x1, 0x2}, {0x4, 0x1, 0x8, 0x7}, {0x0, 0x3, 0x1, 0x3}, {0x3, 0x4, 0xc, 0x6}, {0x2, 0x3, 0x5, 0xb}, {0x5, 0x5, 0xc, 0x9}, {0xffffffe5, 0x4, 0xb, 0x3}, {0x4, 0x1, 0xf}, {0x3, 0x4, 0x8, 0xa}, {0x5, 0x1, 0x8, 0x7}], 0x10, 0x2}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x0, 0x16, &(0x7f0000003580)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x647}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}], &(0x7f0000003640)='syzkaller\x00', 0xffffff11, 0x94, &(0x7f0000003680)=""/148, 0x1f00, 0x68, '\x00', r3, @fallback=0xa, r2, 0x8, &(0x7f0000003740)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r4, r12, 0x0, &(0x7f0000003ac0)=[r0, r10, r1, r10, r1], 0x0, 0x10, 0xa88}, 0x94) ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003ec0)={r12, 0xe0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000003bc0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f0000003c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003c80)=[0x0, 0x0, 0x0], 0x0, 0x34, &(0x7f0000003cc0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003d00), &(0x7f0000003d40), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000003d80)}}, 0x10) r16 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003f00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x0, '\x00', r14, r2, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004280)={r6, 0x0, 0xd3, 0xec, &(0x7f0000003f80)="8417f0ca5071886f690c9b97a79e65eeb60284fcb366f8b95a1ad3c40daed566625db1b905a9cd841701248e49dbf35ade18dc502c8b73e31960946b51101c79babeec2c802dde3d3b5e5867c80e883bac6e1ac6b12a9a02ad50f8fe5ab48d591769aa1d01b461283ec31941c7337accdb67794e0d98b9135aa349617f0b3636c50bba2548c4a1db4925afde79a530fc07be4cd245ba6c770ebbfe28d3aca6408732b9bd7c5250f1f04cc21871727939fa86af837c3ae06753ade2db55e2ea04e9bbadf8b5ea9d6335d19b0c22169986eae96c", &(0x7f0000004080)=""/236, 0x3, 0x0, 0x3f, 0x8d, &(0x7f0000004180)="9054fdcaef06755610b312477f8011f9b7c7dcbcc36bc4c498e423a0e6a2e53fe4eb19c5cf41dd49bfb66ea17db29a1b6266d044b2acf157e761ee97e7f725", &(0x7f00000041c0)="e4274524adbe7b343dda253bbbde974ce3e40304bd8c601892e5d3c64f924e339f68c1862edb3d3f6d4ab0f82b941f75ef4e0e4a9420c32aa07c7ed7f25916376ac5110b154b531b829a5507b67088203eabd66e130c597a9470537ada6e6ff11450724e763b4b825d5576ccd26fe22f251609a6fa2647577b5ab7577cbe6cffd050e8252e6b870ede5b8712d4", 0x0, 0x0, 0x7}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004380)={{r10, 0xffffffffffffffff}, &(0x7f0000004300), &(0x7f0000004340)=r9}, 0x20) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000004680)={0x3, 0x4, 0x4, 0xa, 0x0, r16, 0x6, '\x00', r14, r2, 0x3, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000004780)={0xe, 0x27, &(0x7f00000043c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c0, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x0, 0x0, 0x1, 0x1, 0x7, 0x30, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r17}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @cb_func={0x18, 0x8}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xc}}, @exit, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @generic={0x6, 0x3, 0x6, 0x8000, 0x7}]}, &(0x7f0000004500)='syzkaller\x00', 0x101, 0x96, &(0x7f0000004540)=""/150, 0x40f00, 0x8, '\x00', r14, @sk_skb=0x26, r2, 0x8, &(0x7f0000004600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000004640)={0x2, 0x5, 0x1, 0x7ff}, 0x10, r15, r12, 0x0, &(0x7f0000004700)=[r18, r16], &(0x7f0000004740), 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000004d40)={r13, 0xe0, &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000004a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000004ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000004b00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7e, &(0x7f0000004b40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000004b80), &(0x7f0000004bc0), 0x8, 0xbd, 0x8, 0x8, &(0x7f0000004c00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000004e40)={0x13, 0x1a, &(0x7f0000004840)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r18}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r18}}, @ldst={0x0, 0x2, 0x0, 0x2, 0x9, 0x30, 0x1}, @ldst={0x2, 0x0, 0x3, 0x6, 0xe, 0x1, 0x4}, @ldst={0x1, 0x2, 0x1, 0xb, 0x3, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x70}}]}, &(0x7f0000004940)='syzkaller\x00', 0x0, 0x53, &(0x7f0000004980)=""/83, 0x3c00, 0x1, '\x00', r3, @fallback=0x1c, r2, 0x8, &(0x7f0000004a00)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000004a40)={0x1, 0x4, 0x42b, 0x7}, 0x10, r19, r9, 0x0, &(0x7f0000004e00)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94) 33.362349ms ago: executing program 1 (id=2324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40010040) r5 = socket$kcm(0x2c, 0x3, 0x0) r6 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000040)="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", 0x5e2}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000016000007000000830704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000"], 0x4c}, 0x20001850) setsockopt$sock_attach_bpf(r5, 0x11b, 0x2, &(0x7f0000000900)=r4, 0x4) write$cgroup_pid(r0, &(0x7f0000000400), 0x12) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x2, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000feffffff0000000003000000850000004100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f805ffffb702000008000006b703000003000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2325): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000", 0x17}], 0x1}, 0x200000000000000) kernel console output (not intermixed with test programs): 42] inet6_rtm_delroute+0x124/0x600 [ 349.123093][T10842] ? inet6_rtm_newroute+0x1d00/0x1d00 [ 349.128469][T10842] ? __mutex_trylock_common+0x160/0x270 [ 349.134022][T10842] ? trace_raw_output_contention_end+0xd0/0xd0 [ 349.140183][T10842] ? rcu_is_watching+0x15/0xb0 [ 349.144954][T10842] ? trace_contention_end+0x39/0xe0 [ 349.150153][T10842] ? __mutex_lock+0x30d/0xc80 [ 349.154947][T10842] ? inet6_rtm_newroute+0x1d00/0x1d00 [ 349.160333][T10842] rtnetlink_rcv_msg+0x843/0xf90 [ 349.165359][T10842] ? rtnetlink_rcv_msg+0x220/0xf90 [ 349.170476][T10842] ? rtnetlink_bind+0x80/0x80 [ 349.175156][T10842] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 349.181143][T10842] ? lock_chain_count+0x20/0x20 [ 349.185995][T10842] ? __local_bh_enable_ip+0x13a/0x1c0 [ 349.191365][T10842] ? lockdep_hardirqs_on+0x98/0x150 [ 349.196565][T10842] ? __local_bh_enable_ip+0x13a/0x1c0 [ 349.201937][T10842] ? _local_bh_enable+0xa0/0xa0 [ 349.206791][T10842] ? __dev_queue_xmit+0x275/0x3630 [ 349.211982][T10842] ? __dev_queue_xmit+0x1bc2/0x3630 [ 349.217201][T10842] ? __dev_queue_xmit+0x275/0x3630 [ 349.222331][T10842] ? ref_tracker_free+0x686/0x830 [ 349.227389][T10842] netlink_rcv_skb+0x235/0x4c0 [ 349.232275][T10842] ? rtnetlink_bind+0x80/0x80 [ 349.236978][T10842] ? netlink_ack+0x1160/0x1160 [ 349.241761][T10842] ? __lock_acquire+0x7d80/0x7d80 [ 349.246800][T10842] ? netlink_deliver_tap+0x2e/0x1b0 [ 349.252005][T10842] netlink_unicast+0x7b1/0x930 [ 349.256789][T10842] netlink_sendmsg+0x8d0/0xbf0 [ 349.261566][T10842] ? netlink_getsockopt+0x590/0x590 [ 349.266780][T10842] ? apparmor_socket_sendmsg+0x8e/0x330 [ 349.272367][T10842] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 349.277669][T10842] ? security_socket_sendmsg+0x80/0xa0 [ 349.283148][T10842] ? netlink_getsockopt+0x590/0x590 [ 349.288355][T10842] ____sys_sendmsg+0x61b/0x980 [ 349.293242][T10842] ? __asan_memset+0x22/0x40 [ 349.297839][T10842] ? __sys_sendmsg_sock+0x30/0x30 [ 349.302866][T10842] ? __import_iovec+0x5f2/0x850 [ 349.307953][T10842] ? import_iovec+0x73/0xa0 [ 349.312522][T10842] ___sys_sendmsg+0x2a6/0x360 [ 349.317217][T10842] ? get_pid_task+0x20/0x1e0 [ 349.321814][T10842] ? __sys_sendmsg+0x2b0/0x2b0 [ 349.326629][T10842] ? __lock_acquire+0x7d80/0x7d80 [ 349.331674][T10842] __se_sys_sendmsg+0x1d0/0x2c0 [ 349.336535][T10842] ? __x64_sys_sendmsg+0x80/0x80 [ 349.341490][T10842] ? lockdep_hardirqs_on+0x98/0x150 [ 349.346693][T10842] do_syscall_64+0x55/0xb0 [ 349.351121][T10842] ? clear_bhb_loop+0x40/0x90 [ 349.355930][T10842] ? clear_bhb_loop+0x40/0x90 [ 349.360628][T10842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.366621][T10842] RIP: 0033:0x7f75d019de59 [ 349.371091][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.390751][T10842] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.399229][T10842] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 349.407199][T10842] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 349.415175][T10842] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 349.423199][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.431179][T10842] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 349.439172][T10842] [ 349.581652][T10850] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1755'. [ 350.529694][T10864] netlink: zone id is out of range [ 350.555215][T10864] netlink: set zone limit has 8 unknown bytes [ 350.683120][T10866] netlink: 'syz.1.1751': attribute type 4 has an invalid length. [ 350.698159][T10866] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1751'. [ 351.622415][T10880] netlink: 'syz.3.1766': attribute type 4 has an invalid length. [ 351.647230][T10880] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1766'. [ 351.700495][T10882] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1760'. [ 352.019280][T10886] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1758'. [ 352.631398][T10911] netlink: 'syz.0.1770': attribute type 5 has an invalid length. [ 352.871483][T10916] netlink: 'syz.0.1772': attribute type 4 has an invalid length. [ 352.886573][T10916] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1772'. [ 355.544719][T10937] netlink: 'syz.1.1778': attribute type 5 has an invalid length. [ 355.654720][T10943] netlink: 'syz.0.1781': attribute type 1 has an invalid length. [ 355.668216][T10943] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 355.682325][T10943] netlink: 'syz.0.1781': attribute type 2 has an invalid length. [ 355.691201][T10943] netlink: 'syz.0.1781': attribute type 3 has an invalid length. [ 355.708085][T10943] netlink: 'syz.0.1781': attribute type 4 has an invalid length. [ 355.727162][T10943] netlink: 'syz.0.1781': attribute type 5 has an invalid length. [ 355.747598][T10943] netlink: 'syz.0.1781': attribute type 6 has an invalid length. [ 355.768108][T10943] netlink: 'syz.0.1781': attribute type 7 has an invalid length. [ 355.780195][T10943] netlink: 'syz.0.1781': attribute type 9 has an invalid length. [ 355.798564][T10943] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.1781'. [ 355.991790][T10952] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1785'. [ 356.006175][T10954] FAULT_INJECTION: forcing a failure. [ 356.006175][T10954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.083761][T10954] CPU: 1 PID: 10954 Comm: syz.0.1784 Not tainted syzkaller #0 [ 356.091324][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 356.101440][T10954] Call Trace: [ 356.104764][T10954] [ 356.107785][T10954] dump_stack_lvl+0x18c/0x250 [ 356.112543][T10954] ? show_regs_print_info+0x20/0x20 [ 356.117805][T10954] ? load_image+0x420/0x420 [ 356.122381][T10954] ? __lock_acquire+0x7d80/0x7d80 [ 356.127467][T10954] ? snprintf+0xe9/0x140 [ 356.131803][T10954] should_fail_ex+0x394/0x4c0 [ 356.136561][T10954] _copy_to_user+0x2f/0xa0 [ 356.141045][T10954] simple_read_from_buffer+0xe7/0x150 [ 356.146528][T10954] proc_fail_nth_read+0x1e8/0x260 [ 356.151655][T10954] ? proc_fault_inject_write+0x360/0x360 [ 356.157362][T10954] ? fsnotify_perm+0x271/0x5e0 [ 356.162186][T10954] ? proc_fault_inject_write+0x360/0x360 [ 356.167865][T10954] vfs_read+0x298/0x990 [ 356.172048][T10954] ? kernel_read+0x1e0/0x1e0 [ 356.176638][T10954] ? __fget_files+0x28/0x460 [ 356.181232][T10954] ? __fget_files+0x3fc/0x460 [ 356.185926][T10954] ? __fdget_pos+0x2a3/0x330 [ 356.190525][T10954] ? ksys_read+0x74/0x260 [ 356.194900][T10954] ksys_read+0x151/0x260 [ 356.199162][T10954] ? vfs_write+0x9a0/0x9a0 [ 356.203573][T10954] ? lockdep_hardirqs_on+0x98/0x150 [ 356.208767][T10954] do_syscall_64+0x55/0xb0 [ 356.213175][T10954] ? clear_bhb_loop+0x40/0x90 [ 356.217855][T10954] ? clear_bhb_loop+0x40/0x90 [ 356.222555][T10954] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.228481][T10954] RIP: 0033:0x7f9f29d5e68e [ 356.232906][T10954] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 356.252508][T10954] RSP: 002b:00007f9f2acfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 356.260919][T10954] RAX: ffffffffffffffda RBX: 00007f9f2acfc6c0 RCX: 00007f9f29d5e68e [ 356.269073][T10954] RDX: 000000000000000f RSI: 00007f9f2acfc0a0 RDI: 0000000000000005 [ 356.277062][T10954] RBP: 00007f9f2acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 356.285046][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 356.293026][T10954] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 356.301023][T10954] [ 356.617893][T10967] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1787'. [ 356.811747][T10972] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.833302][T10972] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.840641][T10972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.872532][T10972] .`: (slave bridge0): Enslaving as an active interface with an up link [ 357.377041][T10983] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 357.491446][T10986] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1795'. [ 357.827654][T10994] .3ãc¤±: mtu less than device minimum [ 357.865959][T10994] team0: Device .3ãc¤± failed to change mtu [ 357.881602][T10994] .`: (slave team0): Error -22 calling dev_set_mtu [ 357.929290][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1799'. [ 358.101062][T11010] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1802'. [ 358.672251][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.675540][T11032] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1809'. [ 358.682702][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.707371][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.734256][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.744296][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.754371][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.764265][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 358.774257][T11031] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 359.074286][T11047] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1814'. [ 359.089213][T11047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 359.177859][T11049] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1815'. [ 359.996588][T11066] FAULT_INJECTION: forcing a failure. [ 359.996588][T11066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.028131][T11066] CPU: 0 PID: 11066 Comm: syz.0.1821 Not tainted syzkaller #0 [ 360.035651][T11066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 360.046081][T11066] Call Trace: [ 360.049366][T11066] [ 360.052344][T11066] dump_stack_lvl+0x18c/0x250 [ 360.057038][T11066] ? show_regs_print_info+0x20/0x20 [ 360.062243][T11066] ? load_image+0x420/0x420 [ 360.066746][T11066] ? __lock_acquire+0x7d80/0x7d80 [ 360.071772][T11066] ? snprintf+0xe9/0x140 [ 360.076026][T11066] should_fail_ex+0x394/0x4c0 [ 360.080707][T11066] _copy_to_user+0x2f/0xa0 [ 360.085135][T11066] simple_read_from_buffer+0xe7/0x150 [ 360.090519][T11066] proc_fail_nth_read+0x1e8/0x260 [ 360.095550][T11066] ? proc_fault_inject_write+0x360/0x360 [ 360.101190][T11066] ? fsnotify_perm+0x271/0x5e0 [ 360.105954][T11066] ? proc_fault_inject_write+0x360/0x360 [ 360.111613][T11066] vfs_read+0x298/0x990 [ 360.115780][T11066] ? kernel_read+0x1e0/0x1e0 [ 360.120372][T11066] ? __fget_files+0x28/0x460 [ 360.124964][T11066] ? __fget_files+0x3fc/0x460 [ 360.129652][T11066] ? __fdget_pos+0x2a3/0x330 [ 360.134241][T11066] ? ksys_read+0x74/0x260 [ 360.138571][T11066] ksys_read+0x151/0x260 [ 360.142817][T11066] ? vfs_write+0x9a0/0x9a0 [ 360.147237][T11066] ? lockdep_hardirqs_on+0x98/0x150 [ 360.152436][T11066] do_syscall_64+0x55/0xb0 [ 360.156851][T11066] ? clear_bhb_loop+0x40/0x90 [ 360.161523][T11066] ? clear_bhb_loop+0x40/0x90 [ 360.166196][T11066] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.172096][T11066] RIP: 0033:0x7f9f29d5e68e [ 360.176510][T11066] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.196124][T11066] RSP: 002b:00007f9f2acfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 360.204537][T11066] RAX: ffffffffffffffda RBX: 00007f9f2acfc6c0 RCX: 00007f9f29d5e68e [ 360.212510][T11066] RDX: 000000000000000f RSI: 00007f9f2acfc0a0 RDI: 0000000000000011 [ 360.220475][T11066] RBP: 00007f9f2acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 360.228443][T11066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.236419][T11066] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 360.244443][T11066] [ 360.764201][T11084] validate_nla: 12 callbacks suppressed [ 360.764249][T11084] netlink: 'syz.1.1828': attribute type 4 has an invalid length. [ 360.899482][T11088] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 360.936201][T11088] bridge0: port 3(team0) entered disabled state [ 360.953926][T11088] team0: left allmulticast mode [ 360.959580][T11088] team_slave_0: left allmulticast mode [ 360.965451][T11088] team_slave_1: left allmulticast mode [ 360.973412][T11088] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 360.981087][T11088] team0: left promiscuous mode [ 360.986354][T11088] team_slave_0: left promiscuous mode [ 360.995015][T11088] team_slave_1: left promiscuous mode [ 361.098442][T11088] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 361.108412][T11088] bridge0: port 3(team0) entered disabled state [ 361.152797][T11088] team0: Device wlan1 failed to change mtu [ 361.169603][T11088] .`: (slave team0): Error -22 calling dev_set_mtu [ 361.203646][T11086] __nla_validate_parse: 3 callbacks suppressed [ 361.203713][T11086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 362.520850][T11141] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 362.555526][T11141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1840'. [ 363.185013][T11157] netlink: 'syz.2.1842': attribute type 10 has an invalid length. [ 363.221864][T11157] net_ratelimit: 256 callbacks suppressed [ 363.221976][T11157] wlan1: mtu less than device minimum [ 363.253729][T11157] team0: Device wlan1 failed to change mtu [ 363.261434][T11157] .`: (slave team0): Error -22 calling dev_set_mtu [ 363.499956][T11164] netlink: 'syz.1.1843': attribute type 29 has an invalid length. [ 363.539186][T11164] netlink: 'syz.1.1843': attribute type 29 has an invalid length. [ 363.577542][T11170] netlink: 'syz.2.1845': attribute type 5 has an invalid length. [ 363.616329][T11166] netlink: 'syz.1.1843': attribute type 29 has an invalid length. [ 363.652383][T11170] netlink: 'syz.2.1845': attribute type 25 has an invalid length. [ 363.667700][T11170] netlink: 'syz.2.1845': attribute type 28 has an invalid length. [ 363.916981][T11179] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1846'. [ 364.334003][T11189] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1851'. [ 365.105637][T11200] IPv6: NLM_F_CREATE should be specified when creating new route [ 365.127191][T11200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 365.134664][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 365.142077][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 365.149362][T11200] IPv6: NLM_F_CREATE should be set when creating new route [ 365.210355][T11202] wlan1: mtu less than device minimum [ 365.263067][T11202] team0: Device wlan1 failed to change mtu [ 365.289289][T11202] .`: (slave team0): Error -22 calling dev_set_mtu [ 365.849383][T11213] validate_nla: 7 callbacks suppressed [ 365.849399][T11213] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 365.924832][T11213] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1858'. [ 365.949237][T11213] FAULT_INJECTION: forcing a failure. [ 365.949237][T11213] name failslab, interval 1, probability 0, space 0, times 0 [ 365.991342][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 14 [ 366.024220][T11213] CPU: 0 PID: 11213 Comm: syz.3.1858 Not tainted syzkaller #0 [ 366.031762][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 366.041843][T11213] Call Trace: [ 366.045138][T11213] [ 366.048108][T11213] dump_stack_lvl+0x18c/0x250 [ 366.052824][T11213] ? show_regs_print_info+0x20/0x20 [ 366.058051][T11213] ? load_image+0x420/0x420 [ 366.062584][T11213] ? verify_lock_unused+0x140/0x140 [ 366.067984][T11213] ? perf_trace_lock+0xfc/0x3b0 [ 366.072865][T11213] should_fail_ex+0x394/0x4c0 [ 366.077569][T11213] should_failslab+0x9/0x20 [ 366.082185][T11213] slab_pre_alloc_hook+0x59/0x300 [ 366.087239][T11213] kmem_cache_alloc+0x5a/0x2c0 [ 366.092025][T11213] ? skb_clone+0x1eb/0x370 [ 366.096466][T11213] skb_clone+0x1eb/0x370 [ 366.100731][T11213] __netlink_deliver_tap+0x411/0x7f0 [ 366.106050][T11213] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.111267][T11213] netlink_deliver_tap+0x19c/0x1b0 [ 366.116402][T11213] netlink_sendskb+0x68/0x130 [ 366.121100][T11213] netlink_ack+0xcd5/0x1160 [ 366.125649][T11213] ? netlink_dump+0xec0/0xec0 [ 366.130348][T11213] ? perf_trace_lock+0xfc/0x3b0 [ 366.135235][T11213] netlink_rcv_skb+0x2b3/0x4c0 [ 366.140021][T11213] ? rtnetlink_bind+0x80/0x80 [ 366.144719][T11213] ? netlink_ack+0x1160/0x1160 [ 366.149533][T11213] ? __lock_acquire+0x7d80/0x7d80 [ 366.154604][T11213] ? netlink_deliver_tap+0x2e/0x1b0 [ 366.159835][T11213] netlink_unicast+0x7b1/0x930 [ 366.164641][T11213] netlink_sendmsg+0x8d0/0xbf0 [ 366.169440][T11213] ? netlink_getsockopt+0x590/0x590 [ 366.174692][T11213] ? apparmor_socket_sendmsg+0x8e/0x330 [ 366.180271][T11213] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 366.185578][T11213] ? security_socket_sendmsg+0x80/0xa0 [ 366.191063][T11213] ? netlink_getsockopt+0x590/0x590 [ 366.196289][T11213] ____sys_sendmsg+0x61b/0x980 [ 366.201088][T11213] ? __asan_memset+0x22/0x40 [ 366.205875][T11213] ? __sys_sendmsg_sock+0x30/0x30 [ 366.210922][T11213] ? __import_iovec+0x5f2/0x850 [ 366.215808][T11213] ? import_iovec+0x73/0xa0 [ 366.220347][T11213] ___sys_sendmsg+0x2a6/0x360 [ 366.225076][T11213] ? __sys_sendmsg+0x2b0/0x2b0 [ 366.229889][T11213] ? __lock_acquire+0x7d80/0x7d80 [ 366.234992][T11213] __se_sys_sendmsg+0x1d0/0x2c0 [ 366.239884][T11213] ? __x64_sys_sendmsg+0x80/0x80 [ 366.244866][T11213] ? lockdep_hardirqs_on+0x98/0x150 [ 366.250106][T11213] do_syscall_64+0x55/0xb0 [ 366.254561][T11213] ? clear_bhb_loop+0x40/0x90 [ 366.259261][T11213] ? clear_bhb_loop+0x40/0x90 [ 366.263964][T11213] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 366.269898][T11213] RIP: 0033:0x7fcdaa59de59 [ 366.274362][T11213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.293991][T11213] RSP: 002b:00007fcdab44e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.302432][T11213] RAX: ffffffffffffffda RBX: 00007fcdaa825fa0 RCX: 00007fcdaa59de59 [ 366.310423][T11213] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 366.318500][T11213] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 366.326492][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.334479][T11213] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 366.342490][T11213] [ 367.030445][T11229] netlink: 'syz.0.1863': attribute type 5 has an invalid length. [ 367.405439][T11238] netlink: 'syz.0.1865': attribute type 10 has an invalid length. [ 367.505605][T11238] wlan1: mtu less than device minimum [ 367.511748][T11238] team0: Device wlan1 failed to change mtu [ 367.515571][T11238] .`: (slave team0): Error -22 calling dev_set_mtu [ 367.679338][T11243] netlink: 'syz.2.1867': attribute type 21 has an invalid length. [ 367.687427][T11243] IPv6: NLM_F_CREATE should be specified when creating new route [ 367.695870][T11243] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.703168][T11243] IPv6: NLM_F_CREATE should be set when creating new route [ 367.710514][T11243] IPv6: NLM_F_CREATE should be set when creating new route [ 367.717750][T11243] IPv6: NLM_F_CREATE should be set when creating new route [ 367.784536][T11243] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 368.310443][T11259] mac80211_hwsim hwsim7 .3ãc¤±: renamed from wlan1 [ 368.507645][T11266] netlink: 'syz.2.1873': attribute type 10 has an invalid length. [ 368.577142][T11266] wlan1: mtu less than device minimum [ 368.598378][T11266] team0: Device wlan1 failed to change mtu [ 368.602283][T11266] .`: (slave team0): Error -22 calling dev_set_mtu [ 368.863132][T11276] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 368.928955][T11276] .3ãc¤±: mtu less than device minimum [ 368.952115][T11276] team0: Device .3ãc¤± failed to change mtu [ 368.965805][T11276] .`: (slave team0): Error -22 calling dev_set_mtu [ 369.396805][T11294] FAULT_INJECTION: forcing a failure. [ 369.396805][T11294] name failslab, interval 1, probability 0, space 0, times 0 [ 369.409532][T11294] CPU: 1 PID: 11294 Comm: syz.2.1883 Not tainted syzkaller #0 [ 369.417020][T11294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 369.427107][T11294] Call Trace: [ 369.430407][T11294] [ 369.433361][T11294] dump_stack_lvl+0x18c/0x250 [ 369.438076][T11294] ? show_regs_print_info+0x20/0x20 [ 369.443313][T11294] ? load_image+0x420/0x420 [ 369.447856][T11294] ? verify_lock_unused+0x140/0x140 [ 369.453095][T11294] should_fail_ex+0x394/0x4c0 [ 369.457804][T11294] should_failslab+0x9/0x20 [ 369.462343][T11294] slab_pre_alloc_hook+0x59/0x300 [ 369.467435][T11294] kmem_cache_alloc+0x5a/0x2c0 [ 369.472238][T11294] ? fdb_create+0xa6/0x12b0 [ 369.476817][T11294] fdb_create+0xa6/0x12b0 [ 369.481189][T11294] ? br_fdb_find+0x82/0x210 [ 369.485809][T11294] ? __lock_acquire+0x7d80/0x7d80 [ 369.490857][T11294] ? br_fdb_find_rcu+0x30/0x30 [ 369.495628][T11294] ? trace_br_fdb_update+0x1f0/0x1f0 [ 369.500922][T11294] ? br_fdb_find+0x82/0x210 [ 369.505435][T11294] fdb_add_local+0x121/0x240 [ 369.510032][T11294] ? br_fdb_add_local+0x2a/0x50 [ 369.514885][T11294] br_fdb_add_local+0x3a/0x50 [ 369.519563][T11294] __vlan_add+0x616/0x2630 [ 369.524078][T11294] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 369.529990][T11294] ? br_vlan_add+0x201/0x940 [ 369.534584][T11294] ? br_vlan_add+0x940/0x940 [ 369.539186][T11294] br_vlan_add+0x41d/0x940 [ 369.543606][T11294] ? vlan_vid_add+0x55e/0x750 [ 369.548406][T11294] __vlan_add+0x434/0x2630 [ 369.552840][T11294] ? br_vlan_add+0x940/0x940 [ 369.557436][T11294] nbp_vlan_add+0x262/0x3c0 [ 369.562296][T11294] br_vlan_info+0x101/0x460 [ 369.566810][T11294] ? br_process_vlan_info+0x8a0/0x8a0 [ 369.572193][T11294] ? mark_lock+0x94/0x320 [ 369.576554][T11294] br_process_vlan_info+0x316/0x8a0 [ 369.581762][T11294] ? __lock_acquire+0x1336/0x7d80 [ 369.586791][T11294] ? br_getlink+0x180/0x180 [ 369.591305][T11294] br_afspec+0x399/0x5f0 [ 369.595631][T11294] ? br_setport+0x1680/0x1680 [ 369.600309][T11294] ? finish_task_switch+0x323/0x8f0 [ 369.605526][T11294] br_setlink+0x355/0x860 [ 369.609863][T11294] ? br_vlan_info+0x460/0x460 [ 369.614571][T11294] ? __mutex_lock+0x923/0xc80 [ 369.619275][T11294] ? mutex_is_locked+0x12/0x40 [ 369.624041][T11294] rtnl_bridge_setlink+0x5b2/0x7d0 [ 369.629157][T11294] ? mutex_lock_nested+0x20/0x20 [ 369.634098][T11294] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 369.639392][T11294] ? rtnl_bridge_dellink+0x6f0/0x6f0 [ 369.644678][T11294] rtnetlink_rcv_msg+0x843/0xf90 [ 369.649615][T11294] ? rtnetlink_rcv_msg+0x220/0xf90 [ 369.654729][T11294] ? rtnetlink_bind+0x80/0x80 [ 369.659404][T11294] ? perf_trace_preemptirq_template+0xac/0x330 [ 369.665598][T11294] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 369.671584][T11294] ? lock_chain_count+0x20/0x20 [ 369.676437][T11294] ? __local_bh_enable_ip+0x13a/0x1c0 [ 369.681807][T11294] ? lockdep_hardirqs_on+0x98/0x150 [ 369.687007][T11294] ? __local_bh_enable_ip+0x13a/0x1c0 [ 369.692381][T11294] ? _local_bh_enable+0xa0/0xa0 [ 369.697240][T11294] ? __dev_queue_xmit+0x275/0x3630 [ 369.702355][T11294] ? __dev_queue_xmit+0x1bc2/0x3630 [ 369.707560][T11294] ? __dev_queue_xmit+0x275/0x3630 [ 369.712690][T11294] ? ref_tracker_free+0x686/0x830 [ 369.717725][T11294] netlink_rcv_skb+0x235/0x4c0 [ 369.722500][T11294] ? rtnetlink_bind+0x80/0x80 [ 369.727180][T11294] ? netlink_ack+0x1160/0x1160 [ 369.731959][T11294] ? __lock_acquire+0x7d80/0x7d80 [ 369.736991][T11294] ? netlink_deliver_tap+0x2e/0x1b0 [ 369.742201][T11294] netlink_unicast+0x7b1/0x930 [ 369.747379][T11294] netlink_sendmsg+0x8d0/0xbf0 [ 369.752161][T11294] ? netlink_getsockopt+0x590/0x590 [ 369.757367][T11294] ? apparmor_socket_sendmsg+0x8e/0x330 [ 369.762918][T11294] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 369.768203][T11294] ? security_socket_sendmsg+0x80/0xa0 [ 369.773663][T11294] ? netlink_getsockopt+0x590/0x590 [ 369.778889][T11294] ____sys_sendmsg+0x61b/0x980 [ 369.783664][T11294] ? __asan_memset+0x22/0x40 [ 369.788257][T11294] ? __sys_sendmsg_sock+0x30/0x30 [ 369.793298][T11294] ? __import_iovec+0x5f2/0x850 [ 369.798166][T11294] ? import_iovec+0x73/0xa0 [ 369.802761][T11294] ___sys_sendmsg+0x2a6/0x360 [ 369.807450][T11294] ? get_pid_task+0x20/0x1e0 [ 369.812048][T11294] ? __sys_sendmsg+0x2b0/0x2b0 [ 369.816830][T11294] ? __lock_acquire+0x7d80/0x7d80 [ 369.821878][T11294] __se_sys_sendmsg+0x1d0/0x2c0 [ 369.826738][T11294] ? __x64_sys_sendmsg+0x80/0x80 [ 369.831697][T11294] ? lockdep_hardirqs_on+0x98/0x150 [ 369.836926][T11294] do_syscall_64+0x55/0xb0 [ 369.841352][T11294] ? clear_bhb_loop+0x40/0x90 [ 369.846049][T11294] ? clear_bhb_loop+0x40/0x90 [ 369.850729][T11294] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 369.856632][T11294] RIP: 0033:0x7f213af9de59 [ 369.861049][T11294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.880660][T11294] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 369.889080][T11294] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 369.897052][T11294] RDX: 0000000004000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 369.905024][T11294] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.913085][T11294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.921052][T11294] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 369.929060][T11294] [ 369.993605][T11294] bridge0: failed insert local address into bridge forwarding table [ 370.053373][T11300] netlink: 'syz.3.1884': attribute type 10 has an invalid length. [ 370.085798][T11300] .3ãc¤±: mtu less than device minimum [ 370.095257][T11300] team0: Device .3ãc¤± failed to change mtu [ 370.097330][T11300] .`: (slave team0): Error -22 calling dev_set_mtu [ 370.293977][T11311] netlink: 'syz.1.1887': attribute type 10 has an invalid length. [ 370.351967][T11311] .3ãc¤±: mtu less than device minimum [ 370.362080][T11311] team0: Device .3ãc¤± failed to change mtu [ 370.366304][T11311] .`: (slave team0): Error -22 calling dev_set_mtu [ 370.913059][T11326] netlink: 'syz.2.1890': attribute type 29 has an invalid length. [ 370.927178][T11326] netlink: 'syz.2.1890': attribute type 3 has an invalid length. [ 370.938047][T11326] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1890'. [ 370.965222][T11326] netlink: 'syz.2.1890': attribute type 33 has an invalid length. [ 370.990993][T11329] FAULT_INJECTION: forcing a failure. [ 370.990993][T11329] name failslab, interval 1, probability 0, space 0, times 0 [ 370.997425][T11326] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1890'. [ 371.012312][T11329] CPU: 1 PID: 11329 Comm: syz.1.1893 Not tainted syzkaller #0 [ 371.020249][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 371.030305][T11329] Call Trace: [ 371.033580][T11329] [ 371.036505][T11329] dump_stack_lvl+0x18c/0x250 [ 371.041191][T11329] ? show_regs_print_info+0x20/0x20 [ 371.046389][T11329] ? load_image+0x420/0x420 [ 371.050894][T11329] ? __might_sleep+0xe0/0xe0 [ 371.055485][T11329] ? __lock_acquire+0x7d80/0x7d80 [ 371.060515][T11329] should_fail_ex+0x394/0x4c0 [ 371.065201][T11329] should_failslab+0x9/0x20 [ 371.069706][T11329] slab_pre_alloc_hook+0x59/0x300 [ 371.074735][T11329] ? tomoyo_encode+0x2ad/0x570 [ 371.079499][T11329] ? tomoyo_encode+0x2ad/0x570 [ 371.084259][T11329] __kmem_cache_alloc_node+0x53/0x250 [ 371.089639][T11329] ? tomoyo_encode+0x2ad/0x570 [ 371.094405][T11329] __kmalloc+0xa7/0x240 [ 371.098572][T11329] tomoyo_encode+0x2ad/0x570 [ 371.103168][T11329] tomoyo_realpath_from_path+0x57c/0x5c0 [ 371.108826][T11329] ? tomoyo_domain+0xd6/0x120 [ 371.113531][T11329] tomoyo_path_number_perm+0x248/0x5e0 [ 371.118998][T11329] ? tomoyo_path_number_perm+0x217/0x5e0 [ 371.124632][T11329] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 371.130096][T11329] ? ksys_write+0x1d2/0x260 [ 371.134627][T11329] ? __fget_files+0x28/0x460 [ 371.139226][T11329] security_file_ioctl+0x70/0xa0 [ 371.144167][T11329] __se_sys_ioctl+0x48/0x170 [ 371.148772][T11329] do_syscall_64+0x55/0xb0 [ 371.153224][T11329] ? clear_bhb_loop+0x40/0x90 [ 371.157916][T11329] ? clear_bhb_loop+0x40/0x90 [ 371.162588][T11329] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.168481][T11329] RIP: 0033:0x7f75d019de59 [ 371.172900][T11329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.192509][T11329] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.201006][T11329] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 371.208976][T11329] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000a [ 371.216956][T11329] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 371.224925][T11329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.232900][T11329] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 371.240896][T11329] [ 371.265652][T11329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 371.317585][T11336] FAULT_INJECTION: forcing a failure. [ 371.317585][T11336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.332340][T11336] CPU: 1 PID: 11336 Comm: syz.0.1896 Not tainted syzkaller #0 [ 371.339853][T11336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 371.349934][T11336] Call Trace: [ 371.353229][T11336] [ 371.356176][T11336] dump_stack_lvl+0x18c/0x250 [ 371.360892][T11336] ? show_regs_print_info+0x20/0x20 [ 371.366126][T11336] ? load_image+0x420/0x420 [ 371.370669][T11336] ? __might_fault+0xaa/0x120 [ 371.375386][T11336] ? __lock_acquire+0x7d80/0x7d80 [ 371.380424][T11336] ? __virt_addr_valid+0x10c/0x380 [ 371.385570][T11336] should_fail_ex+0x394/0x4c0 [ 371.390291][T11336] _copy_from_user+0x2f/0xe0 [ 371.394899][T11336] xfrm_user_policy+0x2d8/0x960 [ 371.399871][T11336] ? xfrm_unregister_translator+0x70/0x70 [ 371.405593][T11336] ? bpf_lsm_capable+0x9/0x10 [ 371.410282][T11336] ? security_capable+0x89/0xb0 [ 371.415136][T11336] do_ip_setsockopt+0x191b/0x2d50 [ 371.420195][T11336] ? ip_sock_set_pktinfo+0x30/0x30 [ 371.425303][T11336] ? aa_sk_perm+0x83c/0x970 [ 371.429811][T11336] ? __fget_files+0x28/0x460 [ 371.434431][T11336] ? aa_af_perm+0x330/0x330 [ 371.438949][T11336] ? __fget_files+0x28/0x460 [ 371.443557][T11336] ? aa_sock_opt_perm+0x74/0x100 [ 371.448498][T11336] ip_setsockopt+0x61/0x110 [ 371.453005][T11336] ? sock_common_recvmsg+0x190/0x190 [ 371.458295][T11336] do_sock_setsockopt+0x175/0x1a0 [ 371.463321][T11336] ? __fdget+0x180/0x210 [ 371.467562][T11336] __x64_sys_setsockopt+0x182/0x200 [ 371.472772][T11336] do_syscall_64+0x55/0xb0 [ 371.477206][T11336] ? clear_bhb_loop+0x40/0x90 [ 371.481878][T11336] ? clear_bhb_loop+0x40/0x90 [ 371.486554][T11336] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.492452][T11336] RIP: 0033:0x7f9f29d9de59 [ 371.496863][T11336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.516477][T11336] RSP: 002b:00007f9f2acfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 371.524904][T11336] RAX: ffffffffffffffda RBX: 00007f9f2a025fa0 RCX: 00007f9f29d9de59 [ 371.532918][T11336] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000003 [ 371.540888][T11336] RBP: 00007f9f2acfc090 R08: 000000000000000c R09: 0000000000000000 [ 371.548858][T11336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.556827][T11336] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 371.564819][T11336] [ 375.094814][T11367] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1902'. [ 375.117259][T11367] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.178195][T11373] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.037083][T11400] netlink: 'syz.2.1910': attribute type 4 has an invalid length. [ 377.057244][T11400] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1910'. [ 377.343493][T11411] netlink: 'syz.0.1913': attribute type 10 has an invalid length. [ 377.399150][T11411] wlan1: mtu less than device minimum [ 377.415079][T11411] team0: Device wlan1 failed to change mtu [ 377.446011][T11411] .`: (slave team0): Error -22 calling dev_set_mtu [ 377.475873][T11415] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1915'. [ 377.596788][T11417] FAULT_INJECTION: forcing a failure. [ 377.596788][T11417] name failslab, interval 1, probability 0, space 0, times 0 [ 377.610309][T11417] CPU: 1 PID: 11417 Comm: syz.1.1918 Not tainted syzkaller #0 [ 377.617814][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 377.627894][T11417] Call Trace: [ 377.631190][T11417] [ 377.634136][T11417] dump_stack_lvl+0x18c/0x250 [ 377.638848][T11417] ? show_regs_print_info+0x20/0x20 [ 377.644082][T11417] ? load_image+0x420/0x420 [ 377.648712][T11417] ? __might_sleep+0xe0/0xe0 [ 377.653325][T11417] ? __lock_acquire+0x7d80/0x7d80 [ 377.658352][T11417] ? mark_lock+0x94/0x320 [ 377.662708][T11417] should_fail_ex+0x394/0x4c0 [ 377.667414][T11417] should_failslab+0x9/0x20 [ 377.671942][T11417] slab_pre_alloc_hook+0x59/0x300 [ 377.676994][T11417] ? __get_vm_area_node+0x125/0x370 [ 377.682215][T11417] __kmem_cache_alloc_node+0x53/0x250 [ 377.687621][T11417] ? __get_vm_area_node+0x125/0x370 [ 377.692855][T11417] kmalloc_node_trace+0x26/0xe0 [ 377.697730][T11417] __get_vm_area_node+0x125/0x370 [ 377.702761][T11417] __vmalloc_node_range+0x36f/0x1320 [ 377.708063][T11417] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 377.713621][T11417] ? mark_lock+0x94/0x320 [ 377.717957][T11417] ? __lock_acquire+0x1336/0x7d80 [ 377.722999][T11417] ? aa_get_newest_label+0xfd/0x5c0 [ 377.728199][T11417] ? free_vm_area+0x50/0x50 [ 377.732715][T11417] ? end_current_label_crit_section+0x170/0x170 [ 377.738961][T11417] ? verify_lock_unused+0x140/0x140 [ 377.744192][T11417] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 377.749774][T11417] __vmalloc+0x7a/0x90 [ 377.753871][T11417] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 377.759429][T11417] bpf_prog_alloc_no_stats+0x46/0x430 [ 377.764854][T11417] bpf_prog_alloc+0x3d/0x1a0 [ 377.769448][T11417] bpf_prog_load+0x6b2/0x1610 [ 377.774129][T11417] ? map_freeze+0x420/0x420 [ 377.778642][T11417] ? __might_fault+0xaa/0x120 [ 377.783332][T11417] ? __lock_acquire+0x7d80/0x7d80 [ 377.788366][T11417] ? file_end_write+0x159/0x250 [ 377.793238][T11417] ? __might_fault+0xaa/0x120 [ 377.797937][T11417] ? __might_fault+0xc6/0x120 [ 377.802631][T11417] ? __might_fault+0xaa/0x120 [ 377.807336][T11417] ? bpf_lsm_bpf+0x9/0x10 [ 377.811697][T11417] ? security_bpf+0x7e/0xa0 [ 377.816238][T11417] __sys_bpf+0x5ba/0x890 [ 377.820519][T11417] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.825945][T11417] ? lock_chain_count+0x20/0x20 [ 377.830850][T11417] __x64_sys_bpf+0x7c/0x90 [ 377.835295][T11417] do_syscall_64+0x55/0xb0 [ 377.839747][T11417] ? clear_bhb_loop+0x40/0x90 [ 377.844451][T11417] ? clear_bhb_loop+0x40/0x90 [ 377.849158][T11417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.855086][T11417] RIP: 0033:0x7f75d019de59 [ 377.859527][T11417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.879170][T11417] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.887617][T11417] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 377.895623][T11417] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 377.903626][T11417] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 377.911634][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.919642][T11417] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 377.927675][T11417] [ 377.933333][T11417] warn_alloc: 1 callbacks suppressed [ 377.933423][T11417] syz.1.1918: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 377.974906][T11417] CPU: 1 PID: 11417 Comm: syz.1.1918 Not tainted syzkaller #0 [ 377.982438][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 377.992524][T11417] Call Trace: [ 377.995826][T11417] [ 377.998776][T11417] dump_stack_lvl+0x18c/0x250 [ 378.003496][T11417] ? show_regs_print_info+0x20/0x20 [ 378.008729][T11417] ? load_image+0x420/0x420 [ 378.013274][T11417] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 378.019725][T11417] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 378.026265][T11417] warn_alloc+0x246/0x340 [ 378.030628][T11417] ? __get_vm_area_node+0x125/0x370 [ 378.035868][T11417] ? zone_watermark_ok_safe+0x230/0x230 [ 378.041449][T11417] ? rcu_is_watching+0x15/0xb0 [ 378.046256][T11417] ? __get_vm_area_node+0x356/0x370 [ 378.051501][T11417] __vmalloc_node_range+0x394/0x1320 [ 378.056822][T11417] ? mark_lock+0x94/0x320 [ 378.061189][T11417] ? __lock_acquire+0x1336/0x7d80 [ 378.066261][T11417] ? aa_get_newest_label+0xfd/0x5c0 [ 378.071495][T11417] ? free_vm_area+0x50/0x50 [ 378.076030][T11417] ? end_current_label_crit_section+0x170/0x170 [ 378.082279][T11417] ? verify_lock_unused+0x140/0x140 [ 378.087479][T11417] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 378.093028][T11417] __vmalloc+0x7a/0x90 [ 378.097105][T11417] ? bpf_prog_alloc_no_stats+0x46/0x430 [ 378.102654][T11417] bpf_prog_alloc_no_stats+0x46/0x430 [ 378.108030][T11417] bpf_prog_alloc+0x3d/0x1a0 [ 378.112637][T11417] bpf_prog_load+0x6b2/0x1610 [ 378.117322][T11417] ? map_freeze+0x420/0x420 [ 378.121824][T11417] ? __might_fault+0xaa/0x120 [ 378.126498][T11417] ? __lock_acquire+0x7d80/0x7d80 [ 378.131525][T11417] ? file_end_write+0x159/0x250 [ 378.136380][T11417] ? __might_fault+0xaa/0x120 [ 378.141055][T11417] ? __might_fault+0xc6/0x120 [ 378.145728][T11417] ? __might_fault+0xaa/0x120 [ 378.150404][T11417] ? bpf_lsm_bpf+0x9/0x10 [ 378.154740][T11417] ? security_bpf+0x7e/0xa0 [ 378.159242][T11417] __sys_bpf+0x5ba/0x890 [ 378.163484][T11417] ? bpf_link_show_fdinfo+0x390/0x390 [ 378.168863][T11417] ? lock_chain_count+0x20/0x20 [ 378.173718][T11417] __x64_sys_bpf+0x7c/0x90 [ 378.178129][T11417] do_syscall_64+0x55/0xb0 [ 378.182552][T11417] ? clear_bhb_loop+0x40/0x90 [ 378.187224][T11417] ? clear_bhb_loop+0x40/0x90 [ 378.191898][T11417] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 378.197797][T11417] RIP: 0033:0x7f75d019de59 [ 378.202214][T11417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.221819][T11417] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 378.230233][T11417] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 378.238201][T11417] RDX: 0000000000000021 RSI: 000020000000e000 RDI: 0000000000000005 [ 378.246171][T11417] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 378.254143][T11417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.262115][T11417] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 378.270103][T11417] [ 378.338128][T11417] Mem-Info: [ 378.341749][T11417] active_anon:8763 inactive_anon:0 isolated_anon:0 [ 378.341749][T11417] active_file:19881 inactive_file:40069 isolated_file:0 [ 378.341749][T11417] unevictable:768 dirty:390 writeback:0 [ 378.341749][T11417] slab_reclaimable:10509 slab_unreclaimable:93953 [ 378.341749][T11417] mapped:25883 shmem:1361 pagetables:551 [ 378.341749][T11417] sec_pagetables:0 bounce:0 [ 378.341749][T11417] kernel_misc_reclaimable:0 [ 378.341749][T11417] free:1338657 free_pcp:8569 free_cma:0 [ 378.387225][T11417] Node 0 active_anon:35052kB inactive_anon:0kB active_file:79524kB inactive_file:160072kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103532kB dirty:1556kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10280kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no [ 378.419749][T11417] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 378.578009][T11417] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.681726][T11417] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 378.701766][T11417] Node 0 DMA32 free:1441300kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35012kB inactive_anon:0kB active_file:79524kB inactive_file:159248kB unevictable:1536kB writepending:1556kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:19008kB local_pcp:8448kB free_cma:0kB [ 378.766230][T11417] lowmem_reserve[]: 0 0 0 0 0 [ 378.786482][T11417] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 378.858468][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.864996][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.878262][T11417] lowmem_reserve[]: 0 0 0 0 0 [ 378.883123][T11417] Node 1 Normal free:3897960kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:3840kB free_cma:0kB [ 378.919214][T11417] lowmem_reserve[]: 0 0 0 0 0 [ 378.924002][T11417] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 378.937147][T11417] Node 0 DMA32: 1177*4kB (UME) 1224*8kB (UME) 995*16kB (UME) 1454*32kB (UME) 300*64kB (UME) 27*128kB (UME) 17*256kB (UME) 14*512kB (UME) 9*1024kB (ME) 7*2048kB (UME) 319*4096kB (M) = 1441300kB [ 378.965505][T11417] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 378.979769][T11417] Node 1 Normal: 276*4kB (UME) 45*8kB (UME) 39*16kB (UME) 134*32kB (UME) 34*64kB (UME) 10*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3897960kB [ 379.013856][T11417] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.038539][T11417] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.049325][T11417] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 379.081845][T11438] netlink: 'syz.3.1924': attribute type 4 has an invalid length. [ 379.098356][T11438] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1924'. [ 379.133368][T11417] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 379.205063][T11417] 61311 total pagecache pages [ 379.248015][T11417] 0 pages in swap cache [ 379.277937][T11417] Free swap = 124996kB [ 379.283218][T11417] Total swap = 124996kB [ 379.287719][T11417] 2097051 pages RAM [ 379.298118][T11417] 0 pages HighMem/MovableOnly [ 379.344136][T11417] 416953 pages reserved [ 379.391354][T11417] 0 pages cma reserved [ 379.824242][T11447] netlink: 'syz.2.1928': attribute type 10 has an invalid length. [ 379.871178][T11447] wlan1: mtu less than device minimum [ 379.880796][T11447] team0: Device wlan1 failed to change mtu [ 379.884352][T11447] .`: (slave team0): Error -22 calling dev_set_mtu [ 383.213912][T11473] netlink: 'syz.2.1935': attribute type 4 has an invalid length. [ 383.238339][T11473] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1935'. [ 383.438777][T11478] FAULT_INJECTION: forcing a failure. [ 383.438777][T11478] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.452328][T11478] CPU: 1 PID: 11478 Comm: syz.0.1936 Not tainted syzkaller #0 [ 383.459864][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 383.469946][T11478] Call Trace: [ 383.473240][T11478] [ 383.476296][T11478] dump_stack_lvl+0x18c/0x250 [ 383.481046][T11478] ? show_regs_print_info+0x20/0x20 [ 383.486266][T11478] ? load_image+0x420/0x420 [ 383.490804][T11478] ? __lock_acquire+0x7d80/0x7d80 [ 383.495855][T11478] should_fail_ex+0x394/0x4c0 [ 383.500558][T11478] _copy_from_user+0x2f/0xe0 [ 383.505159][T11478] __copy_msghdr+0x388/0x560 [ 383.509770][T11478] ___sys_sendmsg+0x214/0x360 [ 383.514460][T11478] ? __sys_sendmsg+0x2b0/0x2b0 [ 383.519256][T11478] ? __lock_acquire+0x7d80/0x7d80 [ 383.524306][T11478] __se_sys_sendmsg+0x1d0/0x2c0 [ 383.529172][T11478] ? __x64_sys_sendmsg+0x80/0x80 [ 383.534134][T11478] ? lockdep_hardirqs_on+0x98/0x150 [ 383.539344][T11478] do_syscall_64+0x55/0xb0 [ 383.543766][T11478] ? clear_bhb_loop+0x40/0x90 [ 383.548449][T11478] ? clear_bhb_loop+0x40/0x90 [ 383.553128][T11478] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.559028][T11478] RIP: 0033:0x7f9f29d9de59 [ 383.563444][T11478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.583085][T11478] RSP: 002b:00007f9f2acfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.591523][T11478] RAX: ffffffffffffffda RBX: 00007f9f2a025fa0 RCX: 00007f9f29d9de59 [ 383.599529][T11478] RDX: 000000002600c055 RSI: 00002000000000c0 RDI: 0000000000000003 [ 383.607782][T11478] RBP: 00007f9f2acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 383.615758][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.623729][T11478] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 383.631721][T11478] [ 383.833859][T11486] netlink: 15978 bytes leftover after parsing attributes in process `syz.1.1940'. [ 383.940834][T11489] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 383.996423][T11489] wlan1: mtu less than device minimum [ 384.017263][T11489] team0: Device wlan1 failed to change mtu [ 384.030821][T11489] .`: (slave team0): Error -22 calling dev_set_mtu [ 387.584368][T11513] netlink: 'syz.1.1950': attribute type 4 has an invalid length. [ 387.604407][T11513] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1950'. [ 387.773885][T11518] netlink: 'syz.0.1949': attribute type 29 has an invalid length. [ 387.789822][T11518] netlink: 'syz.0.1949': attribute type 29 has an invalid length. [ 387.810470][T11522] netlink: 'syz.0.1949': attribute type 29 has an invalid length. [ 387.843125][T11518] netlink: 'syz.0.1949': attribute type 29 has an invalid length. [ 387.923510][T11518] netlink: 'syz.0.1949': attribute type 29 has an invalid length. [ 387.963098][T11518] netlink: 'syz.0.1949': attribute type 10 has an invalid length. [ 388.109126][T11525] FAULT_INJECTION: forcing a failure. [ 388.109126][T11525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.126065][T11525] CPU: 0 PID: 11525 Comm: syz.1.1953 Not tainted syzkaller #0 [ 388.133576][T11525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 388.143653][T11525] Call Trace: [ 388.146951][T11525] [ 388.149894][T11525] dump_stack_lvl+0x18c/0x250 [ 388.154604][T11525] ? show_regs_print_info+0x20/0x20 [ 388.159823][T11525] ? load_image+0x420/0x420 [ 388.164354][T11525] ? __lock_acquire+0x7d80/0x7d80 [ 388.169398][T11525] ? snprintf+0xe9/0x140 [ 388.173667][T11525] should_fail_ex+0x394/0x4c0 [ 388.178372][T11525] _copy_to_user+0x2f/0xa0 [ 388.182811][T11525] simple_read_from_buffer+0xe7/0x150 [ 388.188221][T11525] proc_fail_nth_read+0x1e8/0x260 [ 388.193271][T11525] ? proc_fault_inject_write+0x360/0x360 [ 388.198932][T11525] ? fsnotify_perm+0x271/0x5e0 [ 388.203735][T11525] ? proc_fault_inject_write+0x360/0x360 [ 388.209406][T11525] vfs_read+0x298/0x990 [ 388.213601][T11525] ? kernel_read+0x1e0/0x1e0 [ 388.218255][T11525] ? __fget_files+0x28/0x460 [ 388.222881][T11525] ? __fget_files+0x3fc/0x460 [ 388.227620][T11525] ? __fdget_pos+0x2a3/0x330 [ 388.232232][T11525] ? ksys_read+0x74/0x260 [ 388.236596][T11525] ksys_read+0x151/0x260 [ 388.240873][T11525] ? vfs_write+0x9a0/0x9a0 [ 388.245316][T11525] ? lockdep_hardirqs_on+0x98/0x150 [ 388.250537][T11525] do_syscall_64+0x55/0xb0 [ 388.254979][T11525] ? clear_bhb_loop+0x40/0x90 [ 388.259672][T11525] ? clear_bhb_loop+0x40/0x90 [ 388.264370][T11525] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.270285][T11525] RIP: 0033:0x7f75d015e68e [ 388.274722][T11525] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.294357][T11525] RSP: 002b:00007f75d106efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.302795][T11525] RAX: ffffffffffffffda RBX: 00007f75d106f6c0 RCX: 00007f75d015e68e [ 388.310787][T11525] RDX: 000000000000000f RSI: 00007f75d106f0a0 RDI: 0000000000000004 [ 388.318772][T11525] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 388.326758][T11525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.334750][T11525] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 388.342761][T11525] [ 389.684410][T11551] FAULT_INJECTION: forcing a failure. [ 389.684410][T11551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.698690][T11551] CPU: 1 PID: 11551 Comm: syz.3.1961 Not tainted syzkaller #0 [ 389.706193][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 389.716271][T11551] Call Trace: [ 389.719563][T11551] [ 389.722499][T11551] dump_stack_lvl+0x18c/0x250 [ 389.727187][T11551] ? show_regs_print_info+0x20/0x20 [ 389.732399][T11551] ? load_image+0x420/0x420 [ 389.736906][T11551] ? __lock_acquire+0x7d80/0x7d80 [ 389.741929][T11551] ? snprintf+0xe9/0x140 [ 389.746177][T11551] should_fail_ex+0x394/0x4c0 [ 389.750858][T11551] _copy_to_user+0x2f/0xa0 [ 389.755273][T11551] simple_read_from_buffer+0xe7/0x150 [ 389.760651][T11551] proc_fail_nth_read+0x1e8/0x260 [ 389.765681][T11551] ? proc_fault_inject_write+0x360/0x360 [ 389.771317][T11551] ? fsnotify_perm+0x271/0x5e0 [ 389.776079][T11551] ? proc_fault_inject_write+0x360/0x360 [ 389.781712][T11551] vfs_read+0x298/0x990 [ 389.785875][T11551] ? kernel_read+0x1e0/0x1e0 [ 389.790463][T11551] ? __fget_files+0x28/0x460 [ 389.795052][T11551] ? __fget_files+0x3fc/0x460 [ 389.799730][T11551] ? __fdget_pos+0x2a3/0x330 [ 389.804320][T11551] ? ksys_read+0x74/0x260 [ 389.808649][T11551] ksys_read+0x151/0x260 [ 389.812897][T11551] ? vfs_write+0x9a0/0x9a0 [ 389.817314][T11551] ? lockdep_hardirqs_on+0x98/0x150 [ 389.822511][T11551] do_syscall_64+0x55/0xb0 [ 389.826931][T11551] ? clear_bhb_loop+0x40/0x90 [ 389.831603][T11551] ? clear_bhb_loop+0x40/0x90 [ 389.836282][T11551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.842176][T11551] RIP: 0033:0x7fcdaa55e68e [ 389.846588][T11551] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.866193][T11551] RSP: 002b:00007fcdab44dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.874615][T11551] RAX: ffffffffffffffda RBX: 00007fcdab44e6c0 RCX: 00007fcdaa55e68e [ 389.882580][T11551] RDX: 000000000000000f RSI: 00007fcdab44e0a0 RDI: 0000000000000004 [ 389.890549][T11551] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 389.898514][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.906478][T11551] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 389.914462][T11551] [ 390.596831][T11569] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1967'. [ 390.658326][ T51] Bluetooth: hci2: ISO packet for unknown connection handle 62 [ 390.993844][T11579] FAULT_INJECTION: forcing a failure. [ 390.993844][T11579] name failslab, interval 1, probability 0, space 0, times 0 [ 391.010092][T11579] CPU: 0 PID: 11579 Comm: syz.2.1969 Not tainted syzkaller #0 [ 391.017612][T11579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 391.027714][T11579] Call Trace: [ 391.031018][T11579] [ 391.033964][T11579] dump_stack_lvl+0x18c/0x250 [ 391.038686][T11579] ? show_regs_print_info+0x20/0x20 [ 391.043907][T11579] ? load_image+0x420/0x420 [ 391.048437][T11579] ? __might_sleep+0xe0/0xe0 [ 391.053046][T11579] ? __lock_acquire+0x7d80/0x7d80 [ 391.058092][T11579] should_fail_ex+0x394/0x4c0 [ 391.062788][T11579] should_failslab+0x9/0x20 [ 391.067306][T11579] slab_pre_alloc_hook+0x59/0x300 [ 391.072364][T11579] ? tomoyo_encode+0x2ad/0x570 [ 391.077142][T11579] ? tomoyo_encode+0x2ad/0x570 [ 391.081917][T11579] __kmem_cache_alloc_node+0x53/0x250 [ 391.087313][T11579] ? tomoyo_encode+0x2ad/0x570 [ 391.092092][T11579] __kmalloc+0xa7/0x240 [ 391.096264][T11579] tomoyo_encode+0x2ad/0x570 [ 391.100871][T11579] tomoyo_realpath_from_path+0x57c/0x5c0 [ 391.106522][T11579] ? tomoyo_domain+0xd6/0x120 [ 391.111220][T11579] tomoyo_path_number_perm+0x248/0x5e0 [ 391.116698][T11579] ? tomoyo_path_number_perm+0x217/0x5e0 [ 391.122343][T11579] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 391.127822][T11579] ? ksys_write+0x1d2/0x260 [ 391.132368][T11579] ? __fget_files+0x28/0x460 [ 391.136983][T11579] security_file_ioctl+0x70/0xa0 [ 391.141965][T11579] __se_sys_ioctl+0x48/0x170 [ 391.146570][T11579] do_syscall_64+0x55/0xb0 [ 391.151000][T11579] ? clear_bhb_loop+0x40/0x90 [ 391.155688][T11579] ? clear_bhb_loop+0x40/0x90 [ 391.160374][T11579] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.166292][T11579] RIP: 0033:0x7f213af9de59 [ 391.170715][T11579] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.190336][T11579] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 391.198759][T11579] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 391.206737][T11579] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000006 [ 391.214715][T11579] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.222695][T11579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.230678][T11579] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 391.238683][T11579] [ 391.328129][T11579] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.772822][T11624] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 392.782599][T11622] FAULT_INJECTION: forcing a failure. [ 392.782599][T11622] name failslab, interval 1, probability 0, space 0, times 0 [ 392.800281][T11624] .3ãc¤±: mtu less than device minimum [ 392.805806][T11624] team0: Device .3ãc¤± failed to change mtu [ 392.813607][T11624] .`: (slave team0): Error -22 calling dev_set_mtu [ 392.826326][T11622] CPU: 1 PID: 11622 Comm: syz.1.1984 Not tainted syzkaller #0 [ 392.833817][T11622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 392.843892][T11622] Call Trace: [ 392.847171][T11622] [ 392.849535][T11618] netlink: 'syz.0.1983': attribute type 10 has an invalid length. [ 392.850088][T11622] dump_stack_lvl+0x18c/0x250 [ 392.850126][T11622] ? show_regs_print_info+0x20/0x20 [ 392.850151][T11622] ? load_image+0x420/0x420 [ 392.863747][T11618] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1983'. [ 392.867817][T11622] ? __might_sleep+0xe0/0xe0 [ 392.867850][T11622] ? __lock_acquire+0x7d80/0x7d80 [ 392.867874][T11622] should_fail_ex+0x394/0x4c0 [ 392.867900][T11622] should_failslab+0x9/0x20 [ 392.867921][T11622] slab_pre_alloc_hook+0x59/0x300 [ 392.867949][T11622] ? tomoyo_encode+0x2ad/0x570 [ 392.867973][T11622] ? tomoyo_encode+0x2ad/0x570 [ 392.867993][T11622] __kmem_cache_alloc_node+0x53/0x250 [ 392.868022][T11622] ? tomoyo_encode+0x2ad/0x570 [ 392.868044][T11622] __kmalloc+0xa7/0x240 [ 392.868071][T11622] tomoyo_encode+0x2ad/0x570 [ 392.868102][T11622] tomoyo_realpath_from_path+0x57c/0x5c0 [ 392.868128][T11622] ? tomoyo_domain+0xd6/0x120 [ 392.868160][T11622] tomoyo_path_number_perm+0x248/0x5e0 [ 392.868183][T11622] ? tomoyo_path_number_perm+0x217/0x5e0 [ 392.868206][T11622] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 392.868232][T11622] ? ksys_write+0x1d2/0x260 [ 392.965018][T11622] ? __fget_files+0x28/0x460 [ 392.969644][T11622] security_file_ioctl+0x70/0xa0 [ 392.974599][T11622] __se_sys_ioctl+0x48/0x170 [ 392.979196][T11622] do_syscall_64+0x55/0xb0 [ 392.983621][T11622] ? clear_bhb_loop+0x40/0x90 [ 392.988303][T11622] ? clear_bhb_loop+0x40/0x90 [ 392.992986][T11622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.998884][T11622] RIP: 0033:0x7f75d019de59 [ 393.003309][T11622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.022922][T11622] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.031344][T11622] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 393.039319][T11622] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 393.047290][T11622] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 393.055265][T11622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.063237][T11622] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 393.071240][T11622] [ 393.118131][T11622] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.556753][T11644] FAULT_INJECTION: forcing a failure. [ 393.556753][T11644] name failslab, interval 1, probability 0, space 0, times 0 [ 393.574271][T11644] CPU: 0 PID: 11644 Comm: syz.2.1990 Not tainted syzkaller #0 [ 393.581788][T11644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 393.591864][T11644] Call Trace: [ 393.595165][T11644] [ 393.598109][T11644] dump_stack_lvl+0x18c/0x250 [ 393.602824][T11644] ? show_regs_print_info+0x20/0x20 [ 393.608048][T11644] ? load_image+0x420/0x420 [ 393.612573][T11644] ? __might_sleep+0xe0/0xe0 [ 393.617191][T11644] ? __lock_acquire+0x7d80/0x7d80 [ 393.622236][T11644] should_fail_ex+0x394/0x4c0 [ 393.626938][T11644] should_failslab+0x9/0x20 [ 393.631490][T11644] slab_pre_alloc_hook+0x59/0x300 [ 393.636550][T11644] ? prepend_path+0x8a7/0x950 [ 393.641249][T11644] ? tomoyo_encode+0x2ad/0x570 [ 393.646033][T11644] ? tomoyo_encode+0x2ad/0x570 [ 393.650815][T11644] __kmem_cache_alloc_node+0x53/0x250 [ 393.656219][T11644] ? tomoyo_encode+0x2ad/0x570 [ 393.661003][T11644] __kmalloc+0xa7/0x240 [ 393.665192][T11644] tomoyo_encode+0x2ad/0x570 [ 393.669820][T11644] tomoyo_realpath_from_path+0x57c/0x5c0 [ 393.675482][T11644] ? tomoyo_domain+0xd6/0x120 [ 393.680204][T11644] tomoyo_path_number_perm+0x248/0x5e0 [ 393.685683][T11644] ? tomoyo_path_number_perm+0x217/0x5e0 [ 393.691337][T11644] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 393.696814][T11644] ? ksys_write+0x1d2/0x260 [ 393.701375][T11644] ? __fget_files+0x28/0x460 [ 393.705999][T11644] security_file_ioctl+0x70/0xa0 [ 393.710962][T11644] __se_sys_ioctl+0x48/0x170 [ 393.715572][T11644] do_syscall_64+0x55/0xb0 [ 393.720014][T11644] ? clear_bhb_loop+0x40/0x90 [ 393.724733][T11644] ? clear_bhb_loop+0x40/0x90 [ 393.729427][T11644] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 393.735344][T11644] RIP: 0033:0x7f213af9de59 [ 393.739783][T11644] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.759447][T11644] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.767890][T11644] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 393.775882][T11644] RDX: 0000200000000180 RSI: 0000000040107446 RDI: 0000000000000003 [ 393.783876][T11644] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.791870][T11644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.799854][T11644] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 393.807860][T11644] [ 393.834569][T11644] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.225622][T11661] netlink: 'syz.2.1997': attribute type 10 has an invalid length. [ 394.294470][T11661] wlan1: mtu less than device minimum [ 394.303373][T11661] team0: Device wlan1 failed to change mtu [ 394.307422][T11661] .`: (slave team0): Error -22 calling dev_set_mtu [ 394.424436][T11668] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.1998'. [ 394.483702][T11671] FAULT_INJECTION: forcing a failure. [ 394.483702][T11671] name failslab, interval 1, probability 0, space 0, times 0 [ 394.496511][T11671] CPU: 1 PID: 11671 Comm: syz.3.2000 Not tainted syzkaller #0 [ 394.504008][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 394.514099][T11671] Call Trace: [ 394.517407][T11671] [ 394.520369][T11671] dump_stack_lvl+0x18c/0x250 [ 394.525095][T11671] ? show_regs_print_info+0x20/0x20 [ 394.530336][T11671] ? load_image+0x420/0x420 [ 394.534884][T11671] ? __might_sleep+0xe0/0xe0 [ 394.539510][T11671] ? __lock_acquire+0x7d80/0x7d80 [ 394.544575][T11671] should_fail_ex+0x394/0x4c0 [ 394.549292][T11671] should_failslab+0x9/0x20 [ 394.553822][T11671] slab_pre_alloc_hook+0x59/0x300 [ 394.558879][T11671] ? __get_vm_area_node+0x125/0x370 [ 394.564103][T11671] __kmem_cache_alloc_node+0x53/0x250 [ 394.569510][T11671] ? __get_vm_area_node+0x125/0x370 [ 394.574733][T11671] kmalloc_node_trace+0x26/0xe0 [ 394.579615][T11671] __get_vm_area_node+0x125/0x370 [ 394.584676][T11671] __vmalloc_node_range+0x36f/0x1320 [ 394.589991][T11671] ? netlink_sendmsg+0x602/0xbf0 [ 394.594953][T11671] ? netlink_insert+0x1094/0x1390 [ 394.600036][T11671] ? netlink_insert+0x2ba/0x1390 [ 394.605012][T11671] ? free_vm_area+0x50/0x50 [ 394.609557][T11671] ? netlink_sendmsg+0x602/0xbf0 [ 394.614537][T11671] vmalloc+0x79/0x90 [ 394.618478][T11671] ? netlink_sendmsg+0x602/0xbf0 [ 394.623453][T11671] netlink_sendmsg+0x602/0xbf0 [ 394.628266][T11671] ? netlink_getsockopt+0x590/0x590 [ 394.633493][T11671] ? apparmor_socket_sendmsg+0x8e/0x330 [ 394.639071][T11671] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 394.644380][T11671] ? security_socket_sendmsg+0x80/0xa0 [ 394.649870][T11671] ? netlink_getsockopt+0x590/0x590 [ 394.655097][T11671] ____sys_sendmsg+0x61b/0x980 [ 394.659907][T11671] ? __asan_memset+0x22/0x40 [ 394.664519][T11671] ? __sys_sendmsg_sock+0x30/0x30 [ 394.669564][T11671] ? __import_iovec+0x5f2/0x850 [ 394.674455][T11671] ? import_iovec+0x73/0xa0 [ 394.678988][T11671] ___sys_sendmsg+0x2a6/0x360 [ 394.683703][T11671] ? __sys_sendmsg+0x2b0/0x2b0 [ 394.688536][T11671] ? __lock_acquire+0x7d80/0x7d80 [ 394.693626][T11671] __se_sys_sendmsg+0x1d0/0x2c0 [ 394.698511][T11671] ? __x64_sys_sendmsg+0x80/0x80 [ 394.703505][T11671] ? lockdep_hardirqs_on+0x98/0x150 [ 394.708735][T11671] do_syscall_64+0x55/0xb0 [ 394.713172][T11671] ? clear_bhb_loop+0x40/0x90 [ 394.717873][T11671] ? clear_bhb_loop+0x40/0x90 [ 394.722574][T11671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 394.728489][T11671] RIP: 0033:0x7fcdaa59de59 [ 394.732926][T11671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.752558][T11671] RSP: 002b:00007fcdab44e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.761005][T11671] RAX: ffffffffffffffda RBX: 00007fcdaa825fa0 RCX: 00007fcdaa59de59 [ 394.768996][T11671] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 394.776983][T11671] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 394.784968][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.792956][T11671] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 394.800990][T11671] [ 394.808344][T11671] syz.3.2000: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 394.844038][T11671] CPU: 0 PID: 11671 Comm: syz.3.2000 Not tainted syzkaller #0 [ 394.851564][T11671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 394.861643][T11671] Call Trace: [ 394.864947][T11671] [ 394.867893][T11671] dump_stack_lvl+0x18c/0x250 [ 394.872611][T11671] ? show_regs_print_info+0x20/0x20 [ 394.877842][T11671] ? load_image+0x420/0x420 [ 394.882379][T11671] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 394.888819][T11671] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 394.895330][T11671] warn_alloc+0x246/0x340 [ 394.899666][T11671] ? __get_vm_area_node+0x125/0x370 [ 394.904868][T11671] ? zone_watermark_ok_safe+0x230/0x230 [ 394.910412][T11671] ? rcu_is_watching+0x15/0xb0 [ 394.915176][T11671] ? __get_vm_area_node+0x356/0x370 [ 394.920374][T11671] __vmalloc_node_range+0x394/0x1320 [ 394.925668][T11671] ? netlink_insert+0x1094/0x1390 [ 394.930702][T11671] ? netlink_insert+0x2ba/0x1390 [ 394.935663][T11671] ? free_vm_area+0x50/0x50 [ 394.940211][T11671] ? netlink_sendmsg+0x602/0xbf0 [ 394.945180][T11671] vmalloc+0x79/0x90 [ 394.949108][T11671] ? netlink_sendmsg+0x602/0xbf0 [ 394.954079][T11671] netlink_sendmsg+0x602/0xbf0 [ 394.958888][T11671] ? netlink_getsockopt+0x590/0x590 [ 394.964121][T11671] ? apparmor_socket_sendmsg+0x8e/0x330 [ 394.969696][T11671] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 394.975014][T11671] ? security_socket_sendmsg+0x80/0xa0 [ 394.980515][T11671] ? netlink_getsockopt+0x590/0x590 [ 394.985756][T11671] ____sys_sendmsg+0x61b/0x980 [ 394.990560][T11671] ? __asan_memset+0x22/0x40 [ 394.995180][T11671] ? __sys_sendmsg_sock+0x30/0x30 [ 395.000233][T11671] ? __import_iovec+0x5f2/0x850 [ 395.005159][T11671] ? import_iovec+0x73/0xa0 [ 395.009693][T11671] ___sys_sendmsg+0x2a6/0x360 [ 395.014406][T11671] ? __sys_sendmsg+0x2b0/0x2b0 [ 395.019229][T11671] ? __lock_acquire+0x7d80/0x7d80 [ 395.024311][T11671] __se_sys_sendmsg+0x1d0/0x2c0 [ 395.029199][T11671] ? __x64_sys_sendmsg+0x80/0x80 [ 395.034193][T11671] ? lockdep_hardirqs_on+0x98/0x150 [ 395.039429][T11671] do_syscall_64+0x55/0xb0 [ 395.043881][T11671] ? clear_bhb_loop+0x40/0x90 [ 395.048577][T11671] ? clear_bhb_loop+0x40/0x90 [ 395.053280][T11671] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 395.059201][T11671] RIP: 0033:0x7fcdaa59de59 [ 395.063640][T11671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.083276][T11671] RSP: 002b:00007fcdab44e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.091721][T11671] RAX: ffffffffffffffda RBX: 00007fcdaa825fa0 RCX: 00007fcdaa59de59 [ 395.099725][T11671] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 395.107722][T11671] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 395.115720][T11671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.123708][T11671] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 395.131690][T11671] [ 395.138657][T11671] Mem-Info: [ 395.141814][T11671] active_anon:8810 inactive_anon:0 isolated_anon:0 [ 395.141814][T11671] active_file:19962 inactive_file:40075 isolated_file:0 [ 395.141814][T11671] unevictable:768 dirty:708 writeback:0 [ 395.141814][T11671] slab_reclaimable:10308 slab_unreclaimable:92312 [ 395.141814][T11671] mapped:24954 shmem:1361 pagetables:541 [ 395.141814][T11671] sec_pagetables:0 bounce:0 [ 395.141814][T11671] kernel_misc_reclaimable:0 [ 395.141814][T11671] free:1337397 free_pcp:11073 free_cma:0 [ 395.187764][T11671] Node 0 active_anon:35184kB inactive_anon:0kB active_file:79848kB inactive_file:160096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99772kB dirty:2828kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10228kB pagetables:2204kB sec_pagetables:0kB all_unreclaimable? no [ 395.224772][T11671] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 395.265219][T11671] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.295976][T11671] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 395.302014][T11671] Node 0 DMA32 free:1436260kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:35044kB inactive_anon:0kB active_file:79848kB inactive_file:159272kB unevictable:1536kB writepending:2828kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:28892kB local_pcp:20012kB free_cma:0kB [ 395.338793][T11671] lowmem_reserve[]: 0 0 0 0 0 [ 395.343808][T11671] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 395.379352][T11671] lowmem_reserve[]: 0 0 0 0 0 [ 395.384138][T11671] Node 1 Normal free:3897960kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15808kB local_pcp:11968kB free_cma:0kB [ 395.431274][T11671] lowmem_reserve[]: 0 0 0 0 0 [ 395.436092][T11671] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 395.454129][T11671] Node 0 DMA32: 1283*4kB (UE) 635*8kB (UME) 1042*16kB (UME) 634*32kB (UME) 549*64kB (UME) 76*128kB (UME) 20*256kB (UME) 13*512kB (UME) 9*1024kB (ME) 8*2048kB (UME) 319*4096kB (UM) = 1436036kB [ 395.473963][T11671] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 395.488200][T11671] Node 1 Normal: 276*4kB (UME) 45*8kB (UME) 39*16kB (UME) 134*32kB (UME) 34*64kB (UME) 10*128kB (UME) 4*256kB (UME) 0*512kB 2*1024kB (UE) 1*2048kB (E) 948*4096kB (M) = 3897960kB [ 395.514417][T11671] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.532377][T11671] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.542202][T11671] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 395.552756][T11671] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 395.562430][T11671] 61398 total pagecache pages [ 395.567252][T11671] 0 pages in swap cache [ 395.571908][T11671] Free swap = 124996kB [ 395.581206][T11671] Total swap = 124996kB [ 395.585478][T11671] 2097051 pages RAM [ 395.592788][T11671] 0 pages HighMem/MovableOnly [ 395.597574][T11671] 416953 pages reserved [ 395.605462][T11671] 0 pages cma reserved [ 395.914611][T11689] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2006'. [ 395.943437][T11689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.018037][T11696] netlink: 'syz.1.2008': attribute type 10 has an invalid length. [ 396.045146][T11696] .3ãc¤±: mtu less than device minimum [ 396.051031][T11696] team0: Device .3ãc¤± failed to change mtu [ 396.053792][T11696] .`: (slave team0): Error -22 calling dev_set_mtu [ 396.953956][T11702] netlink: 191868 bytes leftover after parsing attributes in process `syz.0.2009'. [ 397.303824][T11718] FAULT_INJECTION: forcing a failure. [ 397.303824][T11718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.332098][T11718] CPU: 0 PID: 11718 Comm: syz.2.2015 Not tainted syzkaller #0 [ 397.339620][T11718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 397.349706][T11718] Call Trace: [ 397.353022][T11718] [ 397.355966][T11718] dump_stack_lvl+0x18c/0x250 [ 397.360676][T11718] ? show_regs_print_info+0x20/0x20 [ 397.365910][T11718] ? load_image+0x420/0x420 [ 397.370473][T11718] ? __might_fault+0xaa/0x120 [ 397.375194][T11718] ? __lock_acquire+0x7d80/0x7d80 [ 397.380256][T11718] should_fail_ex+0x394/0x4c0 [ 397.384965][T11718] _copy_from_user+0x2f/0xe0 [ 397.389574][T11718] ___sys_sendmsg+0x1c7/0x360 [ 397.394281][T11718] ? __sys_sendmsg+0x2b0/0x2b0 [ 397.399092][T11718] ? trace_call_bpf+0xc3/0x6c0 [ 397.403903][T11718] __se_sys_sendmsg+0x1d0/0x2c0 [ 397.408786][T11718] ? perf_trace_preemptirq_template+0x269/0x330 [ 397.415059][T11718] ? __x64_sys_sendmsg+0x80/0x80 [ 397.420039][T11718] ? lockdep_hardirqs_on+0x98/0x150 [ 397.425266][T11718] do_syscall_64+0x55/0xb0 [ 397.429714][T11718] ? clear_bhb_loop+0x40/0x90 [ 397.434405][T11718] ? clear_bhb_loop+0x40/0x90 [ 397.439102][T11718] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.445066][T11718] RIP: 0033:0x7f213af9de59 [ 397.449513][T11718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.469711][T11718] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.478155][T11718] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 397.486140][T11718] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 397.494130][T11718] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 397.502115][T11718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.510102][T11718] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 397.518106][T11718] [ 397.674731][T11725] netlink: 'syz.2.2017': attribute type 1 has an invalid length. [ 397.683189][T11725] netlink: 'syz.2.2017': attribute type 2 has an invalid length. [ 397.691862][T11725] netlink: 'syz.2.2017': attribute type 2 has an invalid length. [ 397.703100][T11725] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 397.711645][T11725] netlink: 'syz.2.2017': attribute type 4 has an invalid length. [ 397.721203][T11725] netlink: 'syz.2.2017': attribute type 5 has an invalid length. [ 397.732703][T11725] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.2017'. [ 397.961445][T11731] validate_nla: 6 callbacks suppressed [ 397.961462][T11731] netlink: 'syz.0.2018': attribute type 3 has an invalid length. [ 397.998735][T11731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2018'. [ 398.216350][T11734] netlink: 'syz.2.2019': attribute type 10 has an invalid length. [ 398.309097][T11734] wlan1: mtu less than device minimum [ 398.314552][T11734] team0: Device wlan1 failed to change mtu [ 398.358883][T11734] .`: (slave team0): Error -22 calling dev_set_mtu [ 399.317930][T11755] FAULT_INJECTION: forcing a failure. [ 399.317930][T11755] name failslab, interval 1, probability 0, space 0, times 0 [ 399.331235][T11755] CPU: 1 PID: 11755 Comm: syz.1.2024 Not tainted syzkaller #0 [ 399.338733][T11755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 399.348814][T11755] Call Trace: [ 399.352109][T11755] [ 399.355056][T11755] dump_stack_lvl+0x18c/0x250 [ 399.359771][T11755] ? show_regs_print_info+0x20/0x20 [ 399.365006][T11755] ? load_image+0x420/0x420 [ 399.369537][T11755] ? __might_sleep+0xe0/0xe0 [ 399.374153][T11755] ? __lock_acquire+0x7d80/0x7d80 [ 399.379212][T11755] should_fail_ex+0x394/0x4c0 [ 399.383917][T11755] should_failslab+0x9/0x20 [ 399.388448][T11755] slab_pre_alloc_hook+0x59/0x300 [ 399.393503][T11755] ? tomoyo_encode+0x2ad/0x570 [ 399.398309][T11755] ? tomoyo_encode+0x2ad/0x570 [ 399.403109][T11755] __kmem_cache_alloc_node+0x53/0x250 [ 399.408531][T11755] ? tomoyo_encode+0x2ad/0x570 [ 399.409053][T11759] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2025'. [ 399.413309][T11755] __kmalloc+0xa7/0x240 [ 399.426438][T11755] tomoyo_encode+0x2ad/0x570 [ 399.431070][T11755] tomoyo_realpath_from_path+0x57c/0x5c0 [ 399.436744][T11755] ? tomoyo_domain+0xd6/0x120 [ 399.441459][T11755] tomoyo_path_number_perm+0x248/0x5e0 [ 399.446994][T11755] ? tomoyo_path_number_perm+0x217/0x5e0 [ 399.452664][T11755] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 399.458155][T11755] ? ksys_write+0x1d2/0x260 [ 399.462749][T11755] ? __fget_files+0x28/0x460 [ 399.467379][T11755] security_file_ioctl+0x70/0xa0 [ 399.472343][T11755] __se_sys_ioctl+0x48/0x170 [ 399.476956][T11755] do_syscall_64+0x55/0xb0 [ 399.481391][T11755] ? clear_bhb_loop+0x40/0x90 [ 399.486082][T11755] ? clear_bhb_loop+0x40/0x90 [ 399.490774][T11755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.496686][T11755] RIP: 0033:0x7f75d019de59 [ 399.501117][T11755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.520749][T11755] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.529467][T11755] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 399.537453][T11755] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 399.545442][T11755] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 399.553426][T11755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.561403][T11755] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 399.569404][T11755] [ 399.586785][ T51] Bluetooth: hci3: unknown advertising packet type: 0x15 [ 399.586853][ T51] Bluetooth: hci3: Dropping invalid advertising data [ 399.602114][ T51] Bluetooth: hci3: unknown advertising packet type: 0x44 [ 399.602142][ T51] Bluetooth: hci3: unknown advertising packet type: 0x2f [ 399.609032][T11755] ERROR: Out of memory at tomoyo_realpath_from_path. [ 399.609297][ T51] Bluetooth: hci3: Malformed LE Event: 0x02 [ 400.135253][T11770] netlink: 'syz.1.2029': attribute type 1 has an invalid length. [ 400.147479][T11770] netlink: 'syz.1.2029': attribute type 2 has an invalid length. [ 400.158173][T11770] netlink: 'syz.1.2029': attribute type 2 has an invalid length. [ 400.166332][T11770] netlink: 'syz.1.2029': attribute type 3 has an invalid length. [ 400.174933][T11770] netlink: 'syz.1.2029': attribute type 4 has an invalid length. [ 400.184482][T11770] netlink: 'syz.1.2029': attribute type 5 has an invalid length. [ 400.201593][T11770] netlink: 'syz.1.2029': attribute type 6 has an invalid length. [ 400.221454][T11770] netlink: 'syz.1.2029': attribute type 7 has an invalid length. [ 400.238817][T11770] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2029'. [ 400.391382][T11777] wlan1: mtu less than device minimum [ 400.401975][T11777] team0: Device wlan1 failed to change mtu [ 400.430464][T11777] .`: (slave team0): Error -22 calling dev_set_mtu [ 401.116342][T11796] wlan1: mtu less than device minimum [ 401.136480][T11796] team0: Device wlan1 failed to change mtu [ 401.158731][T11796] .`: (slave team0): Error -22 calling dev_set_mtu [ 401.285129][T11798] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2038'. [ 401.739103][T11809] FAULT_INJECTION: forcing a failure. [ 401.739103][T11809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.777853][T11809] CPU: 1 PID: 11809 Comm: syz.1.2044 Not tainted syzkaller #0 [ 401.785391][T11809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 401.795487][T11809] Call Trace: [ 401.797225][T11812] FAULT_INJECTION: forcing a failure. [ 401.797225][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 401.798792][T11809] [ 401.798850][T11809] dump_stack_lvl+0x18c/0x250 [ 401.819057][T11809] ? show_regs_print_info+0x20/0x20 [ 401.824273][T11809] ? load_image+0x420/0x420 [ 401.828795][T11809] ? __lock_acquire+0x7d80/0x7d80 [ 401.833834][T11809] ? __local_bh_enable_ip+0x13a/0x1c0 [ 401.839245][T11809] should_fail_ex+0x394/0x4c0 [ 401.843944][T11809] _copy_from_user+0x2f/0xe0 [ 401.848543][T11809] copy_from_sockptr+0x69/0x80 [ 401.853392][T11809] do_ipv6_setsockopt+0xde1/0x3e50 [ 401.858532][T11809] ? sk_dst_reset+0xa0/0xa0 [ 401.863045][T11809] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 401.868872][T11809] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 401.874628][T11809] ? mark_lock+0x94/0x320 [ 401.878971][T11809] ? __lock_acquire+0x1262/0x7d80 [ 401.884027][T11809] ? aa_label_sk_perm+0x4d4/0x660 [ 401.889070][T11809] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 401.894799][T11809] ? aa_sk_perm+0x970/0x970 [ 401.899331][T11809] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 401.905936][T11809] ? __might_sleep+0xe0/0xe0 [ 401.910533][T11809] ? ksys_write+0x1d2/0x260 [ 401.915067][T11809] ? aa_sk_perm+0x83c/0x970 [ 401.919579][T11809] ? __fget_files+0x28/0x460 [ 401.924198][T11809] ? __fget_files+0x28/0x460 [ 401.928793][T11809] ? aa_sock_opt_perm+0x74/0x100 [ 401.933738][T11809] ipv6_setsockopt+0x59/0x190 [ 401.938425][T11809] ? sock_common_recvmsg+0x190/0x190 [ 401.943720][T11809] do_sock_setsockopt+0x175/0x1a0 [ 401.948755][T11809] ? __fdget+0x180/0x210 [ 401.953012][T11809] __x64_sys_setsockopt+0x182/0x200 [ 401.958237][T11809] do_syscall_64+0x55/0xb0 [ 401.962660][T11809] ? clear_bhb_loop+0x40/0x90 [ 401.967338][T11809] ? clear_bhb_loop+0x40/0x90 [ 401.972019][T11809] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.977921][T11809] RIP: 0033:0x7f75d019de59 [ 401.982379][T11809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.001998][T11809] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 402.010424][T11809] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 402.018407][T11809] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 402.026379][T11809] RBP: 00007f75d106f090 R08: 00000000000000a1 R09: 0000000000000000 [ 402.034365][T11809] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 402.042346][T11809] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 402.050363][T11809] [ 402.054941][T11812] CPU: 1 PID: 11812 Comm: syz.2.2045 Not tainted syzkaller #0 [ 402.062428][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 402.072504][T11812] Call Trace: [ 402.075798][T11812] [ 402.078742][T11812] dump_stack_lvl+0x18c/0x250 [ 402.083450][T11812] ? show_regs_print_info+0x20/0x20 [ 402.088678][T11812] ? load_image+0x420/0x420 [ 402.093205][T11812] ? __might_sleep+0xe0/0xe0 [ 402.097817][T11812] ? __lock_acquire+0x7d80/0x7d80 [ 402.102872][T11812] should_fail_ex+0x394/0x4c0 [ 402.107582][T11812] should_failslab+0x9/0x20 [ 402.112114][T11812] slab_pre_alloc_hook+0x59/0x300 [ 402.117171][T11812] ? __lock_acquire+0x7d80/0x7d80 [ 402.122228][T11812] kmem_cache_alloc_node+0x5e/0x310 [ 402.127459][T11812] ? __alloc_skb+0x103/0x2c0 [ 402.132086][T11812] __alloc_skb+0x103/0x2c0 [ 402.136536][T11812] netlink_sendmsg+0x66a/0xbf0 [ 402.141339][T11812] ? netlink_getsockopt+0x590/0x590 [ 402.146660][T11812] ? apparmor_socket_sendmsg+0x8e/0x330 [ 402.152273][T11812] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.157584][T11812] ? security_socket_sendmsg+0x80/0xa0 [ 402.163069][T11812] ? netlink_getsockopt+0x590/0x590 [ 402.168300][T11812] ____sys_sendmsg+0x61b/0x980 [ 402.173101][T11812] ? __asan_memset+0x22/0x40 [ 402.177719][T11812] ? __sys_sendmsg_sock+0x30/0x30 [ 402.182773][T11812] ? __import_iovec+0x5f2/0x850 [ 402.187665][T11812] ? import_iovec+0x73/0xa0 [ 402.192203][T11812] ___sys_sendmsg+0x2a6/0x360 [ 402.196911][T11812] ? get_pid_task+0x20/0x1e0 [ 402.201543][T11812] ? __sys_sendmsg+0x2b0/0x2b0 [ 402.206361][T11812] ? __lock_acquire+0x7d80/0x7d80 [ 402.211440][T11812] __se_sys_sendmsg+0x1d0/0x2c0 [ 402.216303][T11812] ? __x64_sys_sendmsg+0x80/0x80 [ 402.221259][T11812] ? lockdep_hardirqs_on+0x98/0x150 [ 402.226459][T11812] do_syscall_64+0x55/0xb0 [ 402.230876][T11812] ? clear_bhb_loop+0x40/0x90 [ 402.235549][T11812] ? clear_bhb_loop+0x40/0x90 [ 402.240224][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.246115][T11812] RIP: 0033:0x7f213af9de59 [ 402.250526][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.270131][T11812] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.278545][T11812] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 402.286517][T11812] RDX: 000000000004a046 RSI: 0000200000000040 RDI: 0000000000000003 [ 402.294481][T11812] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 402.302452][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.310428][T11812] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 402.318415][T11812] [ 402.346767][T11813] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.2043'. [ 402.783648][T11824] wlan1: mtu less than device minimum [ 402.803217][T11824] team0: Device wlan1 failed to change mtu [ 402.812419][T11824] .`: (slave team0): Error -22 calling dev_set_mtu [ 403.435435][T11833] validate_nla: 20 callbacks suppressed [ 403.435455][T11833] netlink: 'syz.2.2052': attribute type 3 has an invalid length. [ 403.530140][T11833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2052'. [ 403.852943][T11841] FAULT_INJECTION: forcing a failure. [ 403.852943][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 403.885500][T11841] CPU: 0 PID: 11841 Comm: syz.0.2055 Not tainted syzkaller #0 [ 403.893022][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 403.903102][T11841] Call Trace: [ 403.906394][T11841] [ 403.909351][T11841] dump_stack_lvl+0x18c/0x250 [ 403.914076][T11841] ? show_regs_print_info+0x20/0x20 [ 403.919312][T11841] ? load_image+0x420/0x420 [ 403.923846][T11841] ? __might_sleep+0xe0/0xe0 [ 403.928457][T11841] ? __lock_acquire+0x7d80/0x7d80 [ 403.933501][T11841] should_fail_ex+0x394/0x4c0 [ 403.938203][T11841] should_failslab+0x9/0x20 [ 403.942729][T11841] slab_pre_alloc_hook+0x59/0x300 [ 403.947776][T11841] ? __get_vm_area_node+0x125/0x370 [ 403.952995][T11841] __kmem_cache_alloc_node+0x53/0x250 [ 403.958395][T11841] ? __get_vm_area_node+0x125/0x370 [ 403.963698][T11841] kmalloc_node_trace+0x26/0xe0 [ 403.968570][T11841] __get_vm_area_node+0x125/0x370 [ 403.973620][T11841] __vmalloc_node_range+0x36f/0x1320 [ 403.978918][T11841] ? netlink_sendmsg+0x602/0xbf0 [ 403.983873][T11841] ? netlink_insert+0x1094/0x1390 [ 403.988920][T11841] ? netlink_insert+0x2ba/0x1390 [ 403.993879][T11841] ? free_vm_area+0x50/0x50 [ 403.998411][T11841] ? netlink_sendmsg+0x602/0xbf0 [ 404.003364][T11841] vmalloc+0x79/0x90 [ 404.007272][T11841] ? netlink_sendmsg+0x602/0xbf0 [ 404.012244][T11841] netlink_sendmsg+0x602/0xbf0 [ 404.017048][T11841] ? netlink_getsockopt+0x590/0x590 [ 404.022267][T11841] ? apparmor_socket_sendmsg+0x8e/0x330 [ 404.027821][T11841] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 404.033118][T11841] ? security_socket_sendmsg+0x80/0xa0 [ 404.038589][T11841] ? netlink_getsockopt+0x590/0x590 [ 404.043803][T11841] ____sys_sendmsg+0x61b/0x980 [ 404.048590][T11841] ? __asan_memset+0x22/0x40 [ 404.053192][T11841] ? __sys_sendmsg_sock+0x30/0x30 [ 404.058238][T11841] ? __import_iovec+0x5f2/0x850 [ 404.063108][T11841] ? import_iovec+0x73/0xa0 [ 404.067621][T11841] ___sys_sendmsg+0x2a6/0x360 [ 404.072310][T11841] ? get_pid_task+0x20/0x1e0 [ 404.076911][T11841] ? __sys_sendmsg+0x2b0/0x2b0 [ 404.081712][T11841] ? __lock_acquire+0x7d80/0x7d80 [ 404.086776][T11841] __se_sys_sendmsg+0x1d0/0x2c0 [ 404.091642][T11841] ? __x64_sys_sendmsg+0x80/0x80 [ 404.096610][T11841] ? lockdep_hardirqs_on+0x98/0x150 [ 404.101824][T11841] do_syscall_64+0x55/0xb0 [ 404.106267][T11841] ? clear_bhb_loop+0x40/0x90 [ 404.110953][T11841] ? clear_bhb_loop+0x40/0x90 [ 404.115638][T11841] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.121542][T11841] RIP: 0033:0x7f9f29d9de59 [ 404.125969][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.145593][T11841] RSP: 002b:00007f9f2acfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 404.154024][T11841] RAX: ffffffffffffffda RBX: 00007f9f2a025fa0 RCX: 00007f9f29d9de59 [ 404.162004][T11841] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 404.169982][T11841] RBP: 00007f9f2acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 404.177966][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.185950][T11841] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 404.193948][T11841] [ 404.531162][T11847] netlink: 'syz.3.2056': attribute type 4 has an invalid length. [ 404.675032][T11847] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2056'. [ 404.867250][T11845] netlink: 'syz.1.2057': attribute type 4 has an invalid length. [ 404.939677][T11845] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2057'. [ 405.331595][T11857] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 405.355154][T11857] .3ãc¤±: mtu less than device minimum [ 405.370616][T11857] team0: Device .3ãc¤± failed to change mtu [ 405.372603][T11857] .`: (slave team0): Error -22 calling dev_set_mtu [ 405.897321][T11870] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2064'. [ 406.006065][T11870] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 407.260118][T11881] netlink: 'syz.0.2069': attribute type 4 has an invalid length. [ 407.285515][T11881] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2069'. [ 407.793358][T11894] netlink: 'syz.3.2071': attribute type 4 has an invalid length. [ 407.823808][T11894] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2071'. [ 408.589133][T11906] FAULT_INJECTION: forcing a failure. [ 408.589133][T11906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.697905][T11906] CPU: 0 PID: 11906 Comm: syz.2.2078 Not tainted syzkaller #0 [ 408.705437][T11906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 408.715516][T11906] Call Trace: [ 408.718825][T11906] [ 408.721774][T11906] dump_stack_lvl+0x18c/0x250 [ 408.727714][T11906] ? show_regs_print_info+0x20/0x20 [ 408.732944][T11906] ? load_image+0x420/0x420 [ 408.737473][T11906] ? __lock_acquire+0x7d80/0x7d80 [ 408.742536][T11906] should_fail_ex+0x394/0x4c0 [ 408.747269][T11906] _copy_from_user+0x2f/0xe0 [ 408.752004][T11906] __copy_msghdr+0x388/0x560 [ 408.756630][T11906] ___sys_sendmsg+0x214/0x360 [ 408.761351][T11906] ? __sys_sendmsg+0x2b0/0x2b0 [ 408.766171][T11906] ? __lock_acquire+0x7d80/0x7d80 [ 408.771252][T11906] __se_sys_sendmsg+0x1d0/0x2c0 [ 408.776133][T11906] ? perf_trace_preemptirq_template+0x269/0x330 [ 408.782411][T11906] ? __x64_sys_sendmsg+0x80/0x80 [ 408.787405][T11906] ? lockdep_hardirqs_on+0x98/0x150 [ 408.792642][T11906] do_syscall_64+0x55/0xb0 [ 408.797080][T11906] ? clear_bhb_loop+0x40/0x90 [ 408.801787][T11906] ? clear_bhb_loop+0x40/0x90 [ 408.806489][T11906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.812404][T11906] RIP: 0033:0x7f213af9de59 [ 408.816822][T11906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.836424][T11906] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.844837][T11906] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 408.852811][T11906] RDX: 0000000007000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 408.860792][T11906] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.868758][T11906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.876725][T11906] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 408.884705][T11906] [ 409.337422][T11926] netlink: 'syz.1.2082': attribute type 4 has an invalid length. [ 409.390534][T11926] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2082'. [ 409.748083][T11927] netlink: 'syz.2.2083': attribute type 4 has an invalid length. [ 409.807295][T11927] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2083'. [ 410.519765][T11936] netlink: 'syz.0.2085': attribute type 4 has an invalid length. [ 410.548360][T11936] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2085'. [ 411.215090][T11943] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2089'. [ 411.275864][T11945] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 411.293577][T11945] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 411.521514][T11950] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 411.585868][T11950] .3ãc¤±: mtu less than device minimum [ 411.611429][T11950] team0: Device .3ãc¤± failed to change mtu [ 411.627259][T11950] .`: (slave team0): Error -22 calling dev_set_mtu [ 414.812709][T11967] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 414.826179][T11971] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2098'. [ 414.942550][T11973] aaaaaaaaaaaaaaa: entered promiscuous mode [ 415.034213][T11979] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 415.640529][T11992] netlink: 'syz.2.2109': attribute type 4 has an invalid length. [ 415.657991][T11992] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2109'. [ 419.664561][T12025] netlink: 'syz.1.2120': attribute type 4 has an invalid length. [ 419.694253][T12025] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2120'. [ 420.016260][T12031] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 420.031482][T12031] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 420.044982][T12031] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 420.060810][T12031] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 420.969247][T12093] netlink: 'syz.0.2134': attribute type 10 has an invalid length. [ 420.995564][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.051897][T12092] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2135'. [ 421.107832][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.117001][T12093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.187092][T12093] team0: Port device bridge0 added [ 421.341650][T12098] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 421.390695][T12098] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.490840][T12098] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.499101][T12098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 421.585222][T12098] team0: Port device bridge0 added [ 422.855182][T12130] netlink: 'syz.3.2146': attribute type 16 has an invalid length. [ 422.879174][T12130] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2146'. [ 423.100083][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 423.693682][T12156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 423.737019][T12156] FAULT_INJECTION: forcing a failure. [ 423.737019][T12156] name failslab, interval 1, probability 0, space 0, times 0 [ 423.768539][T12156] CPU: 0 PID: 12156 Comm: syz.2.2153 Not tainted syzkaller #0 [ 423.776058][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 423.786136][T12156] Call Trace: [ 423.789435][T12156] [ 423.792383][T12156] dump_stack_lvl+0x18c/0x250 [ 423.797095][T12156] ? show_regs_print_info+0x20/0x20 [ 423.802327][T12156] ? load_image+0x420/0x420 [ 423.806858][T12156] ? __might_sleep+0xe0/0xe0 [ 423.811477][T12156] ? __lock_acquire+0x7d80/0x7d80 [ 423.816528][T12156] should_fail_ex+0x394/0x4c0 [ 423.821233][T12156] should_failslab+0x9/0x20 [ 423.825758][T12156] slab_pre_alloc_hook+0x59/0x300 [ 423.830824][T12156] ? fib_trie_table+0x33/0x1c0 [ 423.835639][T12156] ? fib_trie_table+0x33/0x1c0 [ 423.840424][T12156] __kmem_cache_alloc_node+0x53/0x250 [ 423.845824][T12156] ? fib_trie_table+0x33/0x1c0 [ 423.850612][T12156] __kmalloc+0xa7/0x240 [ 423.854828][T12156] fib_trie_table+0x33/0x1c0 [ 423.859442][T12156] fib_new_table+0x135/0x2d0 [ 423.864088][T12156] fib4_rule_configure+0x23c/0xaf0 [ 423.869287][T12156] ? __nla_parse+0x40/0x50 [ 423.873737][T12156] fib_nl_newrule+0x135e/0x1e40 [ 423.878711][T12156] ? fib_rules_seq_read+0xf0/0xf0 [ 423.883760][T12156] ? rcu_is_watching+0x15/0xb0 [ 423.888550][T12156] ? trace_contention_end+0x39/0xe0 [ 423.893802][T12156] ? fib_rules_seq_read+0xf0/0xf0 [ 423.898855][T12156] rtnetlink_rcv_msg+0x843/0xf90 [ 423.903820][T12156] ? rtnetlink_rcv_msg+0x220/0xf90 [ 423.908961][T12156] ? rtnetlink_bind+0x80/0x80 [ 423.913652][T12156] ? perf_trace_preemptirq_template+0xac/0x330 [ 423.919826][T12156] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 423.925821][T12156] ? lock_chain_count+0x20/0x20 [ 423.930681][T12156] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.936058][T12156] ? lockdep_hardirqs_on+0x98/0x150 [ 423.941257][T12156] ? __local_bh_enable_ip+0x13a/0x1c0 [ 423.946621][T12156] ? _local_bh_enable+0xa0/0xa0 [ 423.951472][T12156] ? __dev_queue_xmit+0x275/0x3630 [ 423.956586][T12156] ? __dev_queue_xmit+0x1bc2/0x3630 [ 423.961783][T12156] ? __dev_queue_xmit+0x275/0x3630 [ 423.966906][T12156] ? ref_tracker_free+0x686/0x830 [ 423.971947][T12156] netlink_rcv_skb+0x235/0x4c0 [ 423.976722][T12156] ? rtnetlink_bind+0x80/0x80 [ 423.981415][T12156] ? netlink_ack+0x1160/0x1160 [ 423.986192][T12156] ? __lock_acquire+0x7d80/0x7d80 [ 423.991223][T12156] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.996424][T12156] netlink_unicast+0x7b1/0x930 [ 424.001204][T12156] netlink_sendmsg+0x8d0/0xbf0 [ 424.005977][T12156] ? netlink_getsockopt+0x590/0x590 [ 424.011180][T12156] ? apparmor_socket_sendmsg+0x8e/0x330 [ 424.016735][T12156] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.022034][T12156] ? security_socket_sendmsg+0x80/0xa0 [ 424.027496][T12156] ? netlink_getsockopt+0x590/0x590 [ 424.032715][T12156] ____sys_sendmsg+0x61b/0x980 [ 424.037489][T12156] ? __asan_memset+0x22/0x40 [ 424.042075][T12156] ? __sys_sendmsg_sock+0x30/0x30 [ 424.047099][T12156] ? __import_iovec+0x5f2/0x850 [ 424.051959][T12156] ? import_iovec+0x73/0xa0 [ 424.056462][T12156] ___sys_sendmsg+0x2a6/0x360 [ 424.061141][T12156] ? get_pid_task+0x20/0x1e0 [ 424.065733][T12156] ? __sys_sendmsg+0x2b0/0x2b0 [ 424.070511][T12156] ? __lock_acquire+0x7d80/0x7d80 [ 424.075559][T12156] __se_sys_sendmsg+0x1d0/0x2c0 [ 424.080414][T12156] ? __x64_sys_sendmsg+0x80/0x80 [ 424.085364][T12156] ? lockdep_hardirqs_on+0x98/0x150 [ 424.090564][T12156] do_syscall_64+0x55/0xb0 [ 424.094980][T12156] ? clear_bhb_loop+0x40/0x90 [ 424.099651][T12156] ? clear_bhb_loop+0x40/0x90 [ 424.104324][T12156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 424.110217][T12156] RIP: 0033:0x7f213af9de59 [ 424.114629][T12156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.134236][T12156] RSP: 002b:00007f21391f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.142650][T12156] RAX: ffffffffffffffda RBX: 00007f213b225fa0 RCX: 00007f213af9de59 [ 424.150625][T12156] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003 [ 424.158591][T12156] RBP: 00007f21391f6090 R08: 0000000000000000 R09: 0000000000000000 [ 424.166557][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.174518][T12156] R13: 00007f213b226038 R14: 00007f213b225fa0 R15: 00007ffdc70cdb28 [ 424.182499][T12156] [ 425.929259][T12204] netlink: 'syz.2.2169': attribute type 4 has an invalid length. [ 425.937079][T12204] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2169'. [ 426.282838][T12210] netlink: 'syz.1.2172': attribute type 9 has an invalid length. [ 426.294916][T12210] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2172'. [ 428.016099][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2181'. [ 428.545044][T12252] FAULT_INJECTION: forcing a failure. [ 428.545044][T12252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.573095][T12252] CPU: 1 PID: 12252 Comm: syz.3.2187 Not tainted syzkaller #0 [ 428.580622][T12252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 428.590698][T12252] Call Trace: [ 428.593997][T12252] [ 428.596945][T12252] dump_stack_lvl+0x18c/0x250 [ 428.601661][T12252] ? show_regs_print_info+0x20/0x20 [ 428.606894][T12252] ? load_image+0x420/0x420 [ 428.611428][T12252] ? __lock_acquire+0x7d80/0x7d80 [ 428.616474][T12252] ? snprintf+0xe9/0x140 [ 428.620740][T12252] should_fail_ex+0x394/0x4c0 [ 428.625451][T12252] _copy_to_user+0x2f/0xa0 [ 428.629886][T12252] simple_read_from_buffer+0xe7/0x150 [ 428.635278][T12252] proc_fail_nth_read+0x1e8/0x260 [ 428.640338][T12252] ? proc_fault_inject_write+0x360/0x360 [ 428.645994][T12252] ? fsnotify_perm+0x271/0x5e0 [ 428.650765][T12252] ? proc_fault_inject_write+0x360/0x360 [ 428.656409][T12252] vfs_read+0x298/0x990 [ 428.660597][T12252] ? kernel_read+0x1e0/0x1e0 [ 428.665221][T12252] ? __fget_files+0x28/0x460 [ 428.669840][T12252] ? __fget_files+0x3fc/0x460 [ 428.674566][T12252] ? __fdget_pos+0x2a3/0x330 [ 428.679165][T12252] ? ksys_read+0x74/0x260 [ 428.683507][T12252] ksys_read+0x151/0x260 [ 428.687754][T12252] ? vfs_write+0x9a0/0x9a0 [ 428.692183][T12252] ? lockdep_hardirqs_on+0x98/0x150 [ 428.697377][T12252] do_syscall_64+0x55/0xb0 [ 428.701790][T12252] ? clear_bhb_loop+0x40/0x90 [ 428.706479][T12252] ? clear_bhb_loop+0x40/0x90 [ 428.711172][T12252] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.717068][T12252] RIP: 0033:0x7fcdaa55e68e [ 428.721490][T12252] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 428.741090][T12252] RSP: 002b:00007fcdab44dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 428.749497][T12252] RAX: ffffffffffffffda RBX: 00007fcdab44e6c0 RCX: 00007fcdaa55e68e [ 428.757461][T12252] RDX: 000000000000000f RSI: 00007fcdab44e0a0 RDI: 0000000000000004 [ 428.765427][T12252] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 428.773390][T12252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 428.781363][T12252] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 428.789380][T12252] [ 428.959496][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2190'. [ 429.188777][T12278] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 429.212174][T12278] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 429.703876][T12291] netlink: 'syz.2.2198': attribute type 10 has an invalid length. [ 429.722858][T12291] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2198'. [ 430.235110][T12308] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2209'. [ 430.415985][T12312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2201'. [ 430.534739][T12316] netlink: 'syz.0.2205': attribute type 11 has an invalid length. [ 430.546595][T12316] netlink: 184116 bytes leftover after parsing attributes in process `syz.0.2205'. [ 430.813732][T12321] netlink: 'syz.0.2208': attribute type 10 has an invalid length. [ 430.826717][T12321] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2208'. [ 430.838199][T12321] FAULT_INJECTION: forcing a failure. [ 430.838199][T12321] name failslab, interval 1, probability 0, space 0, times 0 [ 430.852174][T12321] CPU: 1 PID: 12321 Comm: syz.0.2208 Not tainted syzkaller #0 [ 430.859656][T12321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 430.869718][T12321] Call Trace: [ 430.873008][T12321] [ 430.875942][T12321] dump_stack_lvl+0x18c/0x250 [ 430.880652][T12321] ? show_regs_print_info+0x20/0x20 [ 430.885845][T12321] ? load_image+0x420/0x420 [ 430.890361][T12321] ? __might_sleep+0xe0/0xe0 [ 430.894976][T12321] ? __lock_acquire+0x7d80/0x7d80 [ 430.900025][T12321] should_fail_ex+0x394/0x4c0 [ 430.904717][T12321] should_failslab+0x9/0x20 [ 430.909229][T12321] slab_pre_alloc_hook+0x59/0x300 [ 430.914289][T12321] kmem_cache_alloc_node+0x5e/0x310 [ 430.919504][T12321] ? __alloc_skb+0x103/0x2c0 [ 430.924103][T12321] __alloc_skb+0x103/0x2c0 [ 430.928523][T12321] rtmsg_ifinfo_build_skb+0x83/0x260 [ 430.933809][T12321] ? neigh_carrier_down+0x22/0x30 [ 430.938864][T12321] ? ip6_route_dev_notify+0x9a/0x5b0 [ 430.944155][T12321] rtmsg_ifinfo+0x8c/0x1a0 [ 430.948594][T12321] netdev_state_change+0xfe/0x170 [ 430.953616][T12321] ? netdev_features_change+0xd0/0xd0 [ 430.958984][T12321] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 430.964879][T12321] ? mutex_is_locked+0x12/0x40 [ 430.969636][T12321] ? rtnl_is_locked+0x15/0x20 [ 430.974311][T12321] do_setlink+0x1010/0x3f40 [ 430.978819][T12321] ? nlmsg_parse_deprecated_strict+0x110/0x110 [ 430.984969][T12321] ? rcu_is_watching+0x15/0xb0 [ 430.989733][T12321] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 430.995545][T12321] ? mark_lock+0x94/0x320 [ 430.999873][T12321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 431.005849][T12321] ? __nla_validate+0x50/0x50 [ 431.010523][T12321] ? lock_chain_count+0x20/0x20 [ 431.015378][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.021531][T12321] ? lockdep_hardirqs_on+0x98/0x150 [ 431.026728][T12321] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.032894][T12321] ? validate_linkmsg+0x148/0x910 [ 431.037923][T12321] ? validate_linkmsg+0x719/0x910 [ 431.042949][T12321] rtnl_setlink+0x34c/0x4e0 [ 431.047453][T12321] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 431.052649][T12321] ? __lock_acquire+0x1262/0x7d80 [ 431.057719][T12321] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 431.062827][T12321] ? mutex_lock_nested+0x20/0x20 [ 431.067783][T12321] ? rtnl_dump_ifinfo+0x13c0/0x13c0 [ 431.072990][T12321] rtnetlink_rcv_msg+0x843/0xf90 [ 431.077930][T12321] ? rtnetlink_rcv_msg+0x220/0xf90 [ 431.083040][T12321] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 431.088846][T12321] ? rtnetlink_bind+0x80/0x80 [ 431.093523][T12321] ? perf_trace_preemptirq_template+0xac/0x330 [ 431.099678][T12321] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 431.105656][T12321] ? lock_chain_count+0x20/0x20 [ 431.110509][T12321] ? __local_bh_enable_ip+0x13a/0x1c0 [ 431.115875][T12321] ? lockdep_hardirqs_on+0x98/0x150 [ 431.121070][T12321] ? __local_bh_enable_ip+0x13a/0x1c0 [ 431.126434][T12321] ? _local_bh_enable+0xa0/0xa0 [ 431.131290][T12321] ? __dev_queue_xmit+0x275/0x3630 [ 431.136401][T12321] ? __dev_queue_xmit+0x1bc2/0x3630 [ 431.141622][T12321] ? __dev_queue_xmit+0x275/0x3630 [ 431.146773][T12321] ? ref_tracker_free+0x686/0x830 [ 431.151839][T12321] netlink_rcv_skb+0x235/0x4c0 [ 431.156623][T12321] ? rtnetlink_bind+0x80/0x80 [ 431.161301][T12321] ? netlink_ack+0x1160/0x1160 [ 431.166077][T12321] ? __lock_acquire+0x7d80/0x7d80 [ 431.171109][T12321] ? netlink_deliver_tap+0x2e/0x1b0 [ 431.176309][T12321] netlink_unicast+0x7b1/0x930 [ 431.181079][T12321] netlink_sendmsg+0x8d0/0xbf0 [ 431.185849][T12321] ? netlink_getsockopt+0x590/0x590 [ 431.191049][T12321] ? apparmor_socket_sendmsg+0x170/0x330 [ 431.196686][T12321] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 431.201968][T12321] ? security_socket_sendmsg+0x80/0xa0 [ 431.207424][T12321] ? netlink_getsockopt+0x590/0x590 [ 431.212623][T12321] ____sys_sendmsg+0x61b/0x980 [ 431.217392][T12321] ? __asan_memset+0x22/0x40 [ 431.221979][T12321] ? __sys_sendmsg_sock+0x30/0x30 [ 431.227002][T12321] ? __import_iovec+0x5f2/0x850 [ 431.231859][T12321] ? import_iovec+0x73/0xa0 [ 431.236367][T12321] ___sys_sendmsg+0x2a6/0x360 [ 431.241048][T12321] ? __sys_sendmsg+0x2b0/0x2b0 [ 431.245880][T12321] __se_sys_sendmsg+0x1d0/0x2c0 [ 431.250756][T12321] ? __x64_sys_sendmsg+0x80/0x80 [ 431.255708][T12321] ? syscall_enter_from_user_mode+0x2e/0x80 [ 431.261608][T12321] do_syscall_64+0x55/0xb0 [ 431.266023][T12321] ? clear_bhb_loop+0x40/0x90 [ 431.270694][T12321] ? clear_bhb_loop+0x40/0x90 [ 431.275363][T12321] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.281255][T12321] RIP: 0033:0x7f9f29d9de59 [ 431.285665][T12321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.305270][T12321] RSP: 002b:00007f9f2acfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.313679][T12321] RAX: ffffffffffffffda RBX: 00007f9f2a025fa0 RCX: 00007f9f29d9de59 [ 431.321646][T12321] RDX: 00000000240000c0 RSI: 00002000000000c0 RDI: 0000000000000009 [ 431.329620][T12321] RBP: 00007f9f2acfc090 R08: 0000000000000000 R09: 0000000000000000 [ 431.337609][T12321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.345577][T12321] R13: 00007f9f2a026038 R14: 00007f9f2a025fa0 R15: 00007ffcf6324998 [ 431.353558][T12321] [ 431.826880][T12338] netlink: 'syz.3.2213': attribute type 10 has an invalid length. [ 431.928429][T12338] team0: Port device .3ãc¤± removed [ 431.946689][T12338] .3ãc¤±: mtu less than device minimum [ 431.964058][T12338] .`: (slave .3ãc¤±): Error -22 calling dev_set_mtu [ 432.102983][T12348] netlink: 'syz.1.2218': attribute type 4 has an invalid length. [ 432.117927][T12348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2218'. [ 432.252388][T12358] netlink: 'syz.2.2221': attribute type 21 has an invalid length. [ 432.265341][T12358] C: renamed from team_slave_0 [ 432.285511][T12358] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2221'. [ 432.810630][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 432.903967][T12377] netlink: 'syz.0.2227': attribute type 10 has an invalid length. [ 432.962596][T12377] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.470786][T12384] netlink: 'syz.0.2231': attribute type 4 has an invalid length. [ 433.498080][T12384] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2231'. [ 434.371116][T12404] FAULT_INJECTION: forcing a failure. [ 434.371116][T12404] name failslab, interval 1, probability 0, space 0, times 0 [ 434.394373][T12404] CPU: 1 PID: 12404 Comm: syz.0.2237 Not tainted syzkaller #0 [ 434.402014][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 434.412097][T12404] Call Trace: [ 434.415396][T12404] [ 434.418340][T12404] dump_stack_lvl+0x18c/0x250 [ 434.423046][T12404] ? show_regs_print_info+0x20/0x20 [ 434.428275][T12404] ? load_image+0x420/0x420 [ 434.432831][T12404] ? __might_sleep+0xe0/0xe0 [ 434.437445][T12404] ? __lock_acquire+0x7d80/0x7d80 [ 434.442496][T12404] ? __fget_files+0x28/0x460 [ 434.447114][T12404] should_fail_ex+0x394/0x4c0 [ 434.451813][T12404] should_failslab+0x9/0x20 [ 434.456315][T12404] slab_pre_alloc_hook+0x59/0x300 [ 434.461361][T12404] kmem_cache_alloc+0x5a/0x2c0 [ 434.466122][T12404] ? getname_flags+0xbb/0x500 [ 434.470798][T12404] getname_flags+0xbb/0x500 [ 434.475304][T12404] user_path_create+0x25/0x50 [ 434.479980][T12404] bpf_obj_pin_user+0x159/0x350 [ 434.484854][T12404] ? file_end_write+0x159/0x250 [ 434.489761][T12404] ? verifier_remove_insns+0x1310/0x1310 [ 434.495407][T12404] ? __might_fault+0xaa/0x120 [ 434.500127][T12404] __sys_bpf+0x7be/0x890 [ 434.504415][T12404] ? bpf_link_show_fdinfo+0x390/0x390 [ 434.509809][T12404] ? lock_chain_count+0x20/0x20 [ 434.514678][T12404] __x64_sys_bpf+0x7c/0x90 [ 434.519097][T12404] do_syscall_64+0x55/0xb0 [ 434.523542][T12404] ? clear_bhb_loop+0x40/0x90 [ 434.528242][T12404] ? clear_bhb_loop+0x40/0x90 [ 434.533364][T12404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 434.539267][T12404] RIP: 0033:0x7f9f29d9de59 [ 434.543694][T12404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.563315][T12404] RSP: 002b:00007f9f2acdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 434.571758][T12404] RAX: ffffffffffffffda RBX: 00007f9f2a026090 RCX: 00007f9f29d9de59 [ 434.579751][T12404] RDX: 0000000000000018 RSI: 0000200000000780 RDI: 0000000000000006 [ 434.587747][T12404] RBP: 00007f9f2acdb090 R08: 0000000000000000 R09: 0000000000000000 [ 434.595735][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.603727][T12404] R13: 00007f9f2a026128 R14: 00007f9f2a026090 R15: 00007ffcf6324998 [ 434.611738][T12404] [ 434.960919][T12427] netlink: 'syz.1.2245': attribute type 4 has an invalid length. [ 434.989324][T12427] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2245'. [ 438.274558][T12446] netlink: 'syz.2.2252': attribute type 10 has an invalid length. [ 438.398240][T12446] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2252'. [ 438.518655][T12452] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 438.578006][T12452] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 438.981561][T12463] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 439.249143][T12469] netlink: 'syz.3.2257': attribute type 4 has an invalid length. [ 439.257004][T12469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2257'. [ 439.987824][T12489] netlink: 'syz.3.2263': attribute type 10 has an invalid length. [ 440.008330][T12489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2263'. [ 440.280808][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.290742][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.999253][T12503] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 443.063573][T12503] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 443.126176][T12503] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 443.136442][T12510] TCP: TCP_TX_DELAY enabled [ 443.228108][T12512] netlink: 'syz.1.2269': attribute type 4 has an invalid length. [ 443.238858][T12512] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2269'. [ 443.854733][T12530] netlink: 'syz.2.2276': attribute type 10 has an invalid length. [ 443.863176][T12530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2276'. [ 446.890181][T12537] FAULT_INJECTION: forcing a failure. [ 446.890181][T12537] name failslab, interval 1, probability 0, space 0, times 0 [ 446.917966][T12537] CPU: 0 PID: 12537 Comm: syz.1.2279 Not tainted syzkaller #0 [ 446.925490][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 446.935559][T12537] Call Trace: [ 446.938838][T12537] [ 446.941767][T12537] dump_stack_lvl+0x18c/0x250 [ 446.946462][T12537] ? show_regs_print_info+0x20/0x20 [ 446.951673][T12537] ? load_image+0x420/0x420 [ 446.956188][T12537] ? __might_sleep+0xe0/0xe0 [ 446.960782][T12537] ? __lock_acquire+0x7d80/0x7d80 [ 446.965807][T12537] should_fail_ex+0x394/0x4c0 [ 446.970491][T12537] should_failslab+0x9/0x20 [ 446.974997][T12537] slab_pre_alloc_hook+0x59/0x300 [ 446.980036][T12537] ? tomoyo_encode+0x2ad/0x570 [ 446.984805][T12537] ? tomoyo_encode+0x2ad/0x570 [ 446.989567][T12537] __kmem_cache_alloc_node+0x53/0x250 [ 446.994947][T12537] ? tomoyo_encode+0x2ad/0x570 [ 446.999709][T12537] __kmalloc+0xa7/0x240 [ 447.003872][T12537] tomoyo_encode+0x2ad/0x570 [ 447.008468][T12537] tomoyo_realpath_from_path+0x57c/0x5c0 [ 447.014101][T12537] ? tomoyo_domain+0xd6/0x120 [ 447.018782][T12537] tomoyo_path_number_perm+0x248/0x5e0 [ 447.024240][T12537] ? tomoyo_path_number_perm+0x217/0x5e0 [ 447.029875][T12537] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 447.035340][T12537] ? ksys_write+0x1d2/0x260 [ 447.039870][T12537] ? __fget_files+0x28/0x460 [ 447.044472][T12537] security_file_ioctl+0x70/0xa0 [ 447.049414][T12537] __se_sys_ioctl+0x48/0x170 [ 447.054008][T12537] do_syscall_64+0x55/0xb0 [ 447.058436][T12537] ? clear_bhb_loop+0x40/0x90 [ 447.063109][T12537] ? clear_bhb_loop+0x40/0x90 [ 447.067785][T12537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.073683][T12537] RIP: 0033:0x7f75d019de59 [ 447.078111][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.097724][T12537] RSP: 002b:00007f75d106f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.106140][T12537] RAX: ffffffffffffffda RBX: 00007f75d0425fa0 RCX: 00007f75d019de59 [ 447.114111][T12537] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000007 [ 447.122091][T12537] RBP: 00007f75d106f090 R08: 0000000000000000 R09: 0000000000000000 [ 447.130054][T12537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.138025][T12537] R13: 00007f75d0426038 R14: 00007f75d0425fa0 R15: 00007ffe952db5d8 [ 447.146010][T12537] [ 447.158071][T12537] ERROR: Out of memory at tomoyo_realpath_from_path. [ 447.314046][T12546] netlink: 'syz.0.2282': attribute type 4 has an invalid length. [ 447.338697][T12546] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2282'. [ 448.310505][T12574] netlink: 'syz.3.2290': attribute type 1 has an invalid length. [ 448.320832][T12574] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.2290'. [ 451.522385][T12589] netlink: 'syz.0.2296': attribute type 4 has an invalid length. [ 451.549556][T12589] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2296'. [ 451.926648][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 451.947463][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 451.956515][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 451.970282][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 451.978224][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 451.985799][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.106527][T12071] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.212283][T12071] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.441823][T12071] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.644271][T12071] team0: Port device netdevsim0 removed [ 452.652258][T12071] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.806323][T12593] chnl_net:caif_netlink_parms(): no params data found [ 453.333380][T12593] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.340846][T12593] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.349482][T12593] bridge_slave_0: entered allmulticast mode [ 453.356865][T12593] bridge_slave_0: entered promiscuous mode [ 453.469631][T12593] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.485664][T12593] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.509138][T12593] bridge_slave_1: entered allmulticast mode [ 453.516456][T12593] bridge_slave_1: entered promiscuous mode [ 453.739255][T12593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.852441][T12593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.039034][ T51] Bluetooth: hci1: command tx timeout [ 454.136007][T12593] team0: Port device team_slave_0 added [ 454.163026][T12593] team0: Port device team_slave_1 added [ 454.200562][T12671] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2314'. [ 454.347945][T12593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.367935][T12593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.452768][T12593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.492245][T12593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.518938][T12593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.561138][T12593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.823614][T12593] hsr_slave_0: entered promiscuous mode [ 454.836794][T12593] hsr_slave_1: entered promiscuous mode [ 454.843613][T12593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.853751][T12593] Cannot create hsr debugfs directory [ 455.033632][T12708] FAULT_INJECTION: forcing a failure. [ 455.033632][T12708] name failslab, interval 1, probability 0, space 0, times 0 [ 455.092602][T12708] CPU: 1 PID: 12708 Comm: syz.3.2322 Not tainted syzkaller #0 [ 455.100134][T12708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 455.110211][T12708] Call Trace: [ 455.113513][T12708] [ 455.116466][T12708] dump_stack_lvl+0x18c/0x250 [ 455.121171][T12708] ? show_regs_print_info+0x20/0x20 [ 455.126377][T12708] ? load_image+0x420/0x420 [ 455.130884][T12708] ? __lock_acquire+0x7d80/0x7d80 [ 455.135907][T12708] ? verify_lock_unused+0x140/0x140 [ 455.141104][T12708] should_fail_ex+0x394/0x4c0 [ 455.145782][T12708] should_failslab+0x9/0x20 [ 455.150287][T12708] slab_pre_alloc_hook+0x59/0x300 [ 455.155342][T12708] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 455.160885][T12708] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 455.166426][T12708] __kmem_cache_alloc_node+0x53/0x250 [ 455.171805][T12708] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 455.177342][T12708] __kmalloc+0xa7/0x240 [ 455.181502][T12708] bpf_prog_test_run_skb+0x242/0x18f0 [ 455.186876][T12708] ? __fget_files+0x28/0x460 [ 455.191465][T12708] ? __fget_files+0x3fc/0x460 [ 455.196153][T12708] ? cpu_online+0x60/0x60 [ 455.200479][T12708] bpf_prog_test_run+0x31f/0x390 [ 455.205442][T12708] __sys_bpf+0x49d/0x890 [ 455.209699][T12708] ? bpf_link_show_fdinfo+0x390/0x390 [ 455.215086][T12708] ? lock_chain_count+0x20/0x20 [ 455.219950][T12708] __x64_sys_bpf+0x7c/0x90 [ 455.224369][T12708] do_syscall_64+0x55/0xb0 [ 455.228788][T12708] ? clear_bhb_loop+0x40/0x90 [ 455.233459][T12708] ? clear_bhb_loop+0x40/0x90 [ 455.238130][T12708] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.244022][T12708] RIP: 0033:0x7fcdaa59de59 [ 455.248437][T12708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.268051][T12708] RSP: 002b:00007fcdab44e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.276472][T12708] RAX: ffffffffffffffda RBX: 00007fcdaa825fa0 RCX: 00007fcdaa59de59 [ 455.284447][T12708] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 455.292415][T12708] RBP: 00007fcdab44e090 R08: 0000000000000000 R09: 0000000000000000 [ 455.300383][T12708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.308351][T12708] R13: 00007fcdaa826038 R14: 00007fcdaa825fa0 R15: 00007ffd55f11c18 [ 455.316331][T12708] [ 455.451332][T12071] [ 455.453712][T12071] ====================================================== [ 455.460739][T12071] WARNING: possible circular locking dependency detected [ 455.467761][T12071] syzkaller #0 Not tainted [ 455.472172][T12071] ------------------------------------------------------ [ 455.479180][T12071] kworker/u4:29/12071 is trying to acquire lock: [ 455.485497][T12071] ffff88805f8ccd80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 455.495123][T12071] [ 455.495123][T12071] but task is already holding lock: [ 455.502477][T12071] ffff88801eb40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 455.512914][T12071] [ 455.512914][T12071] which lock already depends on the new lock. [ 455.512914][T12071] [ 455.523310][T12071] [ 455.523310][T12071] the existing dependency chain (in reverse order) is: [ 455.532316][T12071] [ 455.532316][T12071] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 455.540101][T12071] __mutex_lock+0x135/0xc80 [ 455.545127][T12071] ieee80211_open+0x144/0x200 [ 455.550322][T12071] __dev_open+0x2cb/0x430 [ 455.555167][T12071] dev_open+0xab/0x190 [ 455.559747][T12071] team_add_slave+0x709/0x2880 [ 455.565029][T12071] do_setlink+0xcde/0x3f40 [ 455.569956][T12071] rtnl_newlink+0x1848/0x2170 [ 455.575148][T12071] rtnetlink_rcv_msg+0x843/0xf90 [ 455.580595][T12071] netlink_rcv_skb+0x235/0x4c0 [ 455.585877][T12071] netlink_unicast+0x7b1/0x930 [ 455.591157][T12071] netlink_sendmsg+0x8d0/0xbf0 [ 455.596435][T12071] ____sys_sendmsg+0x61b/0x980 [ 455.601717][T12071] ___sys_sendmsg+0x2a6/0x360 [ 455.606908][T12071] __se_sys_sendmsg+0x1d0/0x2c0 [ 455.612279][T12071] do_syscall_64+0x55/0xb0 [ 455.617219][T12071] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.623630][T12071] [ 455.623630][T12071] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 455.631804][T12071] __lock_acquire+0x37ef/0x7d80 [ 455.637172][T12071] lock_acquire+0x19e/0x420 [ 455.642190][T12071] __mutex_lock+0x135/0xc80 [ 455.647208][T12071] team_del_slave+0x31/0x1b0 [ 455.652315][T12071] team_device_event+0x297/0xa30 [ 455.657770][T12071] notifier_call_chain+0x18f/0x380 [ 455.663401][T12071] unregister_netdevice_many_notify+0x1037/0x1910 [ 455.670332][T12071] unregister_netdevice_queue+0x2e9/0x330 [ 455.676568][T12071] _cfg80211_unregister_wdev+0x16d/0x580 [ 455.682798][T12071] ieee80211_remove_interfaces+0x4b3/0x690 [ 455.689117][T12071] ieee80211_unregister_hw+0x5d/0x2a0 [ 455.695039][T12071] mac80211_hwsim_del_radio+0x289/0x480 [ 455.701119][T12071] hwsim_exit_net+0x58d/0x650 [ 455.706312][T12071] cleanup_net+0x707/0xbb0 [ 455.711247][T12071] process_scheduled_works+0xa60/0x1600 [ 455.717310][T12071] worker_thread+0xa5e/0xfe0 [ 455.722418][T12071] kthread+0x2fa/0x390 [ 455.726999][T12071] ret_from_fork+0x48/0x80 [ 455.731931][T12071] ret_from_fork_asm+0x11/0x20 [ 455.737234][T12071] [ 455.737234][T12071] other info that might help us debug this: [ 455.737234][T12071] [ 455.747454][T12071] Possible unsafe locking scenario: [ 455.747454][T12071] [ 455.754893][T12071] CPU0 CPU1 [ 455.760249][T12071] ---- ---- [ 455.765604][T12071] lock(&rdev->wiphy.mtx); [ 455.770104][T12071] lock(team->team_lock_key#2); [ 455.777569][T12071] lock(&rdev->wiphy.mtx); [ 455.784587][T12071] lock(team->team_lock_key#2); [ 455.789529][T12071] [ 455.789529][T12071] *** DEADLOCK *** [ 455.789529][T12071] [ 455.797661][T12071] 5 locks held by kworker/u4:29/12071: [ 455.803111][T12071] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 455.814002][T12071] #1: ffffc90003437d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 455.824529][T12071] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 455.833934][T12071] #3: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 455.843765][T12071] #4: ffff88801eb40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 455.854553][T12071] [ 455.854553][T12071] stack backtrace: [ 455.860429][T12071] CPU: 1 PID: 12071 Comm: kworker/u4:29 Not tainted syzkaller #0 [ 455.868143][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 455.878191][T12071] Workqueue: netns cleanup_net [ 455.882961][T12071] Call Trace: [ 455.886235][T12071] [ 455.889160][T12071] dump_stack_lvl+0x18c/0x250 [ 455.893841][T12071] ? load_image+0x420/0x420 [ 455.898343][T12071] ? show_regs_print_info+0x20/0x20 [ 455.903548][T12071] ? print_circular_bug+0x12b/0x1a0 [ 455.908747][T12071] check_noncircular+0x2fc/0x400 [ 455.913688][T12071] ? print_deadlock_bug+0x5d0/0x5d0 [ 455.918880][T12071] ? lockdep_lock+0xf5/0x230 [ 455.923469][T12071] ? perf_trace_lock+0xfc/0x3b0 [ 455.928323][T12071] ? _find_first_zero_bit+0xd6/0x100 [ 455.934968][T12071] __lock_acquire+0x37ef/0x7d80 [ 455.939870][T12071] ? verify_lock_unused+0x140/0x140 [ 455.945074][T12071] ? verify_lock_unused+0x140/0x140 [ 455.950279][T12071] ? __up_read+0x2b8/0x6b0 [ 455.954705][T12071] lock_acquire+0x19e/0x420 [ 455.959208][T12071] ? team_del_slave+0x31/0x1b0 [ 455.963981][T12071] ? __might_sleep+0xe0/0xe0 [ 455.968572][T12071] ? read_lock_is_recursive+0x20/0x20 [ 455.973951][T12071] __mutex_lock+0x135/0xc80 [ 455.978453][T12071] ? team_del_slave+0x31/0x1b0 [ 455.983220][T12071] ? __mutex_lock+0x30d/0xc80 [ 455.987893][T12071] ? team_del_slave+0x31/0x1b0 [ 455.992654][T12071] ? mutex_lock_nested+0x20/0x20 [ 455.997604][T12071] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 456.003263][T12071] team_del_slave+0x31/0x1b0 [ 456.007856][T12071] team_device_event+0x297/0xa30 [ 456.012791][T12071] notifier_call_chain+0x18f/0x380 [ 456.017910][T12071] unregister_netdevice_many_notify+0x1037/0x1910 [ 456.024341][T12071] ? unregister_netdevice_many+0x20/0x20 [ 456.029981][T12071] ? kernfs_remove_by_name_ns+0x117/0x150 [ 456.035701][T12071] ? __lock_acquire+0x7d80/0x7d80 [ 456.040730][T12071] unregister_netdevice_queue+0x2e9/0x330 [ 456.046452][T12071] ? list_netdevice+0x730/0x730 [ 456.051305][T12071] ? kernfs_remove_by_name_ns+0x117/0x150 [ 456.057030][T12071] _cfg80211_unregister_wdev+0x16d/0x580 [ 456.062664][T12071] ieee80211_remove_interfaces+0x4b3/0x690 [ 456.068470][T12071] ? ieee80211_do_stop+0x1df0/0x1df0 [ 456.073749][T12071] ? rcu_is_watching+0x15/0xb0 [ 456.078518][T12071] ieee80211_unregister_hw+0x5d/0x2a0 [ 456.083896][T12071] mac80211_hwsim_del_radio+0x289/0x480 [ 456.089454][T12071] ? rhashtable_remove_fast+0xc00/0xc00 [ 456.095008][T12071] hwsim_exit_net+0x58d/0x650 [ 456.099683][T12071] ? hwsim_init_net+0x90/0x90 [ 456.104356][T12071] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 456.110264][T12071] cleanup_net+0x707/0xbb0 [ 456.114683][T12071] ? ops_free_list+0x3b0/0x3b0 [ 456.119453][T12071] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.124652][T12071] ? process_scheduled_works+0x975/0x1600 [ 456.130375][T12071] ? process_scheduled_works+0x975/0x1600 [ 456.136101][T12071] process_scheduled_works+0xa60/0x1600 [ 456.141662][T12071] ? worker_attach_to_pool+0x370/0x370 [ 456.147123][T12071] ? assign_work+0x3cc/0x5d0 [ 456.151716][T12071] worker_thread+0xa5e/0xfe0 [ 456.156326][T12071] kthread+0x2fa/0x390 [ 456.160389][T12071] ? pr_cont_work+0x550/0x550 [ 456.165063][T12071] ? kthread_blkcg+0xd0/0xd0 [ 456.169645][T12071] ret_from_fork+0x48/0x80 [ 456.174058][T12071] ? kthread_blkcg+0xd0/0xd0 [ 456.178644][T12071] ret_from_fork_asm+0x11/0x20 [ 456.183415][T12071] [ 456.199333][ T51] Bluetooth: hci1: command tx timeout [ 456.216930][T12071] team0: Port device wlan1 removed [ 456.362852][T12071] hsr_slave_0: left promiscuous mode [ 456.372309][T12071] hsr_slave_1: left promiscuous mode [ 456.378369][T12071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.385860][T12071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.394675][T12071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.402133][T12071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.409909][T12071] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 456.416957][T12071] batman_adv: batadv0: Removing interface: virt_wifi0 [ 456.424276][T12071] bridge_slave_0: left allmulticast mode [ 456.431296][T12071] bridge_slave_0: left promiscuous mode [ 456.436945][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.446577][T12071] veth0_macvtap: left promiscuous mode [ 456.603683][T12071] team0 (unregistering): Port device team_slave_1 removed [ 456.627127][T12071] team0 (unregistering): Port device C removed [ 456.659002][T12071] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.691874][T12071] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 456.717177][T12071] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 456.805959][T12071] .` (unregistering): (slave bridge0): Releasing backup interface [ 456.819929][T12071] .` (unregistering): Released all slaves [ 457.208908][T12593] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.222584][T12593] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.241926][T12593] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.254007][T12593] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.322418][T12593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.350399][T12593] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.363170][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.370295][T12071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.384765][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.391928][T12071] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.576620][T12593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.617274][T12593] veth0_vlan: entered promiscuous mode [ 457.630836][T12593] veth1_vlan: entered promiscuous mode [ 457.664057][T12593] veth0_macvtap: entered promiscuous mode [ 457.674641][T12593] veth1_macvtap: entered promiscuous mode [ 457.696888][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.709073][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.718950][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.734111][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.744040][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.755093][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.766101][T12593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.782104][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.798113][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.808215][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.819088][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.829142][T12593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.839806][T12593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.853734][T12593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.873227][T12593] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.882401][T12593] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.892487][T12593] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.903535][T12593] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.950244][T12593] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht' [ 457.980357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.986814][T12593] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 457.994070][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.024212][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.033503][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.268185][ T51] Bluetooth: hci1: command tx timeout [ 460.347905][ T51] Bluetooth: hci1: command tx timeout [ 460.348135][ T5810] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec