last executing test programs: 4.154672243s ago: executing program 2 (id=21875): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x922000000001, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f00000002c0)=r1, 0x8) 3.745858991s ago: executing program 2 (id=21877): r0 = socket$kcm(0x10, 0x1, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb3", 0x38}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0xc, 0xc}, 0x20) r4 = socket$kcm(0x2, 0xa, 0x2) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffd}, 0x40002140) mkdir(&(0x7f00000000c0)='./file0\x00', 0x18) ioctl$SIOCSIFHWADDR(r4, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="140000002e000b12d25a80648c2594f90224fc6040adca0952a0335683", 0x1d}], 0x1}, 0x20000080) 3.356162803s ago: executing program 2 (id=21880): socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x49a29a89}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0x8, 0x100000001}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) socket$kcm(0x11, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.109477624s ago: executing program 2 (id=21885): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000040), 0x60}, 0x0) (fail_nth: 4) 2.690023949s ago: executing program 1 (id=21892): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffff, 0x0, 0xfffffffc, 0xb}, {0x2, 0xfffffffd}], 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='^+,!z,-\x00l\x87Z\x03\x1c\x88\xdeW\x06\xf1/9`s[\xdc\xf6\x91\xc9\xe6\xfdEP\xe8~n\xd9er\xfe\xd5\x14\xf8\xef\xce\x03\x1d\x83I\xf5\xc8g}\xbff\x99') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000800)={'batadv_slave_1\x00', 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000119b681c631023252cf2d60d0c0000000c0000000200000000000001000000040000000000000d7f0a564f30fd730721818cf0b0244fd2235ff5f21a709f12be29c83d51db0f60fc2d1cb2c6a29ee30136be0b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x200}, 0xffffffffffffffb8}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r7}, 0x18) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0xe0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000c80)=""/221, 0xdd}, {&(0x7f00000028c0)=""/4035, 0xfc3}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/131, 0x83}], 0x6}, 0x120) 2.479612757s ago: executing program 1 (id=21895): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) 2.266565184s ago: executing program 1 (id=21897): r0 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, 0x0, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) syz_clone(0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004804) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x23, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x23a}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}, @exit, @ringbuf_query, @tail_call, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x6c, 0x67, &(0x7f0000000140)=""/103, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x0, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r5, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50", 0xc}], 0x1}, 0x20040000) 1.841997479s ago: executing program 2 (id=21899): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_int(r5, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x111c40, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r7, r7, 0x2f, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}, 0x1000e0c9) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x0) 1.621302125s ago: executing program 2 (id=21900): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0xa1040, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext, 0x0, 0x0, 0x100000, 0x8, 0x2, 0x0, 0x82, 0x0, 0x7, 0x0, 0x3ff}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x5) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x642bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x10, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x801, 0x800}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x9, 0x6, 0x63, 0x0, 0x10000, 0x1110, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xbf7, 0x4, @perf_config_ext={0x9, 0x7f}, 0x4140, 0x8, 0x80000000, 0x8, 0x3, 0xffff, 0xb448, 0x0, 0x321, 0x0, 0x80000001}, 0x0, 0xc, 0xffffffffffffffff, 0xa) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) socket$kcm(0x2, 0x200000000000001, 0x106) r6 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x0, 0x40, 0x43, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0x0, 0x1, 0x7, 0x4, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, 0x0, 0x3, 0xffffffffffffffff, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, 0x0) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.621086115s ago: executing program 3 (id=21901): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11490d, 0x4, 0x400000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x8, 0x1, 0x6, &(0x7f00000000c0)) 1.44354343s ago: executing program 1 (id=21902): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x9a) 1.44311681s ago: executing program 3 (id=21903): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffff, 0x0, 0xfffffffc, 0xb}, {0x2, 0xfffffffd}], 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='^+,!z,-\x00l\x87Z\x03\x1c\x88\xdeW\x06\xf1/9`s[\xdc\xf6\x91\xc9\xe6\xfdEP\xe8~n\xd9er\xfe\xd5\x14\xf8\xef\xce\x03\x1d\x83I\xf5\xc8g}\xbff\x99') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000800)={'batadv_slave_1\x00', 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000119b681c631023252cf2d60d0c0000000c0000000200000000000001000000040000000000000d7f0a564f30fd730721818cf0b0244fd2235ff5f21a709f12be29c83d51db0f60fc2d1cb2c6a29ee30136be0b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x200}, 0xffffffffffffffb8}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r7}, 0x18) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0xe0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000c80)=""/221, 0xdd}, {&(0x7f00000028c0)=""/4035, 0xfc3}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/131, 0x83}], 0x6}, 0x120) 1.267714764s ago: executing program 0 (id=21905): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) 1.266957474s ago: executing program 3 (id=21906): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000100)="1f7a149fc15afde5b3403f50", 0xc}], 0x1}, 0x20040000) (fail_nth: 2) 1.060330553s ago: executing program 1 (id=21907): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1000000000000000100100000e00000018000000000000001001000001"], 0x28}, 0x0) r2 = socket$kcm(0x29, 0xf, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f00000000c0)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="f4cc44257611c73e3256f7af32c61b04dd8aa903d13470f5da5307e27e0341fcc1141409ea992e06f54a572602d583af191c08f5c689ef1b8340ddd3e533f844bd1b7f4664e0b71c", 0x48}, {&(0x7f0000000200)="3962245b8cf3298018c481e9566f6ce7e3e8f6d4d45f7dd3289f2f0b057b152f07889e3c74d86c0f2d62a5592cdfa046de47ee2b389c112f3fa40df43640484fde3ee64d354b921bdc73e8625c9cb1b2ca21ddc7817b51748f0611c42a9a6638c2", 0x61}, {&(0x7f0000000500)="063182c70ee8c71bbda89bc0daea3f4d1eff34179889d0e540d4dbfca75200fafb7cd4afb1fd5d338427d96861843ffce4811b52199490a6afce8d9dfd50a3f0575866c1b5249e340c55ec1e1ec2beb84c745cb7c99fe2f51a44e3f222b659987e7b000c2680b005b611dba1bc303c92d5eb1474f60d178db7e39f367177fb42d1ff3c816de1d1371ea2e1b9e17ca8283d22f8585d831b0772a8bd5fb93fe926f4eabd53fd534845755a8fc683e52c030b72af1cfeb99e7558cc10e604846cfec0b9ca82b57dd1b0342ce3a87f45a5e81b715112d30cf6695225", 0xda}, {&(0x7f0000000280)="273855bad1c5eeeae09fd23d1cc7db4b9f0d332474513d1e0ffe60a8726e34e833816f09fbaf2070b0c2f6ee4fffb1af1eb6458033346b639b595aa085e29f4fb064effa319c2beabc0418e6abc4fca4d3c156d5c01a0ccca4e41069d4dab23a9c42c7f1d256ffbfe97fcb0fb01b3b019033118b406068853813f0a5b6cb0992daaecd907e7d847a9cd68ad61d0775f7717be3f17ee6e260784c239f0f10a64a24c0f8c146390b79e742d2306bb32f9bb77bc5571fc219e226a357cf206a95a0", 0xc0}, {&(0x7f0000000740)="8472279c0d196687a5e20b68d610cc321bc12ee2c90e1a8678cb513ff9490031e1951cb3ee3329944facd3f36407c568c0d4cdd46d4fabd8a57e840aab54c85401377947d95cfc12ed930323f3f3207d12d5500c53ca97bbb8e47d003e6ffa9a274df469019ff854d0155a511cdf0755ce86cfd7c09fbbc871047e07394e5b2a1ded4262cd08f5863a40cbc1e63ddc9c8b0c60dbd0f8b03a592efba23a8b20f6a267dcf77fb50641ac1b87a4d41763c3424346", 0xb3}, {&(0x7f00000019c0)="aeaa6676e9def0b46a39430d076e514c53d0984177a6f4d227cdcdc496160d4a81165eb21aaec7f76c7760c52d98dfbdacd14b7978712b8a20a479dd99539f0a8ef2a1be08b17f3fa7d21dbee0783e815ab0acbc3f89575f234427e129f13cef0f81cc88d42e1f30a84aad1ccd54627914d197546d0e6f35dbd61df60913c006c0e178efe3456a604a9667fc563bb63e87ca7a87386586547d0577f990d7cbf5636fbaabf2bc62dc1a1567cf284d5f9b0f0d1548aa01e66b73050dd66af323a0145121e1fb5ed589dec80f99098554914feff455acfd4cde36769b6f00166ec37247ac8a4e8be81f92966d51fb4abc6fcaee56200a464248be456af3a4fa067d15aeb41b4f6fd856876cbff164b696c8c69df9652799fca6f9eb6c77786b0aaaa7f4557be0c75758c222fe69f081d2126267c222aebf81894e41377ad2fa3cc4ce15a6252cb30d6d511176d0dd583d1ed59da3bcfa0a41b25032137d2666b05172006678c5d263052db4c3a566a48d127ae69fd3fecc9f9a139ac893fe2ecdaf9db4e1a7fbb8322f2d9d1d570182fb03d8f14c2c1e7efde525a2b62a153961599657ebe51cd9d07f0702789f969ef1327d0951c614c8cc2f0e35d695b2f25c7a2288d96787a34ae79c549b298a58274c3464fdf5d560669bf19e9ddd6e76d50069f56e785f5752153338ae15b6d9736bd660dbafad417f089ca56bbe5d4e14532a83d2d42149b53de2e5925f5da59affd2e6c30f6c6c4edfac56f38ec82456519038a1776d61e858d117d9afd94673ff31e134213cc70433f54d2e5e45c179834dbc96bdc5e94aa280f0a9137251af43067a302eca01cb71319455bdb6e329ecc83c148d9beabeabec93401beb78b304220b41de1eb9a48bd2fa7959bb74ee0e29d998b982c5c30c127360f62cdeeb7981e82d5919264252d4a77bb6aaa08c89f67ab055dd9ebda4b8436097a254bbbc0942132a6e7438f4c42fe3a290d28e00b3499226f433f87579bc52a4ea146b704bbadc4775f7d826bdba4ba43c4b5ee72dad53e13a40c0b131599af31824b55dcbe47ca7dee6accf1baa313fec81cfd7da900bcd6c101e991d0475940cbcea246140cc7cd507b42943efbcfd538045af51f3c8bf6d42f52ca8bbf0fc141db6a641858d4e75ba401ece6d86d9c6480ae647dd6b83ac25e697c9639e29a901304371a4dca104083109e7ebe44e0e79cec4f2ba95809da25752ddf085b9744dacf089c1a13c279791b897590bb887f6225af8778622a5751266add16469da8e865176ecfb4679044e114d49ee32f069a2b98e270e590c279494644b77580fe8be62279937aa5f1e500ed7ccc087fd53a62dbc70bad9fcd17a66a988d54a461ee508e6531c90f294ce0c0f425050d2b7c409242c62d7ffa82706c4db114c27374e37d97ad9725f3826e654e783b02d797e4bb5b6ca9980af66b3d1934ac8ddddb34ce02b571f95383f2dcff49a278668370dac3aa8542020ef517ede1946557bcd7a134fe89d1fd4dde6ca45995e72ea1e209baffdeda6c7cf74567d823cb339b3e046228c19c42c2d833c3521fb78be555bc64378feeab94514ef7a4a42f4a879a0abb6c902ecec8204a9d07f4edeca9f3c282b390e9d0ff063cf7008e4fefbf6543b2d99c3e9aaa807b4dc30aa2a5411d30d0caac130c4a7ce02f75d61839faca834bf56d95ad799c528ba082e3c39d4879e3b27d2951eca3da117e8acffb058c838fe4fd893a15c4d6122e290be352d0fe17e0d9f55b6a0e08070397c2ebe3145f152867cfd42fafbad4091bcedb4c145b289cfb7101ddcdf29b57f2604e835878dc9e1380db9a42ae2b536da9b6cdd679572524c538eaeb9e92199843cf2d983c788811e4bf947ac0bc9825691b462fb27673023dde0860f406539b1832847ea051856dcd35296eb1f88bc6fbe82108d7152f0f829e3c64b87b2c92db863e2b79c93bf4e069fe28904ab779ec33a57ca9474763744e1192abf99cd946c9470e0c1b679aec8de2dbed0564ace2d08e13e31a7b045e8d041726b5205d9ac5b978277eaadaeca62cd8eb9e7456bda52649f63c93ff37bb22a76b6ae737d7be8295e4940774e6a26d76296adcf70a2220a5040bf21f54ea507091ec68cbc1f4486a3fbddc586a3a4c8ee296ea22ae5d178c06d00ab93a392d75f462599a1a4ab16e9dfe9332fd6612bb3abea3c7c7aab16f2f847a2dd09871f4db2b7ff7cf98074c3bab10245e1219bbefb39726b3c00fbfeaf296081c772ff0c871d15a98ee0eb3c7501da905b04c6dbf7c415662b0173fca1cfb2d78b3905687f69509a4c72cef0b9c87185316810964021d95096f0708ff145e7e06ef5f160671df2cd1a91b46b1a7d12950c22c7e46f59f73f7e8bb40c90bfa420759853843c5393fd08e0e82761bec1757216537ea88c4e7e9702b75ec5f0e898680f76bd0904293a1453f210552ccc2ce0feb6d34736fd52481a255289824f155d5a8aa7d39f92ce6b9876467dd9820b9ff7adbce64e70b711301894b0a59ff54a4a73cae687d025c9927aac7fc3d9066b3c5800194f53d5da7933b52506bbc84ea09ecdcb94963c2dd2734ef14820357e66d4806f9448bdb126905642c75058fb81011b2e35b5a12a6d45ed5036a55ec4c16ead4c19d9025d4f259dc545b8eaad38e3ef9076ea194f618901c58207bf902f64e81db544ec062ad963630b15c414e022fab8d9a515426f733818736432d9b6a2fd2aea7484817d8cdcd34aa0f07692310849a80a7a67c575b925e79b78720c83720df9c2517f186e597951b7ea583861da3171ba07e179b954f1853eef374a987b6981a3ed746b1e8784cb64100dfa29766c14ca69e6b8fbe709033018f48b195afd1d6ebfd74cd6a7ee2e1f6adbe169180eec271c12a8b3907f5e54695718d92db22bf2aa772e31dd76bfb755b895b30eaf8dcdcfbe04d87cf59c5426ef2503357a9a04395e3822b40e123d6edb8670f346fb51670238ca8b34074df4fdc3702b8ad05f9b72a22db2edfcc949f09b21b4d3e5bb7eae74390587f8758e4bd9ec8edacdf265c56553814868601147af7c17a01c313d6d7bee93156650f6e6b09e1e332a45e2153e6e236178f52ba5d9c22a1a3f9302656cb902ddaddbfcf43c6d28cc5f0f357cdbc21789d7be26b1787403db5e940ec34e092722ebd6e85369cfa2fc0ac251f75209aa99d866ade428ab00995b4ebd7e29d7390496617032d5df99cf645448f59bc58ba6ad23a6b1470f55ad901b769fc0743865afa392802e6011a55d6abf1eca07798168f6bc79ced5e232dc6606fe6a3f870a42eb97546e69fb44acdf15eae45662fe45b2b28079cdd6d40c696fd2d57ea08e901ddc6688425641b7b262981bcd7a31d3fc983e718e56b25af6292ded4ead75c7023486489c3a0426bb96f7e2295e0b42c1c42fe9a6b7237009203738b345c9699ede771c30ecace9dae363fdd1305b66bf4c77e7cbcc53e9cc6f4f5b2bbe5907d6b9ed13860f43f342f1528b0a7e4895978835d72cfe9eb7795e9605dc889990974f56166191b81f4a9b399db16d3337b0ebc97563877ca22004c06a8a211efe0b3f648625d5ea0de0cf3a0a05aa84a587d70264dd2842d9dfbc0e6a55ea73422596b234b91d4f70e29a8e0d19ee891d99fccae209918360644c39d81ef9ffbf572d0712493e63d6c9da721df1c4536e52f8927de4d60f0f16c6cee5cb60652f5da73d99d4caf442cc40bca97d6cceadfaf8bdcfa1514269d4c50b4cab4cd8853d54b0179e4082a5056d585fcac46c2c1dbbca3a574bc7d1f67a9ad05e1ffb6068b1ea321e215228aa68585aedc15706d87964e70f77e7fd51dd1c2d890638a95abc0fe812569db3843f117c0d19bb2351c6540ec85af5ff71f1668b909177bd23e361216606cb911c3ec3ea8725f0f9a1dffed22d01aee95cb7162731c7d3832d969b679396b2c18435422e8eec991329b01826b03f157e10453cf30de2575fa17b14708ca988510f5c97d082dec23169d70e2637957be37fa6e998343cda6005ed659a84069b45b15b9f4282b8d2656d3b56b312e29ab29347034956f65ab4de85cd7116b43b64570b619371720d89d50eee4def825a0fb86b0031e1e31c723f7b271ee146aead29f39013c62cb5ce41b62286fad11de8ac03d897e6d50658c4712933359cf7a7e6e05ef1325d65ad12e92ab709f32ebb987c3dd6fa7b5274e33e02a73d512e9a60eaf8e9a8bada3541992e9e3ec5b193dcb22c5f2983e0bd58d80ff049cd80b09569d390ea9bd4388253cd08d88977d5b15377772f518e8ed819fb2fbed9eb89cdc0b4e8578c2d92d0a57e6734e7807e31d3916eede7f46fcc17c39f35f433587062d046725578efe7d652416e2b6001afa56173591b6e5980bfee70b8f0b4c57eb8439a0568748a4bcf63c92100a8bb4a71c62963a1b6dda5d1c27b88fcf07b81ce5209f3da9be28ce1e9ab9a588d1b206676b67ee4b4331f8843a86a3ef23caa47791a1f6a00b66e0a5e31af65a612f962cbae0dc5ec0cfc49c86cc55ea7e6c31e21ca5b3a43595156ee0e0a45ab0d6db5c62a51988dc2544f82fe81fd35fafc5526ba43c9294d6da10ea3f880bb03606c36a33681401789f2b1cddfc16ab6013511f72496b0fd782212673c109e772b2f3932b0e5fb3dea6c85eb2a2bb2213d09ad6439875767083d010ba7a6d73c66e9ee3dee9036884fdf8e90bed19a05be42509f87a80b453621258cf92af3a44ad6ee61d8e9139cd249f8b8473abc7c3f7390e898491510387f921b7167d9117c95df7561d9eba221e736f760d4c22cf18da05415fcb4e08ebef872bb9e7b00c0bdc260eb4b3a3d5da151765422aa9c77b736f89440151d0a2eaf7b3de52271e293e0ae57f9ca06a3d4a4e2374bab576e98a54e67df2b5a4852fcda4f60103b2ec66777c0b6ef21de1fc805c245a90319ce48379c5e2163d1439d7281dc0cee66fd86079d603b69c895bfefeaa62de4f6f080fcd0eb4f82ceac79ab9efcaa16bad9ccf8cc2aee746ea256470333b885588a206c9015930d2614248fdf58e74a9e7be0a8e08bfc3ba50be43f5dd64138265ed396f8c8c578217d7ecd566f6477b7eba279226766631d46126e597adb890e1e66d8fcac2296ef9f52d142bf0f6dcfb6eabf3927d8ee2a34af51f55df0a7d1317d37018f6bbc489f4f6adee053f30082fb8e3c0a6c81f7525d2e67eef7eb63910434b5643b2214afe2c0a1b5235942d82b9013039a96ddf89f676bf1aba029262ee516cb8416d5069dc6e3df07f6c934c208ef1ebdd02b0ace85d73fdb910a81cf5b525c987b03c8ca625e5060ca698f85c71b509241eb15eb08b07319b736df18a5729d16aa7426c76e5590b92747c19f8dc2bdf84ccb96193e0a46e26d35dba3283210833fcb5db1618caf41253a1eb472041dd8e85da913a58c1453e39fc53624710ad969dcb3aeddbf18d9a1a55c02091739e04e6bd34a5d8ec02565acc9e2c710d265de862fad4e7ff8f207b8475016bef8ea0c02758b7cfcf4e14d777d1b2446918ee12c2b4056f8cd995790c06f6cc73817bb9bd6300d3b78e5113650228336474fa3a21dde57585a9341c152f2dd1ec9000d6b0c682afb5d3163cdd2c1c3d92914d3166f1411cf45032835099b8fbf026ea5fe0bfdfd9ba60cf8836989d805a4fe4b8e237d8a2352409b4fcce1bba78d99f51d553f1e8508edd882a0871a08316e9c709a9028eed3e4fc4a168d6f9f3da3b97e1909feba00e827bfec0f066ded", 0x1000}, {&(0x7f0000000940)="c771689e1a8111349c5364de2232625e946274a636b25af4835650d02680a92bfb1b94829903b9e126cdd484ad73a1ff9ca39984ecfdcf922559d2f567bbaefbe47fe95938d7e03e78c2aff1fe47d481dd77b082377d4a91d9b3e12c5106102126046ad5e33f7fc95825fcaf42cd33ec106a9d2c3905bfb5635768358cb039381aa3867ca0f09dfcd9ca44eb9cab6de9b58c38d234e3a160282bef89405ff0", 0x9f}, {&(0x7f0000005900)="aae90acb0119b792fbeab2183e08c5c10a6ebfecd45ab3409d1e2abeb6444d76dcdeee9a0d7b7ff7c5e27225f69eec51e4781b3da32d5401971fe2afaea5ff15e0d3a96230b1ad309b1ea2c84b950f02fc1a99730e2278fca33b235379c01cdfeddec1f6b15c82f5ff242bbe424b6d4d49a87aac8c9203f8a6c0779e352b29f6c0c507011be9794b71a063686bbf1703cc089c503999f9cb3f719b57e7c8c60bf9293d14449131b31c8feeb487451423892f3ca60cbce2a1f5bf753e1331323e045fc45db868454bb8fe043964b935cc907f28c7df45ff7d970688aca9e79bee2ab606dbaa1cb86d6fa115db1b0c83773147a2059c66dfa0db17507b319d96030b30c43b9ce9b03fe9e7744d6265383ada9fca58437e35dbd98c7994446a481cb9d707177d95c92008d536e55a8c745ab155c300d05e9e022e0d3215c8147d44aa3f0c5dfff62031206120f01bba0d29113e050c2f0372710ac43276debba920d1411dc1a917be08bba5a9c85184be197a94ebba7a1be55afaa323774c66c9f8709be815fc5974bfa0335a6dbb8a6a477cc8b2df83bb709453a30fffd9064f40f19fed989b4f26686a7c1555d600d2c5c5f91264d431a1372109a72f534fb67cc2a3b14ddaa910468017f2d79da794a7e43b121e513cbe951cde7eae655fd5ca4e2a82e2a80512d30244792aac458b347217b3d66dd0768b63d65dc4d6008b6cd06a1f834415288f92d95f24fd0e15478643ae0ecd769d916b3bee846f8869a310bddf4a219ca4318b1c5aac8055d5e648f2dcc6cce0ec325594866f1e742ffbd7524560fca929e2edcbb8a0fe7da0b516df23adbd28210fbb61c0109dd998b8131b0a0626e6966d5cbcdd717ea47cb48e912ef21b5d585b27e6635f0d9ffa9bf8692ef836f913aa3c6dc91a1539b8ad708cd98b43505b0bdf82e30813baa04a1b252ae39031ec0bb2f66c5a95e9094c5a8b13fbbb144bcaa48dd08e15f2e0bfa486f0c3c05626a05c4cc7e97bc19cff243c503de0dea2b707f7b52703c69e556cec3c2d08cb8830367f47ea6d7c63a1d2ea7bbc7ba1d151459d9c61f37350845eaf2bf8679e84921a518be409eb23149c0d112b3f27b61d4f071872562f4c19a74aa0677712c155906f74523ea455fa233985bf8f201a3b3714c903941c43ff9c4fce87e3844e5bd46b70a17ca2eb61427a57e1c7dc4a04fa3e46e93d9581ace5db1bbf966e670af72fae2275d5147258de744e855bc26ffad55021dcc6c0358b96a8ab87e57d60315dcbbdeb82faacf0bb69fe57d4fc42b76f82912e927d63ed7de9d98263817b6dff72fec321e4b18921315ae603a2f6d0e46c4a163f09da8e784cbc12791d076f4d562213d40c5b5390416adfa5b021447fc4145044b90d9b0d524c97559d42ea616570b26d0e1a1e1fccbfe9795fdbd4467f20f1bdbc5440bf83170ba20a3cce5bf27262c538167d7014ff2909d6a59cc280de33bf68e5b84d5aebd5506e363441dfb51aebd63154b968f2a335a8de340f1ed9b2136ea425a61b2dc5a2f31c80b13f75491f51b51650253b58590fb131312f46a2070ebccc61fe9cf6ef6bdcde5a6343f853dd07ef93e9e8353400d346e5b31eabdf792430372895ea298d4e8b5482d176b1ad0928685d758c7317d3f5b7cdea311b7dd1fe351c66a880b7ea0d6f0f810ecf489442102aa601a3733cdc2d100fd75bd9f7cd932857417d71feb3ad56eaee92f3986cbc6b681a6ad544edd3ad63c10e6f04c482897864f250ed8e0d9ada4d08f22a997499959cf2617cc4ce6a782a53b72a3f48025df0d58511d140a11409fa0917df53ba3e2b576cafca9fea08654385dd9d6e34d55550aa32f263abfb9fd0bf8c22098b3bc97707752eea68e27cb840431e91e771bd2c66df5d7bf98b5515b4418fa06297cf96f339b91c1232e89aa4b06541498ddadcec2a02bc163832c51caac9dd8d3ec3ad0dbae4f6cdba73456c845190fb61fbf7899042ba38f1c201da9c5db5f7b8b60464c463545816eebab04958f6f040fadbceeb3e6559498c1d7dc04c5617e342f384b22854594d178f7b2d6f5ed0c11568ae6a6b8b5085e5ecce32d542e1adb303ec6cd403cf32b1aec87e2e1568f34e97ca07a2b99199e5bbba60c02e81e04c6034075c119ec96dcb6cdfa7834e1bf91e6dce7c37cc2d990e05404b71a3e96193cc56f63e8bb75413d5978f2c10cdb8495edcfc20c1fddd719ed96dded8137b0671eeb2b778fc3f58dd5a997455229066b9f2d7935a1b4f8ad25e62eb50d0eb1c073a25dd9cea48126af50012b76e39dad2c294ac8f75f821b022217a417396b08288ec839b4af79aabd5f824c8628e32e342fbc3ace7a54a77c13eba829f96a3d5bd9f6194ea0431a5ff4278e3bc5aaa21e475a2caa2363f70c69a7d32489a0a8c001d6dacfb519bd949214bf20ed3aecf620c8b9752a0f4976bc1594706f5153bf4501fa9fc655f10ff6afed7ccd7405278c056d545e35eb8f1e68c8bf566666ac0be70a3c3b4638db995dd942960044a42776b93ad98b55fafefd22a4fbe6c5a49fb8c47a4897306d3d474c9e466d2917f044c287a4a47ac4254fb952a388d8d4cb0aa84820b4c76635bf6563c06cbf400fc4c91c605318276cf330af214f1e37ec0410c856e07b412a7644841a6702ed97ac6f2a6e552294a48bb51e3c5a6899c617eb4f5b87dff4d90554f97c340e275ec987f3a1ab727cdde845f92da95a8122c64a6289fe68d9552252b40cbfc83333999ece900b973359fa410b2534ee3db0188d5b23cdbefd508e30a0c2586358fbd33a5dec16d46a227af89b6bbe168b459d9460b980d79e8fbbcba42fd7fa57eae89116cfd3ffb6db561b78ed03c05b6cd196dc3ff94a810e8d7cc85d13551a82518b930e03223da0fadc0d71de4b67396d1b8ab3d13e2ce0dbf943fb86cd7c6d54c122c9058a6db15b5217de7533e6582d37fd92913c6db57bceee3c20294300541436a3ec6ad3691dcd7a39d3bd350129a15fe9171112afa1d4e031082bf5fb58d6fa694744800844a4ea9d472c62417067e46babbe9b97659890a2c248286bd237c926657576c2c6869ca9d352e942c6494bf93f711c04134a6f0f994887fa58780f6b37244ef81a3f6165dd237a810d68435fb6aae734757124a8d2511788791fecdd4ecfd104f4957a0bca70e2213597d9d786d423fc7f01217e99f23647705c1eb560fcfb7a27d5b50e6d33d45df4374169ea33e3ee6981d1238f2217b5997bba3036f5b438d1a1f668f5d366f16d1140acbba7b452502bb9485ec47c3fe2e24599fd47fa42754c68a54f46128e57e49778ca05710d9ed82f9bd3acbffbc58186338e104ad67e3b255492dc353a0a905f8cdcb7f4213260637a7e77d4bbca548adb3f02000fc246c0c706bccbbebfd31f8199a471c744d2eb47c66f1ca714080c88e66fd3db40b84c198ba71323041a588deddbbb26382a56f9691352ae1bd2a9af1166ee1f44c26bbe2dc1248c1b20ceffe6885ec54c9e49d878bacb26f027c698725b4f72f993bd8f016c273f63c86b74bd33a8d669fe11ae09f1dfaba929498549f3a20c32782ecad91b150c81e2e61d1e3a522ddcebe264d690677decc2c74cf11d8dee3f64b70601ccd22042e4af77ff3456326982744edc5edf4a3bbb0d678125da3f4aeb97776eda0a09d4439bc6619bc7a61e296c309fa7210b1f6eb47b7880e0d71907b5235c2f09918291b18f7e1f1ec843468838b9bd5e86c59dae62af0a58ef0d4fd231c5e5a131d755085c196bf2dc0906325794831a108fe2ac250c0755cd296ca1607bacb749df11aa9db544255faa3ee46c42dea767473abe44e8b144d8f3b2642ab69e247c5f6bcbc0b024068fe424f373da23cc8d53058a06346680937a273b90f4eb0c4b8ed49362471de2b51b8a368fd739c809673ceec0ea24066f6cf6a7e500f34495f4f51278f66607c546a177b80361157d74814e1d416d326c5d4e51bf98411174d620128de7e852035f640d996729454b302fc1fe47c0495ad7d39e4ecfbe7004d21592943bb51249306c6a216995118a65e308fcb36d15ff8bc337c97463f5253250c89eaf5c6f4a68fa2b444563e4a31d4cd1e8852247f07a49bf8e1c20aecba8164a6a0a635cb91ab6982106421594141cff05a413ae781861ab819db7016205175b663a8d04f4a548f8851d3b987ccb654528ae002a938adf8387387808a207a6b78afcece27739672cd2a28b59fed0ea46fad2b023c8d6b4ebfa20a5e28c50729723baa63dd576556ef1f0118220438b5d79d22ae9337d5793b226ea6ccc13cfbadcac955a4e99c3f0010853a15078ae9423dfe4754c87b25fa58937ed30ae4371249590227f0aa716ca6a6368119cacc894e9376b4b970ce31ef59e58b9139b947f21e096a348e981a8409f6a292e2b9adc87edb144b15f27433c8ea1a37d5bf02737158ae2db6e380e69dbd1e1f809adb9ac3d3aaebf2ff03d0117942787ccc4c11cdb64b172fe988bdcfb6ada86b57ddb8fd492a794a22df70b104be9e7bfe350917bb9cc9184a24b28ceb220d0b982c3e71b641e0c5a7c44b426dd2b1e8ce4b347bcd86dda03083d3496fede4fa609669555cbefc70b98f2c853cd2153e9466066c59c3cdf090c807d3ab6726efc97a32b0073573217c5ea9eb76b6131ee1912bdf77a936251b3e680de51a406d204a39de16e5df0fdfea6af3cd000cc346f5447e67459618b2639c955c540462859b59b26339ca636381ba576aee6e6200f0fa2cbec76d5dd9cca48cd97bfe5f26c8ea3284003a9f0de829b85355f1e409491429fa307e639173aa4520c1634bb6931847971d8312d1dd05f7b40b8021a9785a1fe309a02ccb967664662d44759bb0c8156264c95113d584a4cf04ce01949b980921dc3040ec3979c1caab1ccf0bca6bdb76b358fc95e16bf2de3e481994832205665cd08279ec1b898c9ea67e06579e58fad42a78991245de352a6e49a0003c9f20ee6a66f3caf34ddf7e14e42eeea74054db4ae8a8a9a378eacbb89ca62c230200528a03aacd326373436d68716b712d88af572e5e8fc5e9970594ace6cf1808068a7b52dd09132092bb0eb133f32047bbf4b1e5d8556efbbd215c2dd5c046bc90ba9f21538383d37a6e27243a9e12a9bff59ce799fb3a4a599bb7f90df19140d76d9c79a01e6e64ce5adfdb2647475b7ec3aca45dea0629182aa69b5e00ed1b6f87c8f47e78833c78ced54daaf70cd0d49d7a6f5dbaf05beff767febc8dcfd28097f3616b98df7a4662e688af5c19741e6df223b4200163dc0180dcd17f3bc38aa36a3c7d7b7f2910febfe2f52f46f6af524ed0864afe95cb051a72ca182455a31204130157e1fc8bdd95c62658fe85c99a388d46637bf80b7efa1219380563dc1ef3940c5b358e9af7d751c9e49ed944e01831c8f5109f35242b3cb4a5e73eb4665088b231d835d67cfff5424f2575c703fa34e1098f50f2a7f9a2173960790a88e441ade0291962e41125a707714ef203dc1c7ffd6ef98a8d8d08b5667d8a53f51bb82501081f659909d84346cfa825b67d7b640b113c64da1e26d06bc6afa114dc5f08fa80627d1c8c2b36b8b3505539eb2b7639d0ed2be731d63da524ca9741fa533b0246c9d7ed578ec6a7c054d2ba37004a955033cf3847f0d1c38614a49dd084975f652125404d3770e9c6d3e10db63c1a83733434901f685b4f4e2a00507e1966fcae64c2107ab623932e87b96c6318e985fcb1015adf2961bf622062f9", 0x1000}], 0x9, &(0x7f00000003c0)=[@timestamping={{0x14}}], 0x18}, 0x20008010) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001840)=""/183, 0xb7}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f00000038c0)=""/4025, 0xfb9}, {&(0x7f00000048c0)=""/4125, 0x101d}, {&(0x7f0000001900)=""/131, 0x83}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000e00)=""/75, 0x4b}], 0x7}, 0x40010100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe18, 0x0}, 0x12020) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) 1.059811453s ago: executing program 0 (id=21909): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x1, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0xc, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89b0, &(0x7f0000000080)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100), 0x12) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x9, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESOCT=r7, @ANYRESDEC=r6], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x1f, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1d, 0xbb44, 0x7, 0xa, 0x41, r1, 0x6, '\x00', 0x0, r7, 0x2, 0x5, 0x1}, 0x50) r8 = getpid() perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x5, 0x5, 0x3, 0x7, 0x0, 0x4, 0x414b57845b96503a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0xa}, 0x8880, 0x3, 0xe, 0x9, 0x10, 0x2, 0x7, 0x0, 0xee, 0x0, 0x2}, r8, 0x9, r6, 0x2) write$cgroup_pid(r5, &(0x7f0000000040)=r8, 0x12) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x1, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x5f, 0x61, 0x1e]}}, 0x0, 0x29, 0x0, 0x1, 0x9}, 0x28) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)="3f192725e7", 0x5}], 0x2}, 0x0) 1.049787341s ago: executing program 0 (id=21910): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001840)=""/183, 0xb7}, {&(0x7f0000000840)=""/241, 0xf1}, {&(0x7f00000038c0)=""/4025, 0xfb9}, {&(0x7f00000048c0)=""/4125, 0x101d}, {&(0x7f0000001900)=""/131, 0x83}, {&(0x7f0000000680)=""/162, 0xa2}, {&(0x7f0000000e00)=""/75, 0x4b}], 0x7}, 0x40010100) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffe18, 0x0, 0x0, 0x0, 0xa41e}, 0x12020) 993.331019ms ago: executing program 0 (id=21911): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 934.284728ms ago: executing program 3 (id=21912): r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x11490d, 0x4, 0x400000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x8, 0x1, 0x6, &(0x7f00000000c0)) 912.705813ms ago: executing program 3 (id=21913): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000700)=ANY=[@ANYBLOB='1-'], 0x31) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_int(r5, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r6, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x9, 0x0, 0x0, 0xfffffffffff7bbfe, 0x1, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x111c40, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mkdir(&(0x7f0000002b80)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@fallback=r7, r7, 0x2f, 0x10, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f0000000040)='./file/file0/..//file0/file0\x00', 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, 0x0}, 0x1000e0c9) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="d8000000180081064e81f782db4cb904021d0800fe027c05e8fe55a10a0005000140e90003600e41b0000900ac00060011000000a4000500000000000000035c3b61c1d6ddb2c124c2110e00367f6f94007174cf6efb8000a007a290eb49e2f11d457fbace2ee5a7cef4094200001b14d6d930dfe1d9d322fe7c4a50b5b9bd6ee6f61e59eb4edbb57a00e97a6f6e7b7e2720637a1e7892811eb64252f19e00360db798262f3d40fad95667e006dcdf61951f215ce3bb9ad809d5ad42ce81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b", 0xd8}], 0x1}, 0x0) 861.177763ms ago: executing program 0 (id=21914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r0, 0x2f, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) 802.354381ms ago: executing program 0 (id=21915): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa3b1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000000c0)='cpu\t&0|f\xdbV\xef\xc7\xf0\xc8$\xe1x\xad&&\t') ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 758.028162ms ago: executing program 3 (id=21916): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0xffff, 0x0, 0xfffffffc, 0xb}, {0x2, 0xfffffffd}], 0x10, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000880)='^+,!z,-\x00l\x87Z\x03\x1c\x88\xdeW\x06\xf1/9`s[\xdc\xf6\x91\xc9\xe6\xfdEP\xe8~n\xd9er\xfe\xd5\x14\xf8\xef\xce\x03\x1d\x83I\xf5\xc8g}\xbff\x99') setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040), 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30004001) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xff, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f92aa3c92b", 0x14}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000800)={'batadv_slave_1\x00', 0x100}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r1}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000119b681c631023252cf2d60d0c0000000c0000000200000000000001000000040000000000000d7f0a564f30fd730721818cf0b0244fd2235ff5f21a709f12be29c83d51db0f60fc2d1cb2c6a29ee30136be0b00000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x200}, 0xffffffffffffffb8}, 0x94) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000200)='./file0\x00', r7}, 0x18) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r7, 0xe0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000700)=""/164, 0xa4}, {&(0x7f0000000c80)=""/221, 0xdd}, {&(0x7f00000028c0)=""/4035, 0xfc3}, {&(0x7f00000038c0)=""/4111, 0x100f}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000000380)=""/131, 0x83}], 0x6}, 0x120) 0s ago: executing program 1 (id=21917): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x40000000001, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x922000000001, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, 0x0, 0x0) kernel console output (not intermixed with test programs): process `syz.3.21089'. [ 3074.141714][ T2369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21089'. [ 3074.254819][ T2373] delete_channel: no stack [ 3074.662144][ T9110] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 3075.769855][ T2397] netlink: 3752 bytes leftover after parsing attributes in process `syz.0.21097'. [ 3076.114836][T29994] wlan1: Trigger new scan to find an IBSS to join [ 3076.159767][ T2422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21100'. [ 3076.194729][ T2422] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21100'. [ 3076.221056][ T2421] delete_channel: no stack [ 3076.239650][ T2424] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21100'. [ 3076.382042][ T2429] FAULT_INJECTION: forcing a failure. [ 3076.382042][ T2429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3076.403752][ T2429] CPU: 0 PID: 2429 Comm: syz.0.21105 Not tainted syzkaller #0 [ 3076.411263][ T2429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3076.421318][ T2429] Call Trace: [ 3076.424691][ T2429] [ 3076.427616][ T2429] dump_stack_lvl+0x18c/0x250 [ 3076.432301][ T2429] ? show_regs_print_info+0x20/0x20 [ 3076.437501][ T2429] ? load_image+0x400/0x400 [ 3076.442006][ T2429] ? __might_fault+0xaa/0x120 [ 3076.446681][ T2429] ? __lock_acquire+0x7d40/0x7d40 [ 3076.451703][ T2429] ? __mutex_trylock_common+0x159/0x260 [ 3076.457243][ T2429] should_fail_ex+0x39d/0x4d0 [ 3076.461920][ T2429] _copy_from_user+0x2f/0xe0 [ 3076.466506][ T2429] do_tcp_setsockopt+0x5cb/0x1e10 [ 3076.471532][ T2429] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 3076.476905][ T2429] ? mutex_lock_nested+0x20/0x20 [ 3076.481844][ T2429] ? aa_sk_perm+0x83c/0x970 [ 3076.486343][ T2429] ? __fget_files+0x28/0x4b0 [ 3076.490925][ T2429] ? sock_common_setsockopt+0x36/0xc0 [ 3076.496289][ T2429] ? tcp_setsockopt+0x3d/0xe0 [ 3076.500957][ T2429] ? tcp_enable_tx_delay+0x70/0x70 [ 3076.506062][ T2429] ? sock_common_recvmsg+0x190/0x190 [ 3076.511350][ T2429] smc_setsockopt+0x243/0xac0 [ 3076.516065][ T2429] ? smc_shutdown+0x9b0/0x9b0 [ 3076.520752][ T2429] ? __fget_files+0x28/0x4b0 [ 3076.525351][ T2429] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 3076.530890][ T2429] ? security_socket_setsockopt+0x7e/0xa0 [ 3076.536597][ T2429] ? smc_shutdown+0x9b0/0x9b0 [ 3076.541270][ T2429] do_sock_setsockopt+0x175/0x1a0 [ 3076.546289][ T2429] ? __fdget+0x180/0x210 [ 3076.550529][ T2429] __x64_sys_setsockopt+0x182/0x200 [ 3076.555723][ T2429] do_syscall_64+0x55/0xa0 [ 3076.560137][ T2429] ? clear_bhb_loop+0x40/0x90 [ 3076.564810][ T2429] ? clear_bhb_loop+0x40/0x90 [ 3076.569479][ T2429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3076.575366][ T2429] RIP: 0033:0x7feedf79c799 [ 3076.579795][ T2429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3076.599403][ T2429] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 3076.607813][ T2429] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3076.615779][ T2429] RDX: 0000000000000003 RSI: 0000000000000006 RDI: 0000000000000003 [ 3076.623743][ T2429] RBP: 00007feee05f0090 R08: 0000000000000004 R09: 0000000000000000 [ 3076.631706][ T2429] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 3076.639675][ T2429] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3076.647673][ T2429] [ 3076.825296][ T9110] Bluetooth: hci2: unexpected event 0x06 length: 151 > 3 [ 3079.145815][ T9110] Bluetooth: hci4: command 0x0406 tx timeout [ 3079.886780][ T2460] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.21112'. [ 3079.902491][ T2460] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 3080.183196][ T2470] delete_channel: no stack [ 3080.748060][ T2492] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21122'. [ 3080.761342][ T2488] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3080.763245][ T2492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21122'. [ 3080.768044][ T2488] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3080.815435][ T2485] delete_channel: no stack [ 3080.949999][ T2497] FAULT_INJECTION: forcing a failure. [ 3080.949999][ T2497] name failslab, interval 1, probability 0, space 0, times 0 [ 3080.963410][ T2497] CPU: 1 PID: 2497 Comm: syz.1.21124 Not tainted syzkaller #0 [ 3080.970896][ T2497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3080.980974][ T2497] Call Trace: [ 3080.984279][ T2497] [ 3080.987224][ T2497] dump_stack_lvl+0x18c/0x250 [ 3080.991927][ T2497] ? show_regs_print_info+0x20/0x20 [ 3080.997157][ T2497] ? load_image+0x400/0x400 [ 3081.001683][ T2497] ? verify_lock_unused+0x140/0x140 [ 3081.006909][ T2497] should_fail_ex+0x39d/0x4d0 [ 3081.011612][ T2497] should_failslab+0x9/0x20 [ 3081.016142][ T2497] slab_pre_alloc_hook+0x59/0x310 [ 3081.021194][ T2497] kmem_cache_alloc+0x5a/0x2d0 [ 3081.025979][ T2497] ? skb_clone+0x1eb/0x370 [ 3081.030423][ T2497] skb_clone+0x1eb/0x370 [ 3081.034678][ T2497] __netlink_deliver_tap+0x41c/0x830 [ 3081.039993][ T2497] ? netlink_deliver_tap+0x2e/0x1b0 [ 3081.045217][ T2497] netlink_deliver_tap+0x19c/0x1b0 [ 3081.050358][ T2497] netlink_unicast+0x72c/0x8d0 [ 3081.055162][ T2497] netlink_sendmsg+0x8d0/0xbf0 [ 3081.059948][ T2497] ? lockdep_hardirqs_on+0x98/0x150 [ 3081.065176][ T2497] ? netlink_getsockopt+0x590/0x590 [ 3081.070405][ T2497] ? security_socket_sendmsg+0x37/0xa0 [ 3081.075898][ T2497] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3081.081206][ T2497] ? security_socket_sendmsg+0x80/0xa0 [ 3081.086679][ T2497] ? netlink_getsockopt+0x590/0x590 [ 3081.091881][ T2497] ____sys_sendmsg+0x5ba/0x960 [ 3081.096647][ T2497] ? __asan_memset+0x22/0x40 [ 3081.101240][ T2497] ? __sys_sendmsg_sock+0x30/0x30 [ 3081.106284][ T2497] ? __import_iovec+0x5f2/0x850 [ 3081.111171][ T2497] ? import_iovec+0x73/0xa0 [ 3081.115787][ T2497] ___sys_sendmsg+0x2a6/0x360 [ 3081.120490][ T2497] ? __sys_sendmsg+0x2a0/0x2a0 [ 3081.125377][ T2497] ? trace_call_bpf+0xc3/0x6c0 [ 3081.130163][ T2497] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 3081.136459][ T2497] __se_sys_sendmsg+0x1c2/0x2b0 [ 3081.141332][ T2497] ? __x64_sys_sendmsg+0x80/0x80 [ 3081.146305][ T2497] ? trace_sys_enter+0x1f/0x80 [ 3081.151186][ T2497] do_syscall_64+0x55/0xa0 [ 3081.155631][ T2497] ? clear_bhb_loop+0x40/0x90 [ 3081.160331][ T2497] ? clear_bhb_loop+0x40/0x90 [ 3081.165041][ T2497] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3081.170956][ T2497] RIP: 0033:0x7ff12f79c799 [ 3081.175386][ T2497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3081.195013][ T2497] RSP: 002b:00007ff13070d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3081.203454][ T2497] RAX: ffffffffffffffda RBX: 00007ff12fa15fa0 RCX: 00007ff12f79c799 [ 3081.211460][ T2497] RDX: 0200000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 3081.219455][ T2497] RBP: 00007ff13070d090 R08: 0000000000000000 R09: 0000000000000000 [ 3081.227654][ T2497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3081.235647][ T2497] R13: 00007ff12fa16038 R14: 00007ff12fa15fa0 R15: 00007fff92f637a8 [ 3081.243643][ T2497] [ 3081.277657][ T2497] netlink: 'syz.1.21124': attribute type 10 has an invalid length. [ 3081.288052][ T2497] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21124'. [ 3081.351034][ T2497] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.21124'. [ 3081.374633][ T2497] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.21124'. [ 3081.458866][ T2509] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3081.465639][ T2509] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3081.504752][ T2506] delete_channel: no stack [ 3082.004216][ T2527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21133'. [ 3082.064503][ T2527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21133'. [ 3082.114994][T26894] wlan1: Trigger new scan to find an IBSS to join [ 3082.210582][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.218499][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.351170][ T2527] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21133'. [ 3082.417867][ T2534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21133'. [ 3083.351827][ T2521] delete_channel: no stack [ 3083.375809][T26870] wlan1: Creating new IBSS network, BSSID 32:f2:0a:3b:34:59 [ 3084.804213][ T2551] syzkaller0: entered promiscuous mode [ 3084.847089][ T2551] syzkaller0: entered allmulticast mode [ 3085.246694][ T2559] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.21138'. [ 3085.953282][ T2567] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3085.960201][ T2567] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3085.981098][ T2566] delete_channel: no stack [ 3086.245052][ T2576] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.21143'. [ 3086.301560][ T2573] netlink: 'syz.0.21143': attribute type 10 has an invalid length. [ 3086.310885][ T2573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21143'. [ 3086.329001][ T2573] batman_adv: batadv0: Adding interface: veth0_vlan [ 3086.338397][ T2573] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3086.367341][ T2573] batman_adv: batadv0: Interface activated: veth0_vlan [ 3086.379223][ T2576] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.21143'. [ 3086.659172][ T2581] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3086.666135][ T2581] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3086.691044][ T2577] delete_channel: no stack [ 3089.598930][ T2605] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3089.606198][ T2605] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3089.629258][ T2604] delete_channel: no stack [ 3090.295511][T29994] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3091.578502][ T2585] netlink: 'syz.1.21147': attribute type 10 has an invalid length. [ 3091.586712][ T2585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21147'. [ 3091.751234][ T2620] FAULT_INJECTION: forcing a failure. [ 3091.751234][ T2620] name failslab, interval 1, probability 0, space 0, times 0 [ 3091.769643][ T2620] CPU: 1 PID: 2620 Comm: syz.2.21156 Not tainted syzkaller #0 [ 3091.777163][ T2620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3091.787239][ T2620] Call Trace: [ 3091.790540][ T2620] [ 3091.793494][ T2620] dump_stack_lvl+0x18c/0x250 [ 3091.798201][ T2620] ? sctp_sendmsg+0x1575/0x28c0 [ 3091.803073][ T2620] ? ___sys_sendmsg+0x2a6/0x360 [ 3091.807951][ T2620] ? show_regs_print_info+0x20/0x20 [ 3091.813177][ T2620] ? load_image+0x400/0x400 [ 3091.817697][ T2620] should_fail_ex+0x39d/0x4d0 [ 3091.822381][ T2620] should_failslab+0x9/0x20 [ 3091.826881][ T2620] slab_pre_alloc_hook+0x59/0x310 [ 3091.831935][ T2620] ? sctp_add_bind_addr+0x8c/0x360 [ 3091.837074][ T2620] __kmem_cache_alloc_node+0x53/0x250 [ 3091.842454][ T2620] ? sctp_add_bind_addr+0x8c/0x360 [ 3091.847557][ T2620] kmalloc_trace+0x2a/0xe0 [ 3091.851975][ T2620] sctp_add_bind_addr+0x8c/0x360 [ 3091.857120][ T2620] sctp_copy_local_addr_list+0x315/0x4f0 [ 3091.862754][ T2620] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 3091.868469][ T2620] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 3091.874537][ T2620] ? sctp_v4_is_any+0x35/0x60 [ 3091.879205][ T2620] ? sctp_copy_one_addr+0x8c/0x350 [ 3091.884318][ T2620] sctp_bind_addr_copy+0xb3/0x3c0 [ 3091.889346][ T2620] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 3091.895673][ T2620] sctp_connect_new_asoc+0x2f9/0x6a0 [ 3091.900954][ T2620] ? __sctp_connect+0xd80/0xd80 [ 3091.905792][ T2620] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3091.911163][ T2620] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3091.916704][ T2620] ? security_sctp_bind_connect+0x89/0xb0 [ 3091.922424][ T2620] sctp_sendmsg+0x1575/0x28c0 [ 3091.927103][ T2620] ? sctp_getsockopt+0xb60/0xb60 [ 3091.932035][ T2620] ? aa_sk_perm+0x83c/0x970 [ 3091.936548][ T2620] ? aa_af_perm+0x330/0x330 [ 3091.941051][ T2620] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3091.947457][ T2620] ? sock_rps_record_flow+0x19/0x3f0 [ 3091.952737][ T2620] ? inet_sendmsg+0xe9/0x2f0 [ 3091.957322][ T2620] ? inet_send_prepare+0x260/0x260 [ 3091.962428][ T2620] ____sys_sendmsg+0x5ba/0x960 [ 3091.967186][ T2620] ? __lock_acquire+0x7d40/0x7d40 [ 3091.972384][ T2620] ? __asan_memset+0x22/0x40 [ 3091.976971][ T2620] ? __sys_sendmsg_sock+0x30/0x30 [ 3091.982004][ T2620] ? __import_iovec+0x5f2/0x850 [ 3091.986855][ T2620] ? import_iovec+0x73/0xa0 [ 3091.991350][ T2620] ___sys_sendmsg+0x2a6/0x360 [ 3091.996017][ T2620] ? get_pid_task+0x20/0x1e0 [ 3092.000606][ T2620] ? __sys_sendmsg+0x2a0/0x2a0 [ 3092.005377][ T2620] ? __lock_acquire+0x7d40/0x7d40 [ 3092.010412][ T2620] __se_sys_sendmsg+0x1c2/0x2b0 [ 3092.015257][ T2620] ? __x64_sys_sendmsg+0x80/0x80 [ 3092.020217][ T2620] ? trace_sys_enter+0x1f/0x80 [ 3092.025008][ T2620] do_syscall_64+0x55/0xa0 [ 3092.029433][ T2620] ? clear_bhb_loop+0x40/0x90 [ 3092.034104][ T2620] ? clear_bhb_loop+0x40/0x90 [ 3092.038779][ T2620] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3092.044670][ T2620] RIP: 0033:0x7efe27f9c799 [ 3092.049119][ T2620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3092.068723][ T2620] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3092.077133][ T2620] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3092.085118][ T2620] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 3092.093095][ T2620] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3092.101082][ T2620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3092.109053][ T2620] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3092.117036][ T2620] [ 3092.235787][ T2625] FAULT_INJECTION: forcing a failure. [ 3092.235787][ T2625] name failslab, interval 1, probability 0, space 0, times 0 [ 3092.249328][ T2625] CPU: 1 PID: 2625 Comm: syz.3.21157 Not tainted syzkaller #0 [ 3092.256816][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3092.266884][ T2625] Call Trace: [ 3092.270172][ T2625] [ 3092.273115][ T2625] dump_stack_lvl+0x18c/0x250 [ 3092.277827][ T2625] ? show_regs_print_info+0x20/0x20 [ 3092.283059][ T2625] ? load_image+0x400/0x400 [ 3092.287580][ T2625] ? __might_sleep+0xe0/0xe0 [ 3092.292171][ T2625] ? __lock_acquire+0x7d40/0x7d40 [ 3092.297195][ T2625] should_fail_ex+0x39d/0x4d0 [ 3092.301877][ T2625] should_failslab+0x9/0x20 [ 3092.306380][ T2625] slab_pre_alloc_hook+0x59/0x310 [ 3092.311406][ T2625] ? new_nbp+0x29/0x430 [ 3092.315557][ T2625] ? new_nbp+0x29/0x430 [ 3092.319707][ T2625] __kmem_cache_alloc_node+0x53/0x250 [ 3092.325093][ T2625] ? new_nbp+0x29/0x430 [ 3092.329243][ T2625] __kmalloc+0xa4/0x230 [ 3092.333400][ T2625] new_nbp+0x29/0x430 [ 3092.337378][ T2625] ? mutex_is_locked+0x12/0x40 [ 3092.342138][ T2625] br_add_if+0x28f/0xec0 [ 3092.346376][ T2625] ? apparmor_capable+0x137/0x1a0 [ 3092.351432][ T2625] ? bpf_lsm_capable+0x9/0x10 [ 3092.356368][ T2625] ? security_capable+0x89/0xb0 [ 3092.361229][ T2625] br_ioctl_stub+0x730/0xd50 [ 3092.365822][ T2625] ? do_raw_spin_unlock+0x121/0x230 [ 3092.371019][ T2625] ? rcu_read_unlock+0xa0/0xa0 [ 3092.375788][ T2625] ? __mutex_lock+0x956/0xcc0 [ 3092.380465][ T2625] ? __mutex_lock+0x4f9/0xcc0 [ 3092.385145][ T2625] ? mutex_lock_nested+0x20/0x20 [ 3092.390088][ T2625] ? rcu_read_unlock+0xa0/0xa0 [ 3092.394934][ T2625] sock_ioctl+0x517/0x7e0 [ 3092.399261][ T2625] ? sock_poll+0x3e0/0x3e0 [ 3092.403676][ T2625] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3092.408603][ T2625] ? security_file_ioctl+0x80/0xa0 [ 3092.413720][ T2625] ? sock_poll+0x3e0/0x3e0 [ 3092.418132][ T2625] __se_sys_ioctl+0xfd/0x170 [ 3092.422728][ T2625] do_syscall_64+0x55/0xa0 [ 3092.427161][ T2625] ? clear_bhb_loop+0x40/0x90 [ 3092.431839][ T2625] ? clear_bhb_loop+0x40/0x90 [ 3092.436507][ T2625] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3092.442393][ T2625] RIP: 0033:0x7f24a279c799 [ 3092.446801][ T2625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3092.466421][ T2625] RSP: 002b:00007f24a35e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3092.474939][ T2625] RAX: ffffffffffffffda RBX: 00007f24a2a16090 RCX: 00007f24a279c799 [ 3092.482910][ T2625] RDX: 0000200000000080 RSI: 00000000000089a2 RDI: 0000000000000013 [ 3092.490959][ T2625] RBP: 00007f24a35e3090 R08: 0000000000000000 R09: 0000000000000000 [ 3092.498933][ T2625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3092.506898][ T2625] R13: 00007f24a2a16128 R14: 00007f24a2a16090 R15: 00007ffdbd4facb8 [ 3092.514875][ T2625] [ 3092.661231][ T2633] À: port 1(vlan0) entered blocking state [ 3092.674671][ T2633] À: port 1(vlan0) entered disabled state [ 3092.681162][ T2633] vlan0: entered allmulticast mode [ 3092.694329][ T2633] veth0_vlan: entered allmulticast mode [ 3092.701444][ T2633] vlan0: entered promiscuous mode [ 3092.723655][ T2634] delete_channel: no stack [ 3092.931922][ T2645] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3092.938745][ T2645] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3092.980355][ T2640] delete_channel: no stack [ 3093.029628][ T2649] netlink: 'syz.3.21164': attribute type 10 has an invalid length. [ 3093.173104][ T2649] veth0_to_hsr: entered promiscuous mode [ 3093.193069][ T2649] veth0_to_hsr: entered allmulticast mode [ 3093.215192][ T2649] team0: Port device veth0_to_hsr added [ 3093.229494][ T2653] netlink: 'syz.2.21163': attribute type 10 has an invalid length. [ 3093.240565][ T2653] netlink: 40 bytes leftover after parsing attributes in process `syz.2.21163'. [ 3093.259690][ T2653] batman_adv: batadv0: Adding interface: veth0_vlan [ 3093.269991][ T2653] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3093.322307][ T2656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21165'. [ 3093.331775][ T2653] batman_adv: batadv0: Interface activated: veth0_vlan [ 3093.380654][ T2656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21165'. [ 3093.419167][ T2661] syzkaller0: entered promiscuous mode [ 3093.425588][ T2661] syzkaller0: entered allmulticast mode [ 3093.500596][ T2663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21167'. [ 3093.572857][ T2669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21169'. [ 3093.722320][ T2663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21167'. [ 3093.734396][ T2679] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21167'. [ 3093.750651][ T2669] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21169'. [ 3093.883960][ T2663] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21167'. [ 3094.671203][ T2694] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3094.677941][ T2694] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3094.702322][ T2693] delete_channel: no stack [ 3095.082238][ T2702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3095.089877][ T2702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3095.165887][ T2699] delete_channel: no stack [ 3097.003487][ T2684] À: port 1(vlan0) entered blocking state [ 3097.009832][ T2684] À: port 1(vlan0) entered disabled state [ 3097.016551][ T2684] vlan0: entered allmulticast mode [ 3097.021710][ T2684] veth0_vlan: entered allmulticast mode [ 3097.028391][ T2684] vlan0: entered promiscuous mode [ 3097.040481][ T2710] netlink: 'syz.0.21177': attribute type 10 has an invalid length. [ 3097.063532][ T2710] team0: Port device veth0_to_hsr added [ 3097.084581][ T2712] __nla_validate_parse: 2 callbacks suppressed [ 3097.084599][ T2712] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21178'. [ 3097.284123][ T2716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21179'. [ 3097.324593][ T2716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21179'. [ 3097.355024][ T2726] netlink: 'syz.0.21180': attribute type 10 has an invalid length. [ 3097.402338][ T2726] team0: Device hsr_slave_0 failed to register rx_handler [ 3097.588997][ T2733] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3097.595941][ T2733] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3097.633373][ T2731] delete_channel: no stack [ 3097.799879][ T2736] netlink: 'syz.3.21188': attribute type 10 has an invalid length. [ 3097.814220][ T2736] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21188'. [ 3097.838918][ T2736] batman_adv: batadv0: Adding interface: veth0_vlan [ 3097.855353][ T2736] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3097.907941][ T2736] batman_adv: batadv0: Interface activated: veth0_vlan [ 3097.943606][ T2745] netlink: 'syz.2.21190': attribute type 10 has an invalid length. [ 3098.016721][ T2745] team0: Port device veth0_to_hsr added [ 3098.221649][ T2749] syzkaller0: entered promiscuous mode [ 3098.236711][ T2749] syzkaller0: entered allmulticast mode [ 3098.274236][ T2753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21192'. [ 3098.292871][ T2753] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21192'. [ 3098.534463][ T2768] netlink: 'syz.2.21195': attribute type 3 has an invalid length. [ 3098.554397][ T2768] netlink: 'syz.2.21195': attribute type 1 has an invalid length. [ 3098.562624][ T2768] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.21195'. [ 3098.609883][ T2775] FAULT_INJECTION: forcing a failure. [ 3098.609883][ T2775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3098.634538][ T2774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21194'. [ 3098.655465][ T2775] CPU: 1 PID: 2775 Comm: syz.1.21196 Not tainted syzkaller #0 [ 3098.662978][ T2775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3098.673051][ T2775] Call Trace: [ 3098.676342][ T2775] [ 3098.679280][ T2775] dump_stack_lvl+0x18c/0x250 [ 3098.683980][ T2775] ? show_regs_print_info+0x20/0x20 [ 3098.689198][ T2775] ? load_image+0x400/0x400 [ 3098.693722][ T2775] ? __lock_acquire+0x7d40/0x7d40 [ 3098.698762][ T2775] ? snprintf+0xe9/0x140 [ 3098.703024][ T2775] should_fail_ex+0x39d/0x4d0 [ 3098.707722][ T2775] _copy_to_user+0x2f/0xa0 [ 3098.712147][ T2775] simple_read_from_buffer+0xe7/0x150 [ 3098.717534][ T2775] proc_fail_nth_read+0x1e8/0x260 [ 3098.722596][ T2775] ? proc_fault_inject_write+0x360/0x360 [ 3098.728423][ T2775] ? fsnotify_perm+0x271/0x5e0 [ 3098.733220][ T2775] ? proc_fault_inject_write+0x360/0x360 [ 3098.738970][ T2775] vfs_read+0x28b/0x970 [ 3098.743165][ T2775] ? kernel_read+0x1e0/0x1e0 [ 3098.747805][ T2775] ? __fget_files+0x28/0x4b0 [ 3098.752425][ T2775] ? __fget_files+0x28/0x4b0 [ 3098.757040][ T2775] ? __fget_files+0x43d/0x4b0 [ 3098.761758][ T2775] ? __fdget_pos+0x2a3/0x330 [ 3098.766387][ T2775] ? ksys_read+0x75/0x260 [ 3098.770745][ T2775] ksys_read+0x150/0x260 [ 3098.775014][ T2775] ? vfs_write+0x990/0x990 [ 3098.779465][ T2775] ? trace_sys_enter+0x1f/0x80 [ 3098.784287][ T2775] do_syscall_64+0x55/0xa0 [ 3098.788747][ T2775] ? clear_bhb_loop+0x40/0x90 [ 3098.793454][ T2775] ? clear_bhb_loop+0x40/0x90 [ 3098.798154][ T2775] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3098.804080][ T2775] RIP: 0033:0x7ff12f75cfce [ 3098.808520][ T2775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3098.828162][ T2775] RSP: 002b:00007ff1306ebfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3098.836595][ T2775] RAX: ffffffffffffffda RBX: 00007ff1306ec6c0 RCX: 00007ff12f75cfce [ 3098.844586][ T2775] RDX: 000000000000000f RSI: 00007ff1306ec0a0 RDI: 0000000000000005 [ 3098.852565][ T2775] RBP: 00007ff1306ec090 R08: 0000000000000000 R09: 0000000000000000 [ 3098.860554][ T2775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3098.868545][ T2775] R13: 00007ff12fa16128 R14: 00007ff12fa16090 R15: 00007fff92f637a8 [ 3098.876549][ T2775] [ 3099.120925][ T2774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21194'. [ 3099.209276][ T2790] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3099.216546][ T2790] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3099.263337][ T2784] delete_channel: no stack [ 3099.485409][ T2799] FAULT_INJECTION: forcing a failure. [ 3099.485409][ T2799] name failslab, interval 1, probability 0, space 0, times 0 [ 3099.498170][ T2799] CPU: 1 PID: 2799 Comm: syz.2.21203 Not tainted syzkaller #0 [ 3099.505723][ T2799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3099.515797][ T2799] Call Trace: [ 3099.519070][ T2799] [ 3099.522010][ T2799] dump_stack_lvl+0x18c/0x250 [ 3099.526690][ T2799] ? show_regs_print_info+0x20/0x20 [ 3099.531895][ T2799] ? load_image+0x400/0x400 [ 3099.536408][ T2799] should_fail_ex+0x39d/0x4d0 [ 3099.541087][ T2799] should_failslab+0x9/0x20 [ 3099.545589][ T2799] slab_pre_alloc_hook+0x59/0x310 [ 3099.550613][ T2799] kmem_cache_alloc+0x5a/0x2d0 [ 3099.555485][ T2799] ? radix_tree_node_alloc+0x7e/0x3a0 [ 3099.560867][ T2799] radix_tree_node_alloc+0x7e/0x3a0 [ 3099.566099][ T2799] idr_get_free+0x2b3/0xa60 [ 3099.570605][ T2799] idr_alloc_cyclic+0x27b/0x5d0 [ 3099.575458][ T2799] ? idr_alloc+0x2f0/0x2f0 [ 3099.579865][ T2799] ? do_raw_spin_lock+0x11f/0x2c0 [ 3099.584889][ T2799] ? __radix_tree_preload+0x82/0x880 [ 3099.590174][ T2799] ? btf_alloc_id+0x30/0x2d0 [ 3099.594760][ T2799] btf_alloc_id+0x4f/0x2d0 [ 3099.599173][ T2799] btf_new_fd+0x81b/0x9f0 [ 3099.603503][ T2799] ? bpf_btf_show_fdinfo+0x80/0x80 [ 3099.608661][ T2799] ? capable+0x88/0xe0 [ 3099.612730][ T2799] __sys_bpf+0x670/0x890 [ 3099.616971][ T2799] ? bpf_link_show_fdinfo+0x390/0x390 [ 3099.622347][ T2799] ? lock_chain_count+0x20/0x20 [ 3099.627197][ T2799] __x64_sys_bpf+0x7c/0x90 [ 3099.631608][ T2799] do_syscall_64+0x55/0xa0 [ 3099.636032][ T2799] ? clear_bhb_loop+0x40/0x90 [ 3099.640703][ T2799] ? clear_bhb_loop+0x40/0x90 [ 3099.645405][ T2799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3099.651334][ T2799] RIP: 0033:0x7efe27f9c799 [ 3099.655744][ T2799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3099.675432][ T2799] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3099.683838][ T2799] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3099.693191][ T2799] RDX: 0000000000000028 RSI: 0000200000000b40 RDI: 0000000000000012 [ 3099.701177][ T2799] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3099.709159][ T2799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3099.717131][ T2799] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3099.725108][ T2799] [ 3101.922762][ T2794] mac80211_hwsim hwsim173 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3102.055680][ T2808] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21205'. [ 3102.321696][ T2831] __nla_validate_parse: 1 callbacks suppressed [ 3102.321740][ T2831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21211'. [ 3102.344295][ T2831] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21211'. [ 3102.547172][ T2853] netlink: 'syz.0.21218': attribute type 5 has an invalid length. [ 3102.689412][ T2858] FAULT_INJECTION: forcing a failure. [ 3102.689412][ T2858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3102.722999][ T2858] CPU: 0 PID: 2858 Comm: syz.1.21219 Not tainted syzkaller #0 [ 3102.730492][ T2858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3102.730505][ T2858] Call Trace: [ 3102.730512][ T2858] [ 3102.730520][ T2858] dump_stack_lvl+0x18c/0x250 [ 3102.751474][ T2858] ? lock_chain_count+0x20/0x20 [ 3102.756329][ T2858] ? show_regs_print_info+0x20/0x20 [ 3102.761531][ T2858] ? load_image+0x400/0x400 [ 3102.766129][ T2858] ? lockdep_hardirqs_on+0x98/0x150 [ 3102.771326][ T2858] should_fail_ex+0x39d/0x4d0 [ 3102.776006][ T2858] _copy_from_user+0x2f/0xe0 [ 3102.780594][ T2858] ___sys_sendmsg+0x1c7/0x360 [ 3102.785263][ T2858] ? rcu_read_unlock_special+0x4d0/0x4d0 [ 3102.790901][ T2858] ? __sys_sendmsg+0x2a0/0x2a0 [ 3102.795697][ T2858] __se_sys_sendmsg+0x1c2/0x2b0 [ 3102.800545][ T2858] ? __x64_sys_sendmsg+0x80/0x80 [ 3102.805486][ T2858] ? trace_sys_enter+0x1f/0x80 [ 3102.810253][ T2858] do_syscall_64+0x55/0xa0 [ 3102.814665][ T2858] ? clear_bhb_loop+0x40/0x90 [ 3102.819336][ T2858] ? clear_bhb_loop+0x40/0x90 [ 3102.824008][ T2858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3102.829898][ T2858] RIP: 0033:0x7ff12f79c799 [ 3102.834323][ T2858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3102.853934][ T2858] RSP: 002b:00007ff13070d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3102.862434][ T2858] RAX: ffffffffffffffda RBX: 00007ff12fa15fa0 RCX: 00007ff12f79c799 [ 3102.870399][ T2858] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 000000000000000a [ 3102.878362][ T2858] RBP: 00007ff13070d090 R08: 0000000000000000 R09: 0000000000000000 [ 3102.886326][ T2858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3102.894296][ T2858] R13: 00007ff12fa16038 R14: 00007ff12fa15fa0 R15: 00007fff92f637a8 [ 3102.902285][ T2858] [ 3103.122981][ T2873] FAULT_INJECTION: forcing a failure. [ 3103.122981][ T2873] name failslab, interval 1, probability 0, space 0, times 0 [ 3103.136008][ T2873] CPU: 1 PID: 2873 Comm: syz.0.21228 Not tainted syzkaller #0 [ 3103.143499][ T2873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3103.153573][ T2873] Call Trace: [ 3103.156870][ T2873] [ 3103.159810][ T2873] dump_stack_lvl+0x18c/0x250 [ 3103.164520][ T2873] ? show_regs_print_info+0x20/0x20 [ 3103.169744][ T2873] ? load_image+0x400/0x400 [ 3103.174273][ T2873] ? __might_sleep+0xe0/0xe0 [ 3103.178857][ T2873] ? __lock_acquire+0x7d40/0x7d40 [ 3103.183888][ T2873] should_fail_ex+0x39d/0x4d0 [ 3103.188577][ T2873] should_failslab+0x9/0x20 [ 3103.193071][ T2873] slab_pre_alloc_hook+0x59/0x310 [ 3103.198112][ T2873] ? __lock_acquire+0x7d40/0x7d40 [ 3103.203147][ T2873] kmem_cache_alloc_node+0x60/0x320 [ 3103.208341][ T2873] ? __alloc_skb+0x103/0x2c0 [ 3103.212940][ T2873] __alloc_skb+0x103/0x2c0 [ 3103.217371][ T2873] netlink_sendmsg+0x66a/0xbf0 [ 3103.222154][ T2873] ? netlink_getsockopt+0x590/0x590 [ 3103.227387][ T2873] ? aa_sock_msg_perm+0x94/0x150 [ 3103.232356][ T2873] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3103.237675][ T2873] ? security_socket_sendmsg+0x80/0xa0 [ 3103.243153][ T2873] ? netlink_getsockopt+0x590/0x590 [ 3103.248357][ T2873] ____sys_sendmsg+0x5ba/0x960 [ 3103.253117][ T2873] ? __asan_memset+0x22/0x40 [ 3103.257699][ T2873] ? __sys_sendmsg_sock+0x30/0x30 [ 3103.262713][ T2873] ? __import_iovec+0x5f2/0x850 [ 3103.267578][ T2873] ? import_iovec+0x73/0xa0 [ 3103.272105][ T2873] ___sys_sendmsg+0x2a6/0x360 [ 3103.276785][ T2873] ? get_pid_task+0x20/0x1e0 [ 3103.281377][ T2873] ? __sys_sendmsg+0x2a0/0x2a0 [ 3103.286224][ T2873] ? __lock_acquire+0x7d40/0x7d40 [ 3103.291273][ T2873] __se_sys_sendmsg+0x1c2/0x2b0 [ 3103.296136][ T2873] ? __x64_sys_sendmsg+0x80/0x80 [ 3103.301128][ T2873] ? trace_sys_enter+0x1f/0x80 [ 3103.306003][ T2873] do_syscall_64+0x55/0xa0 [ 3103.310456][ T2873] ? clear_bhb_loop+0x40/0x90 [ 3103.315153][ T2873] ? clear_bhb_loop+0x40/0x90 [ 3103.319841][ T2873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3103.325736][ T2873] RIP: 0033:0x7feedf79c799 [ 3103.330140][ T2873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3103.349767][ T2873] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3103.358197][ T2873] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3103.366200][ T2873] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 3103.374166][ T2873] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3103.382129][ T2873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3103.390106][ T2873] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3103.398104][ T2873] [ 3103.506693][ T2882] FAULT_INJECTION: forcing a failure. [ 3103.506693][ T2882] name failslab, interval 1, probability 0, space 0, times 0 [ 3103.545124][ T2882] CPU: 0 PID: 2882 Comm: syz.3.21229 Not tainted syzkaller #0 [ 3103.552657][ T2882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3103.562752][ T2882] Call Trace: [ 3103.566057][ T2882] [ 3103.568999][ T2882] dump_stack_lvl+0x18c/0x250 [ 3103.573689][ T2882] ? show_regs_print_info+0x20/0x20 [ 3103.578895][ T2882] ? load_image+0x400/0x400 [ 3103.583405][ T2882] ? verify_lock_unused+0x140/0x140 [ 3103.588612][ T2882] ? perf_trace_lock+0x304/0x3b0 [ 3103.593561][ T2882] should_fail_ex+0x39d/0x4d0 [ 3103.598252][ T2882] should_failslab+0x9/0x20 [ 3103.602759][ T2882] slab_pre_alloc_hook+0x59/0x310 [ 3103.607798][ T2882] kmem_cache_alloc+0x5a/0x2d0 [ 3103.612565][ T2882] ? skb_clone+0x1eb/0x370 [ 3103.616993][ T2882] skb_clone+0x1eb/0x370 [ 3103.621245][ T2882] __netlink_deliver_tap+0x41c/0x830 [ 3103.626552][ T2882] ? netlink_deliver_tap+0x2e/0x1b0 [ 3103.631756][ T2882] netlink_deliver_tap+0x19c/0x1b0 [ 3103.636873][ T2882] netlink_unicast+0x72c/0x8d0 [ 3103.641654][ T2882] netlink_sendmsg+0x8d0/0xbf0 [ 3103.646421][ T2882] ? perf_trace_lock+0x304/0x3b0 [ 3103.651376][ T2882] ? netlink_getsockopt+0x590/0x590 [ 3103.656583][ T2882] ? aa_sock_msg_perm+0x94/0x150 [ 3103.661524][ T2882] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3103.666808][ T2882] ? security_socket_sendmsg+0x80/0xa0 [ 3103.672274][ T2882] ? netlink_getsockopt+0x590/0x590 [ 3103.677487][ T2882] ____sys_sendmsg+0x5ba/0x960 [ 3103.682263][ T2882] ? __asan_memset+0x22/0x40 [ 3103.686857][ T2882] ? __sys_sendmsg_sock+0x30/0x30 [ 3103.691879][ T2882] ? __import_iovec+0x5f2/0x850 [ 3103.696745][ T2882] ? import_iovec+0x73/0xa0 [ 3103.701253][ T2882] ___sys_sendmsg+0x2a6/0x360 [ 3103.705939][ T2882] ? __sys_sendmsg+0x2a0/0x2a0 [ 3103.710732][ T2882] ? __lock_acquire+0x7d40/0x7d40 [ 3103.715800][ T2882] __se_sys_sendmsg+0x1c2/0x2b0 [ 3103.720657][ T2882] ? __x64_sys_sendmsg+0x80/0x80 [ 3103.725615][ T2882] ? trace_sys_enter+0x1f/0x80 [ 3103.730388][ T2882] do_syscall_64+0x55/0xa0 [ 3103.734806][ T2882] ? clear_bhb_loop+0x40/0x90 [ 3103.739482][ T2882] ? clear_bhb_loop+0x40/0x90 [ 3103.744163][ T2882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3103.750055][ T2882] RIP: 0033:0x7f24a279c799 [ 3103.754477][ T2882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3103.774085][ T2882] RSP: 002b:00007f24a3604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3103.782506][ T2882] RAX: ffffffffffffffda RBX: 00007f24a2a15fa0 RCX: 00007f24a279c799 [ 3103.790483][ T2882] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 3103.798455][ T2882] RBP: 00007f24a3604090 R08: 0000000000000000 R09: 0000000000000000 [ 3103.806425][ T2882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3103.814396][ T2882] R13: 00007f24a2a16038 R14: 00007f24a2a15fa0 R15: 00007ffdbd4facb8 [ 3103.822388][ T2882] [ 3104.113084][T26872] wlan1: Trigger new scan to find an IBSS to join [ 3104.543755][ T2916] FAULT_INJECTION: forcing a failure. [ 3104.543755][ T2916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3104.557265][ T2916] CPU: 0 PID: 2916 Comm: syz.2.21244 Not tainted syzkaller #0 [ 3104.564857][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3104.574947][ T2916] Call Trace: [ 3104.578252][ T2916] [ 3104.581208][ T2916] dump_stack_lvl+0x18c/0x250 [ 3104.585935][ T2916] ? show_regs_print_info+0x20/0x20 [ 3104.591179][ T2916] ? load_image+0x400/0x400 [ 3104.595730][ T2916] ? __lock_acquire+0x7d40/0x7d40 [ 3104.600793][ T2916] ? snprintf+0xe9/0x140 [ 3104.605082][ T2916] should_fail_ex+0x39d/0x4d0 [ 3104.609813][ T2916] _copy_to_user+0x2f/0xa0 [ 3104.614274][ T2916] simple_read_from_buffer+0xe7/0x150 [ 3104.619700][ T2916] proc_fail_nth_read+0x1e8/0x260 [ 3104.624778][ T2916] ? proc_fault_inject_write+0x360/0x360 [ 3104.630467][ T2916] ? fsnotify_perm+0x271/0x5e0 [ 3104.635275][ T2916] ? proc_fault_inject_write+0x360/0x360 [ 3104.640950][ T2916] vfs_read+0x28b/0x970 [ 3104.645155][ T2916] ? kernel_read+0x1e0/0x1e0 [ 3104.649764][ T2916] ? __fget_files+0x28/0x4b0 [ 3104.654363][ T2916] ? __fget_files+0x28/0x4b0 [ 3104.658957][ T2916] ? __fget_files+0x43d/0x4b0 [ 3104.663700][ T2916] ? __fdget_pos+0x2a3/0x330 [ 3104.668290][ T2916] ? ksys_read+0x75/0x260 [ 3104.672626][ T2916] ksys_read+0x150/0x260 [ 3104.676882][ T2916] ? vfs_write+0x990/0x990 [ 3104.681318][ T2916] ? trace_sys_enter+0x1f/0x80 [ 3104.686095][ T2916] do_syscall_64+0x55/0xa0 [ 3104.690515][ T2916] ? clear_bhb_loop+0x40/0x90 [ 3104.695195][ T2916] ? clear_bhb_loop+0x40/0x90 [ 3104.699874][ T2916] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3104.705769][ T2916] RIP: 0033:0x7efe27f5cfce [ 3104.710193][ T2916] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3104.729804][ T2916] RSP: 002b:00007efe28db5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3104.738227][ T2916] RAX: ffffffffffffffda RBX: 00007efe28db66c0 RCX: 00007efe27f5cfce [ 3104.746201][ T2916] RDX: 000000000000000f RSI: 00007efe28db60a0 RDI: 0000000000000004 [ 3104.754174][ T2916] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3104.762149][ T2916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3104.770122][ T2916] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3104.778117][ T2916] [ 3104.794557][ T2917] lo: entered allmulticast mode [ 3104.806950][ T2917] lo: entered promiscuous mode [ 3104.828536][ T2917] lo: left allmulticast mode [ 3104.954620][ T2929] netlink: 'syz.2.21248': attribute type 7 has an invalid length. [ 3105.016211][ T2932] FAULT_INJECTION: forcing a failure. [ 3105.016211][ T2932] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3105.029605][ T2932] CPU: 0 PID: 2932 Comm: syz.0.21250 Not tainted syzkaller #0 [ 3105.037092][ T2932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3105.047172][ T2932] Call Trace: [ 3105.050484][ T2932] [ 3105.053433][ T2932] dump_stack_lvl+0x18c/0x250 [ 3105.058140][ T2932] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 3105.064238][ T2932] ? show_regs_print_info+0x20/0x20 [ 3105.069470][ T2932] ? load_image+0x400/0x400 [ 3105.074013][ T2932] should_fail_ex+0x39d/0x4d0 [ 3105.078726][ T2932] prepare_alloc_pages+0x1e2/0x5f0 [ 3105.083886][ T2932] __alloc_pages+0x134/0x460 [ 3105.088502][ T2932] ? debug_init+0x23/0x1d0 [ 3105.092949][ T2932] ? zone_statistics+0x170/0x170 [ 3105.097932][ T2932] alloc_pages_node+0x10e/0x170 [ 3105.102844][ T2932] ? skb_splice_from_iter+0xc10/0xc10 [ 3105.108245][ T2932] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3105.114178][ T2932] ? __local_bh_disable_ip+0x108/0x1a0 [ 3105.119677][ T2932] __napi_alloc_skb+0x381/0x560 [ 3105.124570][ T2932] napi_get_frags+0x6c/0x150 [ 3105.129187][ T2932] ? napi_get_frags_check+0x24/0x90 [ 3105.134416][ T2932] napi_get_frags_check+0x39/0x90 [ 3105.139480][ T2932] netif_napi_add_weight+0x9e3/0xdf0 [ 3105.144809][ T2932] gro_cells_init+0x197/0x200 [ 3105.149532][ T2932] ip6_tnl_dev_init+0x23e/0x900 [ 3105.154422][ T2932] register_netdevice+0x67b/0x1bb0 [ 3105.159583][ T2932] ? netif_stacked_transfer_operstate+0x210/0x210 [ 3105.166033][ T2932] ? __lock_acquire+0x7d40/0x7d40 [ 3105.171140][ T2932] ? net_generic+0x1e/0x240 [ 3105.175678][ T2932] ip6_tnl_create2+0x80/0x140 [ 3105.180472][ T2932] ip6_tnl_locate+0x735/0x830 [ 3105.185189][ T2932] ? ip6_tnl_parm_from_user+0x340/0x340 [ 3105.190763][ T2932] ? __might_fault+0xaa/0x120 [ 3105.195481][ T2932] ? __might_fault+0xc6/0x120 [ 3105.200198][ T2932] ? __might_fault+0xaa/0x120 [ 3105.204914][ T2932] ? ip6_tnl_siocdevprivate+0x5eb/0xab0 [ 3105.210492][ T2932] ip6_tnl_siocdevprivate+0x619/0xab0 [ 3105.215911][ T2932] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 3105.221321][ T2932] ? dev_ioctl+0x83c/0x1140 [ 3105.225853][ T2932] ? __lock_acquire+0x7d40/0x7d40 [ 3105.231444][ T2932] ? dev_ifsioc+0x958/0xc40 [ 3105.236082][ T2932] dev_ioctl+0x84c/0x1140 [ 3105.240443][ T2932] sock_ioctl+0x74c/0x7e0 [ 3105.244807][ T2932] ? sock_poll+0x3e0/0x3e0 [ 3105.249258][ T2932] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3105.254276][ T2932] ? security_file_ioctl+0x80/0xa0 [ 3105.259415][ T2932] ? sock_poll+0x3e0/0x3e0 [ 3105.263860][ T2932] __se_sys_ioctl+0xfd/0x170 [ 3105.268488][ T2932] do_syscall_64+0x55/0xa0 [ 3105.272933][ T2932] ? clear_bhb_loop+0x40/0x90 [ 3105.277637][ T2932] ? clear_bhb_loop+0x40/0x90 [ 3105.282346][ T2932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3105.288264][ T2932] RIP: 0033:0x7feedf79c799 [ 3105.292699][ T2932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3105.312343][ T2932] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3105.320791][ T2932] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3105.328854][ T2932] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 3105.336855][ T2932] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3105.344851][ T2932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3105.352845][ T2932] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3105.360864][ T2932] [ 3105.726152][ T2944] sctp: [Deprecated]: syz.2.21260 (pid 2944) Use of int in max_burst socket option deprecated. [ 3105.726152][ T2944] Use struct sctp_assoc_value instead [ 3105.921030][ T2959] netlink: 'syz.1.21258': attribute type 4 has an invalid length. [ 3106.081873][ T2965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3106.124830][ T2971] netlink: 'syz.2.21263': attribute type 4 has an invalid length. [ 3106.513619][ T2988] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3106.728957][ T2994] netlink: 6 bytes leftover after parsing attributes in process `syz.3.21273'. [ 3106.771968][ T2991] @ÿ: renamed from bond_slave_0 (while UP) [ 3107.002075][ T3002] netlink: 'syz.0.21276': attribute type 5 has an invalid length. [ 3107.138474][ T3010] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.21280'. [ 3107.586687][ T3016] team0: Port device syz_tun removed [ 3107.611151][ T3025] netlink: 'syz.0.21284': attribute type 10 has an invalid length. [ 3107.753705][ T3025] team0 (unregistering): Port device C removed [ 3107.785530][ T3025] team0 (unregistering): Port device team_slave_1 removed [ 3107.817773][ T3025] team0 (unregistering): Port device veth0_to_hsr removed [ 3107.875393][ T3033] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.21288'. [ 3108.004692][ T3037] netlink: 'syz.2.21289': attribute type 29 has an invalid length. [ 3108.013365][ T3037] netlink: 'syz.2.21289': attribute type 29 has an invalid length. [ 3108.043399][ T3037] netlink: 'syz.2.21289': attribute type 29 has an invalid length. [ 3108.104513][T26870] wlan1: Trigger new scan to find an IBSS to join [ 3108.308293][ T3041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21292'. [ 3108.369693][ T3041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21292'. [ 3108.412120][ T3048] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21292'. [ 3110.972164][T26870] wlan1: Creating new IBSS network, BSSID 1a:64:d5:9c:b4:8b [ 3111.200685][ T3061] netlink: 'syz.0.21300': attribute type 29 has an invalid length. [ 3111.210415][ T3061] netlink: 'syz.0.21300': attribute type 29 has an invalid length. [ 3111.223812][ T3061] FAULT_INJECTION: forcing a failure. [ 3111.223812][ T3061] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3111.246693][ T3061] CPU: 1 PID: 3061 Comm: syz.0.21300 Not tainted syzkaller #0 [ 3111.254292][ T3061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3111.264374][ T3061] Call Trace: [ 3111.267676][ T3061] [ 3111.270620][ T3061] dump_stack_lvl+0x18c/0x250 [ 3111.275347][ T3061] ? show_regs_print_info+0x20/0x20 [ 3111.280601][ T3061] ? load_image+0x400/0x400 [ 3111.285140][ T3061] ? __lock_acquire+0x7d40/0x7d40 [ 3111.290196][ T3061] ? mark_lock+0x94/0x320 [ 3111.294563][ T3061] should_fail_ex+0x39d/0x4d0 [ 3111.299267][ T3061] prepare_alloc_pages+0x1e2/0x5f0 [ 3111.304398][ T3061] __alloc_pages+0x134/0x460 [ 3111.309010][ T3061] ? zone_statistics+0x170/0x170 [ 3111.313959][ T3061] ? do_wp_page+0x7ca/0x35f0 [ 3111.318565][ T3061] ? do_wp_page+0xfc5/0x35f0 [ 3111.323151][ T3061] __folio_alloc+0x10/0x20 [ 3111.327572][ T3061] vma_alloc_folio+0x47a/0x8f0 [ 3111.332344][ T3061] do_wp_page+0x1243/0x35f0 [ 3111.336943][ T3061] ? folio_put+0xd0/0xd0 [ 3111.341178][ T3061] ? do_raw_spin_lock+0x11f/0x2c0 [ 3111.346202][ T3061] ? __rwlock_init+0x150/0x150 [ 3111.350989][ T3061] handle_mm_fault+0x135d/0x4c00 [ 3111.355936][ T3061] ? handle_mm_fault+0xe7/0x4c00 [ 3111.360886][ T3061] ? numa_migrate_prep+0x350/0x350 [ 3111.366023][ T3061] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 3111.371316][ T3061] do_user_addr_fault+0x730/0x12c0 [ 3111.376435][ T3061] exc_page_fault+0x64/0x100 [ 3111.381029][ T3061] asm_exc_page_fault+0x26/0x30 [ 3111.385874][ T3061] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 3111.391680][ T3061] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 3111.411288][ T3061] RSP: 0018:ffffc9000d6c7630 EFLAGS: 00050206 [ 3111.417357][ T3061] RAX: ffffffff84274f01 RBX: 00000000000000d5 RCX: 0000000000000015 [ 3111.425334][ T3061] RDX: 0000000000000000 RSI: ffff88803042631b RDI: 0000200000001000 [ 3111.433301][ T3061] RBP: ffffc9000d6c77c0 R08: ffff88803042632f R09: 1ffff11006084c65 [ 3111.441266][ T3061] R10: dffffc0000000000 R11: ffffed1006084c66 R12: 0000200000001015 [ 3111.449236][ T3061] R13: ffffc9000d6c7e40 R14: 0000200000000f40 R15: ffff88803042625b [ 3111.457210][ T3061] ? copyout+0x1/0x90 [ 3111.461197][ T3061] copyout+0x70/0x90 [ 3111.465089][ T3061] _copy_to_iter+0x432/0x1120 [ 3111.469770][ T3061] ? iov_iter_init+0x1e0/0x1e0 [ 3111.474530][ T3061] ? __virt_addr_valid+0x18c/0x540 [ 3111.479636][ T3061] ? __virt_addr_valid+0x469/0x540 [ 3111.484743][ T3061] ? __phys_addr_symbol+0x2f/0x70 [ 3111.489767][ T3061] __skb_datagram_iter+0xdb/0x780 [ 3111.494814][ T3061] ? skb_copy_datagram_iter+0x200/0x200 [ 3111.500404][ T3061] skb_copy_datagram_iter+0xb1/0x200 [ 3111.505704][ T3061] netlink_recvmsg+0x2d4/0xe60 [ 3111.510473][ T3061] ? netlink_sendmsg+0xbf0/0xbf0 [ 3111.515434][ T3061] ? aa_af_perm+0x330/0x330 [ 3111.519932][ T3061] ? __lock_acquire+0x1273/0x7d40 [ 3111.524954][ T3061] ? verify_lock_unused+0x140/0x140 [ 3111.530148][ T3061] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3111.535452][ T3061] ? security_socket_recvmsg+0x89/0xb0 [ 3111.540903][ T3061] ? netlink_sendmsg+0xbf0/0xbf0 [ 3111.545834][ T3061] ____sys_recvmsg+0x2ce/0x5e0 [ 3111.550595][ T3061] ? __sys_recvmsg_sock+0x50/0x50 [ 3111.555618][ T3061] ? import_iovec+0x73/0xa0 [ 3111.560116][ T3061] ___sys_recvmsg+0x216/0x590 [ 3111.564791][ T3061] ? __sys_recvmsg+0x2a0/0x2a0 [ 3111.569550][ T3061] ? ksys_write+0x1c4/0x260 [ 3111.574058][ T3061] ? __fget_files+0x43d/0x4b0 [ 3111.578744][ T3061] __x64_sys_recvmsg+0x20c/0x2e0 [ 3111.583683][ T3061] ? ___sys_recvmsg+0x590/0x590 [ 3111.588540][ T3061] ? trace_sys_enter+0x1f/0x80 [ 3111.593310][ T3061] do_syscall_64+0x55/0xa0 [ 3111.597735][ T3061] ? clear_bhb_loop+0x40/0x90 [ 3111.602406][ T3061] ? clear_bhb_loop+0x40/0x90 [ 3111.607083][ T3061] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3111.612968][ T3061] RIP: 0033:0x7feedf79c799 [ 3111.617376][ T3061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3111.636978][ T3061] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3111.645397][ T3061] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3111.653367][ T3061] RDX: 0000000040012100 RSI: 0000200000000000 RDI: 0000000000000003 [ 3111.661334][ T3061] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3111.669301][ T3061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3111.677265][ T3061] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3111.685242][ T3061] [ 3111.721462][ T3066] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.21301'. [ 3111.733403][ T3061] netlink: 'syz.0.21300': attribute type 29 has an invalid length. [ 3111.781285][ T3064] wg2: entered promiscuous mode [ 3111.798404][ T3064] wg2: entered allmulticast mode [ 3111.856089][ T3071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21303'. [ 3111.866800][ T3071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21303'. [ 3111.880734][ T3071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21303'. [ 3112.064759][ T3076] syzkaller0: entered promiscuous mode [ 3112.070287][ T3076] syzkaller0: entered allmulticast mode [ 3112.658960][ T3091] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.21311'. [ 3113.163378][ T3097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21312'. [ 3113.193374][ T3097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21312'. [ 3113.222923][ T3098] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21312'. [ 3114.930645][ T3104] delete_channel: no stack [ 3115.011167][ T3112] netlink: 'syz.2.21316': attribute type 10 has an invalid length. [ 3115.132037][ T3112] team0 (unregistering): Port device C removed [ 3115.160147][ T3115] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3115.166916][ T3115] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3115.183067][ T3112] team0 (unregistering): Port device team_slave_1 removed [ 3115.197294][ T3114] delete_channel: no stack [ 3115.232289][ T3112] team0 (unregistering): Port device dummy0 removed [ 3115.262655][ T3112] team0 (unregistering): Port device veth0_to_hsr removed [ 3115.444565][ T3124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21322'. [ 3115.473520][ T3124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21322'. [ 3115.492124][ T3124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21322'. [ 3115.571771][ T3132] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.21324'. [ 3115.757340][ T3139] netlink: 'syz.3.21325': attribute type 9 has an invalid length. [ 3115.800623][ T3139] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.21325'. [ 3115.839224][ T3142] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.21329'. [ 3116.115406][T26868] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3116.150018][ T3159] netlink: 'syz.1.21334': attribute type 39 has an invalid length. [ 3116.328979][ T3161] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21335'. [ 3117.075602][ T2761] wlan1: Trigger new scan to find an IBSS to join [ 3119.093353][ T3179] netlink: 'syz.1.21338': attribute type 10 has an invalid length. [ 3119.248103][ T3187] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3119.255115][ T3187] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3119.259134][ T3179] team0 (unregistering): Port device team_slave_0 removed [ 3119.270451][ T3186] delete_channel: no stack [ 3119.288348][ T3179] team0 (unregistering): Port device team_slave_1 removed [ 3119.375921][ T3189] __nla_validate_parse: 2 callbacks suppressed [ 3119.375937][ T3189] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.21343'. [ 3119.620197][ T3198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21349'. [ 3119.636290][ T3198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21349'. [ 3119.666187][ T3198] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21349'. [ 3119.818833][ T3209] netlink: 'syz.2.21354': attribute type 27 has an invalid length. [ 3119.847799][ T3209] netlink: 164 bytes leftover after parsing attributes in process `syz.2.21354'. [ 3119.967596][ T3207] netlink: 'syz.3.21353': attribute type 5 has an invalid length. [ 3119.995654][ T3215] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3120.002588][ T3215] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3120.033618][ T3214] delete_channel: no stack [ 3120.318878][ T3228] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3120.325631][ T3228] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3120.337710][ T3226] delete_channel: no stack [ 3120.350163][ T3225] netlink: 'syz.3.21360': attribute type 10 has an invalid length. [ 3120.451649][ T3225] bridge0: port 3(team0) entered disabled state [ 3120.468150][ T3225] C: left promiscuous mode [ 3120.473112][ T3225] C: left allmulticast mode [ 3120.503294][ T3225] team0 (unregistering): Port device C removed [ 3120.517914][ T3225] team_slave_1: left promiscuous mode [ 3120.525897][ T3236] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21364'. [ 3120.534831][ T3225] team_slave_1: left allmulticast mode [ 3120.550615][ T3225] team0 (unregistering): Port device team_slave_1 removed [ 3120.562317][ T3225] veth0_to_hsr: left promiscuous mode [ 3120.570595][ T3225] veth0_to_hsr: left allmulticast mode [ 3120.600925][ T3225] team0 (unregistering): Port device veth0_to_hsr removed [ 3120.631494][ T3231] netlink: 'syz.2.21363': attribute type 39 has an invalid length. [ 3120.708088][ T3236] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21364'. [ 3120.718056][ T3237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21364'. [ 3121.135568][ T3251] delete_channel: no stack [ 3121.140836][ T3251] delete_channel: no stack [ 3121.149594][T26894] wlan1: Trigger new scan to find an IBSS to join [ 3121.156804][T26869] wlan1: Trigger new scan to find an IBSS to join [ 3121.371418][ T3256] delete_channel: no stack [ 3121.403825][ T3263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21374'. [ 3123.067481][T26868] wlan1: Creating new IBSS network, BSSID aa:12:a0:67:a5:59 [ 3123.962238][ T3263] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21374'. [ 3124.105263][T26868] wlan1: Trigger new scan to find an IBSS to join [ 3124.318509][ T3286] netlink: 'syz.2.21384': attribute type 3 has an invalid length. [ 3124.445968][ T3288] __nla_validate_parse: 2 callbacks suppressed [ 3124.446026][ T3288] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.21385'. [ 3124.494779][ T3290] delete_channel: no stack [ 3125.064375][T26868] wlan1: Trigger new scan to find an IBSS to join [ 3125.412233][ T3299] delete_channel: no stack [ 3125.419493][ T3299] delete_channel: no stack [ 3125.803829][ T3306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21393'. [ 3125.813345][ T3306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21393'. [ 3125.853510][ T3306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21393'. [ 3126.152485][ T3317] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3126.159669][ T3317] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3128.034585][ T3315] delete_channel: no stack [ 3128.104546][T26894] wlan1: Trigger new scan to find an IBSS to join [ 3128.134514][T26868] wlan1: Trigger new scan to find an IBSS to join [ 3128.426748][ T3334] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.21400'. [ 3129.188498][T26894] wlan1: Creating new IBSS network, BSSID d6:db:e4:a4:d5:40 [ 3129.189570][T26868] wlan1: Creating new IBSS network, BSSID 1a:23:c9:0d:fd:25 [ 3129.570510][ T3337] delete_channel: no stack [ 3129.674719][ T3337] delete_channel: no stack [ 3129.790381][ T3346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21404'. [ 3129.814105][ T3346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21404'. [ 3129.825408][ T3346] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21404'. [ 3131.265875][ T3358] delete_channel: no stack [ 3131.371791][ T3365] netlink: 'syz.2.21409': attribute type 10 has an invalid length. [ 3131.381202][ T3365] hsr_slave_0: left promiscuous mode [ 3131.401077][ T3373] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.21411'. [ 3131.412560][ T3365] hsr_slave_1: left promiscuous mode [ 3132.414875][ T3390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21414'. [ 3132.426709][ T3390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21414'. [ 3132.441522][ T3390] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21414'. [ 3132.445293][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3132.656613][ T3393] delete_channel: no stack [ 3132.691061][ T3394] delete_channel: no stack [ 3132.696851][ T3394] delete_channel: no stack [ 3132.698417][ T3397] FAULT_INJECTION: forcing a failure. [ 3132.698417][ T3397] name failslab, interval 1, probability 0, space 0, times 0 [ 3132.714728][ T3397] CPU: 0 PID: 3397 Comm: syz.3.21420 Not tainted syzkaller #0 [ 3132.722207][ T3397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3132.732261][ T3397] Call Trace: [ 3132.735550][ T3397] [ 3132.738485][ T3397] dump_stack_lvl+0x18c/0x250 [ 3132.743161][ T3397] ? show_regs_print_info+0x20/0x20 [ 3132.748358][ T3397] ? load_image+0x400/0x400 [ 3132.752862][ T3397] ? __might_sleep+0xe0/0xe0 [ 3132.757461][ T3397] ? __lock_acquire+0x7d40/0x7d40 [ 3132.762508][ T3397] should_fail_ex+0x39d/0x4d0 [ 3132.767190][ T3397] should_failslab+0x9/0x20 [ 3132.771693][ T3397] slab_pre_alloc_hook+0x59/0x310 [ 3132.776723][ T3397] ? is_bpf_text_address+0x26/0x2a0 [ 3132.781958][ T3397] ? __kernfs_new_node+0xaa/0x810 [ 3132.786981][ T3397] ? __kernfs_new_node+0xaa/0x810 [ 3132.792005][ T3397] __kmem_cache_alloc_node+0x53/0x250 [ 3132.797391][ T3397] ? __kernfs_new_node+0xaa/0x810 [ 3132.802426][ T3397] __kmalloc_node_track_caller+0xa2/0x230 [ 3132.808144][ T3397] kstrdup+0x3b/0x80 [ 3132.812037][ T3397] __kernfs_new_node+0xaa/0x810 [ 3132.816893][ T3397] ? verify_lock_unused+0x140/0x140 [ 3132.822140][ T3397] ? kernfs_new_node+0x260/0x260 [ 3132.827103][ T3397] ? make_kgid+0x1c8/0x660 [ 3132.831545][ T3397] ? from_kuid_munged+0x6b0/0x6b0 [ 3132.836587][ T3397] kernfs_new_node+0x14c/0x260 [ 3132.841359][ T3397] kernfs_create_dir_ns+0x44/0x120 [ 3132.846469][ T3397] sysfs_create_dir_ns+0x130/0x2a0 [ 3132.851574][ T3397] ? sysfs_warn_dup+0xa0/0xa0 [ 3132.856263][ T3397] ? do_raw_spin_unlock+0x121/0x230 [ 3132.861471][ T3397] kobject_add_internal+0x61c/0xcc0 [ 3132.866671][ T3397] kobject_add+0x164/0x240 [ 3132.871092][ T3397] ? kobject_init+0x1e0/0x1e0 [ 3132.875776][ T3397] ? get_device_parent+0x366/0x390 [ 3132.880897][ T3397] device_add+0x408/0xc20 [ 3132.885221][ T3397] ? device_initialize+0x24b/0x440 [ 3132.890363][ T3397] netdev_register_kobject+0x188/0x320 [ 3132.895859][ T3397] register_netdevice+0x12ee/0x1bb0 [ 3132.901093][ T3397] ? netif_stacked_transfer_operstate+0x210/0x210 [ 3132.907537][ T3397] ? dev_addr_mod+0x2b9/0x3b0 [ 3132.912218][ T3397] ? tun_net_initialize+0x158/0x480 [ 3132.917429][ T3397] ? tun_not_capable+0x1f0/0x1f0 [ 3132.922392][ T3397] ? alloc_netdev_mqs+0xc34/0x1040 [ 3132.927518][ T3397] tun_set_iff+0x848/0xed0 [ 3132.931931][ T3397] __tun_chr_ioctl+0x7ee/0x2000 [ 3132.936794][ T3397] ? tun_flow_create+0x310/0x310 [ 3132.941763][ T3397] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3132.946700][ T3397] ? security_file_ioctl+0x80/0xa0 [ 3132.951813][ T3397] ? tun_chr_poll+0x630/0x630 [ 3132.956492][ T3397] __se_sys_ioctl+0xfd/0x170 [ 3132.961097][ T3397] do_syscall_64+0x55/0xa0 [ 3132.965512][ T3397] ? clear_bhb_loop+0x40/0x90 [ 3132.970187][ T3397] ? clear_bhb_loop+0x40/0x90 [ 3132.974884][ T3397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3132.980786][ T3397] RIP: 0033:0x7f24a279c799 [ 3132.985192][ T3397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3133.004795][ T3397] RSP: 002b:00007f24a3604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3133.013199][ T3397] RAX: ffffffffffffffda RBX: 00007f24a2a15fa0 RCX: 00007f24a279c799 [ 3133.021164][ T3397] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 3133.029131][ T3397] RBP: 00007f24a3604090 R08: 0000000000000000 R09: 0000000000000000 [ 3133.037111][ T3397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3133.045087][ T3397] R13: 00007f24a2a16038 R14: 00007f24a2a15fa0 R15: 00007ffdbd4facb8 [ 3133.053063][ T3397] [ 3133.075043][ T3397] kobject: kobject_add_internal failed for pimreg0 (error: -12 parent: net) [ 3133.214860][ T3405] netlink: 'syz.0.21424': attribute type 10 has an invalid length. [ 3133.235296][ T3405] hsr_slave_0: left promiscuous mode [ 3133.241753][ T3405] hsr_slave_1: left promiscuous mode [ 3133.357198][ T3411] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.21425'. [ 3134.264872][T23854] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 3134.452909][ T3424] IPv6: Can't replace route, no match found [ 3134.497093][ T3425] delete_channel: no stack [ 3134.509663][ T3424] mac80211_hwsim hwsim177 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3134.581425][ T3432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21432'. [ 3134.604191][ T3432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21432'. [ 3134.689348][ T3438] netlink: 'syz.3.21435': attribute type 21 has an invalid length. [ 3134.817241][ T3438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3135.023915][ T3438] netlink: 'syz.3.21435': attribute type 2 has an invalid length. [ 3135.078792][ T3438] netlink: 'syz.3.21435': attribute type 8 has an invalid length. [ 3135.152431][ T3438] __nla_validate_parse: 2 callbacks suppressed [ 3135.152568][ T3438] netlink: 132 bytes leftover after parsing attributes in process `syz.3.21435'. [ 3135.998885][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3136.179308][ T3457] delete_channel: no stack [ 3136.508519][ T3471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21447'. [ 3136.526433][ T3471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21447'. [ 3136.544885][ T3467] netlink: 14 bytes leftover after parsing attributes in process `syz.3.21446'. [ 3136.566141][ T3471] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21447'. [ 3136.920092][ T3476] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.21449'. [ 3137.081834][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3137.783573][ T3484] delete_channel: no stack [ 3137.906374][ T3491] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.21455'. [ 3138.000446][ T3496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21457'. [ 3138.016130][ T3496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21457'. [ 3138.028889][ T3496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21457'. [ 3138.116844][ T3502] netlink: 'syz.1.21459': attribute type 21 has an invalid length. [ 3138.204657][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3139.758515][ T3516] delete_channel: no stack [ 3140.261885][ T3528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21469'. [ 3140.294298][ T3528] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21469'. [ 3140.314449][ T3529] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21469'. [ 3141.184569][T23854] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 3141.577255][ T3552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21476'. [ 3141.683333][ T3552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21476'. [ 3141.784873][ T3553] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21476'. [ 3143.629452][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.636057][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3144.152709][ T3562] netlink: 'syz.1.21479': attribute type 1 has an invalid length. [ 3144.254175][ T3562] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.21479'. [ 3144.550597][ T3563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3144.723714][ T3570] IPv6: Can't replace route, no match found [ 3144.746955][ T3570] mac80211_hwsim hwsim175 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3144.960930][ T3575] FAULT_INJECTION: forcing a failure. [ 3144.960930][ T3575] name failslab, interval 1, probability 0, space 0, times 0 [ 3144.995475][ T3575] CPU: 0 PID: 3575 Comm: syz.1.21483 Not tainted syzkaller #0 [ 3145.002992][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3145.013061][ T3575] Call Trace: [ 3145.016353][ T3575] [ 3145.019293][ T3575] dump_stack_lvl+0x18c/0x250 [ 3145.023997][ T3575] ? show_regs_print_info+0x20/0x20 [ 3145.029214][ T3575] ? load_image+0x400/0x400 [ 3145.033734][ T3575] ? __might_sleep+0xe0/0xe0 [ 3145.038338][ T3575] ? __lock_acquire+0x7d40/0x7d40 [ 3145.043382][ T3575] should_fail_ex+0x39d/0x4d0 [ 3145.048096][ T3575] should_failslab+0x9/0x20 [ 3145.052619][ T3575] slab_pre_alloc_hook+0x59/0x310 [ 3145.057661][ T3575] ? tomoyo_encode+0x28b/0x540 [ 3145.062445][ T3575] ? tomoyo_encode+0x28b/0x540 [ 3145.067226][ T3575] __kmem_cache_alloc_node+0x53/0x250 [ 3145.072641][ T3575] ? tomoyo_encode+0x28b/0x540 [ 3145.077431][ T3575] __kmalloc+0xa4/0x230 [ 3145.081626][ T3575] tomoyo_encode+0x28b/0x540 [ 3145.086585][ T3575] tomoyo_realpath_from_path+0x592/0x5d0 [ 3145.092248][ T3575] tomoyo_path_number_perm+0x248/0x620 [ 3145.097730][ T3575] ? tomoyo_path_number_perm+0x217/0x620 [ 3145.103385][ T3575] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 3145.108883][ T3575] ? __bpf_trace_bpf_trace_printk+0x100/0x100 [ 3145.114993][ T3575] ? perf_trace_preemptirq_template+0xac/0x330 [ 3145.121238][ T3575] ? __fget_files+0x28/0x4b0 [ 3145.125849][ T3575] ? __fget_files+0x28/0x4b0 [ 3145.130472][ T3575] security_file_ioctl+0x70/0xa0 [ 3145.135433][ T3575] __se_sys_ioctl+0x48/0x170 [ 3145.140043][ T3575] do_syscall_64+0x55/0xa0 [ 3145.144475][ T3575] ? clear_bhb_loop+0x40/0x90 [ 3145.149165][ T3575] ? clear_bhb_loop+0x40/0x90 [ 3145.153863][ T3575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3145.159766][ T3575] RIP: 0033:0x7ff12f79c799 [ 3145.164199][ T3575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3145.183838][ T3575] RSP: 002b:00007ff13070d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.192276][ T3575] RAX: ffffffffffffffda RBX: 00007ff12fa15fa0 RCX: 00007ff12f79c799 [ 3145.200277][ T3575] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000007 [ 3145.208268][ T3575] RBP: 00007ff13070d090 R08: 0000000000000000 R09: 0000000000000000 [ 3145.216262][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3145.224263][ T3575] R13: 00007ff12fa16038 R14: 00007ff12fa15fa0 R15: 00007fff92f637a8 [ 3145.232278][ T3575] [ 3145.334921][ T3575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3145.408743][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3145.581090][ T3584] netlink: 'syz.2.21485': attribute type 5 has an invalid length. [ 3145.645555][ T3586] FAULT_INJECTION: forcing a failure. [ 3145.645555][ T3586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3145.660978][ T3586] CPU: 0 PID: 3586 Comm: syz.1.21487 Not tainted syzkaller #0 [ 3145.668488][ T3586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3145.678570][ T3586] Call Trace: [ 3145.681855][ T3586] [ 3145.684777][ T3586] dump_stack_lvl+0x18c/0x250 [ 3145.689475][ T3586] ? show_regs_print_info+0x20/0x20 [ 3145.694692][ T3586] ? load_image+0x400/0x400 [ 3145.699229][ T3586] ? __might_fault+0xaa/0x120 [ 3145.703919][ T3586] ? __lock_acquire+0x7d40/0x7d40 [ 3145.708962][ T3586] should_fail_ex+0x39d/0x4d0 [ 3145.713671][ T3586] _copy_from_user+0x2f/0xe0 [ 3145.718269][ T3586] get_user_ifreq+0x6b/0x180 [ 3145.722872][ T3586] sock_ioctl+0x6f1/0x7e0 [ 3145.727211][ T3586] ? sock_poll+0x3e0/0x3e0 [ 3145.731633][ T3586] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3145.736575][ T3586] ? security_file_ioctl+0x80/0xa0 [ 3145.741892][ T3586] ? sock_poll+0x3e0/0x3e0 [ 3145.746313][ T3586] __se_sys_ioctl+0xfd/0x170 [ 3145.750899][ T3586] do_syscall_64+0x55/0xa0 [ 3145.755326][ T3586] ? clear_bhb_loop+0x40/0x90 [ 3145.760102][ T3586] ? clear_bhb_loop+0x40/0x90 [ 3145.764769][ T3586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3145.770652][ T3586] RIP: 0033:0x7ff12f79c799 [ 3145.775067][ T3586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3145.794698][ T3586] RSP: 002b:00007ff13070d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3145.803140][ T3586] RAX: ffffffffffffffda RBX: 00007ff12fa15fa0 RCX: 00007ff12f79c799 [ 3145.811133][ T3586] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000007 [ 3145.819126][ T3586] RBP: 00007ff13070d090 R08: 0000000000000000 R09: 0000000000000000 [ 3145.827122][ T3586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3145.835119][ T3586] R13: 00007ff12fa16038 R14: 00007ff12fa15fa0 R15: 00007fff92f637a8 [ 3145.843128][ T3586] [ 3147.275479][ T3601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21490'. [ 3147.300313][ T3600] netlink: 'syz.2.21491': attribute type 3 has an invalid length. [ 3147.347819][ T3601] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21490'. [ 3147.368877][ T3600] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.21491'. [ 3147.424838][ T3603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21490'. [ 3149.839716][ T3618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21495'. [ 3149.853829][ T3618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21495'. [ 3149.878464][ T3618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21495'. [ 3149.894774][T23854] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 3149.905473][ T3620] netlink: 'syz.3.21497': attribute type 5 has an invalid length. [ 3150.040368][ T3626] netlink: 'syz.0.21501': attribute type 5 has an invalid length. [ 3150.205355][ T3629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21502'. [ 3150.227529][ T3629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21502'. [ 3150.257757][ T3631] netlink: 'syz.3.21503': attribute type 7 has an invalid length. [ 3150.272920][ T3629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21502'. [ 3150.553978][ T3641] netlink: 'syz.3.21506': attribute type 5 has an invalid length. [ 3151.142427][T23854] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 3151.302012][ T3658] netlink: 'syz.0.21513': attribute type 5 has an invalid length. [ 3151.469107][ T3659] netlink: 'syz.1.21514': attribute type 5 has an invalid length. [ 3151.671576][ T3668] netlink: 'syz.1.21518': attribute type 5 has an invalid length. [ 3151.920161][T23854] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 3152.390385][ T3688] netlink: 'syz.1.21525': attribute type 5 has an invalid length. [ 3153.146813][ T3691] __nla_validate_parse: 10 callbacks suppressed [ 3153.146849][ T3691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21527'. [ 3153.164384][ T3691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21527'. [ 3153.178376][ T3691] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21527'. [ 3153.283438][ T3698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21530'. [ 3153.298234][ T3698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21530'. [ 3153.325740][ T3698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21530'. [ 3153.457538][ T3702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21531'. [ 3153.481800][ T3702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21531'. [ 3153.501947][ T3702] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21531'. [ 3153.543053][T23854] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 3154.006442][ T3717] netlink: 'syz.2.21536': attribute type 5 has an invalid length. [ 3154.362795][ T3731] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21540'. [ 3154.594309][ T3730] netlink: 'syz.2.21538': attribute type 5 has an invalid length. [ 3154.833544][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3155.048230][ T3746] validate_nla: 1 callbacks suppressed [ 3155.048265][ T3746] netlink: 'syz.3.21549': attribute type 5 has an invalid length. [ 3155.415304][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3156.030967][ T3779] netlink: 'syz.1.21564': attribute type 5 has an invalid length. [ 3156.313801][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3156.379891][ T3795] FAULT_INJECTION: forcing a failure. [ 3156.379891][ T3795] name failslab, interval 1, probability 0, space 0, times 0 [ 3156.401234][ T3795] CPU: 0 PID: 3795 Comm: syz.0.21570 Not tainted syzkaller #0 [ 3156.408726][ T3795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3156.418803][ T3795] Call Trace: [ 3156.422103][ T3795] [ 3156.425053][ T3795] dump_stack_lvl+0x18c/0x250 [ 3156.429764][ T3795] ? show_regs_print_info+0x20/0x20 [ 3156.434994][ T3795] ? load_image+0x400/0x400 [ 3156.439523][ T3795] ? __might_sleep+0xe0/0xe0 [ 3156.444139][ T3795] ? __lock_acquire+0x7d40/0x7d40 [ 3156.449193][ T3795] should_fail_ex+0x39d/0x4d0 [ 3156.453882][ T3795] should_failslab+0x9/0x20 [ 3156.458395][ T3795] slab_pre_alloc_hook+0x59/0x310 [ 3156.463475][ T3795] ? is_bpf_text_address+0x26/0x2a0 [ 3156.468685][ T3795] ? __kernfs_new_node+0xaa/0x810 [ 3156.473705][ T3795] ? __kernfs_new_node+0xaa/0x810 [ 3156.478723][ T3795] __kmem_cache_alloc_node+0x53/0x250 [ 3156.484104][ T3795] ? __kernfs_new_node+0xaa/0x810 [ 3156.489227][ T3795] __kmalloc_node_track_caller+0xa2/0x230 [ 3156.494957][ T3795] kstrdup+0x3b/0x80 [ 3156.498874][ T3795] __kernfs_new_node+0xaa/0x810 [ 3156.503745][ T3795] ? verify_lock_unused+0x140/0x140 [ 3156.508983][ T3795] ? kernfs_new_node+0x260/0x260 [ 3156.513951][ T3795] ? make_kgid+0x1c8/0x660 [ 3156.518405][ T3795] ? from_kuid_munged+0x6b0/0x6b0 [ 3156.523480][ T3795] kernfs_new_node+0x14c/0x260 [ 3156.528269][ T3795] kernfs_create_dir_ns+0x44/0x120 [ 3156.533409][ T3795] sysfs_create_dir_ns+0x130/0x2a0 [ 3156.538555][ T3795] ? sysfs_warn_dup+0xa0/0xa0 [ 3156.543270][ T3795] ? do_raw_spin_unlock+0x121/0x230 [ 3156.548500][ T3795] kobject_add_internal+0x61c/0xcc0 [ 3156.553735][ T3795] kobject_add+0x164/0x240 [ 3156.558179][ T3795] ? kobject_init+0x1e0/0x1e0 [ 3156.562888][ T3795] ? get_device_parent+0x366/0x390 [ 3156.568035][ T3795] device_add+0x408/0xc20 [ 3156.572382][ T3795] ? device_initialize+0x24b/0x440 [ 3156.577682][ T3795] netdev_register_kobject+0x188/0x320 [ 3156.583168][ T3795] register_netdevice+0x12ee/0x1bb0 [ 3156.588407][ T3795] ? netif_stacked_transfer_operstate+0x210/0x210 [ 3156.594838][ T3795] ? dev_addr_mod+0x2b9/0x3b0 [ 3156.599529][ T3795] ? tun_net_initialize+0x158/0x480 [ 3156.604723][ T3795] ? tun_not_capable+0x1f0/0x1f0 [ 3156.609651][ T3795] ? alloc_netdev_mqs+0xc34/0x1040 [ 3156.614761][ T3795] tun_set_iff+0x848/0xed0 [ 3156.619180][ T3795] __tun_chr_ioctl+0x7ee/0x2000 [ 3156.624032][ T3795] ? tun_flow_create+0x310/0x310 [ 3156.628978][ T3795] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3156.633912][ T3795] ? security_file_ioctl+0x80/0xa0 [ 3156.639021][ T3795] ? tun_chr_poll+0x630/0x630 [ 3156.643698][ T3795] __se_sys_ioctl+0xfd/0x170 [ 3156.648287][ T3795] do_syscall_64+0x55/0xa0 [ 3156.652698][ T3795] ? clear_bhb_loop+0x40/0x90 [ 3156.657367][ T3795] ? clear_bhb_loop+0x40/0x90 [ 3156.662039][ T3795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3156.667924][ T3795] RIP: 0033:0x7feedf79c799 [ 3156.672331][ T3795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3156.691971][ T3795] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3156.700390][ T3795] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3156.708355][ T3795] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000003 [ 3156.716318][ T3795] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3156.724279][ T3795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3156.732242][ T3795] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3156.740246][ T3795] [ 3156.748777][ T3795] kobject: kobject_add_internal failed for pimreg0 (error: -12 parent: net) [ 3156.855630][ T3801] netlink: 'syz.3.21572': attribute type 5 has an invalid length. [ 3157.612547][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3157.703156][ T3822] netlink: 'syz.0.21580': attribute type 5 has an invalid length. [ 3157.734628][ T3819] netlink: 'syz.2.21579': attribute type 5 has an invalid length. [ 3158.037265][ T3837] netlink: 'syz.0.21588': attribute type 5 has an invalid length. [ 3158.051504][ T3832] netlink: 'syz.1.21585': attribute type 7 has an invalid length. [ 3158.980642][ T3846] netlink: 'syz.0.21591': attribute type 5 has an invalid length. [ 3158.992154][ T3852] netlink: 'syz.2.21593': attribute type 5 has an invalid length. [ 3159.180616][ T3859] __nla_validate_parse: 17 callbacks suppressed [ 3159.180639][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21595'. [ 3159.200868][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21595'. [ 3159.213800][ T3859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21595'. [ 3159.711157][ T3875] netlink: 'syz.2.21604': attribute type 5 has an invalid length. [ 3160.979439][ T3883] netlink: 'syz.0.21606': attribute type 5 has an invalid length. [ 3161.420156][ T3887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21608'. [ 3161.463265][ T3887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21608'. [ 3161.501173][ T3887] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21608'. [ 3161.841000][ T3896] FAULT_INJECTION: forcing a failure. [ 3161.841000][ T3896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3161.862739][ T3896] CPU: 0 PID: 3896 Comm: syz.2.21613 Not tainted syzkaller #0 [ 3161.870267][ T3896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3161.880353][ T3896] Call Trace: [ 3161.883666][ T3896] [ 3161.886629][ T3896] dump_stack_lvl+0x18c/0x250 [ 3161.891346][ T3896] ? show_regs_print_info+0x20/0x20 [ 3161.896586][ T3896] ? load_image+0x400/0x400 [ 3161.901131][ T3896] ? __lock_acquire+0x7d40/0x7d40 [ 3161.906193][ T3896] should_fail_ex+0x39d/0x4d0 [ 3161.910909][ T3896] _copy_from_user+0x2f/0xe0 [ 3161.915525][ T3896] __copy_msghdr+0x3bb/0x580 [ 3161.920129][ T3896] ___sys_sendmsg+0x214/0x360 [ 3161.924813][ T3896] ? get_pid_task+0x20/0x1e0 [ 3161.929416][ T3896] ? __sys_sendmsg+0x2a0/0x2a0 [ 3161.934209][ T3896] ? __lock_acquire+0x7d40/0x7d40 [ 3161.939315][ T3896] __se_sys_sendmsg+0x1c2/0x2b0 [ 3161.944194][ T3896] ? __x64_sys_sendmsg+0x80/0x80 [ 3161.949164][ T3896] ? trace_sys_enter+0x1f/0x80 [ 3161.953960][ T3896] do_syscall_64+0x55/0xa0 [ 3161.958420][ T3896] ? clear_bhb_loop+0x40/0x90 [ 3161.963116][ T3896] ? clear_bhb_loop+0x40/0x90 [ 3161.967835][ T3896] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3161.973767][ T3896] RIP: 0033:0x7efe27f9c799 [ 3161.978221][ T3896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3161.997851][ T3896] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3162.006276][ T3896] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3162.014250][ T3896] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 3162.022222][ T3896] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3162.030195][ T3896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3162.038169][ T3896] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3162.046164][ T3896] [ 3162.144278][ T3900] netlink: 'syz.0.21614': attribute type 5 has an invalid length. [ 3162.632754][ T3913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21619'. [ 3162.709593][ T3913] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21619'. [ 3162.787002][ T3914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21619'. [ 3165.000867][ T3921] netlink: 'syz.3.21621': attribute type 5 has an invalid length. [ 3165.318792][ T3934] netlink: 'syz.0.21626': attribute type 5 has an invalid length. [ 3165.549558][ T3939] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.21628'. [ 3165.604867][ T3941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21629'. [ 3165.614933][ T3941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21629'. [ 3165.626976][ T3941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21629'. [ 3165.983605][ T3956] netlink: 'syz.0.21635': attribute type 5 has an invalid length. [ 3168.456858][ T3973] netlink: 'syz.0.21643': attribute type 27 has an invalid length. [ 3168.459003][ T3971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21641'. [ 3168.472985][ T3973] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.21643'. [ 3168.502703][ T3971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21641'. [ 3168.552407][ T3971] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21641'. [ 3168.749985][ T3983] netlink: 'syz.3.21646': attribute type 5 has an invalid length. [ 3170.758887][ T4008] FAULT_INJECTION: forcing a failure. [ 3170.758887][ T4008] name failslab, interval 1, probability 0, space 0, times 0 [ 3170.771821][ T4008] CPU: 1 PID: 4008 Comm: syz.0.21653 Not tainted syzkaller #0 [ 3170.779315][ T4008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3170.789392][ T4008] Call Trace: [ 3170.792690][ T4008] [ 3170.795656][ T4008] dump_stack_lvl+0x18c/0x250 [ 3170.800374][ T4008] ? show_regs_print_info+0x20/0x20 [ 3170.805699][ T4008] ? load_image+0x400/0x400 [ 3170.810250][ T4008] should_fail_ex+0x39d/0x4d0 [ 3170.810653][ T4015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21655'. [ 3170.814949][ T4008] should_failslab+0x9/0x20 [ 3170.814980][ T4008] slab_pre_alloc_hook+0x59/0x310 [ 3170.815007][ T4008] kmem_cache_alloc+0x5a/0x2d0 [ 3170.815028][ T4008] ? skb_clone+0x1eb/0x370 [ 3170.815051][ T4008] skb_clone+0x1eb/0x370 [ 3170.815072][ T4008] bpf_clone_redirect+0x167/0x4a0 [ 3170.841388][ T4015] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21655'. [ 3170.842794][ T4008] ? read_tsc+0x9/0x20 [ 3170.842820][ T4008] ? ktime_get+0x24b/0x280 [ 3170.842846][ T4008] bpf_prog_ef4ac361e44d514c+0x21/0x25 [ 3170.842867][ T4008] bpf_test_run+0x2df/0x870 [ 3170.842892][ T4008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3170.842918][ T4008] ? bpf_test_run+0x174/0x870 [ 3170.890562][ T4008] ? convert___skb_to_skb+0x590/0x590 [ 3170.895967][ T4008] ? eth_get_headlen+0x210/0x210 [ 3170.900938][ T4008] ? slab_build_skb+0x25f/0x3f0 [ 3170.905811][ T4008] ? convert___skb_to_skb+0x3d/0x590 [ 3170.911113][ T4008] bpf_prog_test_run_skb+0xad2/0x12b0 [ 3170.916555][ T4008] ? cpu_online+0x60/0x60 [ 3170.920889][ T4008] bpf_prog_test_run+0x321/0x390 [ 3170.925826][ T4008] __sys_bpf+0x49d/0x890 [ 3170.930065][ T4008] ? bpf_link_show_fdinfo+0x390/0x390 [ 3170.935438][ T4008] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3170.941600][ T4008] __x64_sys_bpf+0x7c/0x90 [ 3170.946013][ T4008] do_syscall_64+0x55/0xa0 [ 3170.950431][ T4008] ? clear_bhb_loop+0x40/0x90 [ 3170.955105][ T4008] ? clear_bhb_loop+0x40/0x90 [ 3170.959820][ T4008] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3170.965709][ T4008] RIP: 0033:0x7feedf79c799 [ 3170.970125][ T4008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3170.989729][ T4008] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3170.998140][ T4008] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3171.006105][ T4008] RDX: 0000000000000050 RSI: 00002000000003c0 RDI: 000000000000000a [ 3171.014076][ T4008] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3171.022073][ T4008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3171.030047][ T4008] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3171.038029][ T4008] [ 3171.042893][ T4016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21655'. [ 3173.733163][ T4027] netlink: 'syz.2.21660': attribute type 5 has an invalid length. [ 3173.810360][T23854] Bluetooth: hci1: unexpected event 0x05 length: 151 > 4 [ 3173.923591][ T4032] delete_channel: no stack [ 3174.047627][ T4043] netlink: 52 bytes leftover after parsing attributes in process `syz.1.21665'. [ 3174.066260][ T4042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21667'. [ 3174.077226][ T4042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21667'. [ 3174.089262][ T4042] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21667'. [ 3174.219571][ T4047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21669'. [ 3174.231941][ T4047] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21669'. [ 3174.799966][ T4054] netlink: 'syz.0.21672': attribute type 5 has an invalid length. [ 3174.926559][ T4059] netlink: 176 bytes leftover after parsing attributes in process `syz.2.21673'. [ 3174.985092][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3175.043166][ T4069] netlink: 'syz.1.21678': attribute type 27 has an invalid length. [ 3175.404819][ T4081] netlink: 'syz.1.21684': attribute type 5 has an invalid length. [ 3175.534026][T23854] Bluetooth: hci4: unexpected event 0x05 length: 151 > 4 [ 3175.910411][ T4094] __nla_validate_parse: 6 callbacks suppressed [ 3175.910451][ T4094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21690'. [ 3175.952466][ T4094] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21690'. [ 3175.974863][ T4097] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21690'. [ 3176.092080][ T4101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21691'. [ 3176.101672][ T4101] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21691'. [ 3176.328674][ T4104] FAULT_INJECTION: forcing a failure. [ 3176.328674][ T4104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3176.343101][ T4104] CPU: 1 PID: 4104 Comm: syz.2.21692 Not tainted syzkaller #0 [ 3176.350613][ T4104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3176.360691][ T4104] Call Trace: [ 3176.363973][ T4104] [ 3176.366990][ T4104] dump_stack_lvl+0x18c/0x250 [ 3176.371675][ T4104] ? show_regs_print_info+0x20/0x20 [ 3176.376896][ T4104] ? load_image+0x400/0x400 [ 3176.381396][ T4104] ? __might_fault+0xaa/0x120 [ 3176.386069][ T4104] ? __lock_acquire+0x7d40/0x7d40 [ 3176.391094][ T4104] should_fail_ex+0x39d/0x4d0 [ 3176.395778][ T4104] _copy_from_user+0x2f/0xe0 [ 3176.400460][ T4104] get_user_ifreq+0x6b/0x180 [ 3176.405053][ T4104] sock_ioctl+0x6f1/0x7e0 [ 3176.409375][ T4104] ? sock_poll+0x3e0/0x3e0 [ 3176.413790][ T4104] ? bpf_lsm_file_ioctl+0x9/0x10 [ 3176.418721][ T4104] ? security_file_ioctl+0x80/0xa0 [ 3176.423827][ T4104] ? sock_poll+0x3e0/0x3e0 [ 3176.428248][ T4104] __se_sys_ioctl+0xfd/0x170 [ 3176.432830][ T4104] do_syscall_64+0x55/0xa0 [ 3176.437243][ T4104] ? clear_bhb_loop+0x40/0x90 [ 3176.441923][ T4104] ? clear_bhb_loop+0x40/0x90 [ 3176.446615][ T4104] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3176.452500][ T4104] RIP: 0033:0x7efe27f9c799 [ 3176.456907][ T4104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3176.476500][ T4104] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3176.484906][ T4104] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3176.492864][ T4104] RDX: 0000200000000080 RSI: 00000000000089f3 RDI: 0000000000000006 [ 3176.500825][ T4104] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3176.508784][ T4104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3176.516752][ T4104] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3176.524727][ T4104] [ 3176.560607][ T4107] macvlan1: left allmulticast mode [ 3176.586949][ T4105] netlink: 'syz.3.21693': attribute type 27 has an invalid length. [ 3176.636304][ T4107] FAULT_INJECTION: forcing a failure. [ 3176.636304][ T4107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3176.650498][ T4107] CPU: 0 PID: 4107 Comm: syz.0.21694 Not tainted syzkaller #0 [ 3176.657980][ T4107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3176.668034][ T4107] Call Trace: [ 3176.671307][ T4107] [ 3176.674234][ T4107] dump_stack_lvl+0x18c/0x250 [ 3176.678940][ T4107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3176.685094][ T4107] ? show_regs_print_info+0x20/0x20 [ 3176.690291][ T4107] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3176.696456][ T4107] should_fail_ex+0x39d/0x4d0 [ 3176.701136][ T4107] _copy_from_user+0x2f/0xe0 [ 3176.705725][ T4107] ___sys_sendmsg+0x1c7/0x360 [ 3176.710407][ T4107] ? __sys_sendmsg+0x2a0/0x2a0 [ 3176.715201][ T4107] __se_sys_sendmsg+0x1c2/0x2b0 [ 3176.720048][ T4107] ? __x64_sys_sendmsg+0x80/0x80 [ 3176.724994][ T4107] ? trace_sys_enter+0x1f/0x80 [ 3176.729754][ T4107] do_syscall_64+0x55/0xa0 [ 3176.734169][ T4107] ? clear_bhb_loop+0x40/0x90 [ 3176.738841][ T4107] ? clear_bhb_loop+0x40/0x90 [ 3176.743513][ T4107] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3176.749404][ T4107] RIP: 0033:0x7feedf79c799 [ 3176.753897][ T4107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3176.773552][ T4107] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3176.781987][ T4107] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3176.789964][ T4107] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000f [ 3176.797937][ T4107] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3176.805912][ T4107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3176.813884][ T4107] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3176.821869][ T4107] [ 3176.862331][ T4105] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.21693'. [ 3176.878623][ T4110] macvlan1: entered promiscuous mode [ 3177.147382][ T4119] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.21700'. [ 3177.158689][ T4114] delete_channel: no stack [ 3177.185320][ T4119] netlink: 'syz.0.21700': attribute type 2 has an invalid length. [ 3177.220704][ T4110] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.21696'. [ 3177.239743][ T4110] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.21696'. [ 3177.250287][ T4110] tipc: Started in network mode [ 3177.257185][ T4110] tipc: Node identity d, cluster identity 56 [ 3177.265513][ T4110] tipc: Node number set to 13 [ 3177.309849][ T4122] netlink: 'syz.3.21701': attribute type 10 has an invalid length. [ 3177.321199][ T4122] netlink: 40 bytes leftover after parsing attributes in process `syz.3.21701'. [ 3177.333312][ T4122] batman_adv: batadv0: Adding interface: vlan1 [ 3177.354980][ T4122] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3177.409005][ T4122] batman_adv: batadv0: Interface activated: vlan1 [ 3177.453356][ T4128] FAULT_INJECTION: forcing a failure. [ 3177.453356][ T4128] name failslab, interval 1, probability 0, space 0, times 0 [ 3177.474615][ T4128] CPU: 0 PID: 4128 Comm: syz.0.21703 Not tainted syzkaller #0 [ 3177.482222][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3177.492301][ T4128] Call Trace: [ 3177.495594][ T4128] [ 3177.498528][ T4128] dump_stack_lvl+0x18c/0x250 [ 3177.503308][ T4128] ? show_regs_print_info+0x20/0x20 [ 3177.508522][ T4128] ? load_image+0x400/0x400 [ 3177.513035][ T4128] ? __lock_acquire+0x7d40/0x7d40 [ 3177.518069][ T4128] should_fail_ex+0x39d/0x4d0 [ 3177.522760][ T4128] should_failslab+0x9/0x20 [ 3177.527270][ T4128] slab_pre_alloc_hook+0x59/0x310 [ 3177.532314][ T4128] ? __lock_acquire+0x7d40/0x7d40 [ 3177.537345][ T4128] ? bpf_test_init+0x9f/0x140 [ 3177.542027][ T4128] ? bpf_test_init+0x9f/0x140 [ 3177.546705][ T4128] __kmem_cache_alloc_node+0x53/0x250 [ 3177.552090][ T4128] ? bpf_test_init+0x9f/0x140 [ 3177.556778][ T4128] __kmalloc+0xa4/0x230 [ 3177.560943][ T4128] bpf_test_init+0x9f/0x140 [ 3177.565455][ T4128] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 3177.570843][ T4128] ? dev_put+0x80/0x80 [ 3177.574923][ T4128] ? bpf_prog_test_run+0x315/0x390 [ 3177.580041][ T4128] ? dev_put+0x80/0x80 [ 3177.584113][ T4128] bpf_prog_test_run+0x321/0x390 [ 3177.589056][ T4128] __sys_bpf+0x49d/0x890 [ 3177.593300][ T4128] ? bpf_link_show_fdinfo+0x390/0x390 [ 3177.598693][ T4128] ? lock_chain_count+0x20/0x20 [ 3177.603578][ T4128] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3177.609575][ T4128] __x64_sys_bpf+0x7c/0x90 [ 3177.613999][ T4128] do_syscall_64+0x55/0xa0 [ 3177.618426][ T4128] ? clear_bhb_loop+0x40/0x90 [ 3177.623104][ T4128] ? clear_bhb_loop+0x40/0x90 [ 3177.627794][ T4128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3177.633687][ T4128] RIP: 0033:0x7feedf79c799 [ 3177.638102][ T4128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3177.657716][ T4128] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3177.666133][ T4128] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3177.674106][ T4128] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 3177.682077][ T4128] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3177.690049][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3177.698021][ T4128] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3177.706006][ T4128] [ 3178.484638][ T4143] delete_channel: no stack [ 3178.507397][ T4155] mac80211_hwsim hwsim176 »»»»»»: renamed from wlan0 (while UP) [ 3178.752666][T23854] Bluetooth: hci4: ISO packet for unknown connection handle 255 [ 3179.044683][ T4179] delete_channel: no stack [ 3182.362278][ T4210] delete_channel: no stack [ 3182.949556][ T4234] netlink: 132 bytes leftover after parsing attributes in process `syz.2.21741'. [ 3183.253051][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3183.351660][ T4247] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.21744'. [ 3183.460565][ T4247] netlink: 'syz.1.21744': attribute type 2 has an invalid length. [ 3184.274680][ T4257] delete_channel: no stack [ 3184.440677][ T4261] netlink: 'syz.3.21749': attribute type 5 has an invalid length. [ 3184.544624][ T4269] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.21754'. [ 3184.625997][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3184.633070][ T4278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21754'. [ 3184.664081][ T4278] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21754'. [ 3184.675756][ T4269] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21754'. [ 3184.760307][ T4281] mac80211_hwsim hwsim174 »»»»»»: renamed from wlan0 (while UP) [ 3184.885319][ T4284] delete_channel: no stack [ 3185.058687][ T4292] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.21761'. [ 3185.084151][ T4292] netlink: 'syz.3.21761': attribute type 2 has an invalid length. [ 3185.365208][ T4303] netlink: 'syz.2.21764': attribute type 5 has an invalid length. [ 3185.450544][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3185.894953][ T4320] netlink: 'syz.3.21772': attribute type 27 has an invalid length. [ 3185.929721][ T4322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21773'. [ 3185.941839][ T4322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21773'. [ 3185.962082][ T4322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21773'. [ 3186.069007][ T4325] FAULT_INJECTION: forcing a failure. [ 3186.069007][ T4325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3186.094008][ T4325] CPU: 0 PID: 4325 Comm: syz.0.21775 Not tainted syzkaller #0 [ 3186.101532][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3186.111612][ T4325] Call Trace: [ 3186.114906][ T4325] [ 3186.117853][ T4325] dump_stack_lvl+0x18c/0x250 [ 3186.122560][ T4325] ? show_regs_print_info+0x20/0x20 [ 3186.127768][ T4325] ? load_image+0x400/0x400 [ 3186.132277][ T4325] ? __lock_acquire+0x7d40/0x7d40 [ 3186.137392][ T4325] ? snprintf+0xe9/0x140 [ 3186.141641][ T4325] should_fail_ex+0x39d/0x4d0 [ 3186.146326][ T4325] _copy_to_user+0x2f/0xa0 [ 3186.150746][ T4325] simple_read_from_buffer+0xe7/0x150 [ 3186.156147][ T4325] proc_fail_nth_read+0x1e8/0x260 [ 3186.161201][ T4325] ? proc_fault_inject_write+0x360/0x360 [ 3186.166878][ T4325] ? fsnotify_perm+0x271/0x5e0 [ 3186.171663][ T4325] ? proc_fault_inject_write+0x360/0x360 [ 3186.177306][ T4325] vfs_read+0x28b/0x970 [ 3186.181471][ T4325] ? kernel_read+0x1e0/0x1e0 [ 3186.186061][ T4325] ? __fget_files+0x28/0x4b0 [ 3186.190648][ T4325] ? __fget_files+0x28/0x4b0 [ 3186.195239][ T4325] ? __fget_files+0x43d/0x4b0 [ 3186.199927][ T4325] ? __fdget_pos+0x2a3/0x330 [ 3186.204516][ T4325] ? ksys_read+0x75/0x260 [ 3186.208854][ T4325] ksys_read+0x150/0x260 [ 3186.213100][ T4325] ? vfs_write+0x990/0x990 [ 3186.217552][ T4325] ? trace_sys_enter+0x1f/0x80 [ 3186.222352][ T4325] do_syscall_64+0x55/0xa0 [ 3186.226788][ T4325] ? clear_bhb_loop+0x40/0x90 [ 3186.231471][ T4325] ? clear_bhb_loop+0x40/0x90 [ 3186.236156][ T4325] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3186.242047][ T4325] RIP: 0033:0x7feedf75cfce [ 3186.246461][ T4325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3186.266076][ T4325] RSP: 002b:00007feee05effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3186.274499][ T4325] RAX: ffffffffffffffda RBX: 00007feee05f06c0 RCX: 00007feedf75cfce [ 3186.282468][ T4325] RDX: 000000000000000f RSI: 00007feee05f00a0 RDI: 0000000000000008 [ 3186.290439][ T4325] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3186.298424][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3186.306415][ T4325] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3186.314404][ T4325] [ 3186.490673][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3186.645506][ T4338] netlink: 'syz.1.21778': attribute type 5 has an invalid length. [ 3186.748942][ T4348] netlink: 'syz.2.21783': attribute type 1 has an invalid length. [ 3186.918794][ T4355] FAULT_INJECTION: forcing a failure. [ 3186.918794][ T4355] name failslab, interval 1, probability 0, space 0, times 0 [ 3186.949882][ T4355] CPU: 0 PID: 4355 Comm: syz.2.21787 Not tainted syzkaller #0 [ 3186.957396][ T4355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3186.967473][ T4355] Call Trace: [ 3186.970757][ T4355] [ 3186.973858][ T4355] dump_stack_lvl+0x18c/0x250 [ 3186.978543][ T4355] ? show_regs_print_info+0x20/0x20 [ 3186.983740][ T4355] ? load_image+0x400/0x400 [ 3186.988244][ T4355] ? __might_sleep+0xe0/0xe0 [ 3186.992830][ T4355] ? __lock_acquire+0x7d40/0x7d40 [ 3186.997870][ T4355] ? rcu_is_watching+0x15/0xb0 [ 3187.002641][ T4355] should_fail_ex+0x39d/0x4d0 [ 3187.007407][ T4355] should_failslab+0x9/0x20 [ 3187.011920][ T4355] slab_pre_alloc_hook+0x59/0x310 [ 3187.016946][ T4355] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 3187.022835][ T4355] __kmem_cache_alloc_node+0x53/0x250 [ 3187.028207][ T4355] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 3187.034114][ T4355] kmalloc_trace+0x2a/0xe0 [ 3187.038532][ T4355] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 3187.044251][ T4355] sctp_association_new+0x15d3/0x25c0 [ 3187.049659][ T4355] sctp_connect_new_asoc+0x2de/0x6a0 [ 3187.054963][ T4355] ? __sctp_connect+0xd80/0xd80 [ 3187.059818][ T4355] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3187.065198][ T4355] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 3187.070755][ T4355] ? security_sctp_bind_connect+0x89/0xb0 [ 3187.076475][ T4355] sctp_sendmsg+0x1575/0x28c0 [ 3187.081156][ T4355] ? sctp_getsockopt+0xb60/0xb60 [ 3187.086090][ T4355] ? aa_sk_perm+0x83c/0x970 [ 3187.090595][ T4355] ? aa_af_perm+0x330/0x330 [ 3187.095093][ T4355] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 3187.101513][ T4355] ? sock_rps_record_flow+0x19/0x3f0 [ 3187.106796][ T4355] ? inet_sendmsg+0xe9/0x2f0 [ 3187.111382][ T4355] ? inet_send_prepare+0x260/0x260 [ 3187.116526][ T4355] ____sys_sendmsg+0x5ba/0x960 [ 3187.121299][ T4355] ? __lock_acquire+0x7d40/0x7d40 [ 3187.126335][ T4355] ? __asan_memset+0x22/0x40 [ 3187.130925][ T4355] ? __sys_sendmsg_sock+0x30/0x30 [ 3187.135940][ T4355] ? __import_iovec+0x5f2/0x850 [ 3187.140793][ T4355] ? import_iovec+0x73/0xa0 [ 3187.145289][ T4355] ___sys_sendmsg+0x2a6/0x360 [ 3187.149965][ T4355] ? get_pid_task+0x20/0x1e0 [ 3187.154574][ T4355] ? __sys_sendmsg+0x2a0/0x2a0 [ 3187.159370][ T4355] ? __lock_acquire+0x7d40/0x7d40 [ 3187.164420][ T4355] __se_sys_sendmsg+0x1c2/0x2b0 [ 3187.169276][ T4355] ? __x64_sys_sendmsg+0x80/0x80 [ 3187.174220][ T4355] ? trace_sys_enter+0x1f/0x80 [ 3187.178983][ T4355] do_syscall_64+0x55/0xa0 [ 3187.183395][ T4355] ? clear_bhb_loop+0x40/0x90 [ 3187.188070][ T4355] ? clear_bhb_loop+0x40/0x90 [ 3187.192745][ T4355] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3187.198635][ T4355] RIP: 0033:0x7efe27f9c799 [ 3187.203050][ T4355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3187.222828][ T4355] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3187.231240][ T4355] RAX: ffffffffffffffda RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3187.239228][ T4355] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 3187.247324][ T4355] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3187.255302][ T4355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3187.263277][ T4355] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3187.271269][ T4355] [ 3187.454854][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3187.487132][ T4363] netlink: 'syz.2.21789': attribute type 33 has an invalid length. [ 3188.986334][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3189.167834][ T4411] __nla_validate_parse: 8 callbacks suppressed [ 3189.167865][ T4411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21805'. [ 3189.194537][ T4411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21805'. [ 3189.214829][ T4411] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21805'. [ 3189.445549][ T4421] netlink: 'syz.2.21807': attribute type 21 has an invalid length. [ 3189.454675][ T4421] IPv6: NLM_F_CREATE should be specified when creating new route [ 3189.462548][ T4421] IPv6: Can't replace route, no match found [ 3189.907528][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3190.294196][ T4447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21817'. [ 3190.316660][ T4447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21817'. [ 3190.330788][ T4447] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21817'. [ 3190.515026][ T4460] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.21820'. [ 3190.533357][ T4460] netlink: 21096 bytes leftover after parsing attributes in process `syz.0.21820'. [ 3190.543669][ T4460] tipc: Started in network mode [ 3190.549141][ T4460] tipc: Node identity 1a, cluster identity 4711 [ 3190.556605][ T4460] tipc: Node number set to 26 [ 3190.614136][ T4463] netlink: 'syz.2.21823': attribute type 1 has an invalid length. [ 3190.647558][T23854] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 3190.774788][ T4471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21827'. [ 3190.795875][ T4471] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21827'. [ 3191.623088][ T4487] FAULT_INJECTION: forcing a failure. [ 3191.623088][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3191.642162][ T4487] CPU: 1 PID: 4487 Comm: syz.3.21834 Not tainted syzkaller #0 [ 3191.649679][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3191.659752][ T4487] Call Trace: [ 3191.663044][ T4487] [ 3191.665984][ T4487] dump_stack_lvl+0x18c/0x250 [ 3191.670687][ T4487] ? show_regs_print_info+0x20/0x20 [ 3191.675908][ T4487] ? load_image+0x400/0x400 [ 3191.680429][ T4487] ? __lock_acquire+0x7d40/0x7d40 [ 3191.685468][ T4487] ? snprintf+0xe9/0x140 [ 3191.689732][ T4487] should_fail_ex+0x39d/0x4d0 [ 3191.694447][ T4487] _copy_to_user+0x2f/0xa0 [ 3191.698897][ T4487] simple_read_from_buffer+0xe7/0x150 [ 3191.704299][ T4487] proc_fail_nth_read+0x1e8/0x260 [ 3191.709344][ T4487] ? proc_fault_inject_write+0x360/0x360 [ 3191.714999][ T4487] ? fsnotify_perm+0x271/0x5e0 [ 3191.719783][ T4487] ? proc_fault_inject_write+0x360/0x360 [ 3191.725440][ T4487] vfs_read+0x28b/0x970 [ 3191.729617][ T4487] ? kernel_read+0x1e0/0x1e0 [ 3191.734225][ T4487] ? __fget_files+0x28/0x4b0 [ 3191.738871][ T4487] ? __fget_files+0x28/0x4b0 [ 3191.743472][ T4487] ? __fget_files+0x43d/0x4b0 [ 3191.748172][ T4487] ? __fdget_pos+0x2a3/0x330 [ 3191.752791][ T4487] ? ksys_read+0x75/0x260 [ 3191.757144][ T4487] ksys_read+0x150/0x260 [ 3191.761406][ T4487] ? vfs_write+0x990/0x990 [ 3191.765836][ T4487] ? trace_sys_enter+0x1f/0x80 [ 3191.770617][ T4487] do_syscall_64+0x55/0xa0 [ 3191.775056][ T4487] ? clear_bhb_loop+0x40/0x90 [ 3191.779830][ T4487] ? clear_bhb_loop+0x40/0x90 [ 3191.784521][ T4487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3191.790428][ T4487] RIP: 0033:0x7f24a275cfce [ 3191.794851][ T4487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 3191.814464][ T4487] RSP: 002b:00007f24a3603fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3191.822866][ T4487] RAX: ffffffffffffffda RBX: 00007f24a36046c0 RCX: 00007f24a275cfce [ 3191.830842][ T4487] RDX: 000000000000000f RSI: 00007f24a36040a0 RDI: 0000000000000004 [ 3191.838939][ T4487] RBP: 00007f24a3604090 R08: 0000000000000000 R09: 0000000000000000 [ 3191.846925][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3191.854908][ T4487] R13: 00007f24a2a16038 R14: 00007f24a2a15fa0 R15: 00007ffdbd4facb8 [ 3191.862914][ T4487] [ 3192.025339][T23854] Bluetooth: hci0: unexpected event 0x05 length: 151 > 4 [ 3192.408494][ T4501] netlink: 'syz.0.21838': attribute type 5 has an invalid length. [ 3192.571778][ T4505] netlink: 'syz.0.21848': attribute type 10 has an invalid length. [ 3192.582090][ T4505] vcan0: entered promiscuous mode [ 3192.588451][ T4505] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 3193.191933][ T4532] netlink: 'syz.3.21849': attribute type 5 has an invalid length. [ 3193.937215][ T4562] netlink: 'syz.2.21863': attribute type 5 has an invalid length. [ 3193.975842][ T4569] tc_dump_action: action bad kind [ 3194.188366][ T4582] __nla_validate_parse: 13 callbacks suppressed [ 3194.188403][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21870'. [ 3194.213701][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21870'. [ 3194.232087][ T4582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.21870'. [ 3194.422778][ T4588] netlink: 'syz.1.21873': attribute type 10 has an invalid length. [ 3194.422891][ T4592] FAULT_INJECTION: forcing a failure. [ 3194.422891][ T4592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3194.444282][ T4592] CPU: 1 PID: 4592 Comm: syz.0.21874 Not tainted syzkaller #0 [ 3194.451771][ T4592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3194.461855][ T4592] Call Trace: [ 3194.465163][ T4592] [ 3194.468118][ T4592] dump_stack_lvl+0x18c/0x250 [ 3194.472834][ T4592] ? show_regs_print_info+0x20/0x20 [ 3194.478068][ T4592] ? load_image+0x400/0x400 [ 3194.482605][ T4592] ? __might_fault+0xaa/0x120 [ 3194.487334][ T4592] ? __lock_acquire+0x7d40/0x7d40 [ 3194.492426][ T4592] should_fail_ex+0x39d/0x4d0 [ 3194.497142][ T4592] _copy_from_iter+0x1d9/0x12e0 [ 3194.502026][ T4592] ? slab_post_alloc_hook+0x8a/0x4b0 [ 3194.507337][ T4592] ? __virt_addr_valid+0x18c/0x540 [ 3194.512463][ T4592] ? __lock_acquire+0x7d40/0x7d40 [ 3194.517502][ T4592] ? rcu_is_watching+0x15/0xb0 [ 3194.522279][ T4592] ? copyout_mc+0x70/0x70 [ 3194.526610][ T4592] ? __virt_addr_valid+0x18c/0x540 [ 3194.531727][ T4592] ? __virt_addr_valid+0x18c/0x540 [ 3194.536837][ T4592] ? __virt_addr_valid+0x469/0x540 [ 3194.541953][ T4592] ? __check_object_size+0x506/0xa20 [ 3194.547243][ T4592] netlink_sendmsg+0x76b/0xbf0 [ 3194.552022][ T4592] ? netlink_getsockopt+0x590/0x590 [ 3194.557256][ T4592] ? aa_sock_msg_perm+0x94/0x150 [ 3194.562199][ T4592] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3194.567487][ T4592] ? security_socket_sendmsg+0x80/0xa0 [ 3194.573028][ T4592] ? netlink_getsockopt+0x590/0x590 [ 3194.578246][ T4592] ____sys_sendmsg+0x5ba/0x960 [ 3194.583117][ T4592] ? __asan_memset+0x22/0x40 [ 3194.587723][ T4592] ? __sys_sendmsg_sock+0x30/0x30 [ 3194.592745][ T4592] ? __import_iovec+0x5f2/0x850 [ 3194.597608][ T4592] ? import_iovec+0x73/0xa0 [ 3194.602106][ T4592] ___sys_sendmsg+0x2a6/0x360 [ 3194.606787][ T4592] ? __sys_sendmsg+0x2a0/0x2a0 [ 3194.611564][ T4592] ? __lock_acquire+0x7d40/0x7d40 [ 3194.616611][ T4592] __se_sys_sendmsg+0x1c2/0x2b0 [ 3194.621461][ T4592] ? __x64_sys_sendmsg+0x80/0x80 [ 3194.626406][ T4592] ? trace_sys_enter+0x1f/0x80 [ 3194.631170][ T4592] do_syscall_64+0x55/0xa0 [ 3194.635585][ T4592] ? clear_bhb_loop+0x40/0x90 [ 3194.640259][ T4592] ? clear_bhb_loop+0x40/0x90 [ 3194.644932][ T4592] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3194.650821][ T4592] RIP: 0033:0x7feedf79c799 [ 3194.655232][ T4592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3194.674836][ T4592] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3194.683250][ T4592] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3194.691217][ T4592] RDX: 0000000020000080 RSI: 0000200000000000 RDI: 0000000000000003 [ 3194.699185][ T4592] RBP: 00007feee05f0090 R08: 0000000000000000 R09: 0000000000000000 [ 3194.707150][ T4592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3194.715113][ T4592] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3194.723097][ T4592] [ 3194.727293][ T4588] hsr_slave_0: left promiscuous mode [ 3194.736125][ T4588] hsr_slave_1: left promiscuous mode [ 3195.111502][ T4605] netlink: 'syz.0.21884': attribute type 5 has an invalid length. [ 3195.346916][ T4615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21881'. [ 3195.361082][ T4615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21881'. [ 3195.382459][ T4615] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21881'. [ 3195.475890][ T4619] netlink: 'syz.1.21883': attribute type 9 has an invalid length. [ 3195.500875][ T4619] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.21883'. [ 3195.780298][ T4630] netlink: 'syz.0.21888': attribute type 5 has an invalid length. [ 3195.964418][ T4641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21892'. [ 3195.986717][ T4641] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21892'. [ 3196.025704][ T4643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.21892'. [ 3196.382358][ T4622] FAULT_INJECTION: forcing a failure. [ 3196.382358][ T4622] name fail_futex, interval 1, probability 0, space 0, times 0 [ 3196.414235][ T4622] CPU: 1 PID: 4622 Comm: syz.2.21885 Not tainted syzkaller #0 [ 3196.421746][ T4622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3196.431833][ T4622] Call Trace: [ 3196.435131][ T4622] [ 3196.438075][ T4622] dump_stack_lvl+0x18c/0x250 [ 3196.442786][ T4622] ? show_regs_print_info+0x20/0x20 [ 3196.448012][ T4622] ? load_image+0x400/0x400 [ 3196.452532][ T4622] ? __lock_acquire+0x1347/0x7d40 [ 3196.457558][ T4622] ? verify_lock_unused+0x140/0x140 [ 3196.462776][ T4622] should_fail_ex+0x39d/0x4d0 [ 3196.467459][ T4622] get_futex_key+0x136/0x1010 [ 3196.472145][ T4622] ? futex_setup_timer+0xc0/0xc0 [ 3196.477087][ T4622] futex_wake+0x127/0x4f0 [ 3196.481415][ T4622] ? futex_wake_mark+0x150/0x150 [ 3196.486450][ T4622] do_futex+0x35d/0x3e0 [ 3196.490610][ T4622] ? __might_fault+0xaa/0x120 [ 3196.495286][ T4622] ? __ia32_sys_get_robust_list+0x110/0x110 [ 3196.501179][ T4622] ? __might_fault+0xc6/0x120 [ 3196.505853][ T4622] mm_release+0x184/0x3a0 [ 3196.510200][ T4622] ? exit_mm_release+0x30/0x30 [ 3196.514956][ T4622] ? lockdep_hardirqs_on+0x98/0x150 [ 3196.520598][ T4622] exit_mm+0xa7/0x2c0 [ 3196.524587][ T4622] ? do_exit+0x2460/0x2460 [ 3196.529004][ T4622] ? taskstats_exit+0x35e/0x9e0 [ 3196.533872][ T4622] do_exit+0x8dd/0x2460 [ 3196.538036][ T4622] ? put_task_struct+0xc0/0xc0 [ 3196.542799][ T4622] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3196.548776][ T4622] ? get_signal+0x1068/0x13f0 [ 3196.553449][ T4622] ? lock_chain_count+0x20/0x20 [ 3196.558299][ T4622] do_group_exit+0x21b/0x2d0 [ 3196.562923][ T4622] ? lockdep_hardirqs_on+0x98/0x150 [ 3196.568122][ T4622] get_signal+0x12fc/0x13f0 [ 3196.572636][ T4622] arch_do_signal_or_restart+0xc2/0x800 [ 3196.578188][ T4622] ? get_sigframe_size+0x20/0x20 [ 3196.583137][ T4622] ? exit_to_user_mode_loop+0x3b/0x110 [ 3196.588605][ T4622] exit_to_user_mode_loop+0x70/0x110 [ 3196.593896][ T4622] exit_to_user_mode_prepare+0xee/0x180 [ 3196.599443][ T4622] syscall_exit_to_user_mode+0x1a/0x50 [ 3196.604902][ T4622] do_syscall_64+0x61/0xa0 [ 3196.609404][ T4622] ? clear_bhb_loop+0x40/0x90 [ 3196.614080][ T4622] ? clear_bhb_loop+0x40/0x90 [ 3196.618758][ T4622] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3196.624649][ T4622] RIP: 0033:0x7efe27f9c799 [ 3196.629058][ T4622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3196.648836][ T4622] RSP: 002b:00007efe28db6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3196.657274][ T4622] RAX: fffffffffffffe00 RBX: 00007efe28215fa0 RCX: 00007efe27f9c799 [ 3196.665326][ T4622] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 3196.673292][ T4622] RBP: 00007efe28db6090 R08: 0000000000000000 R09: 0000000000000000 [ 3196.681255][ T4622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3196.689218][ T4622] R13: 00007efe28216038 R14: 00007efe28215fa0 R15: 00007fff37b5bda8 [ 3196.697198][ T4622] [ 3196.899890][ T4668] netlink: 'syz.2.21899': attribute type 5 has an invalid length. [ 3197.133439][ T4678] netlink: 'syz.0.21908': attribute type 5 has an invalid length. [ 3197.397952][ T4695] FAULT_INJECTION: forcing a failure. [ 3197.397952][ T4695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3197.419336][ T4695] CPU: 0 PID: 4695 Comm: syz.3.21906 Not tainted syzkaller #0 [ 3197.426867][ T4695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3197.436949][ T4695] Call Trace: [ 3197.440260][ T4695] [ 3197.443220][ T4695] dump_stack_lvl+0x18c/0x250 [ 3197.448495][ T4695] ? show_regs_print_info+0x20/0x20 [ 3197.453699][ T4695] ? load_image+0x400/0x400 [ 3197.458233][ T4695] ? __lock_acquire+0x7d40/0x7d40 [ 3197.463304][ T4695] should_fail_ex+0x39d/0x4d0 [ 3197.468016][ T4695] _copy_from_user+0x2f/0xe0 [ 3197.472637][ T4695] __copy_msghdr+0x3bb/0x580 [ 3197.477265][ T4695] ___sys_sendmsg+0x214/0x360 [ 3197.481972][ T4695] ? __sys_sendmsg+0x2a0/0x2a0 [ 3197.486789][ T4695] ? __lock_acquire+0x7d40/0x7d40 [ 3197.491965][ T4695] __se_sys_sendmsg+0x1c2/0x2b0 [ 3197.496848][ T4695] ? __x64_sys_sendmsg+0x80/0x80 [ 3197.501832][ T4695] ? trace_sys_enter+0x1f/0x80 [ 3197.506629][ T4695] do_syscall_64+0x55/0xa0 [ 3197.511097][ T4695] ? clear_bhb_loop+0x40/0x90 [ 3197.515799][ T4695] ? clear_bhb_loop+0x40/0x90 [ 3197.520508][ T4695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3197.526465][ T4695] RIP: 0033:0x7f24a279c799 [ 3197.530905][ T4695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3197.550543][ T4695] RSP: 002b:00007f24a3604028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3197.558992][ T4695] RAX: ffffffffffffffda RBX: 00007f24a2a15fa0 RCX: 00007f24a279c799 [ 3197.566997][ T4695] RDX: 0000000020040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 3197.575001][ T4695] RBP: 00007f24a3604090 R08: 0000000000000000 R09: 0000000000000000 [ 3197.582996][ T4695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3197.590993][ T4695] R13: 00007f24a2a16038 R14: 00007f24a2a15fa0 R15: 00007ffdbd4facb8 [ 3197.599011][ T4695] [ 3197.761837][ T4710] netlink: 'syz.3.21913': attribute type 5 has an invalid length. [ 3213.027514][ T4726] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3213.038170][ T4726] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3213.047038][ T4726] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3213.056032][ T4726] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3213.064333][ T4726] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3213.071915][ T4726] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3213.609021][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3213.616740][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3214.755386][ T4726] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3214.770397][ T4726] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3214.778906][ T4726] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3214.788783][ T4726] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3214.797617][ T4726] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3214.805485][ T4726] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3214.888794][T23854] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3214.904177][T23854] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3214.912580][T23854] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3214.922863][T23854] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3214.931325][T23854] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3214.938879][T23854] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3215.013786][ T4726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3215.029724][ T4726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3215.038254][ T4726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3215.052522][ T4726] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3215.060695][ T4726] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3215.072941][ T4726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3215.144121][ T4726] Bluetooth: hci3: command tx timeout [ 3216.904099][ T4726] Bluetooth: hci5: command tx timeout [ 3216.984190][ T4726] Bluetooth: hci6: command tx timeout [ 3217.144125][ T4726] Bluetooth: hci7: command tx timeout [ 3217.224147][ T4726] Bluetooth: hci3: command tx timeout [ 3218.984253][ T4726] Bluetooth: hci5: command tx timeout [ 3219.064134][ T4726] Bluetooth: hci6: command tx timeout [ 3219.224130][ T4726] Bluetooth: hci7: command tx timeout [ 3219.311578][ T4726] Bluetooth: hci3: command tx timeout [ 3221.064150][ T4726] Bluetooth: hci5: command tx timeout [ 3221.143959][ T4726] Bluetooth: hci6: command tx timeout [ 3221.303986][ T4726] Bluetooth: hci7: command tx timeout [ 3221.384198][ T4726] Bluetooth: hci3: command tx timeout [ 3225.082802][ T4726] Bluetooth: hci5: command tx timeout [ 3225.089215][T23854] Bluetooth: hci6: command tx timeout [ 3225.099832][T23854] Bluetooth: hci7: command tx timeout [ 3285.548078][ T9110] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 3285.559498][ T9110] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 3285.568405][ T9110] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 3285.594473][ T9110] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 3285.602245][ T9110] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 3285.610187][ T9110] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 3285.707890][ T4737] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 3285.717997][ T4737] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 3285.726822][ T4737] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 3285.735165][ T4737] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 3285.742995][ T4737] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 3285.751894][ T4737] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 3285.846393][ T9110] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 3285.858328][ T9110] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 3285.867311][ T9110] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 3285.878037][ T9110] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 3285.886385][ T9110] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 3285.896984][ T9110] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 3285.973074][ T4737] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 3285.983133][ T4737] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 3285.997694][ T4737] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 3286.007329][ T4737] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 3286.020245][ T4737] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 3286.029095][ T4737] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 3287.704145][ T4737] Bluetooth: hci8: command tx timeout [ 3287.863988][ T4737] Bluetooth: hci9: command tx timeout [ 3287.944159][ T4737] Bluetooth: hci10: command tx timeout [ 3288.104116][ T4737] Bluetooth: hci11: command tx timeout [ 3289.784089][ T4737] Bluetooth: hci8: command tx timeout [ 3289.958762][ T4737] Bluetooth: hci9: command tx timeout [ 3290.023943][ T4737] Bluetooth: hci10: command tx timeout [ 3290.183975][ T4737] Bluetooth: hci11: command tx timeout [ 3296.040158][ T4737] Bluetooth: hci8: command tx timeout [ 3296.045990][ T4737] Bluetooth: hci9: command tx timeout [ 3296.051526][ T4737] Bluetooth: hci10: command tx timeout [ 3296.057204][ T4737] Bluetooth: hci11: command tx timeout [ 3298.995587][ T9110] Bluetooth: hci11: command tx timeout [ 3299.001140][ T9110] Bluetooth: hci10: command tx timeout [ 3299.009540][ T4737] Bluetooth: hci9: command tx timeout [ 3299.015112][ T4737] Bluetooth: hci8: command tx timeout [ 3303.363834][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3303.370454][ C0] rcu: 0-....: (10443 ticks this GP) idle=6494/1/0x4000000000000000 softirq=286051/286053 fqs=2911 [ 3303.382334][ C0] rcu: hardirqs softirqs csw/system [ 3303.388744][ C0] rcu: number: 1517766 0 0 [ 3303.395137][ C0] rcu: cputime: 14582 37906 41 ==> 52490(ms) [ 3303.402922][ C0] rcu: (t=10500 jiffies g=401405 q=1466 ncpus=2) [ 3303.409317][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 412 jiffies! g401405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 3303.421532][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=246505 [ 3303.429486][ C0] rcu: rcu_preempt kthread starved for 418 jiffies! g401405 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 3303.440745][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3303.450697][ C0] rcu: RCU grace-period kthread stack dump: [ 3303.456567][ C0] task:rcu_preempt state:I stack:26824 pid:17 ppid:2 flags:0x00004000 [ 3303.465770][ C0] Call Trace: [ 3303.469037][ C0] [ 3303.471956][ C0] __schedule+0x1553/0x45a0 [ 3303.476468][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3303.482344][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3303.488223][ C0] ? asan.module_dtor+0x20/0x20 [ 3303.493112][ C0] ? enqueue_timer+0x23d/0x550 [ 3303.497865][ C0] ? __mod_timer+0x984/0xdb0 [ 3303.502448][ C0] schedule+0xbd/0x170 [ 3303.506524][ C0] schedule_timeout+0x188/0x2d0 [ 3303.511366][ C0] ? console_conditional_schedule+0x40/0x40 [ 3303.517241][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3303.523116][ C0] ? update_process_times+0x1b0/0x1b0 [ 3303.528472][ C0] ? prepare_to_swait_event+0x339/0x360 [ 3303.534010][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 3303.538865][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 3303.545000][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3303.550187][ C0] ? rcu_gp_init+0x1560/0x1560 [ 3303.554935][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3303.560815][ C0] ? finish_swait+0xc7/0x1d0 [ 3303.565388][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 3303.569963][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3303.575166][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 3303.580092][ C0] ? __kthread_parkme+0x162/0x1c0 [ 3303.585105][ C0] kthread+0x2fa/0x390 [ 3303.589183][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3303.594284][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3303.598863][ C0] ret_from_fork+0x48/0x80 [ 3303.603266][ C0] ? kthread_blkcg+0xd0/0xd0 [ 3303.607835][ C0] ret_from_fork_asm+0x11/0x20 [ 3303.612593][ C0] [ 3303.615597][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 3303.621906][ C0] Sending NMI from CPU 0 to CPUs 1: [ 3303.627113][ C1] NMI backtrace for cpu 1 [ 3303.627129][ C1] CPU: 1 PID: 5763 Comm: syz-executor Not tainted syzkaller #0 [ 3303.627144][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3303.627153][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 3303.627174][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 3303.627187][ C1] RSP: 0018:ffffc900044676d8 EFLAGS: 000002d3 [ 3303.627200][ C1] RAX: ffffffff813aa578 RBX: 0000000000000003 RCX: ffff8880779c8000 [ 3303.627211][ C1] RDX: 0000000000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 3303.627221][ C1] RBP: ffffc900044677b0 R08: ffffffff911c15c7 R09: 1ffffffff22382b8 [ 3303.627232][ C1] R10: dffffc0000000000 R11: fffffbfff22382b9 R12: dffffc0000000000 [ 3303.627243][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff9200088cee0 [ 3303.627253][ C1] FS: 00005555810f3500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3303.627267][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3303.627277][ C1] CR2: 00007f47c362c67c CR3: 0000000025268000 CR4: 00000000003506e0 [ 3303.627291][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 3303.627300][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 3303.627310][ C1] Call Trace: [ 3303.627317][ C1] [ 3303.627331][ C1] kvm_wait+0x23d/0x2a0 [ 3303.627353][ C1] ? verify_lock_unused+0x140/0x140 [ 3303.627371][ C1] ? kvm_arch_para_hints+0x50/0x50 [ 3303.627387][ C1] ? mark_lock+0x94/0x320 [ 3303.627408][ C1] ? pv_hash+0x81/0x140 [ 3303.627426][ C1] __pv_queued_spin_lock_slowpath+0x61a/0x9d0 [ 3303.627452][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 3303.627477][ C1] do_raw_spin_lock+0x23e/0x2c0 [ 3303.627497][ C1] ? __rwlock_init+0x150/0x150 [ 3303.627518][ C1] ? lock_sock_nested+0x6a/0x100 [ 3303.627540][ C1] lock_sock_nested+0x6a/0x100 [ 3303.627562][ C1] tcp_recvmsg+0x214/0x860 [ 3303.627587][ C1] ? tcp_recv_timestamp+0x720/0x720 [ 3303.627608][ C1] ? aa_sk_perm+0x83c/0x970 [ 3303.627636][ C1] ? sock_rps_record_flow+0x19/0x3f0 [ 3303.627655][ C1] inet_recvmsg+0x140/0x1f0 [ 3303.627678][ C1] ? inet_splice_eof+0x2e0/0x2e0 [ 3303.627697][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3303.627714][ C1] ? security_socket_recvmsg+0x89/0xb0 [ 3303.627734][ C1] sock_read_iter+0x2d9/0x3e0 [ 3303.627751][ C1] ? kernel_sock_ip_overhead+0x5a0/0x5a0 [ 3303.627775][ C1] ? common_file_perm+0x198/0x1f0 [ 3303.627798][ C1] vfs_read+0x46a/0x970 [ 3303.627822][ C1] ? kernel_read+0x1e0/0x1e0 [ 3303.627838][ C1] ? rcu_is_watching+0x15/0xb0 [ 3303.627888][ C1] ? __fdget_pos+0x1d8/0x330 [ 3303.627919][ C1] ksys_read+0x150/0x260 [ 3303.627939][ C1] ? vfs_write+0x990/0x990 [ 3303.627960][ C1] ? trace_sys_enter+0x1f/0x80 [ 3303.627980][ C1] do_syscall_64+0x55/0xa0 [ 3303.628000][ C1] ? clear_bhb_loop+0x40/0x90 [ 3303.628016][ C1] ? clear_bhb_loop+0x40/0x90 [ 3303.628033][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3303.628049][ C1] RIP: 0033:0x7f47c5957917 [ 3303.628066][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 3303.628079][ C1] RSP: 002b:00007ffd7530a180 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 3303.628093][ C1] RAX: ffffffffffffffda RBX: 00005555810f3500 RCX: 00007f47c5957917 [ 3303.628104][ C1] RDX: 0000000000000004 RSI: 00007ffd7530a1dc RDI: 0000000000000003 [ 3303.628113][ C1] RBP: 00007ffd7530a680 R08: 0000000000000000 R09: 0000000000000000 [ 3303.628123][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 3303.628132][ C1] R13: 00007ffd7530a1dc R14: 00007ffd7530a270 R15: 0000000000000000 [ 3303.628153][ C1] [ 3303.629116][ C0] CPU: 0 PID: 4715 Comm: syz.0.21915 Not tainted syzkaller #0 [ 3304.010519][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3304.020570][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 3304.026628][ C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d bc d4 03 0d 48 89 de 5b e9 33 5f 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d 50 99 7c 7e 65 8b 15 51 99 7c [ 3304.046221][ C0] RSP: 0018:ffffc90000005ef0 EFLAGS: 00000297 [ 3304.052284][ C0] RAX: ffffffff8ef2dabc RBX: ffffffff8ef2dabc RCX: ffff88806a4f3c00 [ 3304.060241][ C0] RDX: 0000000000000100 RSI: ffffffff88fa605c RDI: ffffffff88fa60a4 [ 3304.068212][ C0] RBP: ffffffff8ef2dab8 R08: ffffc90000006090 R09: 0000000000000014 [ 3304.076270][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffffffff8ef2dab8 [ 3304.084235][ C0] R13: ffffffff88fa60a4 R14: ffffffff88fa605c R15: ffffffff8ef2dac0 [ 3304.092200][ C0] FS: 00007feee05f06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3304.101146][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3304.107738][ C0] CR2: 00007f24a27e9e80 CR3: 00000000580c1000 CR4: 00000000003506f0 [ 3304.115719][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 3304.123679][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3304.131657][ C0] Call Trace: [ 3304.134925][ C0] [ 3304.137752][ C0] unwind_next_frame+0x4d9/0x2970 [ 3304.142768][ C0] ? NF_HOOK+0x32c/0x3b0 [ 3304.147004][ C0] ? NF_HOOK+0x32d/0x3b0 [ 3304.151236][ C0] ? NF_HOOK+0x32d/0x3b0 [ 3304.155462][ C0] ? stack_trace_save+0x100/0x100 [ 3304.160499][ C0] arch_stack_walk+0x144/0x190 [ 3304.165269][ C0] ? NF_HOOK+0x32d/0x3b0 [ 3304.169502][ C0] stack_trace_save+0xaa/0x100 [ 3304.174255][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 3304.179377][ C0] ? sched_clock+0x3f/0x60 [ 3304.183776][ C0] ? sched_clock_cpu+0x75/0x430 [ 3304.188620][ C0] kasan_set_track+0x4e/0x70 [ 3304.193216][ C0] ? kasan_set_track+0x4e/0x70 [ 3304.197969][ C0] ? kasan_save_free_info+0x2e/0x50 [ 3304.203155][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 3304.208450][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 3304.214071][ C0] ? kmem_cache_free+0xf8/0x270 [ 3304.218922][ C0] ? dev_kfree_skb_any_reason+0x120/0x130 [ 3304.224627][ C0] ? free_old_xmit_skbs+0x11a/0x3d0 [ 3304.229808][ C0] ? start_xmit+0x161/0x1410 [ 3304.234387][ C0] ? dev_hard_start_xmit+0x246/0x740 [ 3304.239663][ C0] ? sch_direct_xmit+0x25e/0x4c0 [ 3304.244582][ C0] ? __dev_queue_xmit+0x165d/0x3660 [ 3304.249764][ C0] ? ip_finish_output2+0xd3a/0x11e0 [ 3304.254944][ C0] ? ip_output+0x2a1/0x3b0 [ 3304.259346][ C0] ? __ip_queue_xmit+0x1049/0x1950 [ 3304.264443][ C0] ? __tcp_transmit_skb+0x1d6b/0x33f0 [ 3304.269814][ C0] ? tcp_rcv_established+0xb06/0x1d20 [ 3304.275278][ C0] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 3304.280068][ C0] ? tcp_v4_rcv+0x23bf/0x2af0 [ 3304.284753][ C0] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 3304.290406][ C0] ? ip_local_deliver_finish+0x2ca/0x510 [ 3304.296040][ C0] ? NF_HOOK+0x32d/0x3b0 [ 3304.300299][ C0] ? kmem_cache_free+0xf8/0x270 [ 3304.305159][ C0] kasan_save_free_info+0x2e/0x50 [ 3304.310171][ C0] ____kasan_slab_free+0x126/0x1e0 [ 3304.315307][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 3304.320757][ C0] ? dev_kfree_skb_any_reason+0x120/0x130 [ 3304.326561][ C0] kmem_cache_free+0xf8/0x270 [ 3304.331235][ C0] dev_kfree_skb_any_reason+0x120/0x130 [ 3304.336768][ C0] ? refcount_dec_and_test+0x70/0x70 [ 3304.342050][ C0] free_old_xmit_skbs+0x11a/0x3d0 [ 3304.347064][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3304.352247][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3304.358389][ C0] ? virtqueue_napi_schedule+0x40/0x40 [ 3304.363842][ C0] ? start_xmit+0x12c/0x1410 [ 3304.368429][ C0] start_xmit+0x161/0x1410 [ 3304.372886][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3304.379062][ C0] dev_hard_start_xmit+0x246/0x740 [ 3304.384189][ C0] sch_direct_xmit+0x25e/0x4c0 [ 3304.388947][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 3304.394940][ C0] __dev_queue_xmit+0x165d/0x3660 [ 3304.399957][ C0] ? read_seqbegin+0x196/0x270 [ 3304.404730][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 3304.409829][ C0] ? read_seqbegin+0x19a/0x270 [ 3304.414584][ C0] ? read_seqbegin+0x1c8/0x270 [ 3304.419329][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3304.424520][ C0] ? neigh_event_send+0x110/0x110 [ 3304.429532][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 3304.434806][ C0] ? __asan_memcpy+0x40/0x70 [ 3304.439386][ C0] ? eth_header+0x11b/0x200 [ 3304.443889][ C0] ? llc_sysctl_exit+0x70/0x70 [ 3304.448647][ C0] ? neigh_resolve_output+0x618/0x730 [ 3304.454032][ C0] ? ip_finish_output2+0x457/0x11e0 [ 3304.459223][ C0] ip_finish_output2+0xd3a/0x11e0 [ 3304.464241][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3304.469442][ C0] ? ip_fragment+0x210/0x210 [ 3304.474046][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 3304.478893][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 3304.483914][ C0] ip_output+0x2a1/0x3b0 [ 3304.488152][ C0] ? ip_output+0x60/0x3b0 [ 3304.492463][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 3304.497401][ C0] __ip_queue_xmit+0x1049/0x1950 [ 3304.502325][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 3304.507249][ C0] __tcp_transmit_skb+0x1d6b/0x33f0 [ 3304.512450][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 3304.517295][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 3304.522131][ C0] tcp_rcv_established+0xb06/0x1d20 [ 3304.527315][ C0] ? rt_is_expired+0x1c/0x2d0 [ 3304.532003][ C0] ? tcp_check_space+0xad0/0xad0 [ 3304.536959][ C0] ? rt_is_expired+0x1c/0x2d0 [ 3304.541641][ C0] ? rt_is_expired+0x250/0x2d0 [ 3304.546404][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 3304.551039][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 3304.555576][ C0] ? tcp_v4_rcv+0x1091/0x2af0 [ 3304.560300][ C0] ? tcp_filter+0x90/0x90 [ 3304.564643][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 3304.570102][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 3304.575747][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 3304.581216][ C0] NF_HOOK+0x32d/0x3b0 [ 3304.585304][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 3304.589540][ C0] ? NF_HOOK+0x9f/0x3b0 [ 3304.593684][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 3304.598699][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 3304.602931][ C0] ? ip_local_deliver+0x122/0x1b0 [ 3304.607981][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 3304.612673][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3304.617901][ C0] ? ip_list_rcv+0x440/0x440 [ 3304.622498][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 3304.627110][ C0] ip_list_rcv+0x3f2/0x440 [ 3304.631527][ C0] ? ip_rcv_finish+0x250/0x250 [ 3304.636287][ C0] ? ip_rcv_finish+0x250/0x250 [ 3304.641045][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 3304.647045][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 3304.651627][ C0] ? read_tsc+0x9/0x20 [ 3304.655693][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 3304.661841][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 3304.668155][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 3304.673354][ C0] ? netif_receive_skb_core+0x230/0x230 [ 3304.678906][ C0] napi_gro_receive+0x565/0xb00 [ 3304.683756][ C0] receive_buf+0x2203/0x3820 [ 3304.688344][ C0] ? virtnet_poll_tx+0x530/0x530 [ 3304.693267][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 3304.698721][ C0] virtnet_poll+0x5dd/0x1280 [ 3304.703308][ C0] ? refill_work+0x220/0x220 [ 3304.707897][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3304.714046][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3304.719238][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3304.725382][ C0] __napi_poll+0xc0/0x460 [ 3304.729698][ C0] net_rx_action+0x616/0xc40 [ 3304.734288][ C0] ? net_tx_action+0x980/0x980 [ 3304.739051][ C0] ? detach_timer+0x2b0/0x2b0 [ 3304.743903][ C0] ? __ct_user_exit+0xd0/0xd0 [ 3304.748580][ C0] handle_softirqs+0x280/0x820 [ 3304.753360][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 3304.758128][ C0] ? do_softirq+0x1a0/0x1a0 [ 3304.762622][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 3304.767811][ C0] __irq_exit_rcu+0xd3/0x190 [ 3304.772385][ C0] ? irq_exit_rcu+0x20/0x20 [ 3304.776886][ C0] irq_exit_rcu+0x9/0x20 [ 3304.781110][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3304.786735][ C0] [ 3304.789656][ C0] [ 3304.792573][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3304.798544][ C0] RIP: 0010:smp_call_function_many_cond+0xcdc/0x1140 [ 3304.805218][ C0] Code: e8 79 f1 0a 00 0f 0b e9 50 f8 ff ff e8 6d f1 0a 00 e8 48 e9 08 09 48 85 db 0f 84 be fe ff ff e8 5a f1 0a 00 fb 83 7c 24 5c 00 <0f> 84 9a 01 00 00 44 39 a4 24 88 00 00 00 0f 83 8c 01 00 00 4d 8d [ 3304.824826][ C0] RSP: 0018:ffffc900048174c0 EFLAGS: 00000202 [ 3304.830886][ C0] RAX: ffffffff817c2b06 RBX: 0000000000000200 RCX: 0000000000080000 [ 3304.838847][ C0] RDX: ffffc9000d9a1000 RSI: 000000000001f925 RDI: 000000000001f926 [ 3304.846803][ C0] RBP: ffffc90004817640 R08: ffffffff911c1507 R09: 1ffffffff22382a0 [ 3304.854760][ C0] R10: dffffc0000000000 R11: fffffbfff22382a1 R12: 0000000000000002 [ 3304.862714][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8e3d140 [ 3304.870678][ C0] ? smp_call_function_many_cond+0xcd6/0x1140 [ 3304.876766][ C0] ? text_poke_sync+0x30/0x30 [ 3304.881435][ C0] ? smp_call_function_many+0x40/0x40 [ 3304.886820][ C0] ? text_poke+0xc0/0xc0 [ 3304.891051][ C0] ? text_poke_sync+0x30/0x30 [ 3304.895712][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 3304.900818][ C0] text_poke_bp_batch+0x89a/0x990 [ 3304.905857][ C0] ? __SCT__tp_func_vector_clear+0x1/0x8 [ 3304.911504][ C0] ? text_poke_loc_init+0x880/0x880 [ 3304.916693][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3304.922400][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3304.928103][ C0] text_poke_bp+0xbc/0x100 [ 3304.932513][ C0] ? text_poke_queue+0x190/0x190 [ 3304.937464][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3304.943877][ C0] __static_call_transform+0x3ba/0x5b0 [ 3304.949336][ C0] ? __static_call_update+0xa8/0x5d0 [ 3304.954607][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3304.961004][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3304.966714][ C0] ? text_poke_bp+0x100/0x100 [ 3304.971378][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3304.977083][ C0] ? __static_call_validate+0x148/0x230 [ 3304.982613][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3304.989011][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3304.994719][ C0] arch_static_call_transform+0x5f/0xc0 [ 3305.000257][ C0] ? __SCT__tp_func_vector_update+0x8/0x8 [ 3305.005966][ C0] __static_call_update+0xef/0x5d0 [ 3305.011068][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3305.017466][ C0] ? static_call_force_reinit+0x40/0x40 [ 3305.022997][ C0] ? tracepoint_add_func+0x2f9/0x990 [ 3305.028267][ C0] ? rcu_is_watching+0x15/0xb0 [ 3305.033014][ C0] ? tracepoint_add_func+0x4b9/0x990 [ 3305.038281][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3305.044701][ C0] tracepoint_add_func+0x8ca/0x990 [ 3305.049818][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3305.056218][ C0] tracepoint_probe_register+0x5e/0x90 [ 3305.061660][ C0] ? trace_event_raw_event_vector_mod+0x2f0/0x2f0 [ 3305.068057][ C0] perf_trace_event_init+0x4d2/0x9b0 [ 3305.073331][ C0] perf_trace_init+0x238/0x2d0 [ 3305.078081][ C0] perf_tp_event_init+0x8d/0x110 [ 3305.083009][ C0] perf_try_init_event+0x12b/0x3c0 [ 3305.088111][ C0] perf_event_alloc+0xfa4/0x21b0 [ 3305.093031][ C0] ? perf_event_alloc+0xc06/0x21b0 [ 3305.098139][ C0] __se_sys_perf_event_open+0x61f/0x1c50 [ 3305.103774][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3305.109407][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3305.115027][ C0] do_syscall_64+0x55/0xa0 [ 3305.119459][ C0] ? clear_bhb_loop+0x40/0x90 [ 3305.124132][ C0] ? clear_bhb_loop+0x40/0x90 [ 3305.128808][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3305.134686][ C0] RIP: 0033:0x7feedf79c799 [ 3305.139085][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3305.158680][ C0] RSP: 002b:00007feee05f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3305.167086][ C0] RAX: ffffffffffffffda RBX: 00007feedfa15fa0 RCX: 00007feedf79c799 [ 3305.175047][ C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000200 [ 3305.183106][ C0] RBP: 00007feedf832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 3305.191086][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3305.199155][ C0] R13: 00007feedfa16038 R14: 00007feedfa15fa0 R15: 00007ffec04068c8 [ 3305.207134][ C0]