last executing test programs: 26.670921s ago: executing program 2 (id=4561): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) socketpair(0x18, 0x1, 0x5, &(0x7f0000000180)) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8}, 0x94) close(0x3) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r0) socket$kcm(0x2, 0x3, 0x2) 26.391659858s ago: executing program 2 (id=4565): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000300)="b9fe1307", 0x0, 0xf5d, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x7, 0x2}]}}}], 0x18}, 0x4000000) r2 = openat$cgroup_int(r0, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='N,N'], 0x6a) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 25.432415319s ago: executing program 2 (id=4572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xa4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000003680)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 25.096298999s ago: executing program 2 (id=4574): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x230, '\x00', 0x0, r0, 0x2, 0x4}, 0x50) socket$kcm(0x2, 0x3, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000005c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) 24.900233765s ago: executing program 2 (id=4577): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', r2}, 0x18) 24.736804581s ago: executing program 2 (id=4579): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 18.676380412s ago: executing program 0 (id=4611): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 18.668264521s ago: executing program 1 (id=4612): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @exit, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r2, 0x18000000000002a0, 0x15, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a990053", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000180100002029332500000000002020207b1bf8fd000000007ba100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600763695"], &(0x7f0000000000)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4000008}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x7e, 0xa, 0xa, 0x0, 0x0, 0x61, 0x10, 0x3c}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) r8 = socket$kcm(0x29, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000005580)={&(0x7f00000002c0)=@nfc, 0x80, &(0x7f0000004500)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/237, 0xed}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/126, 0x7e}, {&(0x7f0000003500)=""/4096, 0x1000}], 0x5, &(0x7f0000004580)=""/4096, 0x1000}, 0x40000101) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[@ANYRESOCT=r7], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73}, 0x94) 17.76421501s ago: executing program 0 (id=4614): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 17.687768523s ago: executing program 1 (id=4615): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', r2}, 0x18) 17.510080448s ago: executing program 1 (id=4616): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x3, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94ea}, 0x1800, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0x230, '\x00', 0x0, r0, 0x2, 0x4}, 0x50) socket$kcm(0x2, 0x3, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x400c080) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000005c0)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 17.324296454s ago: executing program 1 (id=4617): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 17.234403077s ago: executing program 3 (id=4618): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x12000000, 0xd, 0xd, 0x2, [@datasec={0x8, 0x0, 0x0, 0xf, 0x1, [], 'I'}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) 17.14465563s ago: executing program 1 (id=4619): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000002000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x8, 0x7, 0x0, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x100f, &(0x7f0000001cc0)=""/4111, 0x41100, 0x2}, 0x94) 17.13403469s ago: executing program 0 (id=4626): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x83}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 17.13248493s ago: executing program 3 (id=4620): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x3f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="0000000000000000b7050001088000004608f0ff760000005d9800000000000700000099e2000000000000b1"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000005c0)=[0x0], 0x0, 0x0, 0x46, &(0x7f0000000700)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x6a, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="02000000dff83e92539d2c43e71400000000", @ANYRES8, @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="0100610a2ebc88120000010000000300"/28], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={0xffffffffffffffff, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000001980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x41, &(0x7f0000001a00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x91, 0x8, 0x8, &(0x7f0000001ac0)}}, 0x10) 16.975747205s ago: executing program 3 (id=4621): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 16.877808368s ago: executing program 0 (id=4622): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d184925922333211d168ab0f6e1081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad35ef06", 0x53}], 0x1, 0x0, 0x3298}, 0x0) socketpair(0x18, 0x1, 0x5, &(0x7f0000000180)) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f00000000c0)=0x20000000004, 0x6) write$cgroup_int(r5, &(0x7f0000000100)=0x1, 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8}, 0x94) close(0x3) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfffffffd, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040), 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00'}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) close(r0) socket$kcm(0x2, 0x3, 0x2) 16.51070738s ago: executing program 3 (id=4623): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="05000000040000000400000009"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000d40)=@o_path={&(0x7f0000000d00)='./file0\x00', r2}, 0x18) 16.51007578s ago: executing program 0 (id=4624): r0 = socket$kcm(0x29, 0x5, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0, 0x406}, {0x0}, {0x0}, {0x0}, {0x0, 0xff51}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x76, &(0x7f0000000000), 0x8) socket$kcm(0xa, 0x1, 0x0) 16.325875455s ago: executing program 3 (id=4625): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1e, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4000}, 0x10}, 0x94) 16.269278597s ago: executing program 0 (id=4627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000440)='syz0\x00', 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x26}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 15.971271567s ago: executing program 1 (id=4628): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 15.970786437s ago: executing program 3 (id=4629): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f55cc47f00000000000000000000000000000004000000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d57d9a3da9ed50f50f1eda03e3d5b98ba", &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d9f62437d2c7e49fb73b4504338e5bf85fe2c3928a9af7837ed58193b5f210c0d252c6dabc470c9ff8b0e8a32d5ad091f3a06f31f5ef02d0078ac5425e159d4e25223c62151f09341b78cb360ad9c26d4c8f3bc89fd9d6d2f15550caa06742f42d255c1c41f0dd39cf144d4f66aabd13e85384b571260", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f1287", 0xffffff4a, r1, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0xc, '\x00', 0x0, r1, 0x5, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_clone(0x300000, &(0x7f0000000240), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4503baf8270") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r6, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) 1.124309514s ago: executing program 32 (id=4627): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000440)='syz0\x00', 0x1ff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a1180015000600140000000012080004", 0x2b}], 0x1}, 0x20000004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a", 0x1d}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40092}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x79}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)={@cgroup, 0xffffffffffffffff, 0x26}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef432000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x20000000) 55.635488ms ago: executing program 33 (id=4628): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xfc, 0x3, 0x41, 0x0, 0x0, 0xe5b1, 0x1a8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x7, 0x0, 0x6, 0x6, 0x6aee, 0x0, 0x0, 0x1000000, 0x0, 0x9}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000002"], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x3502, 0x400000000007}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2200000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000010340)=@base={0x18, 0x4, 0x3399, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x50) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0xc8, 0x8, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x4) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102031100fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) 0s ago: executing program 34 (id=4629): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000095000000000000004be98911ed523cf4451d51e400cbd30efbb0a73ceb2b050a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868162ff933958cb6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e281ef0b7a1a97b2c8c5617bff8c9441a45fd951df19a9c6e"], 0x0, 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000006000000080000000800000040000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000003f55cc47f00000000000000000000000000000004000000000000000"], 0x50) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f00000000c0)="615018cff8ddc4bd72a1e822fe169204286b5a0ba2d5e07d24510a045a4667b7ebfec91d956c370b19adf9e6426cb6f46d3d57d9a3da9ed50f50f1eda03e3d5b98ba", &(0x7f0000000300), &(0x7f0000000500)="4ff9b9dbd4dbe4b100d4373d21e73ce61e351c92172c3ebc75c8afd858574d38c02df86ebce7f17e953f3d8f11bc9deb06b5181ad5940352cbec049c046c8f9c5892bee99104cc2d8c8ceb27b755f0733233698b1949218d9f62437d2c7e49fb73b4504338e5bf85fe2c3928a9af7837ed58193b5f210c0d252c6dabc470c9ff8b0e8a32d5ad091f3a06f31f5ef02d0078ac5425e159d4e25223c62151f09341b78cb360ad9c26d4c8f3bc89fd9d6d2f15550caa06742f42d255c1c41f0dd39cf144d4f66aabd13e85384b571260", &(0x7f0000000600)="a08657ccaa92ef5cf1d34ce71834f14dcff3be3222fee515a4482b701ab4a55adfa7273840f86205c38f1287", 0xffffff4a, r1, 0x4}, 0x38) r3 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x9, 0x0, r4, 0xc, '\x00', 0x0, r1, 0x5, 0x5}, 0x50) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d80000002000811f4e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a00000004a1a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xce, &(0x7f0000000340)=""/206}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfffff000, 0xfe71, 0xffffffffffffff40, &(0x7f0000000080)="85d77444c5a569f1e21b08c0f264", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x3b) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = syz_clone(0x300000, &(0x7f0000000240), 0x0, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000440)="02cd069600d7d625acdd409441f7fc8ba8731e257b86222fc52de5ccad30b2edb1f183c798dbb550656b090879401bab96a8cd5f265d7c8aaec3cd4b6bd36fa52039e33c8dcc3fbc000c1df749f2467db6fa2fa3db7032d5bce9f5c7ebe68e5cb29f2e276f0db9e4892038145431d1e80de32c05e90ab39462da0dd1394fd55761be621ceb697550b7049dbfcf179c0fc8ac79c25a8a6212004d167bcb32f4503baf8270") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r4}, &(0x7f00000007c0), &(0x7f0000000800)=r0}, 0x20) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x4, 0x101}, 0xa0d2, 0x7, 0x0, 0x6}, r6, 0xf, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000880)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000900), 0x0, 0xfffffffffffffffc}, 0x2001) socketpair(0x3, 0x5, 0xf01, &(0x7f0000000180)) r7 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x890b, &(0x7f0000000100)) socket$kcm(0x29, 0x2, 0x0) kernel console output (not intermixed with test programs): T16602] ? __lock_acquire+0x1347/0x7d40 [ 1366.073262][T16602] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1366.078179][T16602] ? udp_cmsg_send+0x350/0x350 [ 1366.083015][T16602] ? __lock_acquire+0x1273/0x7d40 [ 1366.088125][T16602] ? verify_lock_unused+0x140/0x140 [ 1366.093430][T16602] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 1366.099221][T16602] ? verify_lock_unused+0x140/0x140 [ 1366.104511][T16602] udpv6_sendmsg+0x790/0x2390 [ 1366.109310][T16602] ? trace_event_raw_event_lock+0x250/0x250 [ 1366.115281][T16602] ? udp_v6_early_demux+0xf80/0xf80 [ 1366.120530][T16602] ? perf_trace_preemptirq_template+0xac/0x330 [ 1366.126768][T16602] ? lock_chain_count+0x20/0x20 [ 1366.131719][T16602] ? _local_bh_enable+0xa0/0xa0 [ 1366.136642][T16602] ? inet_send_prepare+0x1b3/0x260 [ 1366.141825][T16602] ? inet_send_prepare+0x1b3/0x260 [ 1366.147008][T16602] ? inet6_sendmsg+0x5f/0xd0 [ 1366.151664][T16602] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1366.156939][T16602] ____sys_sendmsg+0x5ba/0x960 [ 1366.161770][T16602] ? __lock_acquire+0x7d40/0x7d40 [ 1366.166899][T16602] ? __sys_sendmsg_sock+0x30/0x30 [ 1366.171984][T16602] ? __import_iovec+0x3fa/0x850 [ 1366.177003][T16602] ? import_iovec+0x73/0xa0 [ 1366.181578][T16602] ___sys_sendmsg+0x2a6/0x360 [ 1366.186336][T16602] ? __sys_sendmsg+0x2a0/0x2a0 [ 1366.191211][T16602] ? __lock_acquire+0x7d40/0x7d40 [ 1366.196368][T16602] __se_sys_sendmsg+0x1c2/0x2b0 [ 1366.201283][T16602] ? __x64_sys_sendmsg+0x80/0x80 [ 1366.206333][T16602] ? lockdep_hardirqs_on+0x98/0x150 [ 1366.211599][T16602] do_syscall_64+0x55/0xb0 [ 1366.216063][T16602] ? clear_bhb_loop+0x40/0x90 [ 1366.220794][T16602] ? clear_bhb_loop+0x40/0x90 [ 1366.225533][T16602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1366.231571][T16602] RIP: 0033:0x7f4e94b9ce59 [ 1366.236042][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.255709][T16602] RSP: 002b:00007f4e95980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1366.264200][T16602] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1366.272235][T16602] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1366.280259][T16602] RBP: 00007f4e95980090 R08: 0000000000000000 R09: 0000000000000000 [ 1366.288286][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1366.296323][T16602] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffe924f1e28 [ 1366.304395][T16602] [ 1368.474756][T16623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 1372.699385][T16648] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1372.715171][T16647] netlink: 'syz.0.3296': attribute type 10 has an invalid length. [ 1372.736930][T16648] netlink: 'syz.2.3297': attribute type 33 has an invalid length. [ 1372.760295][T16648] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3297'. [ 1372.857691][T16652] netlink: 'syz.3.3298': attribute type 10 has an invalid length. [ 1372.899027][T16652] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1373.079081][T16651] netlink: 'syz.3.3298': attribute type 10 has an invalid length. [ 1373.230887][T16651] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3298'. [ 1373.807880][T16664] netlink: 'syz.1.3300': attribute type 39 has an invalid length. [ 1374.187709][T16676] FAULT_INJECTION: forcing a failure. [ 1374.187709][T16676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1374.270192][T16676] CPU: 0 PID: 16676 Comm: syz.2.3303 Not tainted syzkaller #0 [ 1374.277699][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1374.287780][T16676] Call Trace: [ 1374.291091][T16676] [ 1374.294049][T16676] dump_stack_lvl+0x18c/0x250 [ 1374.298762][T16676] ? show_regs_print_info+0x20/0x20 [ 1374.304007][T16676] ? load_image+0x420/0x420 [ 1374.308551][T16676] ? __might_fault+0xaa/0x120 [ 1374.313265][T16676] ? __lock_acquire+0x7d40/0x7d40 [ 1374.318322][T16676] ? preempt_count_sub+0x17/0x160 [ 1374.323404][T16676] should_fail_ex+0x39d/0x4d0 [ 1374.328141][T16676] _copy_from_user+0x2f/0xe0 [ 1374.332773][T16676] csum_and_copy_from_iter+0x1f3/0x14a0 [ 1374.338380][T16676] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 1374.344053][T16676] ? __kasan_slab_alloc+0x6c/0x80 [ 1374.349207][T16676] ? slab_post_alloc_hook+0x8a/0x4b0 [ 1374.354535][T16676] ? rcu_is_watching+0x15/0xb0 [ 1374.359344][T16676] ip_generic_getfrag+0x163/0x2f0 [ 1374.364417][T16676] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 1374.369414][T16676] ? skb_put+0x11b/0x210 [ 1374.373692][T16676] __ip6_append_data+0x2fb8/0x3cf0 [ 1374.378875][T16676] ? rawv6_send_hdrinc+0x1640/0x1640 [ 1374.384221][T16676] ? ip6_setup_cork+0xfe0/0xfe0 [ 1374.389119][T16676] ip6_append_data+0x1b0/0x350 [ 1374.393933][T16676] ? rawv6_send_hdrinc+0x1640/0x1640 [ 1374.399257][T16676] rawv6_sendmsg+0x1264/0x1770 [ 1374.404063][T16676] ? compat_rawv6_ioctl+0x70/0x70 [ 1374.409121][T16676] ? aa_sk_perm+0x83c/0x970 [ 1374.413656][T16676] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 1374.420093][T16676] ? inet_sendmsg+0x7c/0x2f0 [ 1374.424697][T16676] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1374.430000][T16676] ? security_socket_sendmsg+0x80/0xa0 [ 1374.435468][T16676] ? inet_send_prepare+0x260/0x260 [ 1374.440591][T16676] ____sys_sendmsg+0x5ba/0x960 [ 1374.445370][T16676] ? __lock_acquire+0x7d40/0x7d40 [ 1374.450407][T16676] ? __asan_memset+0x22/0x40 [ 1374.455011][T16676] ? __sys_sendmsg_sock+0x30/0x30 [ 1374.460044][T16676] ? __import_iovec+0x5f2/0x850 [ 1374.464912][T16676] ? import_iovec+0x73/0xa0 [ 1374.469424][T16676] ___sys_sendmsg+0x2a6/0x360 [ 1374.474114][T16676] ? __sys_sendmsg+0x2a0/0x2a0 [ 1374.478938][T16676] __se_sys_sendmsg+0x1c2/0x2b0 [ 1374.483797][T16676] ? hrtimer_interrupt+0x7bb/0x9c0 [ 1374.488919][T16676] ? __x64_sys_sendmsg+0x80/0x80 [ 1374.493881][T16676] ? lockdep_hardirqs_on+0x98/0x150 [ 1374.499092][T16676] do_syscall_64+0x55/0xb0 [ 1374.503512][T16676] ? clear_bhb_loop+0x40/0x90 [ 1374.508195][T16676] ? clear_bhb_loop+0x40/0x90 [ 1374.512883][T16676] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1374.518785][T16676] RIP: 0033:0x7f63f2b9ce59 [ 1374.523220][T16676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1374.542864][T16676] RSP: 002b:00007f63f3b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1374.551291][T16676] RAX: ffffffffffffffda RBX: 00007f63f2e15fa0 RCX: 00007f63f2b9ce59 [ 1374.559287][T16676] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 1374.567268][T16676] RBP: 00007f63f3b31090 R08: 0000000000000000 R09: 0000000000000000 [ 1374.575251][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1374.583228][T16676] R13: 00007f63f2e16038 R14: 00007f63f2e15fa0 R15: 00007ffec2f018d8 [ 1374.591224][T16676] [ 1377.574866][T16701] netlink: 'syz.1.3312': attribute type 1 has an invalid length. [ 1377.609486][T16701] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3312'. [ 1377.624141][T16699] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1377.636506][T16699] tc_dump_action: action bad kind [ 1378.738303][T16725] netlink: 'syz.2.3318': attribute type 10 has an invalid length. [ 1378.799007][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1378.820383][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1378.852056][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1378.877219][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1378.914981][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1378.982035][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1379.025001][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1379.097448][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1379.157183][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1379.225786][T16725] netlink: 'syz.2.3318': attribute type 11 has an invalid length. [ 1379.336803][T16725] netlink: 'syz.2.3318': attribute type 4 has an invalid length. [ 1379.377271][T16725] netlink: 'syz.2.3318': attribute type 5 has an invalid length. [ 1379.399036][T16725] netlink: 208556 bytes leftover after parsing attributes in process `syz.2.3318'. [ 1381.776567][T16737] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1382.703502][T16755] FAULT_INJECTION: forcing a failure. [ 1382.703502][T16755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.725998][T16755] CPU: 0 PID: 16755 Comm: syz.1.3329 Not tainted syzkaller #0 [ 1382.733525][T16755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1382.743623][T16755] Call Trace: [ 1382.746933][T16755] [ 1382.749901][T16755] dump_stack_lvl+0x18c/0x250 [ 1382.754623][T16755] ? show_regs_print_info+0x20/0x20 [ 1382.759865][T16755] ? load_image+0x420/0x420 [ 1382.764420][T16755] ? __might_fault+0xaa/0x120 [ 1382.769140][T16755] ? __lock_acquire+0x7d40/0x7d40 [ 1382.774222][T16755] should_fail_ex+0x39d/0x4d0 [ 1382.777969][T16758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1382.778964][T16755] _copy_from_user+0x2f/0xe0 [ 1382.778996][T16755] get_user_ifreq+0x6b/0x180 [ 1382.779021][T16755] sock_ioctl+0x6f1/0x7e0 [ 1382.779045][T16755] ? sock_poll+0x3e0/0x3e0 [ 1382.779077][T16755] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1382.779097][T16755] ? security_file_ioctl+0x80/0xa0 [ 1382.779117][T16755] ? sock_poll+0x3e0/0x3e0 [ 1382.779139][T16755] __se_sys_ioctl+0xfd/0x170 [ 1382.779169][T16755] do_syscall_64+0x55/0xb0 [ 1382.779193][T16755] ? clear_bhb_loop+0x40/0x90 [ 1382.779217][T16755] ? clear_bhb_loop+0x40/0x90 [ 1382.839577][T16755] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1382.845498][T16755] RIP: 0033:0x7f7b3bb9ce59 [ 1382.849928][T16755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.869563][T16755] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1382.878020][T16755] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1382.886017][T16755] RDX: 00002000000000c0 RSI: 00000000000089f6 RDI: 0000000000000004 [ 1382.894017][T16755] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.902007][T16755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.910080][T16755] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1382.918073][T16755] [ 1384.109917][T16776] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3336'. [ 1384.422873][T16780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1384.924248][T16791] netlink: 'syz.0.3341': attribute type 10 has an invalid length. [ 1384.959229][T16791] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3341'. [ 1386.403340][T16813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3346'. [ 1387.973846][T16836] netlink: 'syz.3.3352': attribute type 10 has an invalid length. [ 1387.993652][T16836] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3352'. [ 1391.319552][T16853] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3358'. [ 1391.617016][T16858] syzkaller0: entered promiscuous mode [ 1391.623112][T16858] syzkaller0: entered allmulticast mode [ 1396.032638][T16881] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 1396.041020][T16881] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3363'. [ 1397.726568][T16911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3368'. [ 1398.374482][T16923] netlink: 'syz.1.3376': attribute type 10 has an invalid length. [ 1398.413837][T16923] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1400.042327][T16932] netlink: 'syz.3.3381': attribute type 2 has an invalid length. [ 1400.090111][T16932] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.3381'. [ 1400.599313][T16945] FAULT_INJECTION: forcing a failure. [ 1400.599313][T16945] name failslab, interval 1, probability 0, space 0, times 0 [ 1400.628030][T16945] CPU: 1 PID: 16945 Comm: syz.3.3384 Not tainted syzkaller #0 [ 1400.635589][T16945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1400.645698][T16945] Call Trace: [ 1400.649015][T16945] [ 1400.651985][T16945] dump_stack_lvl+0x18c/0x250 [ 1400.656716][T16945] ? show_regs_print_info+0x20/0x20 [ 1400.661961][T16945] ? load_image+0x420/0x420 [ 1400.666517][T16945] ? __might_sleep+0xe0/0xe0 [ 1400.671170][T16945] ? __lock_acquire+0x7d40/0x7d40 [ 1400.676253][T16945] should_fail_ex+0x39d/0x4d0 [ 1400.681002][T16945] should_failslab+0x9/0x20 [ 1400.685562][T16945] slab_pre_alloc_hook+0x59/0x310 [ 1400.690637][T16945] ? __lock_acquire+0x7d40/0x7d40 [ 1400.695712][T16945] kmem_cache_alloc_node+0x60/0x320 [ 1400.700962][T16945] ? __alloc_skb+0x103/0x2c0 [ 1400.705616][T16945] __alloc_skb+0x103/0x2c0 [ 1400.710115][T16945] netlink_sendmsg+0x66a/0xbf0 [ 1400.715091][T16945] ? netlink_getsockopt+0x590/0x590 [ 1400.720364][T16945] ? aa_sock_msg_perm+0x94/0x150 [ 1400.725361][T16945] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1400.730699][T16945] ? security_socket_sendmsg+0x80/0xa0 [ 1400.736203][T16945] ? netlink_getsockopt+0x590/0x590 [ 1400.741501][T16945] ____sys_sendmsg+0x5ba/0x960 [ 1400.746337][T16945] ? __asan_memset+0x22/0x40 [ 1400.750986][T16945] ? __sys_sendmsg_sock+0x30/0x30 [ 1400.756053][T16945] ? __import_iovec+0x5f2/0x850 [ 1400.760963][T16945] ? import_iovec+0x73/0xa0 [ 1400.765552][T16945] ___sys_sendmsg+0x2a6/0x360 [ 1400.770270][T16945] ? get_pid_task+0x20/0x1e0 [ 1400.774924][T16945] ? __sys_sendmsg+0x2a0/0x2a0 [ 1400.779790][T16945] ? __lock_acquire+0x7d40/0x7d40 [ 1400.784934][T16945] __se_sys_sendmsg+0x1c2/0x2b0 [ 1400.789847][T16945] ? __x64_sys_sendmsg+0x80/0x80 [ 1400.794871][T16945] ? lockdep_hardirqs_on+0x98/0x150 [ 1400.800122][T16945] do_syscall_64+0x55/0xb0 [ 1400.804581][T16945] ? clear_bhb_loop+0x40/0x90 [ 1400.809305][T16945] ? clear_bhb_loop+0x40/0x90 [ 1400.814041][T16945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1400.819988][T16945] RIP: 0033:0x7f7bd9f9ce59 [ 1400.824452][T16945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1400.844118][T16945] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1400.852602][T16945] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1400.860636][T16945] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1400.868662][T16945] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1400.876710][T16945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1400.884730][T16945] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1400.892801][T16945] [ 1401.410646][T16954] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1401.848825][T16962] netlink: 'syz.2.3388': attribute type 10 has an invalid length. [ 1401.879293][T16962] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3388'. [ 1403.721276][T16981] netlink: 'syz.0.3395': attribute type 17 has an invalid length. [ 1403.809407][T16981] netlink: 'syz.0.3395': attribute type 16 has an invalid length. [ 1403.889697][T16981] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3395'. [ 1404.801997][T16993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1405.513335][T17001] netlink: 'syz.1.3402': attribute type 10 has an invalid length. [ 1405.540643][T17001] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1406.690769][T17016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3408'. [ 1410.119821][T17056] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1410.308492][T17054] netlink: 'syz.2.3418': attribute type 10 has an invalid length. [ 1410.448808][T17054] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3418'. [ 1411.233488][T17076] netlink: 'syz.2.3425': attribute type 5 has an invalid length. [ 1413.237911][T17098] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3431'. [ 1415.477317][T17102] netlink: 'syz.2.3433': attribute type 10 has an invalid length. [ 1415.519378][T17102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1416.685497][T17124] netlink: 'syz.2.3438': attribute type 3 has an invalid length. [ 1416.711712][T17124] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1417.413286][T17124] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3438'. [ 1418.416400][T17140] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1418.685310][T17146] netlink: 'syz.1.3446': attribute type 10 has an invalid length. [ 1418.748946][T17146] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1420.004708][T17159] netlink: 'syz.3.3449': attribute type 3 has an invalid length. [ 1420.119232][T17159] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1420.299612][T17159] netlink: 'syz.3.3449': attribute type 12 has an invalid length. [ 1420.368085][T17159] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3449'. [ 1420.951513][T17179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3456'. [ 1421.550062][T17184] netlink: 'syz.0.3458': attribute type 10 has an invalid length. [ 1421.579629][T17184] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1423.419598][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.439004][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.568413][T17208] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3466'. [ 1424.139586][T17215] netlink: 'syz.0.3467': attribute type 5 has an invalid length. [ 1424.459510][T17220] netlink: 'syz.1.3469': attribute type 10 has an invalid length. [ 1424.499150][T17220] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3469'. [ 1427.017402][T17239] mac80211_hwsim hwsim29 wlan1: entered allmulticast mode [ 1427.347256][T17246] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3477'. [ 1427.650116][T17256] netlink: 'syz.0.3479': attribute type 27 has an invalid length. [ 1427.658024][T17256] netlink: 'syz.0.3479': attribute type 4 has an invalid length. [ 1427.817510][T17256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3479'. [ 1428.224262][T17264] netlink: 'syz.2.3483': attribute type 10 has an invalid length. [ 1428.255374][T17264] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3483'. [ 1428.777645][T17272] netlink: 'syz.1.3485': attribute type 5 has an invalid length. [ 1430.897685][T17290] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3489'. [ 1431.222033][T17294] netlink: 'syz.2.3490': attribute type 19 has an invalid length. [ 1432.155723][T17310] netlink: 'syz.3.3498': attribute type 10 has an invalid length. [ 1432.169155][T17310] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3498'. [ 1432.763602][T17316] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3500'. [ 1433.921607][ T5084] Bluetooth: hci4: ISO packet for unknown connection handle 55 [ 1436.001371][T17347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1436.327368][T17353] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1436.551891][T17355] netlink: 'syz.1.3512': attribute type 10 has an invalid length. [ 1436.605580][T17355] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3512'. [ 1438.806499][T17387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3523'. [ 1439.640678][T17385] syz.1.3521: vmalloc error: size 72003584, failed to allocated page array size 140632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1439.801688][T17385] CPU: 0 PID: 17385 Comm: syz.1.3521 Not tainted syzkaller #0 [ 1439.809236][T17385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1439.819332][T17385] Call Trace: [ 1439.822637][T17385] [ 1439.825598][T17385] dump_stack_lvl+0x18c/0x250 [ 1439.830317][T17385] ? show_regs_print_info+0x20/0x20 [ 1439.835542][T17385] ? load_image+0x420/0x420 [ 1439.840086][T17385] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1439.846537][T17385] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1439.853075][T17385] warn_alloc+0x246/0x340 [ 1439.857450][T17385] ? zone_watermark_ok_safe+0x230/0x230 [ 1439.863061][T17385] ? _raw_spin_unlock+0x28/0x40 [ 1439.867966][T17385] __vmalloc_node_range+0x662/0x1330 [ 1439.873290][T17385] ? __mod_lruvec_page_state+0xa5/0x410 [ 1439.878895][T17385] ? __phys_addr+0xba/0x170 [ 1439.883446][T17385] ? free_vm_area+0x50/0x50 [ 1439.887997][T17385] ? kvmalloc_node+0x70/0x180 [ 1439.892716][T17385] ? rcu_is_watching+0x15/0xb0 [ 1439.897516][T17385] ? kvmalloc_node+0x70/0x180 [ 1439.902226][T17385] ? trace_kmalloc+0x1f/0x90 [ 1439.906852][T17385] ? __kmalloc_node+0x157/0x230 [ 1439.911746][T17385] ? bpf_check+0x243/0xeba0 [ 1439.912382][T17406] netlink: 'syz.0.3530': attribute type 10 has an invalid length. [ 1439.916275][T17385] vzalloc+0x79/0x90 [ 1439.928447][T17385] ? bpf_check+0x243/0xeba0 [ 1439.928989][T17406] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3530'. [ 1439.932978][T17385] bpf_check+0x243/0xeba0 [ 1439.933011][T17385] ? __lock_acquire+0x1273/0x7d40 [ 1439.951461][T17385] ? verify_lock_unused+0x140/0x140 [ 1439.956711][T17385] ? cgroup_rstat_updated+0xde/0x360 [ 1439.962078][T17385] ? bpf_get_btf_vmlinux+0x20/0x20 [ 1439.967237][T17385] ? __lock_acquire+0x7d40/0x7d40 [ 1439.972304][T17385] ? lock_chain_count+0x20/0x20 [ 1439.977200][T17385] ? mark_lock+0x94/0x320 [ 1439.981571][T17385] ? __lock_acquire+0x1347/0x7d40 [ 1439.986665][T17385] ? verify_lock_unused+0x140/0x140 [ 1439.991921][T17385] ? verify_lock_unused+0x140/0x140 [ 1439.997170][T17385] ? __up_read+0x2b6/0x6b0 [ 1440.001625][T17385] ? __lock_acquire+0x7d40/0x7d40 [ 1440.006864][T17385] ? perf_trace_preemptirq_template+0xac/0x330 [ 1440.013135][T17385] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1440.019178][T17385] ? lock_chain_count+0x20/0x20 [ 1440.024086][T17385] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 1440.030374][T17385] ? lockdep_hardirqs_on+0x98/0x150 [ 1440.035618][T17385] ? ktime_get_with_offset+0x103/0x330 [ 1440.041127][T17385] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 1440.047414][T17385] ? ktime_get_real_ts64+0x440/0x440 [ 1440.052781][T17385] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1440.057856][T17385] bpf_prog_load+0x1163/0x1670 [ 1440.062685][T17385] ? map_freeze+0x420/0x420 [ 1440.067250][T17385] ? __might_fault+0xaa/0x120 [ 1440.071966][T17385] ? __might_fault+0xc6/0x120 [ 1440.076678][T17385] ? __might_fault+0xaa/0x120 [ 1440.081390][T17385] ? bpf_lsm_bpf+0x9/0x10 [ 1440.085763][T17385] ? security_bpf+0x7e/0xa0 [ 1440.090311][T17385] __sys_bpf+0x5ba/0x890 [ 1440.094593][T17385] ? bpf_link_show_fdinfo+0x390/0x390 [ 1440.099996][T17385] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1440.105948][T17385] ? lock_chain_count+0x20/0x20 [ 1440.110852][T17385] __x64_sys_bpf+0x7c/0x90 [ 1440.115312][T17385] do_syscall_64+0x55/0xb0 [ 1440.119766][T17385] ? clear_bhb_loop+0x40/0x90 [ 1440.124496][T17385] ? clear_bhb_loop+0x40/0x90 [ 1440.129231][T17385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1440.135174][T17385] RIP: 0033:0x7f7b3bb9ce59 [ 1440.139642][T17385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.159302][T17385] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1440.167759][T17385] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1440.175766][T17385] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 1440.183782][T17385] RBP: 00007f7b3bc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1440.191797][T17385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.199806][T17385] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1440.207833][T17385] [ 1440.338938][T17385] Mem-Info: [ 1440.353819][T17385] active_anon:42714 inactive_anon:0 isolated_anon:0 [ 1440.353819][T17385] active_file:19785 inactive_file:40379 isolated_file:0 [ 1440.353819][T17385] unevictable:768 dirty:84 writeback:0 [ 1440.353819][T17385] slab_reclaimable:11036 slab_unreclaimable:93211 [ 1440.353819][T17385] mapped:28724 shmem:37749 pagetables:607 [ 1440.353819][T17385] sec_pagetables:0 bounce:0 [ 1440.353819][T17385] kernel_misc_reclaimable:0 [ 1440.353819][T17385] free:1298937 free_pcp:14446 free_cma:0 [ 1440.707621][T17385] Node 0 active_anon:144056kB inactive_anon:0kB active_file:79140kB inactive_file:161312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116496kB dirty:336kB writeback:0kB shmem:122760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10348kB pagetables:2328kB sec_pagetables:0kB all_unreclaimable? no [ 1440.894213][T17416] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3533'. [ 1440.940170][T17385] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1441.025802][T17385] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1441.068888][T17385] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1441.074745][T17385] Node 0 DMA32 free:1319596kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:129620kB inactive_anon:0kB active_file:79140kB inactive_file:160488kB unevictable:1536kB writepending:336kB present:3129332kB managed:2586944kB mlocked:0kB bounce:0kB free_pcp:41720kB local_pcp:21156kB free_cma:0kB [ 1441.313721][T17385] lowmem_reserve[]: 0 0 0 0 0 [ 1441.318548][T17385] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1441.570220][T17385] lowmem_reserve[]: 0 0 0 0 0 [ 1441.619841][T17385] Node 1 Normal free:3899312kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18976kB local_pcp:9632kB free_cma:0kB [ 1441.862681][T17385] lowmem_reserve[]: 0 0 0 0 0 [ 1441.889770][T17385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1441.929864][T17385] Node 0 DMA32: 3756*4kB (ME) 3292*8kB (UME) 2359*16kB (UME) 1227*32kB (UME) 599*64kB (UME) 459*128kB (UME) 140*256kB (UME) 81*512kB (UM) 49*1024kB (UME) 12*2048kB (UME) 244*4096kB (UM) = 1366944kB [ 1441.967259][T17385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1442.054323][T17385] Node 1 Normal: 218*4kB (UE) 35*8kB (UME) 27*16kB (UME) 66*32kB (UME) 17*64kB (UE) 10*128kB (UME) 2*256kB (UE) 3*512kB (UME) 2*1024kB (UE) 1*2048kB (E) 949*4096kB (M) = 3899312kB [ 1442.228921][T17385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.248897][T17385] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1442.258256][T17385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1442.398954][T17385] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1442.408325][T17385] 78934 total pagecache pages [ 1442.518891][T17385] 0 pages in swap cache [ 1442.570968][T17385] Free swap = 124996kB [ 1442.575192][T17385] Total swap = 124996kB [ 1442.639053][T17385] 2097051 pages RAM [ 1442.698939][T17385] 0 pages HighMem/MovableOnly [ 1442.703780][T17385] 416929 pages reserved [ 1442.707962][T17385] 0 pages cma reserved [ 1443.769016][T17437] netlink: 'syz.1.3540': attribute type 10 has an invalid length. [ 1443.777856][T17437] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1444.614180][T17451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3545'. [ 1446.015666][T17465] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1446.381053][T17463] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.3551'. [ 1446.399010][T17463] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1447.760730][T17480] lo: entered allmulticast mode [ 1448.144730][T17490] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3558'. [ 1448.366206][T17494] netlink: 'syz.3.3560': attribute type 10 has an invalid length. [ 1448.416077][T17494] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3560'. [ 1449.995153][T17518] FAULT_INJECTION: forcing a failure. [ 1449.995153][T17518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1450.044702][T17518] CPU: 1 PID: 17518 Comm: syz.1.3567 Not tainted syzkaller #0 [ 1450.052259][T17518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1450.062457][T17518] Call Trace: [ 1450.065768][T17518] [ 1450.068726][T17518] dump_stack_lvl+0x18c/0x250 [ 1450.073457][T17518] ? show_regs_print_info+0x20/0x20 [ 1450.078692][T17518] ? load_image+0x420/0x420 [ 1450.083247][T17518] ? __lock_acquire+0x7d40/0x7d40 [ 1450.088315][T17518] ? snprintf+0xe9/0x140 [ 1450.092605][T17518] should_fail_ex+0x39d/0x4d0 [ 1450.097334][T17518] _copy_to_user+0x2f/0xa0 [ 1450.101797][T17518] simple_read_from_buffer+0xe7/0x150 [ 1450.107234][T17518] proc_fail_nth_read+0x1e8/0x260 [ 1450.112315][T17518] ? proc_fault_inject_write+0x360/0x360 [ 1450.118041][T17518] ? fsnotify_perm+0x271/0x5e0 [ 1450.122856][T17518] ? proc_fault_inject_write+0x360/0x360 [ 1450.128540][T17518] vfs_read+0x28b/0x970 [ 1450.132751][T17518] ? kernel_read+0x1e0/0x1e0 [ 1450.137390][T17518] ? __fget_files+0x28/0x4b0 [ 1450.142032][T17518] ? __fget_files+0x28/0x4b0 [ 1450.146660][T17518] ? __fget_files+0x43d/0x4b0 [ 1450.151386][T17518] ? __fdget_pos+0x2a3/0x330 [ 1450.156021][T17518] ? ksys_read+0x75/0x260 [ 1450.160402][T17518] ksys_read+0x150/0x260 [ 1450.164693][T17518] ? vfs_write+0x990/0x990 [ 1450.169155][T17518] ? lockdep_hardirqs_on+0x98/0x150 [ 1450.174421][T17518] do_syscall_64+0x55/0xb0 [ 1450.178870][T17518] ? clear_bhb_loop+0x40/0x90 [ 1450.183585][T17518] ? clear_bhb_loop+0x40/0x90 [ 1450.188303][T17518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1450.194241][T17518] RIP: 0033:0x7f7b3bb5d68e [ 1450.198689][T17518] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1450.218341][T17518] RSP: 002b:00007f7b3cb30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1450.226805][T17518] RAX: ffffffffffffffda RBX: 00007f7b3cb316c0 RCX: 00007f7b3bb5d68e [ 1450.234817][T17518] RDX: 000000000000000f RSI: 00007f7b3cb310a0 RDI: 0000000000000004 [ 1450.242916][T17518] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1450.250922][T17518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1450.258923][T17518] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1450.266950][T17518] [ 1450.578425][T17523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1451.112795][T17531] netlink: 'syz.1.3573': attribute type 10 has an invalid length. [ 1451.176926][T17531] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3573'. [ 1451.593632][T17542] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1453.537674][T17566] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3584'. [ 1454.880306][T17592] netlink: 'syz.0.3593': attribute type 10 has an invalid length. [ 1454.911749][T17592] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1455.432314][T17597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3596'. [ 1457.486677][T17631] netlink: 'syz.0.3607': attribute type 10 has an invalid length. [ 1457.496104][T17631] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3607'. [ 1458.026286][T17638] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3609'. [ 1462.919930][T17676] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3618'. [ 1463.121962][T17679] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1463.176408][T17679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1464.180813][T17698] netlink: 'syz.3.3625': attribute type 10 has an invalid length. [ 1464.190316][T17698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3625'. [ 1464.217788][T17701] FAULT_INJECTION: forcing a failure. [ 1464.217788][T17701] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.230891][T17701] CPU: 0 PID: 17701 Comm: syz.1.3626 Not tainted syzkaller #0 [ 1464.238394][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1464.248490][T17701] Call Trace: [ 1464.251807][T17701] [ 1464.254775][T17701] dump_stack_lvl+0x18c/0x250 [ 1464.259515][T17701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1464.265715][T17701] ? show_regs_print_info+0x20/0x20 [ 1464.270944][T17701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1464.277154][T17701] should_fail_ex+0x39d/0x4d0 [ 1464.281882][T17701] should_failslab+0x9/0x20 [ 1464.286507][T17701] slab_pre_alloc_hook+0x59/0x310 [ 1464.291584][T17701] kmem_cache_alloc+0x5a/0x2d0 [ 1464.296387][T17701] ? fib6_add_1+0xa41/0x1450 [ 1464.301023][T17701] fib6_add_1+0xa41/0x1450 [ 1464.305496][T17701] fib6_add+0x335/0x49c0 [ 1464.309808][T17701] ? fib6_update_sernum_stub+0x1e0/0x1e0 [ 1464.315489][T17701] ? do_raw_spin_lock+0x11f/0x2c0 [ 1464.320554][T17701] ? __rwlock_init+0x150/0x150 [ 1464.325357][T17701] ? ip6_route_add+0x75/0x160 [ 1464.330069][T17701] ip6_route_add+0x8a/0x160 [ 1464.334638][T17701] ipv6_route_ioctl+0x3b4/0x500 [ 1464.339532][T17701] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 1464.345114][T17701] ? lock_release+0x594/0x8c0 [ 1464.349841][T17701] ? __might_fault+0xaa/0x120 [ 1464.354547][T17701] ? __might_fault+0xc6/0x120 [ 1464.359253][T17701] ? __might_fault+0xaa/0x120 [ 1464.363966][T17701] inet6_ioctl+0x247/0x2d0 [ 1464.368419][T17701] ? inet6_getname+0x650/0x650 [ 1464.373219][T17701] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1464.378725][T17701] sock_do_ioctl+0xfc/0x310 [ 1464.383266][T17701] ? sock_show_fdinfo+0xb0/0xb0 [ 1464.388153][T17701] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1464.394173][T17701] ? lock_chain_count+0x20/0x20 [ 1464.399071][T17701] sock_ioctl+0x5ba/0x7e0 [ 1464.403438][T17701] ? sock_poll+0x3e0/0x3e0 [ 1464.407890][T17701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1464.414102][T17701] ? __se_sys_ioctl+0x53/0x170 [ 1464.418910][T17701] ? sock_poll+0x3e0/0x3e0 [ 1464.423376][T17701] __se_sys_ioctl+0xfd/0x170 [ 1464.428015][T17701] do_syscall_64+0x55/0xb0 [ 1464.432474][T17701] ? clear_bhb_loop+0x40/0x90 [ 1464.437191][T17701] ? clear_bhb_loop+0x40/0x90 [ 1464.441907][T17701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1464.447844][T17701] RIP: 0033:0x7f7b3bb9ce59 [ 1464.452294][T17701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.471950][T17701] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.480507][T17701] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1464.488503][T17701] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 1464.496533][T17701] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.504533][T17701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.512521][T17701] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1464.520505][T17701] [ 1464.826507][T17710] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1466.406115][T17738] netlink: 'syz.0.3638': attribute type 10 has an invalid length. [ 1466.427466][T17738] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1466.877292][T17749] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3642'. [ 1468.492002][T17779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3654'. [ 1468.964787][T17787] netlink: 'syz.0.3655': attribute type 10 has an invalid length. [ 1469.014179][T17787] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3655'. [ 1469.109490][T17791] FAULT_INJECTION: forcing a failure. [ 1469.109490][T17791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1469.153426][T17791] CPU: 0 PID: 17791 Comm: syz.1.3657 Not tainted syzkaller #0 [ 1469.160971][T17791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1469.171068][T17791] Call Trace: [ 1469.174396][T17791] [ 1469.177360][T17791] dump_stack_lvl+0x18c/0x250 [ 1469.182094][T17791] ? show_regs_print_info+0x20/0x20 [ 1469.187349][T17791] ? load_image+0x420/0x420 [ 1469.191912][T17791] ? __lock_acquire+0x7d40/0x7d40 [ 1469.196986][T17791] should_fail_ex+0x39d/0x4d0 [ 1469.201718][T17791] _copy_to_user+0x2f/0xa0 [ 1469.206182][T17791] simple_read_from_buffer+0xe7/0x150 [ 1469.211611][T17791] proc_fail_nth_read+0x1e8/0x260 [ 1469.216685][T17791] ? proc_fault_inject_write+0x360/0x360 [ 1469.222369][T17791] ? fsnotify_perm+0x271/0x5e0 [ 1469.227174][T17791] ? proc_fault_inject_write+0x360/0x360 [ 1469.232851][T17791] vfs_read+0x28b/0x970 [ 1469.237057][T17791] ? kernel_read+0x1e0/0x1e0 [ 1469.241689][T17791] ? __fget_files+0x28/0x4b0 [ 1469.246316][T17791] ? __fget_files+0x28/0x4b0 [ 1469.250977][T17791] ? __fget_files+0x43d/0x4b0 [ 1469.255708][T17791] ? __fdget_pos+0x2a3/0x330 [ 1469.260341][T17791] ? ksys_read+0x75/0x260 [ 1469.264729][T17791] ksys_read+0x150/0x260 [ 1469.269021][T17791] ? vfs_write+0x990/0x990 [ 1469.273510][T17791] ? lockdep_hardirqs_on+0x98/0x150 [ 1469.278761][T17791] do_syscall_64+0x55/0xb0 [ 1469.283210][T17791] ? clear_bhb_loop+0x40/0x90 [ 1469.287928][T17791] ? clear_bhb_loop+0x40/0x90 [ 1469.292653][T17791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1469.298592][T17791] RIP: 0033:0x7f7b3bb5d68e [ 1469.303056][T17791] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1469.322701][T17791] RSP: 002b:00007f7b3cb30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1469.331132][T17791] RAX: ffffffffffffffda RBX: 00007f7b3cb316c0 RCX: 00007f7b3bb5d68e [ 1469.339111][T17791] RDX: 000000000000000f RSI: 00007f7b3cb310a0 RDI: 0000000000000007 [ 1469.347092][T17791] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1469.355071][T17791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1469.363049][T17791] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1469.371043][T17791] [ 1470.678646][T17817] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3665'. [ 1471.392129][T17830] netlink: 'syz.3.3669': attribute type 10 has an invalid length. [ 1471.439337][T17830] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3669'. [ 1472.143114][T17862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3676'. [ 1472.981778][T17870] netlink: 'syz.1.3679': attribute type 5 has an invalid length. [ 1473.833700][T17887] netlink: 'syz.1.3683': attribute type 9 has an invalid length. [ 1473.841942][T17887] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1474.039024][T17885] netlink: 'syz.1.3683': attribute type 9 has an invalid length. [ 1474.061138][T17885] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3683'. [ 1477.343216][T17929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3696'. [ 1478.155495][T17943] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1478.178677][T17943] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1478.207518][T17947] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3701'. [ 1479.453043][T17962] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3706'. [ 1481.223606][T17986] FAULT_INJECTION: forcing a failure. [ 1481.223606][T17986] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.309230][T17986] CPU: 0 PID: 17986 Comm: syz.3.3714 Not tainted syzkaller #0 [ 1481.316795][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1481.326901][T17986] Call Trace: [ 1481.330232][T17986] [ 1481.333209][T17986] dump_stack_lvl+0x18c/0x250 [ 1481.337953][T17986] ? show_regs_print_info+0x20/0x20 [ 1481.343203][T17986] ? load_image+0x420/0x420 [ 1481.347780][T17986] ? verify_lock_unused+0x140/0x140 [ 1481.353038][T17986] ? perf_trace_lock_acquire+0x34f/0x410 [ 1481.358741][T17986] should_fail_ex+0x39d/0x4d0 [ 1481.363502][T17986] should_failslab+0x9/0x20 [ 1481.368066][T17986] slab_pre_alloc_hook+0x59/0x310 [ 1481.373164][T17986] kmem_cache_alloc+0x5a/0x2d0 [ 1481.377993][T17986] ? skb_clone+0x1eb/0x370 [ 1481.382485][T17986] skb_clone+0x1eb/0x370 [ 1481.386800][T17986] __netlink_deliver_tap+0x41c/0x830 [ 1481.392179][T17986] ? netlink_deliver_tap+0x2e/0x1b0 [ 1481.397448][T17986] netlink_deliver_tap+0x19c/0x1b0 [ 1481.402624][T17986] netlink_unicast+0x72c/0x8d0 [ 1481.407476][T17986] netlink_sendmsg+0x8d0/0xbf0 [ 1481.412322][T17986] ? netlink_getsockopt+0x590/0x590 [ 1481.417586][T17986] ? aa_sock_msg_perm+0x94/0x150 [ 1481.422586][T17986] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1481.427933][T17986] ? security_socket_sendmsg+0x80/0xa0 [ 1481.433440][T17986] ? netlink_getsockopt+0x590/0x590 [ 1481.438702][T17986] ____sys_sendmsg+0x5ba/0x960 [ 1481.443623][T17986] ? __asan_memset+0x22/0x40 [ 1481.448264][T17986] ? __sys_sendmsg_sock+0x30/0x30 [ 1481.453334][T17986] ? __import_iovec+0x5f2/0x850 [ 1481.458264][T17986] ? import_iovec+0x73/0xa0 [ 1481.462830][T17986] ___sys_sendmsg+0x2a6/0x360 [ 1481.467558][T17986] ? get_pid_task+0x20/0x1e0 [ 1481.472219][T17986] ? __sys_sendmsg+0x2a0/0x2a0 [ 1481.477092][T17986] ? __lock_acquire+0x7d40/0x7d40 [ 1481.482235][T17986] __se_sys_sendmsg+0x1c2/0x2b0 [ 1481.487153][T17986] ? __x64_sys_sendmsg+0x80/0x80 [ 1481.492188][T17986] ? lockdep_hardirqs_on+0x98/0x150 [ 1481.497447][T17986] do_syscall_64+0x55/0xb0 [ 1481.501926][T17986] ? clear_bhb_loop+0x40/0x90 [ 1481.506660][T17986] ? clear_bhb_loop+0x40/0x90 [ 1481.511402][T17986] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.517350][T17986] RIP: 0033:0x7f7bd9f9ce59 [ 1481.521819][T17986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.541480][T17986] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.549957][T17986] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1481.557986][T17986] RDX: ff0f000020000080 RSI: 0000200000000000 RDI: 0000000000000006 [ 1481.566013][T17986] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1481.574036][T17986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1481.582053][T17986] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1481.590115][T17986] [ 1482.035744][T17998] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1484.701311][T18034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3731'. [ 1484.853517][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.859999][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.782581][T18057] FAULT_INJECTION: forcing a failure. [ 1486.782581][T18057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1486.895800][T18057] CPU: 1 PID: 18057 Comm: syz.3.3737 Not tainted syzkaller #0 [ 1486.903353][T18057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1486.913527][T18057] Call Trace: [ 1486.916848][T18057] [ 1486.919803][T18057] dump_stack_lvl+0x18c/0x250 [ 1486.924528][T18057] ? show_regs_print_info+0x20/0x20 [ 1486.929756][T18057] ? load_image+0x420/0x420 [ 1486.934390][T18057] ? __might_fault+0xaa/0x120 [ 1486.939098][T18057] ? __lock_acquire+0x7d40/0x7d40 [ 1486.944162][T18057] should_fail_ex+0x39d/0x4d0 [ 1486.948882][T18057] _copy_from_user+0x2f/0xe0 [ 1486.953506][T18057] __sys_bpf+0x23e/0x890 [ 1486.957781][T18057] ? bpf_link_show_fdinfo+0x390/0x390 [ 1486.963221][T18057] ? lock_chain_count+0x20/0x20 [ 1486.968126][T18057] __x64_sys_bpf+0x7c/0x90 [ 1486.972576][T18057] do_syscall_64+0x55/0xb0 [ 1486.977022][T18057] ? clear_bhb_loop+0x40/0x90 [ 1486.981742][T18057] ? clear_bhb_loop+0x40/0x90 [ 1486.986458][T18057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1486.992383][T18057] RIP: 0033:0x7f7bd9f9ce59 [ 1486.996834][T18057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.016468][T18057] RSP: 002b:00007f7bdad9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1487.024898][T18057] RAX: ffffffffffffffda RBX: 00007f7bda216090 RCX: 00007f7bd9f9ce59 [ 1487.032881][T18057] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1487.040864][T18057] RBP: 00007f7bdad9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.048847][T18057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.056830][T18057] R13: 00007f7bda216128 R14: 00007f7bda216090 R15: 00007ffcf9a21318 [ 1487.064840][T18057] [ 1488.453133][T18065] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1490.336551][T18103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1492.601604][T18138] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3764'. [ 1494.422610][T18169] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1494.460691][T18170] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3776'. [ 1495.456303][T18182] FAULT_INJECTION: forcing a failure. [ 1495.456303][T18182] name failslab, interval 1, probability 0, space 0, times 0 [ 1495.598914][T18182] CPU: 1 PID: 18182 Comm: syz.2.3780 Not tainted syzkaller #0 [ 1495.606465][T18182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1495.616559][T18182] Call Trace: [ 1495.619900][T18182] [ 1495.622854][T18182] dump_stack_lvl+0x18c/0x250 [ 1495.627564][T18182] ? show_regs_print_info+0x20/0x20 [ 1495.632791][T18182] ? load_image+0x420/0x420 [ 1495.637332][T18182] ? __might_sleep+0xe0/0xe0 [ 1495.641951][T18182] ? __lock_acquire+0x7d40/0x7d40 [ 1495.646996][T18182] should_fail_ex+0x39d/0x4d0 [ 1495.651694][T18182] should_failslab+0x9/0x20 [ 1495.656210][T18182] slab_pre_alloc_hook+0x59/0x310 [ 1495.661258][T18182] ? lock_chain_count+0x20/0x20 [ 1495.666119][T18182] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 1495.671168][T18182] __kmem_cache_alloc_node+0x53/0x250 [ 1495.676556][T18182] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1495.682467][T18182] ? rxrpc_alloc_txbuf+0x7b/0x8a0 [ 1495.687506][T18182] kmalloc_trace+0x2a/0xe0 [ 1495.691942][T18182] rxrpc_alloc_txbuf+0x7b/0x8a0 [ 1495.696806][T18182] ? remove_wait_queue+0x33/0x120 [ 1495.701843][T18182] ? none_how_much_data+0x29/0xa0 [ 1495.706882][T18182] rxrpc_send_data+0xb73/0x2950 [ 1495.711757][T18182] ? rxrpc_send_data+0x24f/0x2950 [ 1495.716797][T18182] ? mark_lock+0x94/0x320 [ 1495.721165][T18182] ? rxrpc_do_sendmsg+0x12d0/0x12d0 [ 1495.726384][T18182] ? do_task_dead+0xd0/0xd0 [ 1495.730919][T18182] rxrpc_do_sendmsg+0x10c6/0x12d0 [ 1495.735967][T18182] ? rxrpc_propose_abort+0x200/0x200 [ 1495.741286][T18182] ? rxrpc_sendmsg+0x391/0x5b0 [ 1495.746059][T18182] ? rxrpc_getsockopt+0x150/0x150 [ 1495.751096][T18182] ____sys_sendmsg+0x5ba/0x960 [ 1495.755871][T18182] ? __lock_acquire+0x7d40/0x7d40 [ 1495.760913][T18182] ? __sys_sendmsg_sock+0x30/0x30 [ 1495.765942][T18182] ? __import_iovec+0x3fa/0x850 [ 1495.770808][T18182] ? import_iovec+0x73/0xa0 [ 1495.775322][T18182] ___sys_sendmsg+0x2a6/0x360 [ 1495.780008][T18182] ? get_pid_task+0x20/0x1e0 [ 1495.784714][T18182] ? __sys_sendmsg+0x2a0/0x2a0 [ 1495.789505][T18182] ? __lock_acquire+0x7d40/0x7d40 [ 1495.794563][T18182] __se_sys_sendmsg+0x1c2/0x2b0 [ 1495.799426][T18182] ? __x64_sys_sendmsg+0x80/0x80 [ 1495.804473][T18182] ? lockdep_hardirqs_on+0x98/0x150 [ 1495.809686][T18182] do_syscall_64+0x55/0xb0 [ 1495.814111][T18182] ? clear_bhb_loop+0x40/0x90 [ 1495.818818][T18182] ? clear_bhb_loop+0x40/0x90 [ 1495.823518][T18182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1495.829424][T18182] RIP: 0033:0x7f63f2b9ce59 [ 1495.833848][T18182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1495.853466][T18182] RSP: 002b:00007f63f3b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1495.861893][T18182] RAX: ffffffffffffffda RBX: 00007f63f2e15fa0 RCX: 00007f63f2b9ce59 [ 1495.869873][T18182] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1495.877854][T18182] RBP: 00007f63f3b31090 R08: 0000000000000000 R09: 0000000000000000 [ 1495.885834][T18182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1495.893812][T18182] R13: 00007f63f2e16038 R14: 00007f63f2e15fa0 R15: 00007ffec2f018d8 [ 1495.901803][T18182] [ 1498.027242][T18205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1500.401095][T18243] FAULT_INJECTION: forcing a failure. [ 1500.401095][T18243] name failslab, interval 1, probability 0, space 0, times 0 [ 1500.474825][T18243] CPU: 0 PID: 18243 Comm: syz.1.3800 Not tainted syzkaller #0 [ 1500.482358][T18243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1500.492458][T18243] Call Trace: [ 1500.495769][T18243] [ 1500.498734][T18243] dump_stack_lvl+0x18c/0x250 [ 1500.503460][T18243] ? show_regs_print_info+0x20/0x20 [ 1500.508785][T18243] ? load_image+0x420/0x420 [ 1500.513336][T18243] ? __might_sleep+0xe0/0xe0 [ 1500.517969][T18243] ? __lock_acquire+0x7d40/0x7d40 [ 1500.523130][T18243] should_fail_ex+0x39d/0x4d0 [ 1500.528037][T18243] should_failslab+0x9/0x20 [ 1500.532589][T18243] slab_pre_alloc_hook+0x59/0x310 [ 1500.537660][T18243] kmem_cache_alloc_node+0x60/0x320 [ 1500.542898][T18243] ? __alloc_skb+0x103/0x2c0 [ 1500.547531][T18243] __alloc_skb+0x103/0x2c0 [ 1500.551984][T18243] netlink_dump+0x1ec/0xe50 [ 1500.556549][T18243] ? __mutex_lock+0x315/0xcc0 [ 1500.561274][T18243] ? netlink_lookup+0x200/0x200 [ 1500.566188][T18243] ? netlink_autobind+0x300/0x300 [ 1500.571265][T18243] ? netlink_lookup+0x30/0x200 [ 1500.576072][T18243] ? netlink_lookup+0x30/0x200 [ 1500.580886][T18243] __netlink_dump_start+0x5f1/0x810 [ 1500.586128][T18243] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1500.591264][T18243] rtnetlink_rcv_msg+0xe1d/0xfa0 [ 1500.596216][T18243] ? inet_rtm_deladdr+0x7d0/0x7d0 [ 1500.601271][T18243] ? rtnetlink_bind+0x80/0x80 [ 1500.605958][T18243] ? perf_trace_preemptirq_template+0xac/0x330 [ 1500.612133][T18243] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1500.618128][T18243] ? lock_chain_count+0x20/0x20 [ 1500.622991][T18243] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1500.628371][T18243] ? lockdep_hardirqs_on+0x98/0x150 [ 1500.633605][T18243] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1500.639077][T18243] ? _local_bh_enable+0xa0/0xa0 [ 1500.643941][T18243] ? __dev_queue_xmit+0x265/0x3660 [ 1500.649062][T18243] ? __dev_queue_xmit+0x265/0x3660 [ 1500.654185][T18243] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1500.659404][T18243] ? __dev_queue_xmit+0x265/0x3660 [ 1500.664533][T18243] ? inet_rtm_deladdr+0x7d0/0x7d0 [ 1500.669574][T18243] ? ref_tracker_free+0x690/0x840 [ 1500.674732][T18243] netlink_rcv_skb+0x241/0x4d0 [ 1500.679515][T18243] ? rtnetlink_bind+0x80/0x80 [ 1500.684213][T18243] ? netlink_ack+0x1180/0x1180 [ 1500.689025][T18243] ? __lock_acquire+0x7d40/0x7d40 [ 1500.694065][T18243] ? netlink_deliver_tap+0x2e/0x1b0 [ 1500.699288][T18243] netlink_unicast+0x751/0x8d0 [ 1500.704079][T18243] netlink_sendmsg+0x8d0/0xbf0 [ 1500.708868][T18243] ? netlink_getsockopt+0x590/0x590 [ 1500.714083][T18243] ? aa_sock_msg_perm+0x94/0x150 [ 1500.719034][T18243] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1500.724327][T18243] ? security_socket_sendmsg+0x80/0xa0 [ 1500.729883][T18243] ? netlink_getsockopt+0x590/0x590 [ 1500.735096][T18243] ____sys_sendmsg+0x5ba/0x960 [ 1500.739879][T18243] ? __asan_memset+0x22/0x40 [ 1500.744485][T18243] ? __sys_sendmsg_sock+0x30/0x30 [ 1500.749519][T18243] ? __import_iovec+0x5f2/0x850 [ 1500.754388][T18243] ? import_iovec+0x73/0xa0 [ 1500.758903][T18243] ___sys_sendmsg+0x2a6/0x360 [ 1500.763593][T18243] ? get_pid_task+0x20/0x1e0 [ 1500.768201][T18243] ? __sys_sendmsg+0x2a0/0x2a0 [ 1500.773005][T18243] ? __lock_acquire+0x7d40/0x7d40 [ 1500.778061][T18243] __se_sys_sendmsg+0x1c2/0x2b0 [ 1500.782932][T18243] ? __x64_sys_sendmsg+0x80/0x80 [ 1500.787906][T18243] ? lockdep_hardirqs_on+0x98/0x150 [ 1500.793123][T18243] do_syscall_64+0x55/0xb0 [ 1500.797545][T18243] ? clear_bhb_loop+0x40/0x90 [ 1500.802231][T18243] ? clear_bhb_loop+0x40/0x90 [ 1500.806927][T18243] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1500.812829][T18243] RIP: 0033:0x7f7b3bb9ce59 [ 1500.817260][T18243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1500.836881][T18243] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1500.845325][T18243] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1500.853317][T18243] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1500.861295][T18243] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.869272][T18243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.877256][T18243] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1500.885276][T18243] [ 1501.214465][T18250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3802'. [ 1503.529053][T18289] netlink: 'syz.1.3814': attribute type 2 has an invalid length. [ 1503.580246][T18289] netlink: 119 bytes leftover after parsing attributes in process `syz.1.3814'. [ 1504.010488][T18299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3818'. [ 1506.065949][T18323] netlink: 'syz.3.3826': attribute type 10 has an invalid length. [ 1506.152279][T18323] macvlan0: entered promiscuous mode [ 1506.157718][T18323] macvlan0: entered allmulticast mode [ 1506.228246][T18323] veth1_vlan: entered allmulticast mode [ 1506.287267][T18323] team0: Port device macvlan0 added [ 1506.306642][T18318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1506.523856][T18328] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1506.543977][T18328] netlink: 'syz.3.3827': attribute type 21 has an invalid length. [ 1506.559078][T18328] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1506.571766][T18328] netlink: 'syz.3.3827': attribute type 5 has an invalid length. [ 1506.586028][T18328] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3827'. [ 1506.757335][T18328] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 1506.852225][T18328] veth1_vlan: left allmulticast mode [ 1507.554074][T18346] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3832'. [ 1509.317997][T18368] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3839'. [ 1510.361010][T18386] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3844'. [ 1516.911904][T18446] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3858'. [ 1516.989982][T18444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3856'. [ 1517.474636][T18452] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3857'. [ 1517.550339][T18452] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1522.040105][T18493] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3874'. [ 1524.705656][T18531] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3884'. [ 1524.806371][T18531] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1527.321477][T18536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3888'. [ 1530.211250][T18582] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1530.347594][T18581] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1530.376225][T18581] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1532.333233][T18613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3912'. [ 1533.347219][T18622] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3914'. [ 1533.775508][T18622] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1537.583189][T18647] FAULT_INJECTION: forcing a failure. [ 1537.583189][T18647] name failslab, interval 1, probability 0, space 0, times 0 [ 1537.627216][T18647] CPU: 0 PID: 18647 Comm: syz.2.3922 Not tainted syzkaller #0 [ 1537.634755][T18647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1537.644933][T18647] Call Trace: [ 1537.648243][T18647] [ 1537.651198][T18647] dump_stack_lvl+0x18c/0x250 [ 1537.655919][T18647] ? show_regs_print_info+0x20/0x20 [ 1537.661154][T18647] ? load_image+0x420/0x420 [ 1537.665700][T18647] ? __might_sleep+0xe0/0xe0 [ 1537.670322][T18647] ? __lock_acquire+0x7d40/0x7d40 [ 1537.675382][T18647] should_fail_ex+0x39d/0x4d0 [ 1537.680189][T18647] should_failslab+0x9/0x20 [ 1537.684724][T18647] slab_pre_alloc_hook+0x59/0x310 [ 1537.689772][T18647] ? kvmalloc_node+0x70/0x180 [ 1537.694459][T18647] ? kvmalloc_node+0x70/0x180 [ 1537.699145][T18647] __kmem_cache_alloc_node+0x53/0x250 [ 1537.704537][T18647] ? kvmalloc_node+0x70/0x180 [ 1537.709226][T18647] __kmalloc_node+0xa4/0x230 [ 1537.713840][T18647] kvmalloc_node+0x70/0x180 [ 1537.718358][T18647] __veth_napi_enable_range+0x2b4/0x700 [ 1537.723980][T18647] ? __skb_frag_ref+0x1c0/0x1c0 [ 1537.728861][T18647] ? netif_napi_add_weight+0xa22/0xdf0 [ 1537.734357][T18647] veth_napi_enable_range+0xd0/0x150 [ 1537.739664][T18647] veth_set_features+0x1c8/0x2a0 [ 1537.744625][T18647] __netdev_update_features+0x9cb/0x18e0 [ 1537.750282][T18647] ? mark_lock+0x94/0x320 [ 1537.754627][T18647] ? dev_xdp_attach+0x1030/0x1030 [ 1537.759685][T18647] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1537.765685][T18647] ? lock_chain_count+0x20/0x20 [ 1537.770553][T18647] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1537.776725][T18647] ? lockdep_hardirqs_on+0x98/0x150 [ 1537.781941][T18647] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1537.788128][T18647] ethtool_set_one_feature+0x2a8/0x2f0 [ 1537.793605][T18647] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1537.799773][T18647] ? ethtool_get_one_feature+0x280/0x280 [ 1537.805427][T18647] ? dev_ethtool+0x7ea/0x18d0 [ 1537.810120][T18647] dev_ethtool+0xfd7/0x18d0 [ 1537.814648][T18647] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 1537.820997][T18647] ? __lock_acquire+0x7d40/0x7d40 [ 1537.826038][T18647] ? strcmp+0x28/0xb0 [ 1537.830041][T18647] ? dev_load+0x21/0x1f0 [ 1537.834302][T18647] dev_ioctl+0x392/0x1140 [ 1537.838690][T18647] sock_do_ioctl+0x239/0x310 [ 1537.843303][T18647] ? sock_show_fdinfo+0xb0/0xb0 [ 1537.848194][T18647] sock_ioctl+0x5ba/0x7e0 [ 1537.852626][T18647] ? sock_poll+0x3e0/0x3e0 [ 1537.857066][T18647] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1537.862018][T18647] ? security_file_ioctl+0x80/0xa0 [ 1537.867138][T18647] ? sock_poll+0x3e0/0x3e0 [ 1537.871568][T18647] __se_sys_ioctl+0xfd/0x170 [ 1537.876178][T18647] do_syscall_64+0x55/0xb0 [ 1537.880604][T18647] ? clear_bhb_loop+0x40/0x90 [ 1537.885347][T18647] ? clear_bhb_loop+0x40/0x90 [ 1537.890041][T18647] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1537.895948][T18647] RIP: 0033:0x7f63f2b9ce59 [ 1537.900375][T18647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1537.919991][T18647] RSP: 002b:00007f63f3b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1537.928437][T18647] RAX: ffffffffffffffda RBX: 00007f63f2e15fa0 RCX: 00007f63f2b9ce59 [ 1537.936431][T18647] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002d [ 1537.944424][T18647] RBP: 00007f63f3b31090 R08: 0000000000000000 R09: 0000000000000000 [ 1537.952408][T18647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1537.960391][T18647] R13: 00007f63f2e16038 R14: 00007f63f2e15fa0 R15: 00007ffec2f018d8 [ 1537.968386][T18647] [ 1538.117998][T18647] veth1_to_bond: set_features() failed (-12); wanted 0x000061164fdd59e9, left 0x000061164fdd19e9 [ 1540.510740][T18673] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3928'. [ 1541.160124][T18685] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3933'. [ 1541.507189][T18692] netlink: 'syz.0.3934': attribute type 10 has an invalid length. [ 1541.633546][T18692] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3934'. [ 1543.000810][T18707] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.3938'. [ 1543.032523][T18707] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1545.196617][T18710] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3938'. [ 1545.211182][T18713] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1546.303729][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.310508][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.818109][T18750] netlink: 'syz.0.3952': attribute type 5 has an invalid length. [ 1547.863231][T18751] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3951'. [ 1549.471385][T18772] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1549.891843][T18771] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1549.950195][T18771] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1552.241695][T18785] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3964'. [ 1553.172252][T18795] netlink: 'syz.1.3967': attribute type 10 has an invalid length. [ 1553.204084][T18795] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3967'. [ 1553.314191][T18800] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3978'. [ 1555.788539][T18817] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3974'. [ 1557.664195][T18839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3981'. [ 1563.428195][T18891] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3996'. [ 1565.033708][T18906] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3999'. [ 1566.239509][T18911] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4000'. [ 1571.704600][T18955] netlink: 10 bytes leftover after parsing attributes in process `syz.2.4014'. [ 1572.314837][T18957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1584.080676][T19039] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1584.381197][T19045] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4034'. [ 1584.385036][T19038] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4032'. [ 1584.436164][T19038] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1584.886252][T19050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4037'. [ 1587.908046][T19083] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1588.305138][T19080] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.4049'. [ 1588.319208][T19080] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1588.948706][T19092] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1589.491834][T19099] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4052'. [ 1591.740404][T19129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4064'. [ 1597.034415][T19183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4087'. [ 1597.396671][T19191] FAULT_INJECTION: forcing a failure. [ 1597.396671][T19191] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.422961][T19191] CPU: 1 PID: 19191 Comm: syz.2.4082 Not tainted syzkaller #0 [ 1597.430495][T19191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1597.440565][T19191] Call Trace: [ 1597.443855][T19191] [ 1597.446816][T19191] dump_stack_lvl+0x18c/0x250 [ 1597.451515][T19191] ? sctp_sendmsg+0x15d2/0x2910 [ 1597.456385][T19191] ? ___sys_sendmsg+0x2a6/0x360 [ 1597.461265][T19191] ? show_regs_print_info+0x20/0x20 [ 1597.466485][T19191] ? load_image+0x420/0x420 [ 1597.471019][T19191] should_fail_ex+0x39d/0x4d0 [ 1597.475725][T19191] should_failslab+0x9/0x20 [ 1597.480247][T19191] slab_pre_alloc_hook+0x59/0x310 [ 1597.485291][T19191] ? sctp_add_bind_addr+0x8c/0x360 [ 1597.490696][T19191] __kmem_cache_alloc_node+0x53/0x250 [ 1597.496186][T19191] ? sctp_add_bind_addr+0x8c/0x360 [ 1597.501312][T19191] kmalloc_trace+0x2a/0xe0 [ 1597.505752][T19191] sctp_add_bind_addr+0x8c/0x360 [ 1597.510797][T19191] sctp_copy_local_addr_list+0x315/0x4f0 [ 1597.516447][T19191] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 1597.522273][T19191] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 1597.528352][T19191] ? sctp_v4_is_any+0x35/0x60 [ 1597.533038][T19191] ? sctp_copy_one_addr+0x8c/0x350 [ 1597.538172][T19191] sctp_bind_addr_copy+0xb3/0x3c0 [ 1597.543206][T19191] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1597.549549][T19191] sctp_connect_new_asoc+0x2f9/0x6a0 [ 1597.554876][T19191] ? __sctp_connect+0xd80/0xd80 [ 1597.559737][T19191] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1597.565126][T19191] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1597.570688][T19191] ? security_sctp_bind_connect+0x89/0xb0 [ 1597.576428][T19191] sctp_sendmsg+0x15d2/0x2910 [ 1597.581134][T19191] ? sctp_getsockopt+0xb60/0xb60 [ 1597.586081][T19191] ? aa_sk_perm+0x83c/0x970 [ 1597.590604][T19191] ? aa_af_perm+0x330/0x330 [ 1597.595113][T19191] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1597.601545][T19191] ? sock_rps_record_flow+0x19/0x3f0 [ 1597.606872][T19191] ? inet_sendmsg+0xe9/0x2f0 [ 1597.611528][T19191] ? inet_send_prepare+0x260/0x260 [ 1597.616672][T19191] ____sys_sendmsg+0x5ba/0x960 [ 1597.621457][T19191] ? __lock_acquire+0x7d40/0x7d40 [ 1597.626504][T19191] ? __asan_memset+0x22/0x40 [ 1597.631110][T19191] ? __sys_sendmsg_sock+0x30/0x30 [ 1597.636139][T19191] ? __import_iovec+0x5f2/0x850 [ 1597.641010][T19191] ? import_iovec+0x73/0xa0 [ 1597.645525][T19191] ___sys_sendmsg+0x2a6/0x360 [ 1597.650216][T19191] ? get_pid_task+0x20/0x1e0 [ 1597.654824][T19191] ? __sys_sendmsg+0x2a0/0x2a0 [ 1597.659618][T19191] ? __lock_acquire+0x7d40/0x7d40 [ 1597.664677][T19191] __se_sys_sendmsg+0x1c2/0x2b0 [ 1597.669543][T19191] ? __x64_sys_sendmsg+0x80/0x80 [ 1597.674505][T19191] ? lockdep_hardirqs_on+0x98/0x150 [ 1597.679724][T19191] do_syscall_64+0x55/0xb0 [ 1597.684152][T19191] ? clear_bhb_loop+0x40/0x90 [ 1597.688851][T19191] ? clear_bhb_loop+0x40/0x90 [ 1597.693542][T19191] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1597.699455][T19191] RIP: 0033:0x7f63f2b9ce59 [ 1597.703889][T19191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1597.723508][T19191] RSP: 002b:00007f63f3b31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1597.731936][T19191] RAX: ffffffffffffffda RBX: 00007f63f2e15fa0 RCX: 00007f63f2b9ce59 [ 1597.739921][T19191] RDX: 0000000004000040 RSI: 00002000000010c0 RDI: 0000000000000003 [ 1597.747907][T19191] RBP: 00007f63f3b31090 R08: 0000000000000000 R09: 0000000000000000 [ 1597.755983][T19191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1597.763963][T19191] R13: 00007f63f2e16038 R14: 00007f63f2e15fa0 R15: 00007ffec2f018d8 [ 1597.771965][T19191] [ 1599.594012][T19214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4089'. [ 1599.702784][T19216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4091'. [ 1602.294881][T19248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4101'. [ 1603.051345][T19254] netlink: 5759 bytes leftover after parsing attributes in process `syz.3.4103'. [ 1605.607997][T19287] FAULT_INJECTION: forcing a failure. [ 1605.607997][T19287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1605.632651][T19285] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4112'. [ 1605.746879][T19287] CPU: 1 PID: 19287 Comm: syz.2.4115 Not tainted syzkaller #0 [ 1605.746938][T19287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1605.746952][T19287] Call Trace: [ 1605.746960][T19287] [ 1605.746970][T19287] dump_stack_lvl+0x18c/0x250 [ 1605.746998][T19287] ? lock_chain_count+0x20/0x20 [ 1605.747022][T19287] ? show_regs_print_info+0x20/0x20 [ 1605.747043][T19287] ? load_image+0x420/0x420 [ 1605.747070][T19287] ? lockdep_hardirqs_on+0x98/0x150 [ 1605.747107][T19287] should_fail_ex+0x39d/0x4d0 [ 1605.747141][T19287] _copy_from_iter+0x1d9/0x12e0 [ 1605.747173][T19287] ? lock_chain_count+0x20/0x20 [ 1605.747202][T19287] ? copyout_mc+0x70/0x70 [ 1605.747226][T19287] ? lockdep_hardirqs_on+0x98/0x150 [ 1605.747250][T19287] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1605.747285][T19287] ? page_copy_sane+0x4e/0x270 [ 1605.747316][T19287] copy_page_from_iter+0x7b/0x100 [ 1605.747347][T19287] pipe_write+0x868/0x1b10 [ 1605.747402][T19287] ? pipe_read+0x1310/0x1310 [ 1605.747433][T19287] ? __get_task_ioprio+0x109/0x260 [ 1605.747463][T19287] vfs_write+0x46c/0x990 [ 1605.747495][T19287] ? file_end_write+0x250/0x250 [ 1605.747526][T19287] ? __fget_files+0x43d/0x4b0 [ 1605.747561][T19287] ? __fdget_pos+0x1d8/0x330 [ 1605.747584][T19287] ? ksys_write+0x75/0x260 [ 1605.747612][T19287] ksys_write+0x150/0x260 [ 1605.747640][T19287] ? __ia32_sys_read+0x90/0x90 [ 1605.747671][T19287] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1605.747699][T19287] do_syscall_64+0x55/0xb0 [ 1605.747717][T19287] ? clear_bhb_loop+0x40/0x90 [ 1605.747740][T19287] ? clear_bhb_loop+0x40/0x90 [ 1605.747766][T19287] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1605.747790][T19287] RIP: 0033:0x7f63f2b9ce59 [ 1605.747809][T19287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.747825][T19287] RSP: 002b:00007f63f3b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1605.747857][T19287] RAX: ffffffffffffffda RBX: 00007f63f2e15fa0 RCX: 00007f63f2b9ce59 [ 1605.747871][T19287] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000000 [ 1605.747885][T19287] RBP: 00007f63f3b31090 R08: 0000000000000000 R09: 0000000000000000 [ 1605.747897][T19287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1605.747909][T19287] R13: 00007f63f2e16038 R14: 00007f63f2e15fa0 R15: 00007ffec2f018d8 [ 1605.747942][T19287] [ 1607.594463][T19305] netlink: 'syz.3.4122': attribute type 10 has an invalid length. [ 1607.632954][T19305] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4122'. [ 1607.899783][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.916659][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.641050][T19317] FAULT_INJECTION: forcing a failure. [ 1608.641050][T19317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1608.679573][T19317] CPU: 1 PID: 19317 Comm: syz.1.4124 Not tainted syzkaller #0 [ 1608.687169][T19317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1608.697273][T19317] Call Trace: [ 1608.700593][T19317] [ 1608.703563][T19317] dump_stack_lvl+0x18c/0x250 [ 1608.708386][T19317] ? show_regs_print_info+0x20/0x20 [ 1608.713645][T19317] ? load_image+0x420/0x420 [ 1608.718209][T19317] ? __might_fault+0xaa/0x120 [ 1608.722942][T19317] ? __lock_acquire+0x7d40/0x7d40 [ 1608.728042][T19317] should_fail_ex+0x39d/0x4d0 [ 1608.732804][T19317] _copy_to_user+0x2f/0xa0 [ 1608.737364][T19317] bpf_test_finish+0x19f/0x650 [ 1608.742212][T19317] ? convert_skb_to___skb+0x420/0x420 [ 1608.747641][T19317] ? read_tsc+0x9/0x20 [ 1608.751786][T19317] bpf_prog_test_run_flow_dissector+0x4c9/0x640 [ 1608.758111][T19317] ? xdp_convert_buff_to_md+0x200/0x200 [ 1608.763725][T19317] ? __fget_files+0x28/0x4b0 [ 1608.768370][T19317] ? __fget_files+0x28/0x4b0 [ 1608.773049][T19317] ? xdp_convert_buff_to_md+0x200/0x200 [ 1608.778655][T19317] bpf_prog_test_run+0x321/0x390 [ 1608.783655][T19317] __sys_bpf+0x49d/0x890 [ 1608.787956][T19317] ? bpf_link_show_fdinfo+0x390/0x390 [ 1608.793422][T19317] ? lock_chain_count+0x20/0x20 [ 1608.798352][T19317] __x64_sys_bpf+0x7c/0x90 [ 1608.802821][T19317] do_syscall_64+0x55/0xb0 [ 1608.807295][T19317] ? clear_bhb_loop+0x40/0x90 [ 1608.812028][T19317] ? clear_bhb_loop+0x40/0x90 [ 1608.816762][T19317] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1608.822714][T19317] RIP: 0033:0x7f7b3bb9ce59 [ 1608.827188][T19317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1608.846855][T19317] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1608.855340][T19317] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1608.863370][T19317] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1608.871404][T19317] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1608.879424][T19317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1608.887451][T19317] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1608.895511][T19317] [ 1609.519117][T19325] 0A: renamed from virt_wifi0 [ 1610.127524][T19327] lo: entered allmulticast mode [ 1610.141312][T19331] lo: entered promiscuous mode [ 1610.146158][T19331] lo: left allmulticast mode [ 1610.266770][T19333] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1610.721983][T19346] netlink: 'syz.2.4134': attribute type 10 has an invalid length. [ 1610.744798][T19346] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4134'. [ 1612.832008][T19366] FAULT_INJECTION: forcing a failure. [ 1612.832008][T19366] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.845827][T19366] CPU: 0 PID: 19366 Comm: syz.3.4138 Not tainted syzkaller #0 [ 1612.853338][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1612.863524][T19366] Call Trace: [ 1612.866902][T19366] [ 1612.869976][T19366] dump_stack_lvl+0x18c/0x250 [ 1612.874710][T19366] ? show_regs_print_info+0x20/0x20 [ 1612.879947][T19366] ? load_image+0x420/0x420 [ 1612.884516][T19366] should_fail_ex+0x39d/0x4d0 [ 1612.889247][T19366] should_failslab+0x9/0x20 [ 1612.893799][T19366] slab_pre_alloc_hook+0x59/0x310 [ 1612.898868][T19366] ? skb_network_protocol+0x529/0x780 [ 1612.904290][T19366] kmem_cache_alloc_node+0x60/0x320 [ 1612.909545][T19366] ? __alloc_skb+0x103/0x2c0 [ 1612.914184][T19366] __alloc_skb+0x103/0x2c0 [ 1612.918650][T19366] skb_segment+0xee2/0x3f50 [ 1612.923207][T19366] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1612.929276][T19366] udp6_ufo_fragment+0x9b7/0xf40 [ 1612.934358][T19366] ? udpv6_offload_exit+0x20/0x20 [ 1612.939458][T19366] ipv6_gso_segment+0xb8b/0x2140 [ 1612.944466][T19366] ? inet6_del_offload+0x50/0x50 [ 1612.949447][T19366] ? skb_mac_gso_segment+0x311/0x640 [ 1612.954778][T19366] ? inet6_del_offload+0x50/0x50 [ 1612.959762][T19366] skb_mac_gso_segment+0x320/0x640 [ 1612.964917][T19366] ? skb_mac_gso_segment+0x185/0x640 [ 1612.970240][T19366] ? skb_eth_gso_segment+0x270/0x270 [ 1612.975562][T19366] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1612.981608][T19366] nsh_gso_segment+0x4c7/0xc60 [ 1612.986489][T19366] ? nsh_pop+0x570/0x570 [ 1612.990775][T19366] skb_mac_gso_segment+0x320/0x640 [ 1612.995936][T19366] ? skb_mac_gso_segment+0x185/0x640 [ 1613.001265][T19366] ? skb_eth_gso_segment+0x270/0x270 [ 1613.006609][T19366] __skb_gso_segment+0x302/0x4a0 [ 1613.011597][T19366] validate_xmit_skb+0x565/0xf60 [ 1613.016581][T19366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1613.022787][T19366] ? lockdep_hardirqs_on+0x98/0x150 [ 1613.028042][T19366] ? validate_xmit_skb_list+0x120/0x120 [ 1613.033662][T19366] validate_xmit_skb_list+0x84/0x120 [ 1613.039002][T19366] sch_direct_xmit+0xe0/0x4c0 [ 1613.043770][T19366] ? read_lock_is_recursive+0x20/0x20 [ 1613.049185][T19366] ? rcu_read_lock_bh_held+0x7a/0x100 [ 1613.054609][T19366] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 1613.060660][T19366] __dev_queue_xmit+0x165d/0x3660 [ 1613.065759][T19366] ? __dev_queue_xmit+0x265/0x3660 [ 1613.070936][T19366] ? netdev_core_pick_tx+0x340/0x340 [ 1613.076279][T19366] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 1613.081904][T19366] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 1613.088103][T19366] ? skb_copy_datagram_from_iter+0x62e/0x6e0 [ 1613.094140][T19366] ? packet_xmit+0x66/0x330 [ 1613.098700][T19366] ? packet_sendmsg+0x3916/0x4c30 [ 1613.103778][T19366] packet_sendmsg+0x3a0e/0x4c30 [ 1613.108703][T19366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1613.114994][T19366] ? __might_sleep+0xe0/0xe0 [ 1613.119652][T19366] ? aa_sk_perm+0x83c/0x970 [ 1613.124212][T19366] ? packet_getsockopt+0xad0/0xad0 [ 1613.129425][T19366] ? tomoyo_write_file+0x70/0xc50 [ 1613.134507][T19366] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1613.140715][T19366] ? aa_sock_msg_perm+0x94/0x150 [ 1613.145727][T19366] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1613.151066][T19366] ? security_socket_sendmsg+0x80/0xa0 [ 1613.156655][T19366] ? packet_getsockopt+0xad0/0xad0 [ 1613.161827][T19366] ____sys_sendmsg+0x5ba/0x960 [ 1613.166656][T19366] ? __asan_memset+0x22/0x40 [ 1613.171315][T19366] ? __sys_sendmsg_sock+0x30/0x30 [ 1613.176382][T19366] ? __import_iovec+0x3fa/0x850 [ 1613.181295][T19366] ? import_iovec+0x73/0xa0 [ 1613.185849][T19366] ___sys_sendmsg+0x2a6/0x360 [ 1613.190577][T19366] ? __sys_sendmsg+0x2a0/0x2a0 [ 1613.195412][T19366] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1613.201732][T19366] __se_sys_sendmsg+0x1c2/0x2b0 [ 1613.206624][T19366] ? __x64_sys_sendmsg+0x80/0x80 [ 1613.211622][T19366] ? lockdep_hardirqs_on+0x98/0x150 [ 1613.216884][T19366] do_syscall_64+0x55/0xb0 [ 1613.221350][T19366] ? clear_bhb_loop+0x40/0x90 [ 1613.226080][T19366] ? clear_bhb_loop+0x40/0x90 [ 1613.230809][T19366] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1613.236754][T19366] RIP: 0033:0x7f7bd9f9ce59 [ 1613.241306][T19366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.261142][T19366] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.269612][T19366] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1613.277627][T19366] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1613.285638][T19366] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.293654][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1613.301671][T19366] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1613.309704][T19366] [ 1613.809304][T19378] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4142'. [ 1614.522060][T19392] netlink: 'syz.0.4148': attribute type 10 has an invalid length. [ 1614.569893][T19392] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4148'. [ 1620.360425][T19427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4155'. [ 1621.505117][T19438] netlink: 'syz.3.4158': attribute type 10 has an invalid length. [ 1621.569132][T19438] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4158'. [ 1626.386371][T19463] netlink: 'syz.0.4164': attribute type 1 has an invalid length. [ 1626.404113][T19463] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4164'. [ 1627.084840][T19476] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1627.366457][T19481] netlink: 'syz.3.4169': attribute type 10 has an invalid length. [ 1627.394911][T19481] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4169'. [ 1627.698376][T19492] FAULT_INJECTION: forcing a failure. [ 1627.698376][T19492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.741462][T19492] CPU: 1 PID: 19492 Comm: syz.1.4174 Not tainted syzkaller #0 [ 1627.748998][T19492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1627.759090][T19492] Call Trace: [ 1627.762396][T19492] [ 1627.765354][T19492] dump_stack_lvl+0x18c/0x250 [ 1627.770070][T19492] ? show_regs_print_info+0x20/0x20 [ 1627.775307][T19492] ? load_image+0x420/0x420 [ 1627.779854][T19492] ? __might_fault+0xaa/0x120 [ 1627.784561][T19492] ? __lock_acquire+0x7d40/0x7d40 [ 1627.789623][T19492] should_fail_ex+0x39d/0x4d0 [ 1627.794349][T19492] _copy_from_user+0x2f/0xe0 [ 1627.798976][T19492] bpf_prog_test_run_skb+0x266/0x12b0 [ 1627.804382][T19492] ? __fget_files+0x28/0x4b0 [ 1627.809011][T19492] ? __fget_files+0x28/0x4b0 [ 1627.813643][T19492] ? __fget_files+0x43d/0x4b0 [ 1627.818450][T19492] ? cpu_online+0x60/0x60 [ 1627.822827][T19492] bpf_prog_test_run+0x321/0x390 [ 1627.827801][T19492] __sys_bpf+0x49d/0x890 [ 1627.832083][T19492] ? bpf_link_show_fdinfo+0x390/0x390 [ 1627.837503][T19492] ? lock_chain_count+0x20/0x20 [ 1627.842394][T19492] __x64_sys_bpf+0x7c/0x90 [ 1627.846846][T19492] do_syscall_64+0x55/0xb0 [ 1627.851289][T19492] ? clear_bhb_loop+0x40/0x90 [ 1627.855997][T19492] ? clear_bhb_loop+0x40/0x90 [ 1627.860709][T19492] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1627.866638][T19492] RIP: 0033:0x7f7b3bb9ce59 [ 1627.871102][T19492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.890757][T19492] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1627.899215][T19492] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1627.907234][T19492] RDX: 0000000000000050 RSI: 0000200000000400 RDI: 000000000000000a [ 1627.915250][T19492] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.923250][T19492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.931254][T19492] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1627.939262][T19492] [ 1628.471605][T19501] netlink: 'syz.3.4175': attribute type 1 has an invalid length. [ 1628.542013][T19501] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4175'. [ 1629.036497][T19509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1629.382493][T19514] netlink: 'syz.2.4183': attribute type 10 has an invalid length. [ 1629.399131][T19514] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4183'. [ 1629.939963][T19522] raw_sendmsg: syz.1.4186 forgot to set AF_INET. Fix it! [ 1630.494781][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1630.504055][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1630.549630][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1630.604630][T19528] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4188'. [ 1630.945268][T19540] netlink: 'syz.1.4193': attribute type 1 has an invalid length. [ 1631.611472][T19552] netlink: 'syz.2.4196': attribute type 10 has an invalid length. [ 1631.677377][T19554] netlink: 'syz.3.4197': attribute type 29 has an invalid length. [ 1631.687398][T19552] __nla_validate_parse: 2 callbacks suppressed [ 1631.687436][T19552] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4196'. [ 1631.790817][T19554] netlink: 'syz.3.4197': attribute type 29 has an invalid length. [ 1631.852223][T19558] netlink: 'syz.3.4197': attribute type 29 has an invalid length. [ 1631.912091][T19554] netlink: 'syz.3.4197': attribute type 29 has an invalid length. [ 1632.246411][T19566] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1632.730393][T19570] netlink: 'syz.2.4201': attribute type 29 has an invalid length. [ 1632.796815][T19570] netlink: 'syz.2.4201': attribute type 3 has an invalid length. [ 1632.885712][T19570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4201'. [ 1633.103959][T19574] syzkaller0: entered promiscuous mode [ 1633.171251][T19574] syzkaller0: entered allmulticast mode [ 1633.201148][T19579] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4205'. [ 1637.060261][ T5084] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1637.256601][T19593] netlink: 'syz.2.4206': attribute type 1 has an invalid length. [ 1637.265181][T19593] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4206'. [ 1637.861717][T19603] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1638.010485][T19603] netlink: 'syz.3.4211': attribute type 1 has an invalid length. [ 1638.109462][T19603] netlink: 21820 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1639.126945][T19587] Bluetooth: hci0: command 0x0406 tx timeout [ 1640.241632][T19621] netlink: 'syz.3.4217': attribute type 3 has an invalid length. [ 1640.310727][T19621] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.4217'. [ 1640.759230][T19630] netlink: 'syz.0.4220': attribute type 27 has an invalid length. [ 1640.768556][T19630] netlink: 'syz.0.4220': attribute type 4 has an invalid length. [ 1640.789569][T19630] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4220'. [ 1641.151222][T19635] netlink: 'syz.3.4221': attribute type 10 has an invalid length. [ 1641.176148][T19635] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4221'. [ 1643.562553][T19662] netlink: 'syz.0.4230': attribute type 29 has an invalid length. [ 1643.724898][T19665] syzkaller0: entered promiscuous mode [ 1643.799478][T19662] netlink: 'syz.0.4230': attribute type 3 has an invalid length. [ 1643.808294][T19662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4230'. [ 1643.828910][T19665] syzkaller0: entered allmulticast mode [ 1643.999508][T19674] netlink: 'syz.3.4225': attribute type 21 has an invalid length. [ 1644.029536][T19674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4225'. [ 1644.413326][T19655] delete_channel: no stack [ 1646.487913][T19719] netlink: 'syz.3.4244': attribute type 3 has an invalid length. [ 1646.851157][T19723] netlink: 'syz.2.4246': attribute type 1 has an invalid length. [ 1646.859946][T19723] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4246'. [ 1648.605500][T19750] netlink: 'syz.0.4254': attribute type 10 has an invalid length. [ 1648.681858][T19748] FAULT_INJECTION: forcing a failure. [ 1648.681858][T19748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1648.741217][T19748] CPU: 0 PID: 19748 Comm: syz.3.4253 Not tainted syzkaller #0 [ 1648.748770][T19748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1648.758866][T19748] Call Trace: [ 1648.762189][T19748] [ 1648.765150][T19748] dump_stack_lvl+0x18c/0x250 [ 1648.769871][T19748] ? show_regs_print_info+0x20/0x20 [ 1648.775107][T19748] ? load_image+0x420/0x420 [ 1648.779651][T19748] ? __might_fault+0xaa/0x120 [ 1648.784365][T19748] ? __lock_acquire+0x7d40/0x7d40 [ 1648.789439][T19748] should_fail_ex+0x39d/0x4d0 [ 1648.794178][T19748] _copy_from_user+0x2f/0xe0 [ 1648.798825][T19748] ___sys_sendmsg+0x1c7/0x360 [ 1648.803558][T19748] ? __sys_sendmsg+0x2a0/0x2a0 [ 1648.808428][T19748] __se_sys_sendmsg+0x1c2/0x2b0 [ 1648.813331][T19748] ? __x64_sys_sendmsg+0x80/0x80 [ 1648.818329][T19748] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1648.824278][T19748] do_syscall_64+0x55/0xb0 [ 1648.828734][T19748] ? clear_bhb_loop+0x40/0x90 [ 1648.833453][T19748] ? clear_bhb_loop+0x40/0x90 [ 1648.838172][T19748] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1648.844109][T19748] RIP: 0033:0x7f7bd9f9ce59 [ 1648.848560][T19748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1648.868205][T19748] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1648.876670][T19748] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1648.884681][T19748] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1648.892690][T19748] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1648.900702][T19748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1648.908705][T19748] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1648.916711][T19748] [ 1649.054736][T19759] netlink: 'syz.2.4257': attribute type 29 has an invalid length. [ 1649.128714][T19759] netlink: 'syz.2.4257': attribute type 29 has an invalid length. [ 1649.337547][T19760] netlink: 'syz.2.4257': attribute type 29 has an invalid length. [ 1649.387851][T19761] netlink: 'syz.2.4257': attribute type 29 has an invalid length. [ 1649.604986][T19759] netlink: 'syz.2.4257': attribute type 1 has an invalid length. [ 1649.638217][T19759] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.4257'. [ 1650.791583][T19779] netlink: 'syz.1.4269': attribute type 29 has an invalid length. [ 1650.815969][T19779] netlink: 'syz.1.4269': attribute type 29 has an invalid length. [ 1650.845047][T19780] netlink: 'syz.1.4269': attribute type 29 has an invalid length. [ 1650.880475][T19779] netlink: 'syz.1.4269': attribute type 29 has an invalid length. [ 1664.591023][T19900] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4300'. [ 1667.308602][T19946] validate_nla: 1 callbacks suppressed [ 1667.308647][T19946] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 1667.375762][T19946] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 1667.441828][T19949] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 1667.490393][T19950] netlink: 'syz.3.4314': attribute type 29 has an invalid length. [ 1669.172621][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.179051][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.850036][T19986] netlink: 'syz.0.4324': attribute type 29 has an invalid length. [ 1671.919388][T19986] netlink: 'syz.0.4324': attribute type 29 has an invalid length. [ 1672.008484][T19990] netlink: 'syz.0.4324': attribute type 29 has an invalid length. [ 1672.108703][T19993] netlink: 'syz.0.4324': attribute type 29 has an invalid length. [ 1672.234261][T19992] netlink: 'syz.1.4329': attribute type 29 has an invalid length. [ 1672.274772][T19992] netlink: 'syz.1.4329': attribute type 29 has an invalid length. [ 1672.315052][T19995] netlink: 'syz.1.4329': attribute type 29 has an invalid length. [ 1672.604743][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4330'. [ 1672.636283][T20000] FAULT_INJECTION: forcing a failure. [ 1672.636283][T20000] name failslab, interval 1, probability 0, space 0, times 0 [ 1672.705917][T20000] CPU: 1 PID: 20000 Comm: syz.0.4330 Not tainted syzkaller #0 [ 1672.713452][T20000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1672.723569][T20000] Call Trace: [ 1672.726887][T20000] [ 1672.729849][T20000] dump_stack_lvl+0x18c/0x250 [ 1672.734549][T20000] ? show_regs_print_info+0x20/0x20 [ 1672.739758][T20000] ? load_image+0x420/0x420 [ 1672.744279][T20000] ? verify_lock_unused+0x140/0x140 [ 1672.749500][T20000] should_fail_ex+0x39d/0x4d0 [ 1672.754206][T20000] should_failslab+0x9/0x20 [ 1672.758720][T20000] slab_pre_alloc_hook+0x59/0x310 [ 1672.763773][T20000] kmem_cache_alloc+0x5a/0x2d0 [ 1672.768557][T20000] ? skb_clone+0x1eb/0x370 [ 1672.773003][T20000] skb_clone+0x1eb/0x370 [ 1672.777262][T20000] __netlink_deliver_tap+0x41c/0x830 [ 1672.782574][T20000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1672.787792][T20000] netlink_deliver_tap+0x19c/0x1b0 [ 1672.792923][T20000] netlink_sendskb+0x68/0x130 [ 1672.797624][T20000] netlink_ack+0xce1/0x1180 [ 1672.802163][T20000] ? netlink_dump+0xe50/0xe50 [ 1672.806858][T20000] ? ref_tracker_free+0x690/0x840 [ 1672.811905][T20000] netlink_rcv_skb+0x2c5/0x4d0 [ 1672.816704][T20000] ? rtnetlink_bind+0x80/0x80 [ 1672.821397][T20000] ? netlink_ack+0x1180/0x1180 [ 1672.826188][T20000] ? __lock_acquire+0x7d40/0x7d40 [ 1672.831231][T20000] ? netlink_deliver_tap+0x2e/0x1b0 [ 1672.836454][T20000] netlink_unicast+0x751/0x8d0 [ 1672.841254][T20000] netlink_sendmsg+0x8d0/0xbf0 [ 1672.846046][T20000] ? netlink_getsockopt+0x590/0x590 [ 1672.851272][T20000] ? aa_sock_msg_perm+0x94/0x150 [ 1672.856226][T20000] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1672.861527][T20000] ? security_socket_sendmsg+0x80/0xa0 [ 1672.866998][T20000] ? netlink_getsockopt+0x590/0x590 [ 1672.872302][T20000] ____sys_sendmsg+0x5ba/0x960 [ 1672.877081][T20000] ? __asan_memset+0x22/0x40 [ 1672.881684][T20000] ? __sys_sendmsg_sock+0x30/0x30 [ 1672.886714][T20000] ? __import_iovec+0x5f2/0x850 [ 1672.891592][T20000] ? import_iovec+0x73/0xa0 [ 1672.896105][T20000] ___sys_sendmsg+0x2a6/0x360 [ 1672.900792][T20000] ? get_pid_task+0x20/0x1e0 [ 1672.905400][T20000] ? __sys_sendmsg+0x2a0/0x2a0 [ 1672.910190][T20000] ? __lock_acquire+0x7d40/0x7d40 [ 1672.915246][T20000] __se_sys_sendmsg+0x1c2/0x2b0 [ 1672.920195][T20000] ? __x64_sys_sendmsg+0x80/0x80 [ 1672.925164][T20000] ? lockdep_hardirqs_on+0x98/0x150 [ 1672.930387][T20000] do_syscall_64+0x55/0xb0 [ 1672.934815][T20000] ? clear_bhb_loop+0x40/0x90 [ 1672.939505][T20000] ? clear_bhb_loop+0x40/0x90 [ 1672.944208][T20000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1672.950114][T20000] RIP: 0033:0x7f4e94b9ce59 [ 1672.954541][T20000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.974159][T20000] RSP: 002b:00007f4e95980028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1672.982591][T20000] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1672.990657][T20000] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1672.998634][T20000] RBP: 00007f4e95980090 R08: 0000000000000000 R09: 0000000000000000 [ 1673.006611][T20000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.014616][T20000] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffe924f1e28 [ 1673.022610][T20000] [ 1674.573741][T20037] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4342'. [ 1675.420403][T20042] FAULT_INJECTION: forcing a failure. [ 1675.420403][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1675.455826][T20042] CPU: 1 PID: 20042 Comm: syz.3.4343 Not tainted syzkaller #0 [ 1675.463365][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1675.473458][T20042] Call Trace: [ 1675.476771][T20042] [ 1675.479732][T20042] dump_stack_lvl+0x18c/0x250 [ 1675.484453][T20042] ? show_regs_print_info+0x20/0x20 [ 1675.489685][T20042] ? load_image+0x420/0x420 [ 1675.494220][T20042] ? __might_fault+0xaa/0x120 [ 1675.498912][T20042] ? __lock_acquire+0x7d40/0x7d40 [ 1675.503949][T20042] should_fail_ex+0x39d/0x4d0 [ 1675.508645][T20042] _copy_from_user+0x2f/0xe0 [ 1675.513253][T20042] ___sys_sendmsg+0x1c7/0x360 [ 1675.517944][T20042] ? __sys_sendmsg+0x2a0/0x2a0 [ 1675.522735][T20042] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1675.529010][T20042] __se_sys_sendmsg+0x1c2/0x2b0 [ 1675.533872][T20042] ? __x64_sys_sendmsg+0x80/0x80 [ 1675.538839][T20042] ? lockdep_hardirqs_on+0x98/0x150 [ 1675.544056][T20042] do_syscall_64+0x55/0xb0 [ 1675.548485][T20042] ? clear_bhb_loop+0x40/0x90 [ 1675.553174][T20042] ? clear_bhb_loop+0x40/0x90 [ 1675.557866][T20042] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1675.563773][T20042] RIP: 0033:0x7f7bd9f9ce59 [ 1675.568200][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1675.587816][T20042] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1675.596241][T20042] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1675.604222][T20042] RDX: 0000000000040040 RSI: 0000200000000f80 RDI: 0000000000000005 [ 1675.612200][T20042] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1675.620179][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1675.628159][T20042] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1675.636160][T20042] [ 1675.823291][T20042] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4343'. [ 1676.849396][T20062] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4349'. [ 1677.410774][T20070] FAULT_INJECTION: forcing a failure. [ 1677.410774][T20070] name failslab, interval 1, probability 0, space 0, times 0 [ 1677.423872][T20070] CPU: 1 PID: 20070 Comm: syz.1.4352 Not tainted syzkaller #0 [ 1677.431391][T20070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1677.441502][T20070] Call Trace: [ 1677.444804][T20070] [ 1677.447754][T20070] dump_stack_lvl+0x18c/0x250 [ 1677.452468][T20070] ? show_regs_print_info+0x20/0x20 [ 1677.457689][T20070] ? load_image+0x420/0x420 [ 1677.462241][T20070] should_fail_ex+0x39d/0x4d0 [ 1677.466959][T20070] should_failslab+0x9/0x20 [ 1677.471490][T20070] slab_pre_alloc_hook+0x59/0x310 [ 1677.476542][T20070] ? ida_alloc_range+0x5e7/0x860 [ 1677.481558][T20070] __kmem_cache_alloc_node+0x53/0x250 [ 1677.486963][T20070] ? ida_alloc_range+0x5e7/0x860 [ 1677.491939][T20070] kmalloc_trace+0x2a/0xe0 [ 1677.496387][T20070] ida_alloc_range+0x5e7/0x860 [ 1677.501196][T20070] ? idr_replace+0x1b0/0x1b0 [ 1677.505836][T20070] __xdp_reg_mem_model+0x218/0x5c0 [ 1677.510983][T20070] ? kvmalloc_node+0x70/0x180 [ 1677.515700][T20070] ? xdp_reg_mem_model+0x40/0x40 [ 1677.520682][T20070] xdp_reg_mem_model+0x22/0x40 [ 1677.525469][T20070] bpf_test_run_xdp_live+0x262/0x1b20 [ 1677.530879][T20070] ? 0xffffffffa0004740 [ 1677.535058][T20070] ? 0xffffffffa0004740 [ 1677.539236][T20070] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1677.545150][T20070] ? 0xffffffffa0004740 [ 1677.549337][T20070] ? xdp_convert_md_to_buff+0x330/0x330 [ 1677.555056][T20070] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1677.561327][T20070] ? _copy_from_user+0xa5/0xe0 [ 1677.566117][T20070] ? bpf_test_init+0x119/0x140 [ 1677.570903][T20070] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1677.576390][T20070] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1677.581811][T20070] ? dev_put+0x80/0x80 [ 1677.585921][T20070] ? dev_put+0x80/0x80 [ 1677.590016][T20070] bpf_prog_test_run+0x321/0x390 [ 1677.594981][T20070] __sys_bpf+0x49d/0x890 [ 1677.599254][T20070] ? bpf_link_show_fdinfo+0x390/0x390 [ 1677.604676][T20070] ? lock_chain_count+0x20/0x20 [ 1677.609563][T20070] __x64_sys_bpf+0x7c/0x90 [ 1677.614007][T20070] do_syscall_64+0x55/0xb0 [ 1677.618441][T20070] ? clear_bhb_loop+0x40/0x90 [ 1677.623139][T20070] ? clear_bhb_loop+0x40/0x90 [ 1677.627844][T20070] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1677.633761][T20070] RIP: 0033:0x7f7b3bb9ce59 [ 1677.638196][T20070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.657825][T20070] RSP: 002b:00007f7b3cb31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1677.666265][T20070] RAX: ffffffffffffffda RBX: 00007f7b3be15fa0 RCX: 00007f7b3bb9ce59 [ 1677.674260][T20070] RDX: 0000000000000050 RSI: 0000200000000200 RDI: 000000000000000a [ 1677.682253][T20070] RBP: 00007f7b3cb31090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.690243][T20070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.698260][T20070] R13: 00007f7b3be16038 R14: 00007f7b3be15fa0 R15: 00007ffd62fefa48 [ 1677.706320][T20070] [ 1679.667068][T20100] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4363'. [ 1680.928708][T20128] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4373'. [ 1681.200385][T20133] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4382'. [ 1681.325285][T20140] netlink: 'syz.3.4375': attribute type 25 has an invalid length. [ 1681.348897][T20140] netlink: 'syz.3.4375': attribute type 28 has an invalid length. [ 1682.849667][T20170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4388'. [ 1683.499082][T20178] netlink: 'syz.1.4391': attribute type 10 has an invalid length. [ 1683.528836][T20178] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4391'. [ 1683.538067][T20178] veth0_vlan: left promiscuous mode [ 1683.582131][T20178] veth0_vlan: entered promiscuous mode [ 1683.611302][T20178] batman_adv: batadv0: Adding interface: veth0_vlan [ 1683.618265][T20178] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1683.646863][T20178] batman_adv: batadv0: Interface activated: veth0_vlan [ 1684.096847][T20194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4399'. [ 1685.074824][T20212] netlink: 'syz.0.4412': attribute type 12 has an invalid length. [ 1685.185544][T20212] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4412'. [ 1686.340323][T20231] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4411'. [ 1686.936524][T20239] netlink: 'syz.2.4416': attribute type 21 has an invalid length. [ 1687.351278][T20249] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4419'. [ 1687.989321][T20263] netlink: 'syz.2.4425': attribute type 10 has an invalid length. [ 1688.005795][T20263] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4425'. [ 1688.034754][T20263] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1688.055770][T20263] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1688.089405][T20263] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1691.039523][T20293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4434'. [ 1694.962392][T20313] netlink: 'syz.3.4442': attribute type 29 has an invalid length. [ 1695.059713][T20313] netlink: 'syz.3.4442': attribute type 29 has an invalid length. [ 1695.169781][T20315] netlink: 'syz.3.4442': attribute type 29 has an invalid length. [ 1695.891916][T20323] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4446'. [ 1697.122315][T20342] netlink: 'syz.3.4452': attribute type 10 has an invalid length. [ 1697.152367][T20342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4452'. [ 1697.267129][T20342] batman_adv: batadv0: Adding interface: 0A [ 1697.298049][T20342] batman_adv: batadv0: The MTU of interface 0A is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1697.351052][T20342] batman_adv: batadv0: Interface activated: 0A [ 1698.091204][T20359] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4457'. [ 1698.480855][T20368] netlink: 'syz.3.4460': attribute type 29 has an invalid length. [ 1698.489567][T20368] netlink: 'syz.3.4460': attribute type 29 has an invalid length. [ 1700.690457][T20416] netlink: 'syz.0.4477': attribute type 21 has an invalid length. [ 1700.698600][T20416] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4477'. [ 1702.855917][T20445] netlink: 'syz.0.4488': attribute type 9 has an invalid length. [ 1702.864644][T20445] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1703.029261][T20451] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4488'. [ 1703.705719][T20461] FAULT_INJECTION: forcing a failure. [ 1703.705719][T20461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1703.764529][T20461] CPU: 1 PID: 20461 Comm: syz.3.4493 Not tainted syzkaller #0 [ 1703.772069][T20461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.782167][T20461] Call Trace: [ 1703.785475][T20461] [ 1703.788437][T20461] dump_stack_lvl+0x18c/0x250 [ 1703.793157][T20461] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1703.799466][T20461] ? show_regs_print_info+0x20/0x20 [ 1703.804697][T20461] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1703.810909][T20461] should_fail_ex+0x39d/0x4d0 [ 1703.815641][T20461] _copy_from_user+0x2f/0xe0 [ 1703.820270][T20461] __sys_bpf+0x23e/0x890 [ 1703.824551][T20461] ? bpf_link_show_fdinfo+0x390/0x390 [ 1703.829977][T20461] ? lock_chain_count+0x20/0x20 [ 1703.834856][T20461] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1703.840880][T20461] __x64_sys_bpf+0x7c/0x90 [ 1703.845339][T20461] do_syscall_64+0x55/0xb0 [ 1703.849879][T20461] ? clear_bhb_loop+0x40/0x90 [ 1703.854596][T20461] ? clear_bhb_loop+0x40/0x90 [ 1703.859309][T20461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1703.865238][T20461] RIP: 0033:0x7f7bd9f9ce59 [ 1703.869686][T20461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.889343][T20461] RSP: 002b:00007f7bdadbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1703.897802][T20461] RAX: ffffffffffffffda RBX: 00007f7bda215fa0 RCX: 00007f7bd9f9ce59 [ 1703.905814][T20461] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 000000000000000a [ 1703.913825][T20461] RBP: 00007f7bdadbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.921839][T20461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.929866][T20461] R13: 00007f7bda216038 R14: 00007f7bda215fa0 R15: 00007ffcf9a21318 [ 1703.937900][T20461] [ 1706.909493][T20504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1706.916971][T20504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1706.940277][T20504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1706.948149][T20504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1706.959591][T20504] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1706.966700][T20504] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1707.646518][T20518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1707.724934][T20518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1707.786138][T20518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1707.804560][T20518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1707.824795][T20518] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1707.836177][T20518] batman_adv: batadv0: Removing interface: veth0_vlan [ 1707.977899][T20531] netlink: 'syz.2.4517': attribute type 9 has an invalid length. [ 1707.988557][T20531] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1708.098567][T20534] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4517'. [ 1708.252532][T20536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4519'. [ 1709.151228][T20564] netlink: 'syz.1.4527': attribute type 10 has an invalid length. [ 1709.242458][T20564] veth0_vlan: left promiscuous mode [ 1709.269940][T20564] veth0_vlan: entered promiscuous mode [ 1709.307857][T20564] team0: Device veth0_vlan failed to register rx_handler [ 1710.395979][T20581] netlink: 'syz.3.4534': attribute type 2 has an invalid length. [ 1710.413412][T20581] netlink: 'syz.3.4534': attribute type 8 has an invalid length. [ 1710.423053][T20581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1710.991075][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.000941][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.011399][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.025040][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.059005][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.085401][T20605] netlink: 'syz.3.4542': attribute type 29 has an invalid length. [ 1711.087812][T20609] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1711.251805][T20613] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4544'. [ 1712.113941][T20639] netlink: 161268 bytes leftover after parsing attributes in process `syz.3.4555'. [ 1712.198611][T20642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4554'. [ 1712.721634][T20656] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1712.895941][T20664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4562'. [ 1713.130532][T20669] validate_nla: 15 callbacks suppressed [ 1713.130644][T20669] netlink: 'syz.0.4566': attribute type 2 has an invalid length. [ 1713.144520][T20669] netlink: 119 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1713.165436][T20669] netlink: 'syz.0.4566': attribute type 10 has an invalid length. [ 1713.176031][T20669] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4566'. [ 1713.185558][T20669] ipvlan1: entered promiscuous mode [ 1713.191335][T20669] ipvlan1: entered allmulticast mode [ 1713.196792][T20669] veth0_vlan: entered allmulticast mode [ 1713.206712][T20669] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1713.329979][T20675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1715.053124][T20709] netlink: 'syz.0.4583': attribute type 1 has an invalid length. [ 1715.069069][T20709] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1715.310090][T20709] netlink: 'syz.0.4583': attribute type 21 has an invalid length. [ 1715.330869][T20709] netlink: 'syz.0.4583': attribute type 6 has an invalid length. [ 1715.351244][T20709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4583'. [ 1715.386848][T20709] netlink: 'syz.0.4583': attribute type 10 has an invalid length. [ 1715.761084][T17844] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.820009][ T5817] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1715.830212][ T5817] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1715.838796][ T5817] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1715.847177][ T5817] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1715.856181][ T5817] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1715.863657][ T5817] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1716.013949][T17844] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.178350][T17844] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.333520][T17844] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1716.693453][T20742] netlink: 'syz.1.4594': attribute type 21 has an invalid length. [ 1716.712273][T20742] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1716.727729][T20744] netlink: 'syz.1.4594': attribute type 10 has an invalid length. [ 1716.741385][T20744] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1717.968991][T19587] Bluetooth: hci3: command tx timeout [ 1718.143835][T20726] chnl_net:caif_netlink_parms(): no params data found [ 1719.203053][T20782] netlink: 'syz.3.4604': attribute type 10 has an invalid length. [ 1719.229141][T20782] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4604'. [ 1719.585249][T20726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.592673][T20726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.602234][T20726] bridge_slave_0: entered allmulticast mode [ 1719.609912][T20726] bridge_slave_0: entered promiscuous mode [ 1719.713514][T20726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.730159][T20726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.748070][T20726] bridge_slave_1: entered allmulticast mode [ 1719.804339][T20726] bridge_slave_1: entered promiscuous mode [ 1719.977929][T20726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1720.051744][T20726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1720.061420][T19587] Bluetooth: hci3: command tx timeout [ 1720.124502][T20810] netlink: 161268 bytes leftover after parsing attributes in process `syz.1.4609'. [ 1720.205185][T20807] netlink: 'syz.3.4610': attribute type 2 has an invalid length. [ 1720.225743][T20807] netlink: 119 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1720.346364][T20811] netlink: 'syz.3.4610': attribute type 10 has an invalid length. [ 1720.364718][T20811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4610'. [ 1720.401527][T20811] ipvlan1: entered promiscuous mode [ 1720.406817][T20811] ipvlan1: entered allmulticast mode [ 1720.431458][T20811] veth0_vlan: entered allmulticast mode [ 1720.447588][T20811] bridge0: port 3(ipvlan1) entered blocking state [ 1720.469433][T20811] bridge0: port 3(ipvlan1) entered disabled state [ 1720.491627][T20811] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1720.591629][T20726] team0: Port device team_slave_0 added [ 1720.642382][T20726] team0: Port device team_slave_1 added [ 1720.801148][T20726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1720.808161][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1720.834417][T20726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1721.340010][T20726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1721.347028][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1721.433852][T20726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1721.481430][T20828] netlink: 'syz.3.4613': attribute type 21 has an invalid length. [ 1721.499030][T20828] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1721.535956][T20830] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 1721.561533][T20830] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1721.727709][T20830] batman_adv: batadv0: Interface deactivated: 0A [ 1721.791661][T20830] batman_adv: batadv0: Removing interface: 0A [ 1721.984664][T20726] hsr_slave_0: entered promiscuous mode [ 1721.998456][T20726] hsr_slave_1: entered promiscuous mode [ 1722.019183][T20726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1722.026810][T20726] Cannot create hsr debugfs directory [ 1722.134400][T19587] Bluetooth: hci3: command tx timeout [ 1722.635863][T17844] hsr_slave_0: left promiscuous mode [ 1722.728186][T17844] hsr_slave_1: left promiscuous mode [ 1722.746381][T17844] bridge_slave_1: left allmulticast mode [ 1722.756000][T17844] bridge_slave_1: left promiscuous mode [ 1722.776130][T17844] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.835271][T17844] bridge_slave_0: left promiscuous mode [ 1722.854813][T17844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1723.036665][T17844] veth1_vlan: left promiscuous mode [ 1724.209140][T19587] Bluetooth: hci3: command tx timeout [ 1730.611956][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.618307][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1738.356912][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1738.369046][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1738.377198][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1738.386601][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1738.394478][ T5817] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1738.402753][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1739.554535][ T5817] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1739.563625][ T5817] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1739.580686][ T5817] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1739.603079][ T5817] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1739.612026][ T5817] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1739.620558][ T5817] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1739.669403][ T5817] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1739.677492][ T5817] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1739.686596][ T5817] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1739.698495][ T5817] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1739.707289][ T5817] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1739.714908][ T5817] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1740.448876][ T5817] Bluetooth: hci4: command tx timeout [ 1741.652700][ T5817] Bluetooth: hci5: command tx timeout [ 1741.808950][ T5817] Bluetooth: hci6: command tx timeout [ 1742.528962][ T5817] Bluetooth: hci4: command tx timeout [ 1743.728909][ T5817] Bluetooth: hci5: command tx timeout [ 1743.888899][ T5817] Bluetooth: hci6: command tx timeout [ 1744.608908][ T5817] Bluetooth: hci4: command tx timeout [ 1745.808922][ T5817] Bluetooth: hci5: command tx timeout [ 1745.970147][ T5817] Bluetooth: hci6: command tx timeout [ 1746.688827][ T5817] Bluetooth: hci4: command tx timeout [ 1747.889040][ T5817] Bluetooth: hci5: command tx timeout [ 1748.048887][T19587] Bluetooth: hci6: command tx timeout [ 1775.428145][ T5817] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1775.437681][ T5817] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1775.452033][ T5817] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1775.461873][ T5817] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1775.469778][ T5817] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1775.477137][ T5817] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1777.568994][ T5817] Bluetooth: hci7: command tx timeout [ 1779.648855][ T5817] Bluetooth: hci7: command tx timeout [ 1781.728815][ T5817] Bluetooth: hci7: command tx timeout [ 1783.808878][ T5817] Bluetooth: hci7: command tx timeout [ 1792.052169][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.058519][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1798.425667][T19587] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1798.439620][T19587] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1798.448309][T19587] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1798.458113][T19587] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1798.467135][T19587] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1798.474826][T19587] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1799.446771][ T5817] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1799.455164][ T5817] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1799.465614][ T5817] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1799.474475][ T5817] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1799.482734][ T5817] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1799.490599][ T5817] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1800.468979][T19587] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1800.478239][T19587] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1800.486338][T19587] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1800.495531][T19587] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1800.504906][T19587] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1800.513616][T19587] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1800.532980][ T5817] Bluetooth: hci8: command tx timeout [ 1801.578947][ T5084] Bluetooth: hci9: command tx timeout [ 1802.608881][ T5084] Bluetooth: hci8: command tx timeout [ 1802.608942][ T5817] Bluetooth: hci10: command tx timeout [ 1803.651421][ T5817] Bluetooth: hci9: command tx timeout [ 1804.689035][ T5084] Bluetooth: hci8: command tx timeout [ 1804.695274][ T5817] Bluetooth: hci10: command tx timeout [ 1805.728916][ T5817] Bluetooth: hci9: command tx timeout [ 1806.768915][ T5817] Bluetooth: hci10: command tx timeout [ 1806.768982][ T5084] Bluetooth: hci8: command tx timeout [ 1807.808811][ T5084] Bluetooth: hci9: command tx timeout [ 1808.849106][ T5084] Bluetooth: hci10: command tx timeout [ 1836.490858][ T5817] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1836.504111][ T5817] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1836.517834][ T5817] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1836.526265][ T5817] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1836.534251][ T5817] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1836.541935][ T5817] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1838.618998][ T5817] Bluetooth: hci11: command tx timeout [ 1840.208886][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 1840.688880][ T5084] Bluetooth: hci11: command tx timeout [ 1842.768878][ T5084] Bluetooth: hci11: command tx timeout [ 1844.848873][ T5084] Bluetooth: hci11: command tx timeout [ 1853.491785][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.498140][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.996391][T20924] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1859.009376][T20924] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1859.017830][T20924] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1859.027115][T20924] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1859.035639][T20924] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1859.043436][T20924] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1860.015331][T20924] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1860.025247][T20924] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1860.033629][T20924] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1860.045033][T20924] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1860.054127][T20924] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1860.062566][T20924] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1860.702108][ T5084] Bluetooth: hci4: command 0x0406 tx timeout [ 1860.972758][T20924] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1860.981924][T20924] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1860.991403][T20924] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1861.000052][T20924] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1861.007923][T20924] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1861.015624][T20924] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1861.088932][ T5084] Bluetooth: hci12: command tx timeout [ 1862.128828][ T5084] Bluetooth: hci13: command tx timeout [ 1863.092406][T20924] Bluetooth: hci14: command tx timeout [ 1863.168926][T20924] Bluetooth: hci12: command tx timeout [ 1864.208910][T20932] Bluetooth: hci13: command tx timeout [ 1865.177725][T20932] Bluetooth: hci14: command tx timeout [ 1865.248805][T20932] Bluetooth: hci12: command tx timeout [ 1865.812206][T20932] Bluetooth: hci5: command 0x0406 tx timeout [ 1865.812488][T19587] Bluetooth: hci6: command 0x0406 tx timeout [ 1866.288888][ T5084] Bluetooth: hci13: command tx timeout [ 1867.248925][ T5084] Bluetooth: hci14: command tx timeout [ 1867.328871][ T5084] Bluetooth: hci12: command tx timeout [ 1868.368781][ T5084] Bluetooth: hci13: command tx timeout [ 1869.339880][ T5084] Bluetooth: hci14: command tx timeout [ 1869.488850][ T28] INFO: task kworker/1:0:23 blocked for more than 143 seconds. [ 1869.496564][ T28] Not tainted syzkaller #0 [ 1869.501817][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1869.511762][ T28] task:kworker/1:0 state:D stack:24120 pid:23 ppid:2 flags:0x00004000 [ 1869.524066][ T28] Workqueue: events switchdev_deferred_process_work [ 1869.531327][ T28] Call Trace: [ 1869.534663][ T28] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1869.537613][ T28] __schedule+0x1553/0x45a0 [ 1869.542333][ T28] ? do_raw_spin_lock+0x11f/0x2c0 [ 1869.547437][ T28] ? mark_lock+0x94/0x320 [ 1869.551911][ T28] ? asan.module_dtor+0x20/0x20 [ 1869.556822][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1869.562198][ T28] schedule+0xbd/0x170 [ 1869.566312][ T28] schedule_preempt_disabled+0x13/0x20 [ 1869.572194][ T28] __mutex_lock+0x6a9/0xcc0 [ 1869.576754][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1869.582653][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 1869.589219][ T28] ? mutex_lock_nested+0x20/0x20 [ 1869.594222][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1869.599764][ T28] ? process_scheduled_works+0x96f/0x15d0 [ 1869.605539][ T28] switchdev_deferred_process_work+0xe/0x20 [ 1869.618855][ T28] process_scheduled_works+0xa5d/0x15d0 [ 1869.624502][ T28] ? worker_attach_to_pool+0x380/0x380 [ 1869.652547][ T28] ? assign_work+0x3d2/0x5d0 [ 1869.657239][ T28] worker_thread+0xa55/0xfc0 [ 1869.664481][ T28] kthread+0x2fa/0x390 [ 1869.668605][ T28] ? pr_cont_work+0x560/0x560 [ 1869.681332][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1869.685989][ T28] ret_from_fork+0x48/0x80 [ 1869.693609][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1869.698263][ T28] ret_from_fork_asm+0x11/0x20 [ 1869.703178][ T28] [ 1869.706307][ T28] INFO: task dhcpcd:5434 blocked for more than 143 seconds. [ 1869.716293][ T28] Not tainted syzkaller #0 [ 1869.721342][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1869.730360][ T28] task:dhcpcd state:D stack:20968 pid:5434 ppid:5433 flags:0x00004002 [ 1869.741078][ T28] Call Trace: [ 1869.744404][ T28] [ 1869.747370][ T28] __schedule+0x1553/0x45a0 [ 1869.752345][ T28] ? asan.module_dtor+0x20/0x20 [ 1869.757238][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1869.762043][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1869.767534][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1869.773777][ T28] schedule+0xbd/0x170 [ 1869.777888][ T28] schedule_preempt_disabled+0x13/0x20 [ 1869.783470][ T28] __mutex_lock+0x6a9/0xcc0 [ 1869.788003][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1869.792757][ T28] ? devinet_ioctl+0x30c/0x1c40 [ 1869.797652][ T28] ? mutex_lock_nested+0x20/0x20 [ 1869.802848][ T28] ? bpf_lsm_capable+0x9/0x10 [ 1869.807565][ T28] ? security_capable+0x89/0xb0 [ 1869.812519][ T28] devinet_ioctl+0x30c/0x1c40 [ 1869.817263][ T28] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1869.822447][ T28] ? _copy_from_user+0xa5/0xe0 [ 1869.827248][ T28] ? get_user_ifreq+0x12b/0x180 [ 1869.832201][ T28] inet_ioctl+0x42b/0x560 [ 1869.836815][ T28] ? tomoyo_path_number_perm+0x217/0x620 [ 1869.842593][ T28] ? inet_shutdown+0x370/0x370 [ 1869.847416][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 1869.853989][ T28] ? tomoyo_path_number_perm+0x500/0x620 [ 1869.859833][ T28] ? __kmem_cache_free+0xba/0x1e0 [ 1869.864928][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1869.873046][ T28] sock_do_ioctl+0xfc/0x310 [ 1869.877601][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 1869.882554][ T28] sock_ioctl+0x5ba/0x7e0 [ 1869.886907][ T28] ? perf_trace_preemptirq_template+0xac/0x330 [ 1869.894391][ T28] ? sock_poll+0x3e0/0x3e0 [ 1869.898928][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1869.904931][ T28] ? fd_install+0x60/0x4e0 [ 1869.909684][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1869.914751][ T28] ? security_file_ioctl+0x80/0xa0 [ 1869.919974][ T28] ? sock_poll+0x3e0/0x3e0 [ 1869.924432][ T28] __se_sys_ioctl+0xfd/0x170 [ 1869.929113][ T28] do_syscall_64+0x55/0xb0 [ 1869.933564][ T28] ? clear_bhb_loop+0x40/0x90 [ 1869.938583][ T28] ? clear_bhb_loop+0x40/0x90 [ 1869.943364][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1869.949369][ T28] RIP: 0033:0x7fbff729b378 [ 1869.953821][ T28] RSP: 002b:00007ffd4de64e28 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.962453][ T28] RAX: ffffffffffffffda RBX: 0000000000000012 RCX: 00007fbff729b378 [ 1869.970835][ T28] RDX: 00007ffd4de75020 RSI: 0000000000008914 RDI: 0000000000000012 [ 1869.978895][ T28] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1869.987080][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd4de851c0 [ 1869.995159][ T28] R13: 00007fbff719b6c8 R14: 0000000000000028 R15: 0000000000008914 [ 1870.003322][ T28] [ 1870.006399][ T28] INFO: task kworker/u4:20:12255 blocked for more than 143 seconds. [ 1870.014493][ T28] Not tainted syzkaller #0 [ 1870.019572][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1870.028263][ T28] task:kworker/u4:20 state:D stack:22008 pid:12255 ppid:2 flags:0x00004000 [ 1870.037553][ T28] Workqueue: events_unbound linkwatch_event [ 1870.043797][ T28] Call Trace: [ 1870.047195][ T28] [ 1870.050339][ T28] __schedule+0x1553/0x45a0 [ 1870.054900][ T28] ? asan.module_dtor+0x20/0x20 [ 1870.059858][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1870.064561][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1870.070682][ T28] ? kthread_data+0x4f/0xc0 [ 1870.075226][ T28] ? wq_worker_sleeping+0x63/0x240 [ 1870.080416][ T28] schedule+0xbd/0x170 [ 1870.084507][ T28] schedule_preempt_disabled+0x13/0x20 [ 1870.090054][ T28] __mutex_lock+0x6a9/0xcc0 [ 1870.094586][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1870.099335][ T28] ? linkwatch_event+0xe/0x60 [ 1870.104047][ T28] ? mutex_lock_nested+0x20/0x20 [ 1870.109116][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 1870.114362][ T28] ? process_scheduled_works+0x96f/0x15d0 [ 1870.120256][ T28] linkwatch_event+0xe/0x60 [ 1870.124885][ T28] process_scheduled_works+0xa5d/0x15d0 [ 1870.130970][ T28] ? worker_attach_to_pool+0x380/0x380 [ 1870.136470][ T28] ? assign_work+0x3d2/0x5d0 [ 1870.141156][ T28] worker_thread+0xa55/0xfc0 [ 1870.146282][ T28] kthread+0x2fa/0x390 [ 1870.150690][ T28] ? pr_cont_work+0x560/0x560 [ 1870.155443][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1870.160438][ T28] ret_from_fork+0x48/0x80 [ 1870.164897][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1870.169929][ T28] ret_from_fork_asm+0x11/0x20 [ 1870.174795][ T28] [ 1870.177873][ T28] INFO: task syz-executor:20726 blocked for more than 144 seconds. [ 1870.186690][ T28] Not tainted syzkaller #0 [ 1870.195732][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1870.204528][ T28] task:syz-executor state:D stack:22184 pid:20726 ppid:1 flags:0x00004004 [ 1870.214351][ T28] Call Trace: [ 1870.217656][ T28] [ 1870.220654][ T28] __schedule+0x1553/0x45a0 [ 1870.225200][ T28] ? asan.module_dtor+0x20/0x20 [ 1870.230143][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1870.234853][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1870.240968][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1870.247417][ T28] schedule+0xbd/0x170 [ 1870.251930][ T28] schedule_preempt_disabled+0x13/0x20 [ 1870.257432][ T28] __mutex_lock+0x6a9/0xcc0 [ 1870.262212][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1870.266926][ T28] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.272482][ T28] ? mutex_lock_nested+0x20/0x20 [ 1870.277470][ T28] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1870.282662][ T28] rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.287641][ T28] ? rtnetlink_bind+0x80/0x80 [ 1870.292483][ T28] ? mark_lock+0x94/0x320 [ 1870.296850][ T28] ? __lock_acquire+0x1273/0x7d40 [ 1870.301963][ T28] ? __kernel_text_address+0xd/0x30 [ 1870.307203][ T28] ? mark_lock+0x94/0x320 [ 1870.311625][ T28] ? mark_lock+0x94/0x320 [ 1870.315988][ T28] ? __lock_acquire+0x1273/0x7d40 [ 1870.321110][ T28] ? verify_lock_unused+0x140/0x140 [ 1870.326348][ T28] ? perf_trace_lock_acquire+0x104/0x410 [ 1870.332079][ T28] ? verify_lock_unused+0x140/0x140 [ 1870.337303][ T28] ? perf_trace_lock_acquire+0x104/0x410 [ 1870.343117][ T28] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1870.350326][ T28] netlink_rcv_skb+0x241/0x4d0 [ 1870.355178][ T28] ? rtnetlink_bind+0x80/0x80 [ 1870.359932][ T28] ? netlink_ack+0x1180/0x1180 [ 1870.364755][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 1870.370014][ T28] ? net_generic+0x1e/0x240 [ 1870.374568][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 1870.379876][ T28] netlink_unicast+0x751/0x8d0 [ 1870.384696][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 1870.389576][ T28] ? netlink_getsockopt+0x590/0x590 [ 1870.394810][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 1870.399867][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1870.405201][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 1870.410940][ T28] __sys_sendto+0x4a9/0x6b0 [ 1870.415483][ T28] ? __ia32_sys_getpeername+0x90/0x90 [ 1870.420967][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1870.426997][ T28] ? lock_chain_count+0x20/0x20 [ 1870.431963][ T28] __x64_sys_sendto+0xde/0xf0 [ 1870.436678][ T28] do_syscall_64+0x55/0xb0 [ 1870.441185][ T28] ? clear_bhb_loop+0x40/0x90 [ 1870.445900][ T28] ? clear_bhb_loop+0x40/0x90 [ 1870.451056][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.457000][ T28] RIP: 0033:0x7fa10695d68e [ 1870.461613][ T28] RSP: 002b:00007ffd27c040f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1870.470120][ T28] RAX: ffffffffffffffda RBX: 0000555576538500 RCX: 00007fa10695d68e [ 1870.478131][ T28] RDX: 0000000000000060 RSI: 00007fa107744670 RDI: 0000000000000003 [ 1870.486637][ T28] RBP: 0000000000000001 R08: 00007ffd27c04174 R09: 000000000000000c [ 1870.494917][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1870.502984][ T28] R13: 0000000000000000 R14: 00007fa107744670 R15: 0000000000000000 [ 1870.511220][ T28] [ 1870.514300][ T28] INFO: task syz.0.4627:20871 blocked for more than 144 seconds. [ 1870.522109][ T28] Not tainted syzkaller #0 [ 1870.527072][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1870.536263][ T28] task:syz.0.4627 state:D stack:25712 pid:20871 ppid:13452 flags:0x00004004 [ 1870.545537][ T28] Call Trace: [ 1870.548931][ T28] [ 1870.551900][ T28] __schedule+0x1553/0x45a0 [ 1870.556707][ T28] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1870.563725][ T28] ? asan.module_dtor+0x20/0x20 [ 1870.568636][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1870.573421][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1870.579093][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1870.585300][ T28] schedule+0xbd/0x170 [ 1870.589491][ T28] schedule_preempt_disabled+0x13/0x20 [ 1870.594986][ T28] __mutex_lock+0x6a9/0xcc0 [ 1870.599588][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1870.604318][ T28] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.609556][ T28] ? mutex_lock_nested+0x20/0x20 [ 1870.614547][ T28] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1870.620060][ T28] rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.625039][ T28] ? rtnetlink_bind+0x80/0x80 [ 1870.630212][ T28] ? perf_trace_lock_acquire+0x34f/0x410 [ 1870.635909][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1870.642056][ T28] ? lock_chain_count+0x20/0x20 [ 1870.646959][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1870.653010][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1870.658506][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1870.664591][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1870.671191][ T28] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 1870.677950][ T28] netlink_rcv_skb+0x241/0x4d0 [ 1870.683772][ T28] ? rtnetlink_bind+0x80/0x80 [ 1870.688594][ T28] ? netlink_ack+0x1180/0x1180 [ 1870.694431][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 1870.699627][ T28] ? __rcu_read_unlock+0x7c/0xd0 [ 1870.704712][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 1870.710096][ T28] netlink_unicast+0x751/0x8d0 [ 1870.714935][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 1870.719851][ T28] ? netlink_getsockopt+0x590/0x590 [ 1870.725146][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 1870.732153][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1870.737485][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 1870.743151][ T28] sock_write_iter+0x2df/0x420 [ 1870.747963][ T28] ? sock_read_iter+0x3e0/0x3e0 [ 1870.752959][ T28] ? common_file_perm+0x198/0x1f0 [ 1870.758287][ T28] vfs_write+0x46c/0x990 [ 1870.762673][ T28] ? file_end_write+0x250/0x250 [ 1870.767612][ T28] ? __fget_files+0x43d/0x4b0 [ 1870.772895][ T28] ? __fdget_pos+0x1d8/0x330 [ 1870.777540][ T28] ? ksys_write+0x75/0x260 [ 1870.782051][ T28] ksys_write+0x150/0x260 [ 1870.786464][ T28] ? __ia32_sys_read+0x90/0x90 [ 1870.791447][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1870.796683][ T28] do_syscall_64+0x55/0xb0 [ 1870.801275][ T28] ? clear_bhb_loop+0x40/0x90 [ 1870.806106][ T28] ? clear_bhb_loop+0x40/0x90 [ 1870.810887][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1870.816828][ T28] RIP: 0033:0x7f4e94b9ce59 [ 1870.821362][ T28] RSP: 002b:00007f4e95980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1870.829973][ T28] RAX: ffffffffffffffda RBX: 00007f4e94e15fa0 RCX: 00007f4e94b9ce59 [ 1870.838061][ T28] RDX: 0000000000033fe0 RSI: 0000200000000000 RDI: 0000000000000009 [ 1870.847387][ T28] RBP: 00007f4e94c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1870.857285][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1870.866773][ T28] R13: 00007f4e94e16038 R14: 00007f4e94e15fa0 R15: 00007ffe924f1e28 [ 1870.876637][ T28] [ 1870.880829][ T28] INFO: task syz.0.4627:20875 blocked for more than 144 seconds. [ 1870.888587][ T28] Not tainted syzkaller #0 [ 1870.893697][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1870.902432][ T28] task:syz.0.4627 state:D stack:25768 pid:20875 ppid:13452 flags:0x00004004 [ 1870.911832][ T28] Call Trace: [ 1870.915153][ T28] [ 1870.918115][ T28] __schedule+0x1553/0x45a0 [ 1870.922706][ T28] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1870.929432][ T28] ? asan.module_dtor+0x20/0x20 [ 1870.934355][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1870.939187][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1870.944689][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1870.951036][ T28] schedule+0xbd/0x170 [ 1870.955163][ T28] schedule_preempt_disabled+0x13/0x20 [ 1870.960726][ T28] __mutex_lock+0x6a9/0xcc0 [ 1870.965617][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1870.970442][ T28] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.975593][ T28] ? mutex_lock_nested+0x20/0x20 [ 1870.980690][ T28] rtnetlink_rcv_msg+0x811/0xfa0 [ 1870.985686][ T28] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1870.991367][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1870.996617][ T28] ? rtnetlink_bind+0x80/0x80 [ 1871.001819][ T28] ? perf_trace_lock_acquire+0x104/0x410 [ 1871.007500][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1871.013590][ T28] ? lock_chain_count+0x20/0x20 [ 1871.018488][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1871.024602][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.029886][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1871.035789][ T28] ? _raw_spin_unlock+0x40/0x40 [ 1871.040764][ T28] ? rcu_preempt_deferred_qs_irqrestore+0x88e/0xce0 [ 1871.047473][ T28] netlink_rcv_skb+0x241/0x4d0 [ 1871.052458][ T28] ? rtnetlink_bind+0x80/0x80 [ 1871.057182][ T28] ? netlink_ack+0x1180/0x1180 [ 1871.062089][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 1871.067404][ T28] ? __rcu_read_unlock+0x7c/0xd0 [ 1871.072443][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 1871.077702][ T28] netlink_unicast+0x751/0x8d0 [ 1871.082630][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 1871.087458][ T28] ? netlink_getsockopt+0x590/0x590 [ 1871.092970][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 1871.097956][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1871.103604][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 1871.109319][ T28] ? netlink_getsockopt+0x590/0x590 [ 1871.114557][ T28] ____sys_sendmsg+0x5ba/0x960 [ 1871.119629][ T28] ? __asan_memset+0x22/0x40 [ 1871.124287][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 1871.129526][ T28] ? __import_iovec+0x5f2/0x850 [ 1871.134430][ T28] ? import_iovec+0x73/0xa0 [ 1871.139048][ T28] ___sys_sendmsg+0x2a6/0x360 [ 1871.143772][ T28] ? __sys_sendmsg+0x2a0/0x2a0 [ 1871.148601][ T28] __se_sys_sendmsg+0x1c2/0x2b0 [ 1871.153578][ T28] ? __x64_sys_sendmsg+0x80/0x80 [ 1871.158552][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.163907][ T28] do_syscall_64+0x55/0xb0 [ 1871.168594][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.173480][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.178218][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.184225][ T28] RIP: 0033:0x7f4e94b9ce59 [ 1871.188768][ T28] RSP: 002b:00007f4e92df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.197236][ T28] RAX: ffffffffffffffda RBX: 00007f4e94e16090 RCX: 00007f4e94b9ce59 [ 1871.205317][ T28] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 1871.213386][ T28] RBP: 00007f4e94c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1871.221771][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.229981][ T28] R13: 00007f4e94e16128 R14: 00007f4e94e16090 R15: 00007ffe924f1e28 [ 1871.237997][ T28] [ 1871.241599][ T28] INFO: task syz.3.4629:20882 blocked for more than 145 seconds. [ 1871.249733][ T28] Not tainted syzkaller #0 [ 1871.254714][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1871.263457][ T28] task:syz.3.4629 state:D stack:26856 pid:20882 ppid:13880 flags:0x00004004 [ 1871.273000][ T28] Call Trace: [ 1871.276303][ T28] [ 1871.279365][ T28] __schedule+0x1553/0x45a0 [ 1871.283931][ T28] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.290094][ T28] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1871.296742][ T28] ? asan.module_dtor+0x20/0x20 [ 1871.301726][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1871.306450][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1871.311972][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1871.318153][ T28] schedule+0xbd/0x170 [ 1871.322331][ T28] schedule_preempt_disabled+0x13/0x20 [ 1871.327820][ T28] __mutex_lock+0x6a9/0xcc0 [ 1871.332380][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1871.337100][ T28] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 1871.342316][ T28] ? mutex_lock_nested+0x20/0x20 [ 1871.347316][ T28] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 1871.352828][ T28] rtnetlink_rcv_msg+0x811/0xfa0 [ 1871.357857][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.363169][ T28] ? rtnetlink_bind+0x80/0x80 [ 1871.367897][ T28] ? perf_trace_preemptirq_template+0xac/0x330 [ 1871.374495][ T28] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1871.380621][ T28] ? lock_chain_count+0x20/0x20 [ 1871.385516][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1871.390938][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.396185][ T28] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1871.401663][ T28] ? _local_bh_enable+0xa0/0xa0 [ 1871.406734][ T28] ? __dev_queue_xmit+0x265/0x3660 [ 1871.412108][ T28] ? __dev_queue_xmit+0x265/0x3660 [ 1871.417272][ T28] ? __dev_queue_xmit+0x1b2c/0x3660 [ 1871.422829][ T28] ? __dev_queue_xmit+0x265/0x3660 [ 1871.428008][ T28] ? ref_tracker_free+0x690/0x840 [ 1871.433312][ T28] netlink_rcv_skb+0x241/0x4d0 [ 1871.438138][ T28] ? rtnetlink_bind+0x80/0x80 [ 1871.442939][ T28] ? netlink_ack+0x1180/0x1180 [ 1871.447762][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 1871.452881][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 1871.458143][ T28] netlink_unicast+0x751/0x8d0 [ 1871.463245][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 1871.468074][ T28] ? netlink_getsockopt+0x590/0x590 [ 1871.473594][ T28] ? aa_sock_msg_perm+0x94/0x150 [ 1871.479239][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1871.484588][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 1871.490547][ T28] ? netlink_getsockopt+0x590/0x590 [ 1871.495809][ T28] ____sys_sendmsg+0x5ba/0x960 [ 1871.501054][ T28] ? __asan_memset+0x22/0x40 [ 1871.505707][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 1871.511131][ T28] ? __import_iovec+0x5f2/0x850 [ 1871.516035][ T28] ? import_iovec+0x73/0xa0 [ 1871.520616][ T28] ___sys_sendmsg+0x2a6/0x360 [ 1871.525345][ T28] ? __sys_sendmsg+0x2a0/0x2a0 [ 1871.530255][ T28] __se_sys_sendmsg+0x1c2/0x2b0 [ 1871.535148][ T28] ? __x64_sys_sendmsg+0x80/0x80 [ 1871.540242][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 1871.545488][ T28] do_syscall_64+0x55/0xb0 [ 1871.550056][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.554778][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.559597][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.565526][ T28] RIP: 0033:0x7f7bd9f9ce59 [ 1871.570127][ T28] RSP: 002b:00007f7bdad9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1871.579004][ T28] RAX: ffffffffffffffda RBX: 00007f7bda216090 RCX: 00007f7bd9f9ce59 [ 1871.587019][ T28] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000006 [ 1871.595088][ T28] RBP: 00007f7bda032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1871.603160][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.611247][ T28] R13: 00007f7bda216128 R14: 00007f7bda216090 R15: 00007ffcf9a21318 [ 1871.619515][ T28] [ 1871.622574][ T28] INFO: task syz.3.4629:20887 blocked for more than 145 seconds. [ 1871.630363][ T28] Not tainted syzkaller #0 [ 1871.635311][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1871.644040][ T28] task:syz.3.4629 state:D stack:25832 pid:20887 ppid:13880 flags:0x00004004 [ 1871.653337][ T28] Call Trace: [ 1871.656653][ T28] [ 1871.659742][ T28] __schedule+0x1553/0x45a0 [ 1871.664306][ T28] ? __lock_acquire+0x7d40/0x7d40 [ 1871.669438][ T28] ? asan.module_dtor+0x20/0x20 [ 1871.674317][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1871.679483][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1871.684993][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1871.691282][ T28] schedule+0xbd/0x170 [ 1871.695390][ T28] schedule_preempt_disabled+0x13/0x20 [ 1871.700958][ T28] __mutex_lock+0x6a9/0xcc0 [ 1871.705489][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1871.710269][ T28] ? ip_rt_ioctl+0x115/0x11b0 [ 1871.714981][ T28] ? mutex_lock_nested+0x20/0x20 [ 1871.720022][ T28] ? bpf_lsm_capable+0x9/0x10 [ 1871.724735][ T28] ? security_capable+0x89/0xb0 [ 1871.729776][ T28] ip_rt_ioctl+0x115/0x11b0 [ 1871.734331][ T28] ? fib_validate_source+0x1330/0x1330 [ 1871.739926][ T28] ? __might_fault+0xc6/0x120 [ 1871.744643][ T28] ? __might_fault+0xaa/0x120 [ 1871.749398][ T28] inet_ioctl+0x49e/0x560 [ 1871.753762][ T28] ? tomoyo_path_number_perm+0x217/0x620 [ 1871.759494][ T28] ? inet_shutdown+0x370/0x370 [ 1871.764314][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 1871.770277][ T28] ? tomoyo_path_number_perm+0x500/0x620 [ 1871.775959][ T28] ? __kmem_cache_free+0xba/0x1e0 [ 1871.782240][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1871.787845][ T28] sock_do_ioctl+0xfc/0x310 [ 1871.792572][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 1871.797517][ T28] sock_ioctl+0x5ba/0x7e0 [ 1871.801978][ T28] ? sock_poll+0x3e0/0x3e0 [ 1871.806438][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1871.811735][ T28] ? security_file_ioctl+0x80/0xa0 [ 1871.816911][ T28] ? sock_poll+0x3e0/0x3e0 [ 1871.821421][ T28] __se_sys_ioctl+0xfd/0x170 [ 1871.826049][ T28] do_syscall_64+0x55/0xb0 [ 1871.830590][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.835318][ T28] ? clear_bhb_loop+0x40/0x90 [ 1871.840124][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1871.846081][ T28] RIP: 0033:0x7f7bd9f9ce59 [ 1871.850586][ T28] RSP: 002b:00007f7bdad7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.859102][ T28] RAX: ffffffffffffffda RBX: 00007f7bda216180 RCX: 00007f7bd9f9ce59 [ 1871.867101][ T28] RDX: 0000200000000100 RSI: 000000000000890b RDI: 0000000000000009 [ 1871.875146][ T28] RBP: 00007f7bda032d6f R08: 0000000000000000 R09: 0000000000000000 [ 1871.883243][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1871.891782][ T28] R13: 00007f7bda216218 R14: 00007f7bda216180 R15: 00007ffcf9a21318 [ 1871.900047][ T28] [ 1871.903092][ T28] INFO: task syz.1.4628:20877 blocked for more than 145 seconds. [ 1871.910883][ T28] Not tainted syzkaller #0 [ 1871.915838][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1871.924582][ T28] task:syz.1.4628 state:D stack:27016 pid:20877 ppid:13683 flags:0x00004004 [ 1871.933893][ T28] Call Trace: [ 1871.937189][ T28] [ 1871.940240][ T28] __schedule+0x1553/0x45a0 [ 1871.944832][ T28] ? asan.module_dtor+0x20/0x20 [ 1871.949783][ T28] ? __mutex_lock+0x6a4/0xcc0 [ 1871.954506][ T28] ? __mutex_trylock_common+0x8a/0x260 [ 1871.960070][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1871.966250][ T28] schedule+0xbd/0x170 [ 1871.970515][ T28] schedule_preempt_disabled+0x13/0x20 [ 1871.976001][ T28] __mutex_lock+0x6a9/0xcc0 [ 1871.980592][ T28] ? __mutex_lock+0x4f9/0xcc0 [ 1871.985297][ T28] ? tun_chr_close+0x41/0x1c0 [ 1871.990423][ T28] ? mutex_lock_nested+0x20/0x20 [ 1871.995420][ T28] ? __fput+0x61c/0x970 [ 1871.999703][ T28] ? tun_chr_open+0x510/0x510 [ 1872.004409][ T28] tun_chr_close+0x41/0x1c0 [ 1872.009131][ T28] __fput+0x234/0x970 [ 1872.013179][ T28] task_work_run+0x1d4/0x260 [ 1872.017857][ T28] ? task_work_cancel+0x220/0x220 [ 1872.023064][ T28] ? exit_to_user_mode_loop+0x3b/0x110 [ 1872.028590][ T28] exit_to_user_mode_loop+0xe6/0x110 [ 1872.033993][ T28] exit_to_user_mode_prepare+0xee/0x180 [ 1872.039650][ T28] syscall_exit_to_user_mode+0x1a/0x50 [ 1872.045165][ T28] do_syscall_64+0x61/0xb0 [ 1872.050164][ T28] ? clear_bhb_loop+0x40/0x90 [ 1872.054886][ T28] ? clear_bhb_loop+0x40/0x90 [ 1872.059655][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1872.065591][ T28] RIP: 0033:0x7f7b3bb9ce59 [ 1872.070123][ T28] RSP: 002b:00007ffd62fefba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1872.078586][ T28] RAX: 0000000000000000 RBX: 00007ffd62fefc90 RCX: 00007f7b3bb9ce59 [ 1872.086655][ T28] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1872.094970][ T28] RBP: 00000000001a4b89 R08: 0000000000000001 R09: 0000000000000000 [ 1872.103059][ T28] R10: 0000001b31720000 R11: 0000000000000246 R12: 00007ffd62fefcd0 [ 1872.111120][ T28] R13: 00007f7b3be15fac R14: 00000000001a4df0 R15: 00007f7b3be15fa0 [ 1872.119329][ T28] [ 1872.122393][ T28] [ 1872.122393][ T28] Showing all locks held in the system: [ 1872.132128][ T28] 3 locks held by kworker/1:0/23: [ 1872.137159][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.149318][ T28] #1: ffffc900001d7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.161694][ T28] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1872.172262][ T28] 1 lock held by khungtaskd/28: [ 1872.177132][ T28] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 1872.187110][ T28] 1 lock held by dhcpcd/5434: [ 1872.192049][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 1872.201379][ T28] 2 locks held by getty/5531: [ 1872.206083][ T28] #0: ffff88802dbcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1872.216094][ T28] #1: ffffc9000328b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 1872.226323][ T28] 3 locks held by kworker/1:4/5874: [ 1872.231710][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.244231][ T28] #1: ffffc90004b1fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.255475][ T28] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 1872.265218][ T28] 5 locks held by kworker/u4:6/12242: [ 1872.272157][ T28] 3 locks held by kworker/u4:19/12254: [ 1872.277752][ T28] #0: ffff88802c9ba938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.290172][ T28] #1: ffffc9000454fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.304528][ T28] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 1872.314221][ T28] 3 locks held by kworker/u4:20/12255: [ 1872.319762][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.331555][ T28] #1: ffffc9000455fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.342714][ T28] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1872.351783][ T28] 4 locks held by kworker/u4:26/17844: [ 1872.357451][ T28] #0: ffff888140044938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.368404][ T28] #1: ffffc9000b8afd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 1872.381692][ T28] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1872.392349][ T28] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80 [ 1872.403225][ T28] 2 locks held by kworker/u4:28/17846: [ 1872.409002][ T28] 1 lock held by syz-executor/20726: [ 1872.414317][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.423867][ T28] 1 lock held by syz.0.4627/20871: [ 1872.429087][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.438562][ T28] 1 lock held by syz.0.4627/20875: [ 1872.443775][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.453507][ T28] 1 lock held by syz.3.4629/20882: [ 1872.458816][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.468384][ T28] 1 lock held by syz.3.4629/20887: [ 1872.473566][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: ip_rt_ioctl+0x115/0x11b0 [ 1872.482813][ T28] 1 lock held by syz.1.4628/20877: [ 1872.487980][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 1872.497205][ T28] 1 lock held by syz-executor/20889: [ 1872.503145][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.512669][ T28] 1 lock held by syz-executor/20894: [ 1872.518169][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.530688][ T28] 1 lock held by syz-executor/20897: [ 1872.536004][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.546561][ T28] 1 lock held by syz-executor/20900: [ 1872.553808][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.564645][ T28] 1 lock held by syz-executor/20904: [ 1872.571888][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.582338][ T28] 1 lock held by syz-executor/20908: [ 1872.587663][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.600450][ T28] 1 lock held by syz-executor/20911: [ 1872.606276][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.615867][ T28] 1 lock held by syz-executor/20916: [ 1872.621309][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.630844][ T28] 1 lock held by syz-executor/20921: [ 1872.636167][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.645721][ T28] 1 lock held by syz-executor/20927: [ 1872.651113][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.660642][ T28] 1 lock held by syz-executor/20930: [ 1872.665956][ T28] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 1872.675555][ T28] [ 1872.677914][ T28] ============================================= [ 1872.677914][ T28] [ 1872.686475][ T28] NMI backtrace for cpu 0 [ 1872.690829][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1872.698038][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1872.708106][ T28] Call Trace: [ 1872.711405][ T28] [ 1872.714355][ T28] dump_stack_lvl+0x18c/0x250 [ 1872.719056][ T28] ? preempt_count_add+0x91/0x1a0 [ 1872.724217][ T28] ? show_regs_print_info+0x20/0x20 [ 1872.729445][ T28] ? load_image+0x420/0x420 [ 1872.733986][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 1872.738965][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 1872.745141][ T28] ? _printk+0xde/0x130 [ 1872.749311][ T28] ? load_image+0x420/0x420 [ 1872.753829][ T28] ? load_image+0x420/0x420 [ 1872.758353][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1872.764445][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 1872.770457][ T28] watchdog+0xf3d/0xf80 [ 1872.774632][ T28] ? watchdog+0x1e1/0xf80 [ 1872.778982][ T28] kthread+0x2fa/0x390 [ 1872.783062][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1872.788101][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1872.792702][ T28] ret_from_fork+0x48/0x80 [ 1872.797131][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1872.801731][ T28] ret_from_fork_asm+0x11/0x20 [ 1872.806526][ T28] [ 1872.810199][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1872.815522][ C1] NMI backtrace for cpu 1 [ 1872.815535][ C1] CPU: 1 PID: 12260 Comm: kworker/u4:24 Not tainted syzkaller #0 [ 1872.815551][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1872.815561][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1872.815589][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 1872.815612][ C1] Code: 48 c7 c7 91 cb a2 8c 4c 89 e6 eb 0a 48 c7 c7 48 9a 84 8c 48 89 de e8 f5 f7 9b 08 31 ed eb d4 cc f3 0f 1e fa 89 f6 48 8b 0c 24 <31> d2 e9 df ea ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 [ 1872.815625][ C1] RSP: 0018:ffffc900045af7f8 EFLAGS: 00000a02 [ 1872.815641][ C1] RAX: ffff888028c45a00 RBX: dffffc0000000000 RCX: ffffffff816783fa [ 1872.815653][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8cfe2020 [ 1872.815664][ C1] RBP: ffffc900045af8b0 R08: ffffffff8e8b2fef R09: 1ffffffff1d165fd [ 1872.815675][ C1] R10: dffffc0000000000 R11: fffffbfff1d165fe R12: 0000000000000000 [ 1872.815686][ C1] R13: 1ffff920008b5f04 R14: ffffffff8cfe2020 R15: 0000000000000000 [ 1872.815697][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1872.815710][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1872.815721][ C1] CR2: 00007ffc40495ff0 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 1872.815737][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1872.815746][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1872.815756][ C1] Call Trace: [ 1872.815762][ C1] [ 1872.815768][ C1] __mutex_trylock_common+0x8a/0x260 [ 1872.815787][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1872.815804][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1872.815819][ C1] ? arch_jump_label_transform_queue+0x93/0x100 [ 1872.815843][ C1] ? rcu_is_watching+0x15/0xb0 [ 1872.815864][ C1] __mutex_lock+0x151/0xcc0 [ 1872.815884][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1872.815899][ C1] ? arch_jump_label_transform_queue+0x5b/0x100 [ 1872.815921][ C1] ? mutex_lock_nested+0x20/0x20 [ 1872.815941][ C1] ? text_poke_queue+0x140/0x190 [ 1872.815963][ C1] arch_jump_label_transform_queue+0x5b/0x100 [ 1872.815986][ C1] __jump_label_update+0x17d/0x390 [ 1872.816009][ C1] static_key_disable_cpuslocked+0xc5/0x1a0 [ 1872.816029][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1872.816048][ C1] static_key_disable+0x1a/0x20 [ 1872.816065][ C1] toggle_allocation_gate+0x1cc/0x260 [ 1872.816086][ C1] ? show_object+0x70/0x70 [ 1872.816106][ C1] ? read_lock_is_recursive+0x20/0x20 [ 1872.816127][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1872.816145][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 1872.816163][ C1] process_scheduled_works+0xa5d/0x15d0 [ 1872.816194][ C1] ? worker_attach_to_pool+0x380/0x380 [ 1872.816216][ C1] ? assign_work+0x3d2/0x5d0 [ 1872.816236][ C1] worker_thread+0xa55/0xfc0 [ 1872.816267][ C1] kthread+0x2fa/0x390 [ 1872.816281][ C1] ? pr_cont_work+0x560/0x560 [ 1872.816299][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1872.816313][ C1] ret_from_fork+0x48/0x80 [ 1872.816330][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1872.816344][ C1] ret_from_fork_asm+0x11/0x20 [ 1872.816379][ C1] [ 1872.850522][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1872.850539][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1872.850558][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1872.850568][ T28] Call Trace: [ 1872.850575][ T28] [ 1872.850584][ T28] dump_stack_lvl+0x18c/0x250 [ 1872.850612][ T28] ? show_regs_print_info+0x20/0x20 [ 1872.850630][ T28] ? load_image+0x420/0x420 [ 1872.850664][ T28] panic+0x2dc/0x730 [ 1872.850685][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1872.850710][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1872.850731][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 1872.850756][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 1872.850782][ T28] watchdog+0xf7c/0xf80 [ 1872.850805][ T28] ? watchdog+0x1e1/0xf80 [ 1872.850833][ T28] kthread+0x2fa/0x390 [ 1872.850850][ T28] ? hungtask_pm_notify+0x90/0x90 [ 1872.850872][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1872.850889][ T28] ret_from_fork+0x48/0x80 [ 1872.850909][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1872.850926][ T28] ret_from_fork_asm+0x11/0x20 [ 1872.850962][ T28] [ 1872.853208][ T28] Kernel Offset: disabled [ 1873.236033][ T28] Rebooting in 86400 seconds..