last executing test programs: 6.976218509s ago: executing program 2 (id=13170): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'dvmrp1\x00', 0x2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x2c, 0x0, 0x0, 0xfffff03c}, {0x6}]}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000300)={'pim6reg\x00'}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c2e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r6, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a40)=[0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000000a80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ac0), &(0x7f0000000b00), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000b40)}}, 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e80)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@float={0xb, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x5f]}}, &(0x7f0000000dc0)=""/168, 0x27, 0xa8, 0x1, 0x92}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x936f}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xd, 0x6b, &(0x7f0000000700)=""/107, 0x41100, 0x58, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x3, 0x10, 0x81, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r5], 0x0, 0x10, 0x13}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x18, 0x19, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9f}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x936f}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0xd, 0x6b, &(0x7f0000000700)=""/107, 0x41100, 0x58, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ec0)={0x3, 0x10, 0x81, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f00)=[r5], 0x0, 0x10, 0x13}, 0x94) 5.849894549s ago: executing program 2 (id=13176): socketpair(0x0, 0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b28, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8953, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00', @ANYRES32, @ANYBLOB], 0x48) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0xfffd, @remote}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f0891", 0xd}, {&(0x7f00000007c0)="d25bf710e1be938583f8fd9d41e17de159c996072e04e91d87cc599f2c175f6b5862de3d18e2401af6e90065d3eadf", 0x2f}], 0x2}, 0x97ffffffffffffff) 4.69750987s ago: executing program 2 (id=13180): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1d89314af63c17fe75948ee98c19", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000, 0x9}, 0x50) 3.95734972s ago: executing program 1 (id=13184): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xa, &(0x7f00000002c0)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0xffff, 0xa3, &(0x7f00000004c0)=""/163, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x8, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r0, r1, 0x1, r1, r1, r0, r1, r0], &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0x1}, {0x0, 0x4, 0x10, 0xc}, {0x4, 0x2, 0x5, 0xc}, {0x5, 0x1, 0x6, 0x6}], 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@cgroup=r1, 0x11, 0x1, 0x7fffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000a40)=[0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2b00908a5fbe31bfef00002400000000000000073a182ab2706b2c56b8504c64143d4383a2fee600a37cd1f258fc98599cd03d9873b80000000000000000dc44ab04f62e6b409c8c176e09e907a9a8ddd638d7e1970f39404d0cffed2309fe3e80c245a1b173721545b418f0e3fefabf0a000000d37310dfe3", @ANYRES64=r4], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 3.819048057s ago: executing program 2 (id=13186): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18024000c1a6539a00000000fd090000850000002700000085040000500000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) recvmsg$kcm(r1, &(0x7f0000000740)={&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000200)=[{0x0, 0x4c2}], 0x1}, 0x10002) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x8, 0x8000000000000001, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r8, 0x0, 0x4840) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)={@map, r0, 0x2e, 0x30, r4}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8910, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x4) 3.818576437s ago: executing program 3 (id=13187): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x16, 0x2, 0x0, 0x0, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x100005, 0xca, 0x1ff, 0x5, 0x101, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffffffffffc}, 0x0, 0x6, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$TUNSETIFF(r2, 0xb701, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x4, 0xa}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x140) socket$kcm(0x10, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 3.061663237s ago: executing program 3 (id=13190): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3dc6e48aa31086b87003000000000020000160af365040014000d0002008bc3a0e68bd607ab6b716b7feab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24040110) 2.83288278s ago: executing program 1 (id=13191): r0 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time_for_children\x00') (async) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x27}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002280)={r3, 0x0, 0xe, 0x0, &(0x7f00000008c0)="e02742e8680d85ff9782762f86dd", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x1d, 0x8, &(0x7f0000000100)=@raw=[@ringbuf_query, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x77}, @call={0x85, 0x0, 0x0, 0x92}, @call={0x85, 0x0, 0x0, 0x1d}], &(0x7f0000000180)='syzkaller\x00', 0xb, 0xf9, &(0x7f00000002c0)=""/249, 0x41000, 0x29, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0xc, 0xfffff000, 0x8}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000440)=[{0x4, 0x2, 0xb, 0xc}, {0x5, 0x4, 0xd}], 0x10, 0xe}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@cgroup, 0x8, 0x0, 0x81, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r0, 0xe0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xab, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000900), &(0x7f0000000940), 0x8, 0x33, 0x8, 0x8, &(0x7f0000000980)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)={@ifindex=r6, r4, 0x2a, 0x4, r3, @void, @value=r3, @void, @void, r5}, 0x20) write$cgroup_devices(r1, &(0x7f00000000c0)={'a', ' *:* ', 'rwm\x00'}, 0xa) 2.691644067s ago: executing program 3 (id=13192): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073016e00000000009500000000000200"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.219570472s ago: executing program 2 (id=13194): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x4, 0x80000003, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2}, [@alu={0x4, 0x1, 0x4, 0x760cda05bcf95fa0, 0x0, 0x6000}]}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.218830023s ago: executing program 0 (id=13195): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000fffff000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) 1.984049835s ago: executing program 3 (id=13196): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext, 0x8000, 0x2, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000380)=@l2={0x1f, 0x0, @fixed}, 0x80, 0x0, 0x0, &(0x7f0000000bc0)=""/209, 0xd1}, 0x40002000) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000030000b0fd25a806c8c6f94f90324fc60", 0x33fe0}], 0x1}, 0x0) (async) r1 = socket$kcm(0xa, 0x3, 0x3a) (async) r2 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0004400a08", 0x3a}], 0x1}, 0x4000040) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x7, 0x0, &(0x7f0000000140)="e9020400000000", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)='%-5lx \x00'}, 0x20) (async) syz_clone(0x1040400, &(0x7f0000000640)="a3bb84b30835c9638e7b6777e84d1266f71d3366c0def5670b9984eba9480ca1c43c016a4807512814119a3f7fafaae6495a2a113e9e43f462904aec4a62dc9c2bb6dff93942eb20544cbf11a50d51909619a9d98cdd0e8f7206b666a916baae9de0c4ef0782f8c7d599536931fcb4571ad0cc5e9e793bca76f4a70f967d759f93e61833c0e30b21f402f56a9fbe87786d0bb048ced2a22b4807d8eccc46686de6bcae652b78f7ae4103d1c969aaade8752bcfc94c4acaf267d7", 0xba, &(0x7f0000000700), &(0x7f0000000800), &(0x7f0000000840)="891ea93e50f56f554b13627b51246229fd84f78aca42255aa7d34973971847687855433c0d115985c6ed755a22f510827ab3425d7da27a4ca77e15c787a6ee288aa7fa6eec664fb8e3cff9269b35b4397cc407854dcfe3ed7c29ae180794c857e92a31c6fcaee1aa8bdc035e782061804fe254e733a547f7464745e860ec3d10e886b695abb39c7ac3e51a8bb280fe5816bb3e15adfe9f7ad0d40556a48d60dd5e8b92c973547166bc0f88da90ecc017a4b8c0664ae15c9527743a3f12242f") (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000280), &(0x7f0000000300)=r6}, 0x20) 1.859030061s ago: executing program 1 (id=13197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) recvmsg(r3, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x4002) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x4008804) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000040)="7f", 0x1}], 0x1}, 0xc0) recvmsg(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = getpid() socketpair(0x2c, 0x4, 0xe8, &(0x7f0000003840)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) sendmsg$unix(r8, &(0x7f0000000400)={&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000080)="2c01b05e06a6691580b7c302bd7627d7b4a347b235fdb182", 0x18}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xee00}}}], 0x20, 0x4841}, 0x4000000) r10 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000003880)='cgroup.procs\x00', 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000003980)={&(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003800)=[{&(0x7f0000000340)="6e1d51f0d307363e42c2674aadff81e80b82a466ef637322f5661c5650e741005ef2aa23ef7f0903697752df236df279db2522162e12df02c1fc5769e6b60a4757dd8a9bb498f0a27d1858607ca2a388cd365852fa7dc85881c18a9ea5a572d311ca9198661b33e54888b664d1d940e376800a6d3043be04a801d1f04f7c7dfd7ca45726f487ac545d1380547a6a871d29649a7bddc385995336add3386424f4f60485f1cc9f", 0xa6}, {&(0x7f0000002800)="5b58cf526961f85026b19f13e1758ff708b8306583a98411daccc0a6594424d294c67db09f48a4dae6499210d494d2556115b041b92c4844166dbb9d867bdbb237b57b4f4f686c3b4898183e2b4f180bc44334fccb3e09b6c62fec333d77fc459b9d768dad5150327b8f22bf6a5f318300624d0c35b58f26841c27a93f07691fefcb44d7bcaddb5ae8120a0864731f7423078355bdba0156a17b0ee33bb36bf153bdd0e868133c99820357d7950da5f36be91c3c063626c9aaeb9b24991901049d3f6d25289f08a36e0ec3ef32191a967f61618041ba507dfde8975e4fddca09796ffcaa7a0d2d9694337c9e1aea0f13e663079645ea04e93dc4d59617971e5d149dd9d5840a44ff3cbac1305edf89b9508b2bf96ab059002caab5e6e2e5942113ff0e2cf79b80341b235069632ce5e65b036019cf389bfca0fa894fb5da25854f18e596b8f2685e2bd345396e541eadfa1d428131409e2a4fdfa4c2de8b89d311cd4873c020b85de8e444605c46d8c585d2ccd50d90b9aae8bf600aa67a5d0818c66cf4203542e37d7927e17b1f2fafdad79502dbab4273538faf2269535601cf32a304307b35ebde0576da1620feeb18bb0c0b310f815aea73d75f0ed34f685bb5971bbeee42a96e11dbfe97bc0e6820f48f546729fefa4e91fd42f8368391e95f85ce72ba9676a01417a93e519fc660e255b2b5c1650a2030e8158ebc68276c47e0aa3aceb73b4290bf535e6f19e0e8b2427e47571c0f91d521dd634327116fb55c04394d27da0b99daf8a5e68d96f3044f8baaf518258c4217d816b889f966b07dcaa0ec6200971bd84cd44e2e5c32235149bbade96ce31d9fe411bebf7a05ca6fabe22a91c4dceef285386d82918b4133cb1d44319229a98a9da580196c8c02836c1db16a9ff47acf349e79cfbf1ec9082521687959503917ae5c57d166645527e56b48e68b0c6bcedb72825e1b45032f6e423a32fc1bca38b452136699888e49ba5c8241fdea0d3342be40564fcaa8c2ccd14d14c6c596bb1a0501dbfd3464cc4c024283e60d599a62b617aba6986db44289731138f2aef8525da943f28431cbbec6f25be80e78077d2234b0d3118883e6e161986226ddb5596d6073b71f55d86b1e50fb8a1d55c453f67ed9a773d1369ebf8acb24c3a2f829d670f00706efafc999d88bac5808e031c226cc705d6e46c3b5a5d59fc56db1efe4f3ab43f90bf8d55400ad2627a54dfdc49b770f0531c3d95c3c2bbd6f91d4d46acd8f96919a6d2b679d784db67913edca8b67746fec1c52a4b9ae0a9a7dca840fc4fe1fd80460c11889c7a52d957286027b05cc84a7d759250973356ab02eac66fc566fe98d77ef8efb971be05f2b95fa2ad8ec6c5564564a152c29bc4a18d9bc1c496f16369de20114309140ed78373a35b0b5d5ca67a7f844b6d676bc7c04b50d197ad93b71e5bebe5fef3d69890e735c955cae913cfccd474c455ce5d71651729d0c89a8a441d4230a077402dc4c157cc994abafa940941d4b4a1c1b97bc8a7a0fc206f8a0a85856006b39da4c367b753650ea5ba2648bfee2acdd401e6fed2b4e38b73d1981916de0173084c0105ffdd493f53c8a402d710f3ffb4882b140ebade7c56136fd27831636574a8a7abbf863839ae12618207fc2058fcd522aa65385ce25edb7bd3f06ba462572ca9ed33e203142294e1b6e02f6abc2cc7a8445c1f50a97f353b984b7ce4f245d35661ae98de2b01c599433bf8ec1c46afdd015139765eff0c28208b4b520a48b7fb6538bdb68381e5cbe4b7b6d80ca589bd58e0c9b150bfdafd2f0ded0c2414498ee8613285e7e08a9b31ff1bb7aba761ddb22daf51debf74c987e0f4437538f289656a7c167b54b75758fe8eacf9d2f1de24ef07afdf977fcac83170458a3b77d4ed43621a82fba3b291c6a8ef21a312daae0bf67bb81b51a6856e6e7f125e5be41a49efe5fc03b23fae22acf07f5e5dd2e71d3b4f3e9cea7a99029fb2c94c09c792f1a9220b8fbfff588f3a8dad94f7460eaabff697249abbff0ab2c1b0e70fe155072c3e23c6cb06d6214a67fb3d762af927e811a3d3afea21b1c281e5010ca3e20bcd1fa3c5bcdaff6af753de1f8329f33aa7f1f7c1e47c131ac0d443bd858c75b7d8807510b43673cb7be509e6e108f7a51aab36c98df754813209a153ddf9d5093d920bde256d5dc63143a7270f1feeadd8211ebf5f738afb70c9bdae50b1706fbc76273504d96aeab3901826c69e4b39f17d79e522d7689bf7a2abc16665717ffa64fc8601ff4f039ee7a151fbb325bedb0fae4a0a0f9e87b59cb5ca340a106751b164cbeb2e8b0a32c43d7fdfb0fb341aa8708647df81eed314409d232f3aa3b6760a3920e3bc6db7318482c7c26f33fdc981858a4584c885ee1b42585efd521fceac514ae36bed3580a5c2cdfec409eab7b2056ed42da432cd60474e8c2ad66127756c77b2c132b5b2366d2c20a29cda3975c7258f5320ce5cc876c73ed98972d1a00a2376840f4b19c118d02ff1ae04badf409c9826df6fde4c3690de4cd9b82eddcbab44e773fbee3678fc1245f469e7013119cda8caab33897a7d60ce778bf332e458a2bf83d78d005d7b6212b9e60b65235d2564b64ccdd8d0122bc708e074ff6fb1079f2f73f448258ebf464b315b14d773310d2c1fb30bfad0e4246834b2f038e54c0eaa3f61441797f627bfc93060d995730f7f5da80d3ff9352b774a95fd27dda0ce108bccf7326b580e4243960d79f3f9253ca3416cfc57a505c14e80c535382c0c2da7b7812e2cf65af3ddc7e9fe07d051da5c57def1a6d848b3efe6bb64451cf6daa4a22bce2a25a95615afb45fe710b560f58f0e3024bf125bcee5c925c68e1e8dbe6be1cfccc5d999801a064ab6227146d0fbf0c10a25271dec38819a5762b971476b1bc25189f624eb5c027db5dd06aa05d0ef331cde1e03041dacbe1c0928a02e89531c9470ab767983b517606bbd70581b4a85e9e129eb3a5b2c2969c0f0d0ab46b4c9d909d0e1b4274e8d571588c1292548262f63b883ed3d394a44c0f73e6fb6ea0b1acf81fc8953725fac60377f73ed0fa4d91855e425e06565b2f05dc31f65dec3ce346f2ce4c48b100f464cb5b3379e5da7ecd808a7401c1f7932fcb42454a368bf8d53d0d0fccacf44d6a3c1ca6d81c5383d6daca53293c51c82da849e99c7aeb2920c535c607d0333c6fbc9eee54f5eed64d95fdc2fd8e543a37e7c928a01c60283e31025507b437b5b46a46bc9be4a1eba27e9682c6b512e221fb6c776bececfde2f11c59e3de06e8506fc4eb7b26a4e7c50574c50c87a30870fbc6c4c3e1b53cf7af84c89d4c24d6f39f70cf7001a4b7dfa1e58299de89de47b089a19241aa5db9f2e9619abb8b180a060bef77d459825d3891081f2e9c24e9974af5fae44386558226aee7e4307fd9ba271f931676be9471dffcc47caf26be40f0c744a8b06ebd23bef9b13c29b17b6aa80f835e0ff953d5f91d4243c27ae65c0aa0b6d2d1cee380953cc278f50766f1c77205f744cd3e59893d125a01b4380d3331e8519bb5fed26dd161c29482c02283c9bd9b0e3de0956f949884aa3f1d78796e617baa6fba72ce5e9a9dcde68e021be0f86597b18553190ea95a37f8778fe6bfce7db4079be05b1422a73218ffc7c0ea678659708821ef88102830d655fab9e7a75ec9fe7d2760700a0af9ae5e8053b6a7c52ca761b49ee05bf9b406bfce862eeb6cce015178a286e64441b0f3b4bf49aea3e3fdcf98b6727a4032b7b01f7dbcab9dedf8e4aced5130fa8b6c8e89f459e92bb1256686c3007ac9a4c309dca2bc505d5d8176fc0a1a4e3a836bfec3c2a470a346c20c71c971bc47d939bf861f135b21efac076e176d0618b51a06f9ee5f2218c80c57215468d066c5047b4dec3513b7a43ced07efc0620d20052c2f4c032b35e2211441317428bcf2995ff119e0b6fa7f552fafe1b74699790e0b79abf3543bf977ef44e6cf209131fdb2d0486516835e6dee9362e5bb9da8a1359436bedb22008ae266348451746f5fc048b05c6452b07a36bde7f65843649f93f4e90edc953416937be95efe5f45319528a9f3d308ee6bd96409a59592af6970068a21138c587080e7fa693bf92762ac5f2c2b359ba0c6eeecf19a5181288326740af8e25085b2fe5971f9d9d303fc67544db83a9e68a9d5ea4e614d9f9f986279ab12bef4153d225b7ea3f9d719cb1b876555e61b0100b5f6d2642d4860e43fca7596e8b4a34de59976369ca23c9eb251eee944669e1d8f7dd03c4c01e59fbfa36c804b8a7538aecc04b33d1233de451cf791acdca3a045d33be2b1526e6d0408009c3fc5f3d22a29cc23fb0813606a161961c5250addf88481a848159997ee79434e5d5b519dc678d07540bc52e1af68c51e0f77d8ff5d50389546e5f7308244126ef8738f910fa5527f7b038382180d624a898704ee8862d983fbcb45d333b109a1596ab974bff272b300cc8a27f956c5599fc793f351dbfb1c106d1126296d4993b28f0c28e7dd7401c281577d7ee05bb256ab4e02da5ec97c04d281627dbb0bf57d6746c95d74cba95a02a55f67e8a8967e8cf666b5c5e164e83b880c80dbd114f8c918d0996c684ca45fff1103bc862034d5ac88f9d3eaa731280fca27a7abd714f58c05a3527e4b05f1c5ef7b615fbcdea90beb35b8e752eec17d31a207c16734f39fb0110e44f72a8a8b2df3231b5bbd2f72fb414297d23bb0231a5959763c7a8d3261fe4ded510f0e1a15e5dbae560501983ea4b538328260c27e10fc6cf154f298ec418ec46051397f56219c25c86877c8bf40f15d9819f4128efcc300b78683fef4336f31fa152dc9f7a47c172024b7d7a80722d82e51a96dbfbb2f14a17b9f527659855f4d9180cdd26fdac9aee5620a43e6cfd4cd452721eb7267ee38488bc1e27ec3bdc8db4903178a26aedefd6cd31f2e6719603b0a6b1565f20abc22d6fd764db02e1c5e0f9d346cac0707af989006bc8b06b9cecde226850eb56970b987abe16bcdc47a3425761f755fe6767d9f62f0f2b3cceba589276926731eb1f3e72d47b35be129078c98b9075da78235f355a6e37271408b6ecbf869ba040f617d5794b8793375774ed66b4742baa318abc1dfcf893a53f4add9b8515bfae17a3a460ba8697644b53f079a088d18cdf892ddbf7c7175b3bfa7835e2238658e5b4af2e80c1458a12c557ca41625c6dd9160f779b4177a0fafc5b771e8ca747b75549e20d79718eba38a1d28814e2319539fafc6911aa63288b050178148c22175f319e8384f50d0c8a939f8d4b277bf4d794a445847b994211d37c994c70848b7e09212a01a1a2cc631646b2b4ba983b6c94e5149cd3f8a7035c7a1b640b996bbc178e4318dc83a264b6106e1c00c14bfbc6209abe7d196fc97a2312a6add4dbd47fcd6bb9b0ece9104f11012bcf2aaa7599cf22918431cb1140c748a1b55719b068dc10f3017d03f9c71887f89eed9bce9772a7f5fab5b8442767d171f57af2f1d4e145e1a8e2b18e4283a180e3aa3ec666ffff2fb5737c2e7e20f5b6fc20b6da9a3ec03749c003fed9ba77a7ef69500578c3580df5008c446aed61a529f530ff25e446606278829c4aa931f3fcf7613b4f954590a1979ad219b199472a316b140e03e8af26bdfb1ded2ec3d4ab039ea35330a46d16845e357a5fdf98c38fbbe41acb976525de65d19c1b3e0b5ecbf205fe8b5eace6bc39a86ec9480cdc749d62c23d3b1965ec05743a4a16b64261ba0fea747b8ffd2f0", 0x1000}], 0x2, &(0x7f00000038c0)=[@rights={{0x20, 0x1, 0x1, [r3, r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01, 0xffffffffffffffff}}}, @rights={{0x28, 0x1, 0x1, [r0, r4, r3, r7, r2, r2]}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r1, r10]}}], 0xb0, 0x20040045}, 0x4000) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) 1.858714201s ago: executing program 0 (id=13198): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x257}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x7, 0x9, 0x0, 0x0, 0x5c}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x6, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.723365468s ago: executing program 3 (id=13199): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0xa, &(0x7f00000002c0)=@raw=[@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}], &(0x7f0000000340)='syzkaller\x00', 0xffff, 0xa3, &(0x7f00000004c0)=""/163, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x3, 0x8, 0x10001, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000780)=[r0, r1, 0x1, r1, r1, r0, r1, r0], &(0x7f00000007c0)=[{0x3, 0x1, 0x6, 0x1}, {0x0, 0x4, 0x10, 0xc}, {0x4, 0x2, 0x5, 0xc}, {0x5, 0x1, 0x6, 0x6}], 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a80)={@cgroup=r1, 0x11, 0x1, 0x7fffffff, &(0x7f00000008c0), 0x0, 0x0, &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000a40)=[0x0], 0x0}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001540)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="2b00908a5fbe31bfef00002400000000000000073a182ab2706b2c56b8504c64143d4383a2fee600a37cd1f258fc98599cd03d9873b80000000000000000dc44ab04f62e6b409c8c176e09e907a9a8ddd638d7e1970f39404d0cffed2309fe3e80c245a1b173721545b418f0e3fefabf0a000000d37310dfe3", @ANYRES64=r4], 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r7, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 1.679608101s ago: executing program 0 (id=13200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f00000003c0), 0x2000000}, 0x20) (async) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x4001, 0x400, 0x98, 0x5, 0x2, 0xfffff271, 0xfff8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r3}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x85df, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1}, 0x50) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, @fallback=0xe}, 0x94) (async, rerun: 32) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x3099, 0x0, r1, 0x496, '\x00', r5, r6, 0x1, 0x4, 0x3}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000000), &(0x7f0000000380)=r3}, 0x20) 1.370687078s ago: executing program 2 (id=13201): socket$kcm(0x2c, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x1f, &(0x7f0000000100), 0x120) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdir(0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], &(0x7f0000000580)=""/242, 0x46, 0xf2, 0x6, 0xfffffffd}, 0x28) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 1.368438267s ago: executing program 1 (id=13202): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x7, &(0x7f0000000000), 0x4) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) close(r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x34, 0x10000000, &(0x7f0000000100)="b9ff03006044238cb89e14f089021bffffff00004000632f77fbac14140be934a0a662079f4b4d2f87e50aca6aab845013f288a81a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) 1.229724705s ago: executing program 0 (id=13203): r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06", 0x22}], 0x2}, 0x4000000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000100)}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r4, 0x0, 0x20000000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x11, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000400000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x40010163) socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340), 0x1, 0x0, 0xc88c0465dba3f50d, 0xc9e}, 0x4000004) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001780)=""/242, 0xf2}, {&(0x7f0000000780)=""/4037, 0xfc5}, {&(0x7f0000002a00)=""/4125, 0x101d}, {&(0x7f0000000540)=""/107, 0x6b}, {&(0x7f00000052c0)=""/81, 0x51}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f00000006c0)=""/66, 0x42}, {0x0}], 0x8}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) recvmsg$kcm(r2, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000001900)=""/135, 0x87}, {&(0x7f0000001a00)=""/141, 0x8d}, {&(0x7f0000001b80)=""/172, 0xac}, {&(0x7f0000001c40)=""/106, 0x6a}, {&(0x7f0000001cc0)=""/139, 0x8b}], 0x5, &(0x7f0000001e00)=""/55, 0x37}, 0x101) bpf$ITER_CREATE(0x21, 0x0, 0x0) 881.662603ms ago: executing program 1 (id=13204): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4107, 0x100b}], 0x1}, 0x22) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90224fc60100c0b4002000000053582c137153e370248078000", 0x29}], 0x1}, 0x0) 819.276447ms ago: executing program 0 (id=13205): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x1}}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073016e00000000009500000000000200"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 641.654736ms ago: executing program 3 (id=13206): socket$kcm(0x29, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xe121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x891d, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf\xc8>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:l\x14PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:l\x14PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYRES64], 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f00000003c0), 0x1003, r6}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r6, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x5, '\x00', 0x0, r0, 0x3, 0x3}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg(r10, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10, 0x103, 0x100}, {0x10, 0x1}], 0x20}, 0x44004) socket$kcm(0xa, 0x922000000003, 0x11) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080a2, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5) socket$kcm(0xa, 0x5, 0x0) 0s ago: executing program 0 (id=13208): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0x22072a18}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00<', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 42) kernel console output (not intermixed with test programs): 251] ip_tunnel_xmit+0x9b1/0x2410 [ 2679.363202][T12251] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 2679.368246][T12251] ? validate_xmit_xfrm+0xbc/0x12c0 [ 2679.373476][T12251] ? gre_build_header+0x25b/0x990 [ 2679.378530][T12251] ipgre_xmit+0x7a6/0xb20 [ 2679.382893][T12251] dev_hard_start_xmit+0x246/0x740 [ 2679.388066][T12251] __dev_queue_xmit+0x19a3/0x3660 [ 2679.393145][T12251] ? __dev_queue_xmit+0x265/0x3660 [ 2679.398327][T12251] ? netdev_core_pick_tx+0x340/0x340 [ 2679.403650][T12251] ? skb_release_data+0x1cf/0x800 [ 2679.408707][T12251] ? pskb_expand_head+0xbfe/0x1230 [ 2679.413850][T12251] __bpf_tx_skb+0x189/0x250 [ 2679.418376][T12251] bpf_clone_redirect+0x30f/0x4a0 [ 2679.423433][T12251] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 2679.428920][T12251] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2679.434926][T12251] ? lock_chain_count+0x20/0x20 [ 2679.439797][T12251] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 2679.446055][T12251] ? lockdep_softirqs_on+0x580/0x580 [ 2679.451387][T12251] ? ktime_get+0x7f/0x280 [ 2679.455745][T12251] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 2679.462010][T12251] ? ktime_get_real_ts64+0x440/0x440 [ 2679.467322][T12251] ? __x64_sys_bpf+0x7c/0x90 [ 2679.471944][T12251] ? __local_bh_disable_ip+0x108/0x1a0 [ 2679.477510][T12251] ? __cant_sleep+0x220/0x220 [ 2679.482210][T12251] ? read_tsc+0x9/0x20 [ 2679.486293][T12251] ? ktime_get+0x24b/0x280 [ 2679.490728][T12251] ? bpf_test_run+0x174/0x870 [ 2679.495425][T12251] bpf_test_run+0x2df/0x870 [ 2679.499964][T12251] ? bpf_test_run+0x174/0x870 [ 2679.504664][T12251] ? convert___skb_to_skb+0x590/0x590 [ 2679.510058][T12251] ? eth_get_headlen+0x210/0x210 [ 2679.515012][T12251] ? slab_build_skb+0x25f/0x3f0 [ 2679.520051][T12251] ? convert___skb_to_skb+0x3d/0x590 [ 2679.525363][T12251] bpf_prog_test_run_skb+0xad2/0x12b0 [ 2679.530770][T12251] ? cpu_online+0x60/0x60 [ 2679.535128][T12251] bpf_prog_test_run+0x321/0x390 [ 2679.540082][T12251] __sys_bpf+0x49d/0x890 [ 2679.544522][T12251] ? bpf_link_show_fdinfo+0x390/0x390 [ 2679.549924][T12251] ? lock_chain_count+0x20/0x20 [ 2679.554884][T12251] __x64_sys_bpf+0x7c/0x90 [ 2679.559324][T12251] do_syscall_64+0x55/0xa0 [ 2679.563757][T12251] ? clear_bhb_loop+0x40/0x90 [ 2679.568449][T12251] ? clear_bhb_loop+0x40/0x90 [ 2679.573146][T12251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2679.579144][T12251] RIP: 0033:0x7f297219c819 [ 2679.583577][T12251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2679.603288][T12251] RSP: 002b:00007f297308d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2679.611767][T12251] RAX: ffffffffffffffda RBX: 00007f2972415fa0 RCX: 00007f297219c819 [ 2679.619805][T12251] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 2679.627892][T12251] RBP: 00007f297308d090 R08: 0000000000000000 R09: 0000000000000000 [ 2679.635888][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2679.643881][T12251] R13: 00007f2972416038 R14: 00007f2972415fa0 R15: 00007ffc6b15eef8 [ 2679.651911][T12251] [ 2685.215569][T12332] FAULT_INJECTION: forcing a failure. [ 2685.215569][T12332] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.322030][T12332] CPU: 0 PID: 12332 Comm: syz.3.12138 Not tainted syzkaller #0 [ 2685.329710][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2685.339829][T12332] Call Trace: [ 2685.343192][T12332] [ 2685.346159][T12332] dump_stack_lvl+0x18c/0x250 [ 2685.350893][T12332] ? show_regs_print_info+0x20/0x20 [ 2685.356195][T12332] ? load_image+0x420/0x420 [ 2685.360744][T12332] ? __might_sleep+0xe0/0xe0 [ 2685.365376][T12332] ? __lock_acquire+0x7d40/0x7d40 [ 2685.370458][T12332] should_fail_ex+0x39d/0x4d0 [ 2685.375199][T12332] should_failslab+0x9/0x20 [ 2685.379740][T12332] slab_pre_alloc_hook+0x59/0x310 [ 2685.384821][T12332] ? trace_call_bpf+0x5e9/0x6c0 [ 2685.389734][T12332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2685.395491][T12332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2685.401246][T12332] __kmem_cache_alloc_node+0x53/0x250 [ 2685.406679][T12332] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2685.412436][T12332] __kmalloc+0xa4/0x230 [ 2685.416642][T12332] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2685.422262][T12332] tomoyo_path_number_perm+0x248/0x620 [ 2685.427778][T12332] ? tomoyo_path_number_perm+0x217/0x620 [ 2685.433459][T12332] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2685.438970][T12332] ? ksys_write+0x1c4/0x260 [ 2685.443606][T12332] ? __fget_files+0x28/0x4b0 [ 2685.448229][T12332] ? __fget_files+0x28/0x4b0 [ 2685.452891][T12332] security_file_ioctl+0x70/0xa0 [ 2685.457869][T12332] __se_sys_ioctl+0x48/0x170 [ 2685.462503][T12332] do_syscall_64+0x55/0xa0 [ 2685.466978][T12332] ? clear_bhb_loop+0x40/0x90 [ 2685.471711][T12332] ? clear_bhb_loop+0x40/0x90 [ 2685.476446][T12332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2685.482395][T12332] RIP: 0033:0x7fb6ddd9c819 [ 2685.486852][T12332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2685.506489][T12332] RSP: 002b:00007fb6ded47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2685.514943][T12332] RAX: ffffffffffffffda RBX: 00007fb6de015fa0 RCX: 00007fb6ddd9c819 [ 2685.522947][T12332] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2685.530950][T12332] RBP: 00007fb6ded47090 R08: 0000000000000000 R09: 0000000000000000 [ 2685.538952][T12332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2685.546952][T12332] R13: 00007fb6de016038 R14: 00007fb6de015fa0 R15: 00007fffcf685878 [ 2685.554997][T12332] [ 2685.651235][T12332] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2687.215696][T12358] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.12145'. [ 2687.306291][T12354] netlink: 'syz.1.12152': attribute type 1 has an invalid length. [ 2687.343829][T12354] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.12152'. [ 2687.552188][T12358] : renamed from veth0_to_bond (while UP) [ 2688.444960][T12371] netlink: 'syz.1.12148': attribute type 11 has an invalid length. [ 2688.475577][T12371] netlink: 'syz.1.12148': attribute type 2 has an invalid length. [ 2688.495896][T12371] netlink: 198140 bytes leftover after parsing attributes in process `syz.1.12148'. [ 2688.571727][T12376] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12147'. [ 2688.651461][T12376] team_slave_0: left promiscuous mode [ 2688.657200][T12376] team_slave_0: left allmulticast mode [ 2688.961322][T12376] team0: Port device team_slave_0 removed [ 2688.975451][T12376] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2689.229579][T12382] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2690.730924][T12406] FAULT_INJECTION: forcing a failure. [ 2690.730924][T12406] name failslab, interval 1, probability 0, space 0, times 0 [ 2690.748229][T12406] CPU: 1 PID: 12406 Comm: syz.2.12158 Not tainted syzkaller #0 [ 2690.755846][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2690.765942][T12406] Call Trace: [ 2690.769253][T12406] [ 2690.772206][T12406] dump_stack_lvl+0x18c/0x250 [ 2690.776927][T12406] ? show_regs_print_info+0x20/0x20 [ 2690.782151][T12406] ? load_image+0x420/0x420 [ 2690.786687][T12406] ? __might_sleep+0xe0/0xe0 [ 2690.791350][T12406] ? __lock_acquire+0x7d40/0x7d40 [ 2690.796387][T12406] ? __lock_acquire+0x1273/0x7d40 [ 2690.801434][T12406] should_fail_ex+0x39d/0x4d0 [ 2690.806148][T12406] should_failslab+0x9/0x20 [ 2690.810665][T12406] slab_pre_alloc_hook+0x59/0x310 [ 2690.815717][T12406] kmem_cache_alloc_node+0x60/0x320 [ 2690.820937][T12406] ? __alloc_skb+0x103/0x2c0 [ 2690.825546][T12406] __alloc_skb+0x103/0x2c0 [ 2690.829983][T12406] alloc_skb_with_frags+0xca/0x7b0 [ 2690.835116][T12406] ? trace_event_raw_event_lock+0x250/0x250 [ 2690.841027][T12406] ? __lock_acquire+0x7d40/0x7d40 [ 2690.846079][T12406] ? __lock_acquire+0x1273/0x7d40 [ 2690.851121][T12406] sock_alloc_send_pskb+0x883/0x9a0 [ 2690.856355][T12406] ? sock_kzfree_s+0x50/0x50 [ 2690.860967][T12406] ? verify_lock_unused+0x140/0x140 [ 2690.866188][T12406] ? dev_get_by_index+0x22/0x2d0 [ 2690.871143][T12406] ? dev_get_by_index+0x22/0x2d0 [ 2690.876098][T12406] packet_sendmsg+0x316e/0x4d70 [ 2690.880994][T12406] ? __might_sleep+0xe0/0xe0 [ 2690.885624][T12406] ? verify_lock_unused+0x140/0x140 [ 2690.890834][T12406] ? mark_lock+0x94/0x320 [ 2690.895183][T12406] ? __lock_acquire+0x1273/0x7d40 [ 2690.900231][T12406] ? aa_sk_perm+0x83c/0x970 [ 2690.904762][T12406] ? packet_getsockopt+0xad0/0xad0 [ 2690.910079][T12406] ? aa_sock_msg_perm+0x94/0x150 [ 2690.915041][T12406] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2690.920346][T12406] ? security_socket_sendmsg+0x80/0xa0 [ 2690.925843][T12406] ? packet_getsockopt+0xad0/0xad0 [ 2690.930977][T12406] ____sys_sendmsg+0x5ba/0x960 [ 2690.935764][T12406] ? __lock_acquire+0x7d40/0x7d40 [ 2690.940813][T12406] ? __asan_memset+0x22/0x40 [ 2690.945423][T12406] ? __sys_sendmsg_sock+0x30/0x30 [ 2690.950457][T12406] ? __import_iovec+0x5f2/0x850 [ 2690.955328][T12406] ? import_iovec+0x73/0xa0 [ 2690.959849][T12406] ___sys_sendmsg+0x2a6/0x360 [ 2690.964573][T12406] ? __sys_sendmsg+0x2a0/0x2a0 [ 2690.969369][T12406] ? __lock_acquire+0x7d40/0x7d40 [ 2690.974434][T12406] __se_sys_sendmsg+0x1c2/0x2b0 [ 2690.979328][T12406] ? __x64_sys_sendmsg+0x80/0x80 [ 2690.984296][T12406] ? lockdep_hardirqs_on+0x98/0x150 [ 2690.989524][T12406] do_syscall_64+0x55/0xa0 [ 2690.993957][T12406] ? clear_bhb_loop+0x40/0x90 [ 2690.998646][T12406] ? clear_bhb_loop+0x40/0x90 [ 2691.003370][T12406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2691.009292][T12406] RIP: 0033:0x7f6f9779c819 [ 2691.013720][T12406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2691.033340][T12406] RSP: 002b:00007f6f985b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2691.041809][T12406] RAX: ffffffffffffffda RBX: 00007f6f97a15fa0 RCX: 00007f6f9779c819 [ 2691.049879][T12406] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 2691.057871][T12406] RBP: 00007f6f985b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2691.065860][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2691.073846][T12406] R13: 00007f6f97a16038 R14: 00007f6f97a15fa0 R15: 00007ffdb91b2648 [ 2691.081851][T12406] [ 2691.366006][T12414] netlink: 'syz.3.12160': attribute type 11 has an invalid length. [ 2691.384208][T12414] netlink: 'syz.3.12160': attribute type 2 has an invalid length. [ 2691.418166][T12414] netlink: 198140 bytes leftover after parsing attributes in process `syz.3.12160'. [ 2692.595455][T12427] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2693.559769][T12443] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12169'. [ 2693.679277][T12442] syzkaller0: entered promiscuous mode [ 2693.701199][T12442] syzkaller0: entered allmulticast mode [ 2693.815346][T12449] : renamed from veth0_to_bond (while UP) [ 2693.969056][T12443] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2694.078562][T12446] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.12171'. [ 2694.079792][T12454] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12172'. [ 2694.159736][T12454] team0: Port device team_slave_0 removed [ 2694.177343][T12454] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2694.696254][T12462] netlink: 'syz.0.12173': attribute type 11 has an invalid length. [ 2694.740060][T12462] netlink: 'syz.0.12173': attribute type 2 has an invalid length. [ 2694.774820][T12462] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2699.972806][T12485] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2699.997185][T12486] netlink: 76 bytes leftover after parsing attributes in process `syz.2.12182'. [ 2700.017974][T12488] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12183'. [ 2700.030617][T12488] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2701.613336][T12513] netlink: 'syz.2.12190': attribute type 11 has an invalid length. [ 2701.641227][T12513] netlink: 'syz.2.12190': attribute type 2 has an invalid length. [ 2701.659904][T12513] netlink: 198140 bytes leftover after parsing attributes in process `syz.2.12190'. [ 2703.527591][T12547] netlink: 'syz.1.12202': attribute type 10 has an invalid length. [ 2703.562171][T12547] netlink: 'syz.1.12202': attribute type 10 has an invalid length. [ 2703.599205][T12547] veth0_macvtap: left promiscuous mode [ 2703.831605][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12203'. [ 2704.025527][T12555] mac80211_hwsim hwsim298 ..c: renamed from wlan1 (while UP) [ 2704.612008][T12565] netlink: 212912 bytes leftover after parsing attributes in process `syz.3.12207'. [ 2704.656303][T12565] openvswitch: netlink: IP tunnel dst address not specified [ 2704.693931][T12567] netlink: 'syz.3.12207': attribute type 9 has an invalid length. [ 2704.771992][T12567] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12207'. [ 2705.051305][T12565] netlink: 'syz.3.12207': attribute type 9 has an invalid length. [ 2705.081234][T12565] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.12207'. [ 2705.269248][ T7629] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.335162][ T2138] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2705.353043][ T2138] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2705.362735][ T2138] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2705.391142][ T2138] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2705.401590][ T2138] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2705.418602][ T2138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2705.477629][ T7629] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.714350][ T7629] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2705.972224][ T7629] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2706.761999][T12581] chnl_net:caif_netlink_parms(): no params data found [ 2707.363433][T12581] bridge0: port 1(bridge_slave_0) entered blocking state [ 2707.370751][T12581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2707.379326][T12581] bridge_slave_0: entered allmulticast mode [ 2707.387421][T12581] bridge_slave_0: entered promiscuous mode [ 2707.396952][T12581] bridge0: port 2(bridge_slave_1) entered blocking state [ 2707.404545][T12581] bridge0: port 2(bridge_slave_1) entered disabled state [ 2707.412549][T12581] bridge_slave_1: entered allmulticast mode [ 2707.454337][T12581] bridge_slave_1: entered promiscuous mode [ 2707.461286][ T8213] Bluetooth: hci2: command tx timeout [ 2707.579905][T12581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2707.627478][T12581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2707.677258][T12630] netlink: 'syz.3.12222': attribute type 11 has an invalid length. [ 2707.717886][T12630] netlink: 'syz.3.12222': attribute type 2 has an invalid length. [ 2707.741376][T12630] netlink: 198140 bytes leftover after parsing attributes in process `syz.3.12222'. [ 2708.212896][T12641] netlink: 'syz.2.12225': attribute type 2 has an invalid length. [ 2708.381439][T12635] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12223'. [ 2709.571314][ T8213] Bluetooth: hci2: command tx timeout [ 2709.673896][T12635] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 2709.779466][T12635] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 2709.799594][T12635] .` (unregistering): Released all slaves [ 2709.967344][T12581] team0: Port device team_slave_0 added [ 2710.333601][T12581] team0: Port device team_slave_1 added [ 2710.645029][T12581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2710.701254][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2710.771193][T12581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2711.060130][T12581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2711.089510][T12581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2711.166986][T12581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2711.397648][T12677] netlink: 'syz.2.12233': attribute type 11 has an invalid length. [ 2711.451672][T12677] netlink: 'syz.2.12233': attribute type 2 has an invalid length. [ 2711.459576][T12677] netlink: 198140 bytes leftover after parsing attributes in process `syz.2.12233'. [ 2711.556376][T12581] hsr_slave_0: entered promiscuous mode [ 2711.588326][T12581] hsr_slave_1: entered promiscuous mode [ 2711.621353][ T8213] Bluetooth: hci2: command tx timeout [ 2711.627220][T12581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2711.637159][T12581] Cannot create hsr debugfs directory [ 2711.728575][T12679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2711.736940][T12679] IPv6: NLM_F_CREATE should be set when creating new route [ 2711.745619][T12679] IPv6: NLM_F_CREATE should be set when creating new route [ 2711.753468][T12679] IPv6: NLM_F_CREATE should be set when creating new route [ 2712.185997][T12684] netlink: 'syz.3.12236': attribute type 11 has an invalid length. [ 2712.253902][T12684] netlink: 184116 bytes leftover after parsing attributes in process `syz.3.12236'. [ 2712.827063][T12684] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2712.861273][T12684] CPU: 1 PID: 12684 Comm: syz.3.12236 Not tainted syzkaller #0 [ 2712.868932][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2712.879045][T12684] Call Trace: [ 2712.882370][T12684] [ 2712.885365][T12684] dump_stack_lvl+0x18c/0x250 [ 2712.890122][T12684] ? show_regs_print_info+0x20/0x20 [ 2712.895395][T12684] ? load_image+0x420/0x420 [ 2712.899980][T12684] sysfs_warn_dup+0x8e/0xa0 [ 2712.904538][T12684] sysfs_do_create_link_sd+0xc0/0x110 [ 2712.909965][T12684] device_add_class_symlinks+0x1cf/0x240 [ 2712.915668][T12684] device_add+0x507/0xc20 [ 2712.920064][T12684] wiphy_register+0x1dad/0x2ae0 [ 2712.925085][T12684] ? cfg80211_event_work+0x40/0x40 [ 2712.930248][T12684] ? minstrel_ht_alloc+0x88a/0x990 [ 2712.935430][T12684] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2712.941559][T12684] ieee80211_register_hw+0x3464/0x4250 [ 2712.947113][T12684] ? ieee80211_tasklet_handler+0x20/0x20 [ 2712.952969][T12684] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2712.958923][T12684] ? __debug_object_init+0xec/0x450 [ 2712.964187][T12684] ? __asan_memset+0x22/0x40 [ 2712.968837][T12684] ? __hrtimer_init+0x186/0x270 [ 2712.973740][T12684] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2712.979543][T12684] ? mac80211_hwsim_free+0x220/0x220 [ 2712.984900][T12684] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2712.990071][T12684] ? __nla_validate+0x50/0x50 [ 2712.994810][T12684] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2713.001206][T12684] ? __nla_parse+0x40/0x50 [ 2713.005665][T12684] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2713.012051][T12684] genl_family_rcv_msg_doit+0x211/0x310 [ 2713.017654][T12684] ? end_current_label_crit_section+0x170/0x170 [ 2713.023957][T12684] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2713.029935][T12684] ? bpf_lsm_capable+0x9/0x10 [ 2713.034678][T12684] ? security_capable+0x89/0xb0 [ 2713.039601][T12684] genl_rcv_msg+0x619/0x7a0 [ 2713.044177][T12684] ? genl_bind+0x360/0x360 [ 2713.048643][T12684] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2713.055031][T12684] ? perf_trace_lock+0xfc/0x3b0 [ 2713.059954][T12684] netlink_rcv_skb+0x241/0x4d0 [ 2713.064781][T12684] ? genl_bind+0x360/0x360 [ 2713.069254][T12684] ? netlink_ack+0x1180/0x1180 [ 2713.074096][T12684] ? __lock_acquire+0x7d40/0x7d40 [ 2713.079193][T12684] ? down_read+0x1ac/0x2e0 [ 2713.083660][T12684] genl_rcv+0x28/0x40 [ 2713.087692][T12684] netlink_unicast+0x751/0x8d0 [ 2713.092542][T12684] netlink_sendmsg+0x8d0/0xbf0 [ 2713.097382][T12684] ? netlink_getsockopt+0x590/0x590 [ 2713.102640][T12684] ? aa_sock_msg_perm+0x94/0x150 [ 2713.107636][T12684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2713.112967][T12684] ? security_socket_sendmsg+0x80/0xa0 [ 2713.118473][T12684] ? netlink_getsockopt+0x590/0x590 [ 2713.123734][T12684] ____sys_sendmsg+0x5ba/0x960 [ 2713.128580][T12684] ? __asan_memset+0x22/0x40 [ 2713.133230][T12684] ? __sys_sendmsg_sock+0x30/0x30 [ 2713.138300][T12684] ? __import_iovec+0x5f2/0x850 [ 2713.143211][T12684] ? import_iovec+0x73/0xa0 [ 2713.147759][T12684] ___sys_sendmsg+0x2a6/0x360 [ 2713.152497][T12684] ? __sys_sendmsg+0x2a0/0x2a0 [ 2713.157389][T12684] __se_sys_sendmsg+0x1c2/0x2b0 [ 2713.162298][T12684] ? __x64_sys_sendmsg+0x80/0x80 [ 2713.167493][T12684] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2713.173442][T12684] do_syscall_64+0x55/0xa0 [ 2713.177909][T12684] ? clear_bhb_loop+0x40/0x90 [ 2713.182640][T12684] ? clear_bhb_loop+0x40/0x90 [ 2713.187360][T12684] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2713.193297][T12684] RIP: 0033:0x7fb6ddd9c819 [ 2713.197772][T12684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2713.217524][T12684] RSP: 002b:00007fb6ded47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2713.225990][T12684] RAX: ffffffffffffffda RBX: 00007fb6de015fa0 RCX: 00007fb6ddd9c819 [ 2713.233982][T12684] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2713.242022][T12684] RBP: 00007fb6dde32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2713.250025][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2713.258027][T12684] R13: 00007fb6de016038 R14: 00007fb6de015fa0 R15: 00007fffcf685878 [ 2713.266049][T12684] [ 2713.707448][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.713922][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2713.719417][ T8213] Bluetooth: hci2: command tx timeout [ 2714.522350][T12725] netlink: 'syz.2.12244': attribute type 11 has an invalid length. [ 2714.552108][T12725] netlink: 'syz.2.12244': attribute type 2 has an invalid length. [ 2714.578601][T12725] netlink: 198140 bytes leftover after parsing attributes in process `syz.2.12244'. [ 2715.326975][ T7629] hsr_slave_0: left promiscuous mode [ 2715.411281][ T7629] hsr_slave_1: left promiscuous mode [ 2715.432505][ T7629] bridge_slave_0: left allmulticast mode [ 2715.447201][ T7629] bridge_slave_0: left promiscuous mode [ 2715.474633][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 2715.529227][ T7629] veth1_macvtap: left promiscuous mode [ 2717.492439][ T7629] team0 (unregistering): Port device geneve1 removed [ 2718.186447][T12768] netlink: 'syz.0.12253': attribute type 41 has an invalid length. [ 2718.188148][T12769] netlink: 'syz.0.12253': attribute type 41 has an invalid length. [ 2718.239167][T12770] netlink: 668 bytes leftover after parsing attributes in process `syz.0.12253'. [ 2718.287442][T12770] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2718.326973][T12770] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2718.638139][ T7629] team0 (unregistering): Port device team_slave_1 removed [ 2719.621761][T12769] netlink: 'syz.0.12253': attribute type 41 has an invalid length. [ 2720.053990][T12780] netlink: 'syz.2.12255': attribute type 3 has an invalid length. [ 2720.074326][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12254'. [ 2720.089574][T12780] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12255'. [ 2720.144450][T12581] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2720.259481][T12581] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2720.323095][T12581] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2720.399877][T12581] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2720.728185][T12787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2721.070048][T12581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2721.194822][T12581] 8021q: adding VLAN 0 to HW filter on device team0 [ 2721.273951][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 2721.281231][ T7632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2721.319227][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 2721.326501][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2722.326210][T12581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2722.488578][T12581] veth0_vlan: entered promiscuous mode [ 2722.549223][T12581] veth1_vlan: entered promiscuous mode [ 2722.646805][T12581] veth0_macvtap: entered promiscuous mode [ 2722.679589][T12581] veth1_macvtap: entered promiscuous mode [ 2722.729266][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2722.763346][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2722.780446][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2722.794596][T12834] netlink: 44 bytes leftover after parsing attributes in process `syz.0.12267'. [ 2722.810528][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2722.837577][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2722.904350][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2722.978178][T12581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2723.013025][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: 0 [ 2723.086809][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2723.128610][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2723.171073][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2723.203331][T12581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2723.213904][T12581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2723.236130][T12581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2723.263865][T12581] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.299912][T12581] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.310087][T12581] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.319454][T12581] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2723.920662][ T7626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2723.956647][ T7626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2724.044032][T12856] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.12271'. [ 2724.053872][ T7626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2724.074646][ T7626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2724.107530][T12856] netlink: 'syz.3.12271': attribute type 3 has an invalid length. [ 2724.299810][T12867] FAULT_INJECTION: forcing a failure. [ 2724.299810][T12867] name failslab, interval 1, probability 0, space 0, times 0 [ 2724.341643][T12867] CPU: 1 PID: 12867 Comm: syz.1.12206 Not tainted syzkaller #0 [ 2724.349275][T12867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2724.359382][T12867] Call Trace: [ 2724.362697][T12867] [ 2724.365663][T12867] dump_stack_lvl+0x18c/0x250 [ 2724.370396][T12867] ? show_regs_print_info+0x20/0x20 [ 2724.375657][T12867] ? load_image+0x420/0x420 [ 2724.380226][T12867] ? __lock_acquire+0x7d40/0x7d40 [ 2724.385302][T12867] ? do_syscall_64+0x55/0xa0 [ 2724.389957][T12867] should_fail_ex+0x39d/0x4d0 [ 2724.394690][T12867] should_failslab+0x9/0x20 [ 2724.399238][T12867] slab_pre_alloc_hook+0x59/0x310 [ 2724.404329][T12867] ? bpf_sk_storage_diag_alloc+0x226/0x6a0 [ 2724.410194][T12867] ? bpf_sk_storage_diag_alloc+0x226/0x6a0 [ 2724.416045][T12867] __kmem_cache_alloc_node+0x53/0x250 [ 2724.421475][T12867] ? bpf_sk_storage_diag_alloc+0x226/0x6a0 [ 2724.427337][T12867] __kmalloc+0xa4/0x230 [ 2724.431629][T12867] bpf_sk_storage_diag_alloc+0x226/0x6a0 [ 2724.437354][T12867] __inet_diag_dump_start+0x325/0x9f0 [ 2724.442889][T12867] ? netlink_lookup+0x30/0x200 [ 2724.447737][T12867] __netlink_dump_start+0x4a9/0x810 [ 2724.453009][T12867] inet_diag_rcv_msg_compat+0x215/0x440 [ 2724.458620][T12867] ? __inet_diag_dump+0x380/0x380 [ 2724.463701][T12867] ? sock_diag_rcv_msg+0xd1/0x600 [ 2724.468780][T12867] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 2724.474552][T12867] ? inet_diag_dump_start_compat+0x20/0x20 [ 2724.480404][T12867] ? inet_diag_dump+0x50/0x50 [ 2724.485143][T12867] ? __inet_diag_dump+0x380/0x380 [ 2724.490213][T12867] sock_diag_rcv_msg+0x3d8/0x600 [ 2724.495200][T12867] netlink_rcv_skb+0x241/0x4d0 [ 2724.500020][T12867] ? sock_diag_bind+0xb0/0xb0 [ 2724.504754][T12867] ? netlink_ack+0x1180/0x1180 [ 2724.509587][T12867] ? __lock_acquire+0x7d40/0x7d40 [ 2724.514657][T12867] ? netlink_deliver_tap+0x2e/0x1b0 [ 2724.519998][T12867] sock_diag_rcv+0x2a/0x40 [ 2724.524458][T12867] netlink_unicast+0x751/0x8d0 [ 2724.529282][T12867] netlink_sendmsg+0x8d0/0xbf0 [ 2724.534110][T12867] ? netlink_getsockopt+0x590/0x590 [ 2724.539356][T12867] ? aa_sock_msg_perm+0x94/0x150 [ 2724.544346][T12867] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2724.549674][T12867] ? security_socket_sendmsg+0x80/0xa0 [ 2724.555169][T12867] ? netlink_getsockopt+0x590/0x590 [ 2724.560414][T12867] ____sys_sendmsg+0x5ba/0x960 [ 2724.565224][T12867] ? __asan_memset+0x22/0x40 [ 2724.569861][T12867] ? __sys_sendmsg_sock+0x30/0x30 [ 2724.574945][T12867] ? __import_iovec+0x5f2/0x850 [ 2724.579890][T12867] ? import_iovec+0x73/0xa0 [ 2724.584534][T12867] ___sys_sendmsg+0x2a6/0x360 [ 2724.589261][T12867] ? __sys_sendmsg+0x2a0/0x2a0 [ 2724.594097][T12867] ? __lock_acquire+0x7d40/0x7d40 [ 2724.599252][T12867] __se_sys_sendmsg+0x1c2/0x2b0 [ 2724.604163][T12867] ? __x64_sys_sendmsg+0x80/0x80 [ 2724.609175][T12867] ? lockdep_hardirqs_on+0x98/0x150 [ 2724.614416][T12867] do_syscall_64+0x55/0xa0 [ 2724.618870][T12867] ? clear_bhb_loop+0x40/0x90 [ 2724.623581][T12867] ? clear_bhb_loop+0x40/0x90 [ 2724.628309][T12867] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2724.634239][T12867] RIP: 0033:0x7fbd8dd9c819 [ 2724.638701][T12867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2724.658451][T12867] RSP: 002b:00007fbd8ed22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2724.667003][T12867] RAX: ffffffffffffffda RBX: 00007fbd8e015fa0 RCX: 00007fbd8dd9c819 [ 2724.675010][T12867] RDX: 0000000004040010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2724.683057][T12867] RBP: 00007fbd8ed22090 R08: 0000000000000000 R09: 0000000000000000 [ 2724.691077][T12867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2724.699113][T12867] R13: 00007fbd8e016038 R14: 00007fbd8e015fa0 R15: 00007ffe948342f8 [ 2724.707158][T12867] [ 2724.812747][T12869] netlink: 'syz.3.12274': attribute type 11 has an invalid length. [ 2724.820843][T12869] netlink: 'syz.3.12274': attribute type 2 has an invalid length. [ 2724.841247][T12869] netlink: 198140 bytes leftover after parsing attributes in process `syz.3.12274'. [ 2726.095680][ T2138] Bluetooth: hci4: command 0x0406 tx timeout [ 2726.919717][T12907] netlink: 'syz.2.12284': attribute type 11 has an invalid length. [ 2726.929294][T12907] netlink: 'syz.2.12284': attribute type 2 has an invalid length. [ 2726.940087][T12907] netlink: 198140 bytes leftover after parsing attributes in process `syz.2.12284'. [ 2731.904846][T12978] FAULT_INJECTION: forcing a failure. [ 2731.904846][T12978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2731.920550][T12978] CPU: 1 PID: 12978 Comm: syz.2.12295 Not tainted syzkaller #0 [ 2731.928158][T12978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2731.938261][T12978] Call Trace: [ 2731.941581][T12978] [ 2731.944539][T12978] dump_stack_lvl+0x18c/0x250 [ 2731.949257][T12978] ? show_regs_print_info+0x20/0x20 [ 2731.954578][T12978] ? load_image+0x420/0x420 [ 2731.959113][T12978] ? __lock_acquire+0x7d40/0x7d40 [ 2731.964169][T12978] should_fail_ex+0x39d/0x4d0 [ 2731.968882][T12978] _copy_from_user+0x2f/0xe0 [ 2731.973494][T12978] __copy_msghdr+0x3bb/0x580 [ 2731.978137][T12978] ___sys_sendmsg+0x214/0x360 [ 2731.982923][T12978] ? __sys_sendmsg+0x2a0/0x2a0 [ 2731.987726][T12978] ? __lock_acquire+0x7d40/0x7d40 [ 2731.992800][T12978] __se_sys_sendmsg+0x1c2/0x2b0 [ 2731.997673][T12978] ? __x64_sys_sendmsg+0x80/0x80 [ 2732.002652][T12978] ? lockdep_hardirqs_on+0x98/0x150 [ 2732.007899][T12978] do_syscall_64+0x55/0xa0 [ 2732.012332][T12978] ? clear_bhb_loop+0x40/0x90 [ 2732.017024][T12978] ? clear_bhb_loop+0x40/0x90 [ 2732.021757][T12978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2732.027664][T12978] RIP: 0033:0x7f6f9779c819 [ 2732.032106][T12978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2732.051748][T12978] RSP: 002b:00007f6f985b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2732.060179][T12978] RAX: ffffffffffffffda RBX: 00007f6f97a15fa0 RCX: 00007f6f9779c819 [ 2732.068169][T12978] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 2732.076154][T12978] RBP: 00007f6f985b5090 R08: 0000000000000000 R09: 0000000000000000 [ 2732.084138][T12978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2732.092207][T12978] R13: 00007f6f97a16038 R14: 00007f6f97a15fa0 R15: 00007ffdb91b2648 [ 2732.100267][T12978] [ 2732.281444][T12981] netlink: 'syz.0.12296': attribute type 3 has an invalid length. [ 2735.573876][T13015] netlink: 'syz.2.12307': attribute type 29 has an invalid length. [ 2735.610017][T13015] netlink: 'syz.2.12307': attribute type 29 has an invalid length. [ 2735.666003][T13013] netlink: 'syz.2.12307': attribute type 29 has an invalid length. [ 2738.866081][T13070] netlink: 'syz.2.12326': attribute type 10 has an invalid length. [ 2738.882397][T13070] bond0: (slave bond_slave_0): Releasing backup interface [ 2739.403509][T13074] netlink: 'syz.1.12328': attribute type 10 has an invalid length. [ 2739.490293][T13074] team0: Port device geneve1 added [ 2741.296066][T13100] : port 1(gretap0) entered blocking state [ 2741.354434][T13100] : port 1(gretap0) entered disabled state [ 2741.398919][T13100] gretap0: entered allmulticast mode [ 2741.492204][T13109] netlink: 'syz.1.12334': attribute type 29 has an invalid length. [ 2741.747401][T13111] netlink: 'syz.1.12334': attribute type 29 has an invalid length. [ 2742.122049][T13100] gretap0: entered promiscuous mode [ 2742.133394][T13109] netlink: 'syz.1.12334': attribute type 29 has an invalid length. [ 2742.161282][T13102] : port 2(veth0_to_team) entered blocking state [ 2742.168197][T13102] : port 2(veth0_to_team) entered disabled state [ 2742.191908][T13102] veth0_to_team: entered allmulticast mode [ 2742.221692][T13102] veth0_to_team: entered promiscuous mode [ 2747.339342][T13162] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12350'. [ 2747.355542][T13159] : port 1(veth0_to_team) entered blocking state [ 2747.381183][T13159] : port 1(veth0_to_team) entered disabled state [ 2747.388055][T13159] veth0_to_team: entered allmulticast mode [ 2747.522569][T13159] veth0_to_team: entered promiscuous mode [ 2748.015528][T13173] netlink: 40451 bytes leftover after parsing attributes in process `syz.0.12349'. [ 2748.113400][T13175] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12349'. [ 2748.381631][T13179] netlink: 'syz.3.12353': attribute type 10 has an invalid length. [ 2748.721141][T13179] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12353'. [ 2750.543994][T13194] netlink: 'syz.3.12357': attribute type 10 has an invalid length. [ 2750.583765][T13194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12357'. [ 2750.734539][T13194] ipvlan1: entered promiscuous mode [ 2750.811216][T13194] ipvlan1: entered allmulticast mode [ 2750.828978][T13194] veth0_vlan: entered allmulticast mode [ 2750.877924][T13194] bridge0: port 4(ipvlan1) entered blocking state [ 2750.960905][T13194] bridge0: port 4(ipvlan1) entered disabled state [ 2751.049969][T13194] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2751.840515][T13214] FAULT_INJECTION: forcing a failure. [ 2751.840515][T13214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2751.931194][T13214] CPU: 0 PID: 13214 Comm: syz.3.12362 Not tainted syzkaller #0 [ 2751.938846][T13214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2751.948963][T13214] Call Trace: [ 2751.952293][T13214] [ 2751.955263][T13214] dump_stack_lvl+0x18c/0x250 [ 2751.960017][T13214] ? show_regs_print_info+0x20/0x20 [ 2751.965366][T13214] ? load_image+0x420/0x420 [ 2751.969932][T13214] ? __might_fault+0xaa/0x120 [ 2751.974659][T13214] ? __lock_acquire+0x7d40/0x7d40 [ 2751.979739][T13214] should_fail_ex+0x39d/0x4d0 [ 2751.984537][T13214] _copy_from_user+0x2f/0xe0 [ 2751.989165][T13214] kstrtouint_from_user+0xde/0x170 [ 2751.994300][T13214] ? kstrtol_from_user+0x190/0x190 [ 2751.999534][T13214] proc_fail_nth_write+0x8f/0x250 [ 2752.004583][T13214] ? proc_fail_nth_read+0x260/0x260 [ 2752.009806][T13214] ? proc_fail_nth_read+0x260/0x260 [ 2752.015027][T13214] vfs_write+0x296/0x990 [ 2752.019300][T13214] ? file_end_write+0x250/0x250 [ 2752.024185][T13214] ? __fget_files+0x28/0x4b0 [ 2752.028810][T13214] ? __fget_files+0x28/0x4b0 [ 2752.033512][T13214] ? __fget_files+0x43d/0x4b0 [ 2752.038217][T13214] ? __fdget_pos+0x2a3/0x330 [ 2752.042828][T13214] ? ksys_write+0x75/0x260 [ 2752.047269][T13214] ksys_write+0x150/0x260 [ 2752.051619][T13214] ? __ia32_sys_read+0x90/0x90 [ 2752.056407][T13214] ? lockdep_hardirqs_on+0x98/0x150 [ 2752.061626][T13214] do_syscall_64+0x55/0xa0 [ 2752.066065][T13214] ? clear_bhb_loop+0x40/0x90 [ 2752.070765][T13214] ? clear_bhb_loop+0x40/0x90 [ 2752.075558][T13214] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2752.081584][T13214] RIP: 0033:0x7fb6ddd5d04e [ 2752.086024][T13214] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2752.105746][T13214] RSP: 002b:00007fb6ded25fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2752.114189][T13214] RAX: ffffffffffffffda RBX: 00007fb6ded266c0 RCX: 00007fb6ddd5d04e [ 2752.122176][T13214] RDX: 0000000000000001 RSI: 00007fb6ded260a0 RDI: 0000000000000004 [ 2752.130167][T13214] RBP: 00007fb6ded26090 R08: 0000000000000000 R09: 0000000000000000 [ 2752.138157][T13214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2752.146147][T13214] R13: 00007fb6de016128 R14: 00007fb6de016090 R15: 00007fffcf685878 [ 2752.154414][T13214] [ 2752.432522][T13218] : port 1(gretap0) entered blocking state [ 2752.446690][T13218] : port 1(gretap0) entered disabled state [ 2752.461314][T13218] gretap0: entered allmulticast mode [ 2752.533676][T13218] gretap0: entered promiscuous mode [ 2752.622606][T13218] : port 2(veth0_to_team) entered blocking state [ 2752.629498][T13218] : port 2(veth0_to_team) entered disabled state [ 2752.646829][T13218] veth0_to_team: entered allmulticast mode [ 2752.677109][T13218] veth0_to_team: entered promiscuous mode [ 2754.219628][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12368'. [ 2756.755243][T13262] sit0: entered allmulticast mode [ 2758.690012][T13290] netlink: 'syz.0.12384': attribute type 3 has an invalid length. [ 2758.741234][T13290] netlink: 106052 bytes leftover after parsing attributes in process `syz.0.12384'. [ 2758.781670][T13285] netlink: 'syz.0.12384': attribute type 21 has an invalid length. [ 2758.856820][T13285] netlink: 'syz.0.12384': attribute type 6 has an invalid length. [ 2759.057067][T13295] netlink: 'syz.0.12384': attribute type 10 has an invalid length. [ 2759.088407][T13295] netlink: 55 bytes leftover after parsing attributes in process `syz.0.12384'. [ 2759.353382][T13295] veth0_macvtap: left promiscuous mode [ 2760.236600][T13302] FAULT_INJECTION: forcing a failure. [ 2760.236600][T13302] name failslab, interval 1, probability 0, space 0, times 0 [ 2760.269803][T13302] CPU: 1 PID: 13302 Comm: syz.0.12387 Not tainted syzkaller #0 [ 2760.277443][T13302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2760.287543][T13302] Call Trace: [ 2760.290855][T13302] [ 2760.293819][T13302] dump_stack_lvl+0x18c/0x250 [ 2760.298553][T13302] ? show_regs_print_info+0x20/0x20 [ 2760.303807][T13302] ? load_image+0x420/0x420 [ 2760.308448][T13302] ? __might_sleep+0xe0/0xe0 [ 2760.313082][T13302] ? __lock_acquire+0x7d40/0x7d40 [ 2760.318161][T13302] should_fail_ex+0x39d/0x4d0 [ 2760.322915][T13302] should_failslab+0x9/0x20 [ 2760.327474][T13302] slab_pre_alloc_hook+0x59/0x310 [ 2760.332558][T13302] ? tomoyo_encode+0x28b/0x540 [ 2760.337366][T13302] ? tomoyo_encode+0x28b/0x540 [ 2760.342199][T13302] __kmem_cache_alloc_node+0x53/0x250 [ 2760.347652][T13302] ? tomoyo_encode+0x28b/0x540 [ 2760.352478][T13302] __kmalloc+0xa4/0x230 [ 2760.356700][T13302] tomoyo_encode+0x28b/0x540 [ 2760.361347][T13302] tomoyo_realpath_from_path+0x592/0x5d0 [ 2760.367040][T13302] tomoyo_path_number_perm+0x248/0x620 [ 2760.372562][T13302] ? tomoyo_path_number_perm+0x217/0x620 [ 2760.378257][T13302] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2760.383770][T13302] ? ksys_write+0x1c4/0x260 [ 2760.388357][T13302] ? __fget_files+0x28/0x4b0 [ 2760.392997][T13302] ? __fget_files+0x28/0x4b0 [ 2760.397660][T13302] security_file_ioctl+0x70/0xa0 [ 2760.402646][T13302] __se_sys_ioctl+0x48/0x170 [ 2760.407304][T13302] do_syscall_64+0x55/0xa0 [ 2760.411879][T13302] ? clear_bhb_loop+0x40/0x90 [ 2760.416615][T13302] ? clear_bhb_loop+0x40/0x90 [ 2760.421349][T13302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2760.427299][T13302] RIP: 0033:0x7f297219c819 [ 2760.431768][T13302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2760.451523][T13302] RSP: 002b:00007f297308d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2760.459997][T13302] RAX: ffffffffffffffda RBX: 00007f2972415fa0 RCX: 00007f297219c819 [ 2760.468017][T13302] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 2760.476039][T13302] RBP: 00007f297308d090 R08: 0000000000000000 R09: 0000000000000000 [ 2760.484065][T13302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2760.493050][T13302] R13: 00007f2972416038 R14: 00007f2972415fa0 R15: 00007ffc6b15eef8 [ 2760.501191][T13302] [ 2760.546027][T13302] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2760.591499][T13304] netlink: 'syz.2.12388': attribute type 11 has an invalid length. [ 2760.599602][T13304] netlink: 'syz.2.12388': attribute type 2 has an invalid length. [ 2760.609866][T13304] netlink: 198140 bytes leftover after parsing attributes in process `syz.2.12388'. [ 2763.229105][T13332] netlink: 'syz.1.12398': attribute type 29 has an invalid length. [ 2763.282034][T13332] netlink: 'syz.1.12398': attribute type 29 has an invalid length. [ 2763.343068][T13332] netlink: 'syz.1.12398': attribute type 29 has an invalid length. [ 2763.417346][T13332] netlink: 'syz.1.12398': attribute type 29 has an invalid length. [ 2764.146074][T13341] delete_channel: no stack [ 2765.401591][T13363] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12406'. [ 2765.956669][T13374] validate_nla: 1 callbacks suppressed [ 2765.956689][T13374] netlink: 'syz.0.12411': attribute type 11 has an invalid length. [ 2765.996910][T13374] netlink: 'syz.0.12411': attribute type 2 has an invalid length. [ 2766.021454][T13374] netlink: 198140 bytes leftover after parsing attributes in process `syz.0.12411'. [ 2766.332142][T13381] netlink: 'syz.0.12413': attribute type 10 has an invalid length. [ 2766.624083][T13386] veth1_virt_wifi: mtu less than device minimum [ 2766.831797][T13388] netlink: 'syz.1.12416': attribute type 10 has an invalid length. [ 2766.877654][T13388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12416'. [ 2766.921702][T13388] batman_adv: batadv0: Adding interface: vlan1 [ 2766.946297][T13388] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2767.000047][ T2138] Bluetooth: hci0: command 0x0406 tx timeout [ 2767.056796][T13388] batman_adv: batadv0: Interface activated: vlan1 [ 2767.265514][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.274784][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.284058][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.293352][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.302559][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.311767][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.320947][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.330196][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.339398][T13385] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 2767.654200][T13390] netlink: 'syz.1.12417': attribute type 6 has an invalid length. [ 2767.697159][T13390] netlink: 'syz.1.12417': attribute type 1 has an invalid length. [ 2767.712027][T13390] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.12417'. [ 2768.154521][T13400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12421'. [ 2768.210423][T13400] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12421'. [ 2768.262156][T13405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12421'. [ 2768.494730][T13404] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12423'. [ 2768.509398][T13408] netlink: 'syz.3.12424': attribute type 10 has an invalid length. [ 2768.594288][T13408] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.12424'. [ 2770.623327][T13423] netlink: 'syz.2.12429': attribute type 29 has an invalid length. [ 2770.704071][T13423] netlink: 'syz.2.12429': attribute type 29 has an invalid length. [ 2770.746536][T13424] FAULT_INJECTION: forcing a failure. [ 2770.746536][T13424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2770.762967][T13424] CPU: 1 PID: 13424 Comm: syz.2.12429 Not tainted syzkaller #0 [ 2770.770763][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2770.780859][T13424] Call Trace: [ 2770.784172][T13424] [ 2770.787134][T13424] dump_stack_lvl+0x18c/0x250 [ 2770.791867][T13424] ? show_regs_print_info+0x20/0x20 [ 2770.797111][T13424] ? load_image+0x420/0x420 [ 2770.801654][T13424] ? __might_fault+0xaa/0x120 [ 2770.806371][T13424] ? __lock_acquire+0x7d40/0x7d40 [ 2770.811453][T13424] should_fail_ex+0x39d/0x4d0 [ 2770.816175][T13424] _copy_from_user+0x2f/0xe0 [ 2770.820785][T13424] ___sys_recvmsg+0x176/0x590 [ 2770.825574][T13424] ? __sys_recvmsg+0x2a0/0x2a0 [ 2770.830358][T13424] ? ksys_write+0x1c4/0x260 [ 2770.834900][T13424] ? __fget_files+0x43d/0x4b0 [ 2770.839610][T13424] __x64_sys_recvmsg+0x20c/0x2e0 [ 2770.844565][T13424] ? ___sys_recvmsg+0x590/0x590 [ 2770.849452][T13424] ? lockdep_hardirqs_on+0x98/0x150 [ 2770.854683][T13424] do_syscall_64+0x55/0xa0 [ 2770.859115][T13424] ? clear_bhb_loop+0x40/0x90 [ 2770.863806][T13424] ? clear_bhb_loop+0x40/0x90 [ 2770.868510][T13424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2770.874422][T13424] RIP: 0033:0x7f6f9779c819 [ 2770.878862][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2770.898489][T13424] RSP: 002b:00007f6f98594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2770.906922][T13424] RAX: ffffffffffffffda RBX: 00007f6f97a16090 RCX: 00007f6f9779c819 [ 2770.914910][T13424] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 2770.922896][T13424] RBP: 00007f6f98594090 R08: 0000000000000000 R09: 0000000000000000 [ 2770.930976][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2770.939063][T13424] R13: 00007f6f97a16128 R14: 00007f6f97a16090 R15: 00007ffdb91b2648 [ 2770.947069][T13424] [ 2771.566364][T13437] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12432'. [ 2771.605007][T13430] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12432'. [ 2772.059671][T13441] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12435'. [ 2773.056423][T13446] netlink: 'syz.1.12438': attribute type 11 has an invalid length. [ 2773.084746][T13446] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.12438'. [ 2773.209436][T13452] netlink: 'syz.1.12440': attribute type 4 has an invalid length. [ 2773.217687][T13452] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12440'. [ 2773.233566][T13452] .`: renamed from bond0 (while UP) [ 2774.025745][T13456] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12442'. [ 2774.053311][T13456] net_ratelimit: 55 callbacks suppressed [ 2774.053329][T13456] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2774.535148][T13468] netlink: 'syz.3.12446': attribute type 1 has an invalid length. [ 2774.584924][T13468] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.12446'. [ 2774.592402][T13466] netlink: 668 bytes leftover after parsing attributes in process `syz.2.12447'. [ 2774.622064][T13466] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2774.701551][T13466] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2774.998347][T13473] netlink: 'syz.3.12449': attribute type 10 has an invalid length. [ 2775.026372][T13473] bridge_slave_1: left allmulticast mode [ 2775.049863][T13473] bridge_slave_1: left promiscuous mode [ 2775.078465][T13473] bridge0: port 2(bridge_slave_1) entered disabled state [ 2775.138660][T13476] netlink: 'syz.2.12450': attribute type 2 has an invalid length. [ 2775.149463][T13476] netlink: 'syz.2.12450': attribute type 8 has an invalid length. [ 2775.159087][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.168132][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.174952][T13476] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12450'. [ 2777.486932][T13513] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12461'. [ 2777.572759][T13513] netlink: 'syz.1.12461': attribute type 1 has an invalid length. [ 2777.580669][T13513] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.12461'. [ 2777.609018][T13515] netlink: 'syz.0.12462': attribute type 10 has an invalid length. [ 2777.621524][T13508] delete_channel: no stack [ 2777.631225][T13515] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12462'. [ 2778.275777][T13523] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12465'. [ 2779.280006][T13533] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12469'. [ 2781.721530][T13592] sctp: [Deprecated]: syz.1.12482 (pid 13592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2781.721530][T13592] Use struct sctp_sack_info instead [ 2782.903131][T13609] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.12494'. [ 2784.671526][T13608] delete_channel: no stack [ 2787.322075][T13621] netlink: 'syz.2.12497': attribute type 4 has an invalid length. [ 2789.352144][T13648] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12503'. [ 2789.391120][T13648] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2790.080140][ T8213] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 2790.081690][ T2138] Bluetooth: hci4: hardware error 0x00 [ 2790.557448][T13673] sit0: entered allmulticast mode [ 2790.637977][T13672] Q6`Ҙ: renamed from lo (while UP) [ 2790.822110][T13678] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12512'. [ 2791.378437][T13683] netlink: 144 bytes leftover after parsing attributes in process `syz.2.12514'. [ 2792.281239][ T2138] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 2792.502949][T13692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12518'. [ 2792.572701][T13692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12518'. [ 2792.621540][T13697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12518'. [ 2792.993360][T13701] netlink: 'syz.3.12519': attribute type 11 has an invalid length. [ 2793.026840][T13701] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12519'. [ 2793.338260][ T2138] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 2794.592590][T13731] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12526'. [ 2795.193153][T13725] syzkaller0: entered promiscuous mode [ 2795.198721][T13725] syzkaller0: entered allmulticast mode [ 2795.254853][T13731] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2795.321587][T13731] CPU: 1 PID: 13731 Comm: syz.2.12526 Not tainted syzkaller #0 [ 2795.329236][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2795.339345][T13731] Call Trace: [ 2795.342658][T13731] [ 2795.345620][T13731] dump_stack_lvl+0x18c/0x250 [ 2795.350358][T13731] ? show_regs_print_info+0x20/0x20 [ 2795.355607][T13731] ? load_image+0x420/0x420 [ 2795.360173][T13731] sysfs_warn_dup+0x8e/0xa0 [ 2795.364721][T13731] sysfs_do_create_link_sd+0xc0/0x110 [ 2795.370142][T13731] device_add_class_symlinks+0x1cf/0x240 [ 2795.375828][T13731] device_add+0x507/0xc20 [ 2795.380217][T13731] wiphy_register+0x1dad/0x2ae0 [ 2795.385142][T13731] ? cfg80211_event_work+0x40/0x40 [ 2795.390289][T13731] ? minstrel_ht_alloc+0x88a/0x990 [ 2795.395470][T13731] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2795.401595][T13731] ieee80211_register_hw+0x3464/0x4250 [ 2795.407135][T13731] ? ieee80211_tasklet_handler+0x20/0x20 [ 2795.412810][T13731] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2795.418859][T13731] ? __debug_object_init+0xec/0x450 [ 2795.424129][T13731] ? __asan_memset+0x22/0x40 [ 2795.428774][T13731] ? __hrtimer_init+0x186/0x270 [ 2795.433681][T13731] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2795.439481][T13731] ? mac80211_hwsim_free+0x220/0x220 [ 2795.444812][T13731] ? rcu_is_watching+0x15/0xb0 [ 2795.449628][T13731] ? kstrndup+0xbd/0x140 [ 2795.453941][T13731] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2795.459103][T13731] ? __nla_validate+0x50/0x50 [ 2795.463837][T13731] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2795.470231][T13731] ? __nla_parse+0x40/0x50 [ 2795.474696][T13731] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2795.481086][T13731] genl_family_rcv_msg_doit+0x211/0x310 [ 2795.486696][T13731] ? end_current_label_crit_section+0x170/0x170 [ 2795.493174][T13731] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2795.499138][T13731] ? bpf_lsm_capable+0x9/0x10 [ 2795.503904][T13731] ? security_capable+0x89/0xb0 [ 2795.508830][T13731] genl_rcv_msg+0x619/0x7a0 [ 2795.513389][T13731] ? genl_bind+0x360/0x360 [ 2795.517881][T13731] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2795.524347][T13731] ? perf_trace_lock+0xfc/0x3b0 [ 2795.529249][T13731] netlink_rcv_skb+0x241/0x4d0 [ 2795.534067][T13731] ? genl_bind+0x360/0x360 [ 2795.538521][T13731] ? netlink_ack+0x1180/0x1180 [ 2795.543354][T13731] ? __lock_acquire+0x7d40/0x7d40 [ 2795.548431][T13731] ? down_read+0x1ac/0x2e0 [ 2795.552893][T13731] genl_rcv+0x28/0x40 [ 2795.556947][T13731] netlink_unicast+0x751/0x8d0 [ 2795.562043][T13731] netlink_sendmsg+0x8d0/0xbf0 [ 2795.566898][T13731] ? netlink_getsockopt+0x590/0x590 [ 2795.572159][T13731] ? aa_sock_msg_perm+0x94/0x150 [ 2795.577165][T13731] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2795.582492][T13731] ? security_socket_sendmsg+0x80/0xa0 [ 2795.587997][T13731] ? netlink_getsockopt+0x590/0x590 [ 2795.593251][T13731] ____sys_sendmsg+0x5ba/0x960 [ 2795.598082][T13731] ? __asan_memset+0x22/0x40 [ 2795.602721][T13731] ? __sys_sendmsg_sock+0x30/0x30 [ 2795.607911][T13731] ? __import_iovec+0x5f2/0x850 [ 2795.612825][T13731] ? import_iovec+0x73/0xa0 [ 2795.617372][T13731] ___sys_sendmsg+0x2a6/0x360 [ 2795.622189][T13731] ? __sys_sendmsg+0x2a0/0x2a0 [ 2795.627073][T13731] __se_sys_sendmsg+0x1c2/0x2b0 [ 2795.631980][T13731] ? __x64_sys_sendmsg+0x80/0x80 [ 2795.636986][T13731] ? lockdep_hardirqs_on+0x98/0x150 [ 2795.642243][T13731] do_syscall_64+0x55/0xa0 [ 2795.646738][T13731] ? clear_bhb_loop+0x40/0x90 [ 2795.651478][T13731] ? clear_bhb_loop+0x40/0x90 [ 2795.656204][T13731] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2795.662144][T13731] RIP: 0033:0x7f6f9779c819 [ 2795.666608][T13731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2795.686281][T13731] RSP: 002b:00007f6f94dae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2795.694850][T13731] RAX: ffffffffffffffda RBX: 00007f6f97a16450 RCX: 00007f6f9779c819 [ 2795.702874][T13731] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000e [ 2795.710892][T13731] RBP: 00007f6f97832c91 R08: 0000000000000000 R09: 0000000000000000 [ 2795.718910][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2795.726950][T13731] R13: 00007f6f97a164e8 R14: 00007f6f97a16450 R15: 00007ffdb91b2648 [ 2795.735011][T13731] [ 2797.429681][ T2138] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2797.440398][ T2138] Bluetooth: hci2: Injecting HCI hardware error event [ 2797.459808][ T8213] Bluetooth: hci2: hardware error 0x00 [ 2799.623007][ T8213] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2804.320333][T13739] Q6`Ҙ: renamed from lo (while UP) [ 2804.323230][T13751] netlink: 'syz.3.12533': attribute type 11 has an invalid length. [ 2804.339421][T13751] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12533'. [ 2805.842007][T13789] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.12543'. [ 2807.678525][T13808] netlink: 'syz.0.12547': attribute type 11 has an invalid length. [ 2807.717245][T13808] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12547'. [ 2809.217902][ T8213] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 2809.748536][T13836] delete_channel: no stack [ 2809.810059][T13836] delete_channel: no stack [ 2810.456135][T13848] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.12560'. [ 2810.541292][T13848] netlink: 21096 bytes leftover after parsing attributes in process `syz.3.12560'. [ 2810.587657][T13848] tipc: Started in network mode [ 2810.641315][T13848] tipc: Node identity 1a, cluster identity 4711 [ 2810.647638][T13848] tipc: Node number set to 26 [ 2813.278602][ T8213] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2813.287374][ T8213] Bluetooth: hci0: Injecting HCI hardware error event [ 2813.296701][ T8213] Bluetooth: hci0: hardware error 0x00 [ 2814.250571][T13873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12566'. [ 2814.359257][T13863] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.12565'. [ 2814.871835][T13885] netlink: 'syz.3.12571': attribute type 10 has an invalid length. [ 2814.909921][T13885] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2815.916272][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12575'. [ 2816.270472][ T8213] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2819.999142][T13924] FAULT_INJECTION: forcing a failure. [ 2819.999142][T13924] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.136453][T13924] CPU: 0 PID: 13924 Comm: syz.1.12582 Not tainted syzkaller #0 [ 2820.144194][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2820.154308][T13924] Call Trace: [ 2820.157622][T13924] [ 2820.160584][T13924] dump_stack_lvl+0x18c/0x250 [ 2820.165319][T13924] ? show_regs_print_info+0x20/0x20 [ 2820.170552][T13924] ? load_image+0x420/0x420 [ 2820.175094][T13924] ? __might_sleep+0xe0/0xe0 [ 2820.179736][T13924] ? __lock_acquire+0x7d40/0x7d40 [ 2820.184888][T13924] ? kasan_set_track+0x5f/0x70 [ 2820.189713][T13924] ? kasan_set_track+0x4e/0x70 [ 2820.194518][T13924] should_fail_ex+0x39d/0x4d0 [ 2820.199241][T13924] should_failslab+0x9/0x20 [ 2820.203781][T13924] slab_pre_alloc_hook+0x59/0x310 [ 2820.208857][T13924] kmem_cache_alloc_node+0x60/0x320 [ 2820.214513][T13924] ? __alloc_skb+0x103/0x2c0 [ 2820.219136][T13924] __alloc_skb+0x103/0x2c0 [ 2820.223579][T13924] netlink_dump+0x1ec/0xe50 [ 2820.228114][T13924] ? __kmem_cache_alloc_node+0x13a/0x250 [ 2820.233775][T13924] ? netlink_lookup+0x200/0x200 [ 2820.238783][T13924] ? __inet_diag_dump_start+0x88d/0x9f0 [ 2820.244386][T13924] ? netlink_lookup+0x30/0x200 [ 2820.249199][T13924] __netlink_dump_start+0x5f1/0x810 [ 2820.254442][T13924] inet_diag_rcv_msg_compat+0x215/0x440 [ 2820.260022][T13924] ? __inet_diag_dump+0x380/0x380 [ 2820.265082][T13924] ? sock_diag_rcv_msg+0xd1/0x600 [ 2820.270130][T13924] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 2820.275868][T13924] ? inet_diag_dump_start_compat+0x20/0x20 [ 2820.281721][T13924] ? inet_diag_dump+0x50/0x50 [ 2820.286433][T13924] ? __inet_diag_dump+0x380/0x380 [ 2820.291481][T13924] sock_diag_rcv_msg+0x3d8/0x600 [ 2820.296445][T13924] netlink_rcv_skb+0x241/0x4d0 [ 2820.301231][T13924] ? sock_diag_bind+0xb0/0xb0 [ 2820.305929][T13924] ? netlink_ack+0x1180/0x1180 [ 2820.310855][T13924] ? __lock_acquire+0x7d40/0x7d40 [ 2820.315901][T13924] ? netlink_deliver_tap+0x2e/0x1b0 [ 2820.321131][T13924] sock_diag_rcv+0x2a/0x40 [ 2820.325568][T13924] netlink_unicast+0x751/0x8d0 [ 2820.330369][T13924] netlink_sendmsg+0x8d0/0xbf0 [ 2820.335170][T13924] ? netlink_getsockopt+0x590/0x590 [ 2820.340393][T13924] ? aa_sock_msg_perm+0x94/0x150 [ 2820.345357][T13924] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2820.350666][T13924] ? security_socket_sendmsg+0x80/0xa0 [ 2820.356143][T13924] ? netlink_getsockopt+0x590/0x590 [ 2820.361365][T13924] ____sys_sendmsg+0x5ba/0x960 [ 2820.366158][T13924] ? __asan_memset+0x22/0x40 [ 2820.370769][T13924] ? __sys_sendmsg_sock+0x30/0x30 [ 2820.375927][T13924] ? __import_iovec+0x5f2/0x850 [ 2820.380921][T13924] ? import_iovec+0x73/0xa0 [ 2820.385474][T13924] ___sys_sendmsg+0x2a6/0x360 [ 2820.390182][T13924] ? __sys_sendmsg+0x2a0/0x2a0 [ 2820.394991][T13924] ? __lock_acquire+0x7d40/0x7d40 [ 2820.400064][T13924] __se_sys_sendmsg+0x1c2/0x2b0 [ 2820.404936][T13924] ? __x64_sys_sendmsg+0x80/0x80 [ 2820.409909][T13924] ? lockdep_hardirqs_on+0x98/0x150 [ 2820.415139][T13924] do_syscall_64+0x55/0xa0 [ 2820.419569][T13924] ? clear_bhb_loop+0x40/0x90 [ 2820.424265][T13924] ? clear_bhb_loop+0x40/0x90 [ 2820.428964][T13924] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2820.434883][T13924] RIP: 0033:0x7fbd8dd9c819 [ 2820.439324][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2820.458969][T13924] RSP: 002b:00007fbd8ed22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2820.467429][T13924] RAX: ffffffffffffffda RBX: 00007fbd8e015fa0 RCX: 00007fbd8dd9c819 [ 2820.475423][T13924] RDX: 0000000004040010 RSI: 0000200000000180 RDI: 0000000000000003 [ 2820.483600][T13924] RBP: 00007fbd8ed22090 R08: 0000000000000000 R09: 0000000000000000 [ 2820.491585][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2820.499596][T13924] R13: 00007fbd8e016038 R14: 00007fbd8e015fa0 R15: 00007ffe948342f8 [ 2820.507881][T13924] [ 2821.841437][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12586'. [ 2823.297302][T13947] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.12587'. [ 2824.431370][T13947] netlink: 22828 bytes leftover after parsing attributes in process `syz.2.12587'. [ 2825.265360][T13963] netlink: 'syz.3.12591': attribute type 10 has an invalid length. [ 2825.301114][T13963] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12591'. [ 2826.992273][T13986] netlink: 'syz.2.12598': attribute type 21 has an invalid length. [ 2827.049885][T13984] netlink: 'syz.1.12597': attribute type 3 has an invalid length. [ 2827.068930][T13984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12597'. [ 2828.691712][T13992] pim6reg: tun_chr_ioctl cmd 2147767521 [ 2829.288664][T14038] netlink: 10 bytes leftover after parsing attributes in process `syz.3.12606'. [ 2831.969643][T14093] netlink: 205768 bytes leftover after parsing attributes in process `syz.2.12611'. [ 2832.233620][T14095] netlink: 'syz.3.12612': attribute type 29 has an invalid length. [ 2832.275601][T14095] netlink: 'syz.3.12612': attribute type 29 has an invalid length. [ 2832.321685][T14095] netlink: 'syz.3.12612': attribute type 29 has an invalid length. [ 2833.044517][T14106] FAULT_INJECTION: forcing a failure. [ 2833.044517][T14106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2833.324659][T14106] CPU: 0 PID: 14106 Comm: syz.0.12615 Not tainted syzkaller #0 [ 2833.332310][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2833.342418][T14106] Call Trace: [ 2833.345738][T14106] [ 2833.348722][T14106] dump_stack_lvl+0x18c/0x250 [ 2833.353471][T14106] ? show_regs_print_info+0x20/0x20 [ 2833.358726][T14106] ? load_image+0x420/0x420 [ 2833.363291][T14106] ? __lock_acquire+0x7d40/0x7d40 [ 2833.368389][T14106] should_fail_ex+0x39d/0x4d0 [ 2833.373146][T14106] _copy_from_user+0x2f/0xe0 [ 2833.377890][T14106] __copy_msghdr+0x3bb/0x580 [ 2833.382537][T14106] ___sys_sendmsg+0x214/0x360 [ 2833.387274][T14106] ? __sys_sendmsg+0x2a0/0x2a0 [ 2833.392117][T14106] ? __lock_acquire+0x7d40/0x7d40 [ 2833.397237][T14106] __se_sys_sendmsg+0x1c2/0x2b0 [ 2833.402142][T14106] ? __x64_sys_sendmsg+0x80/0x80 [ 2833.407153][T14106] ? lockdep_hardirqs_on+0x98/0x150 [ 2833.412495][T14106] do_syscall_64+0x55/0xa0 [ 2833.416950][T14106] ? clear_bhb_loop+0x40/0x90 [ 2833.421697][T14106] ? clear_bhb_loop+0x40/0x90 [ 2833.426449][T14106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2833.432394][T14106] RIP: 0033:0x7f297219c819 [ 2833.436872][T14106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2833.456538][T14106] RSP: 002b:00007f297308d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2833.465021][T14106] RAX: ffffffffffffffda RBX: 00007f2972415fa0 RCX: 00007f297219c819 [ 2833.473058][T14106] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 2833.481094][T14106] RBP: 00007f297308d090 R08: 0000000000000000 R09: 0000000000000000 [ 2833.489121][T14106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2833.497156][T14106] R13: 00007f2972416038 R14: 00007f2972415fa0 R15: 00007ffc6b15eef8 [ 2833.505208][T14106] [ 2836.612026][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.618406][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2837.251776][T14133] sctp: [Deprecated]: syz.2.12625 (pid 14133) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2837.251776][T14133] Use struct sctp_sack_info instead [ 2838.106139][T14147] netlink: 'syz.1.12629': attribute type 10 has an invalid length. [ 2838.285553][T14147] .`: (slave bond_slave_0): Releasing backup interface [ 2838.580847][T14151] mac80211_hwsim hwsim300 wlan0: entered promiscuous mode [ 2838.626610][T14151] mac80211_hwsim hwsim300 wlan0: entered allmulticast mode [ 2838.696041][T14156] netlink: 'syz.2.12632': attribute type 10 has an invalid length. [ 2838.781887][T14156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2838.801343][T14156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2838.810528][T14156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2838.843735][T14156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2839.801737][T14169] pim6reg: tun_chr_ioctl cmd 2147767521 [ 2840.500843][T14179] netlink: 'syz.3.12639': attribute type 11 has an invalid length. [ 2840.589412][T14179] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12639'. [ 2841.179868][T14185] FAULT_INJECTION: forcing a failure. [ 2841.179868][T14185] name failslab, interval 1, probability 0, space 0, times 0 [ 2841.361187][T14185] CPU: 0 PID: 14185 Comm: syz.0.12640 Not tainted syzkaller #0 [ 2841.368919][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2841.379054][T14185] Call Trace: [ 2841.382373][T14185] [ 2841.385350][T14185] dump_stack_lvl+0x18c/0x250 [ 2841.390097][T14185] ? show_regs_print_info+0x20/0x20 [ 2841.395355][T14185] ? load_image+0x420/0x420 [ 2841.399929][T14185] ? __might_sleep+0xe0/0xe0 [ 2841.404663][T14185] ? __lock_acquire+0x7d40/0x7d40 [ 2841.409730][T14185] ? mark_lock+0x94/0x320 [ 2841.414123][T14185] should_fail_ex+0x39d/0x4d0 [ 2841.418865][T14185] should_failslab+0x9/0x20 [ 2841.423414][T14185] slab_pre_alloc_hook+0x59/0x310 [ 2841.428467][T14185] ? __get_vm_area_node+0x125/0x370 [ 2841.433709][T14185] __kmem_cache_alloc_node+0x53/0x250 [ 2841.439123][T14185] ? __get_vm_area_node+0x125/0x370 [ 2841.444361][T14185] kmalloc_node_trace+0x26/0xe0 [ 2841.449256][T14185] __get_vm_area_node+0x125/0x370 [ 2841.454314][T14185] __vmalloc_node_range+0x36e/0x1330 [ 2841.459635][T14185] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.465205][T14185] ? mark_lock+0x94/0x320 [ 2841.469558][T14185] ? __lock_acquire+0x1347/0x7d40 [ 2841.474639][T14185] ? verify_lock_unused+0x140/0x140 [ 2841.479870][T14185] ? free_vm_area+0x50/0x50 [ 2841.484404][T14185] ? end_current_label_crit_section+0x170/0x170 [ 2841.490681][T14185] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.496248][T14185] __vmalloc+0x7a/0x90 [ 2841.500335][T14185] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.505899][T14185] bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.511287][T14185] ? bpf_prog_alloc+0x2b/0x1a0 [ 2841.516104][T14185] bpf_prog_alloc+0x3d/0x1a0 [ 2841.520713][T14185] bpf_prog_load+0x6eb/0x1670 [ 2841.525483][T14185] ? map_freeze+0x420/0x420 [ 2841.530080][T14185] ? __might_fault+0xaa/0x120 [ 2841.534776][T14185] ? __lock_acquire+0x7d40/0x7d40 [ 2841.539817][T14185] ? file_end_write+0x159/0x250 [ 2841.544693][T14185] ? __might_fault+0xaa/0x120 [ 2841.549381][T14185] ? __might_fault+0xc6/0x120 [ 2841.554158][T14185] ? __might_fault+0xaa/0x120 [ 2841.558854][T14185] ? bpf_lsm_bpf+0x9/0x10 [ 2841.563204][T14185] ? security_bpf+0x7e/0xa0 [ 2841.567732][T14185] __sys_bpf+0x5ba/0x890 [ 2841.572016][T14185] ? bpf_link_show_fdinfo+0x390/0x390 [ 2841.577435][T14185] ? lock_chain_count+0x20/0x20 [ 2841.582312][T14185] __x64_sys_bpf+0x7c/0x90 [ 2841.586744][T14185] do_syscall_64+0x55/0xa0 [ 2841.591177][T14185] ? clear_bhb_loop+0x40/0x90 [ 2841.595869][T14185] ? clear_bhb_loop+0x40/0x90 [ 2841.600563][T14185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2841.606486][T14185] RIP: 0033:0x7f297219c819 [ 2841.610937][T14185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2841.630569][T14185] RSP: 002b:00007f297304b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2841.639005][T14185] RAX: ffffffffffffffda RBX: 00007f2972416180 RCX: 00007f297219c819 [ 2841.646993][T14185] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2841.655007][T14185] RBP: 00007f297304b090 R08: 0000000000000000 R09: 0000000000000000 [ 2841.662990][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2841.670981][T14185] R13: 00007f2972416218 R14: 00007f2972416180 R15: 00007ffc6b15eef8 [ 2841.678985][T14185] [ 2841.725174][T14185] syz.0.12640: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2841.781235][T14185] CPU: 0 PID: 14185 Comm: syz.0.12640 Not tainted syzkaller #0 [ 2841.788866][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2841.799368][T14185] Call Trace: [ 2841.802655][T14185] [ 2841.805639][T14185] dump_stack_lvl+0x18c/0x250 [ 2841.810337][T14185] ? show_regs_print_info+0x20/0x20 [ 2841.815562][T14185] ? load_image+0x420/0x420 [ 2841.820100][T14185] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2841.826554][T14185] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2841.833115][T14185] warn_alloc+0x246/0x340 [ 2841.837518][T14185] ? zone_watermark_ok_safe+0x230/0x230 [ 2841.843134][T14185] ? __get_vm_area_node+0x356/0x370 [ 2841.848405][T14185] __vmalloc_node_range+0x393/0x1330 [ 2841.853749][T14185] ? mark_lock+0x94/0x320 [ 2841.858123][T14185] ? __lock_acquire+0x1347/0x7d40 [ 2841.863172][T14185] ? verify_lock_unused+0x140/0x140 [ 2841.868400][T14185] ? free_vm_area+0x50/0x50 [ 2841.872923][T14185] ? end_current_label_crit_section+0x170/0x170 [ 2841.879196][T14185] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.884855][T14185] __vmalloc+0x7a/0x90 [ 2841.888946][T14185] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.894513][T14185] bpf_prog_alloc_no_stats+0x47/0x440 [ 2841.899902][T14185] ? bpf_prog_alloc+0x2b/0x1a0 [ 2841.904684][T14185] bpf_prog_alloc+0x3d/0x1a0 [ 2841.909289][T14185] bpf_prog_load+0x6eb/0x1670 [ 2841.914008][T14185] ? map_freeze+0x420/0x420 [ 2841.918541][T14185] ? __might_fault+0xaa/0x120 [ 2841.923235][T14185] ? __lock_acquire+0x7d40/0x7d40 [ 2841.928276][T14185] ? file_end_write+0x159/0x250 [ 2841.933149][T14185] ? __might_fault+0xaa/0x120 [ 2841.937840][T14185] ? __might_fault+0xc6/0x120 [ 2841.942532][T14185] ? __might_fault+0xaa/0x120 [ 2841.947228][T14185] ? bpf_lsm_bpf+0x9/0x10 [ 2841.951580][T14185] ? security_bpf+0x7e/0xa0 [ 2841.956106][T14185] __sys_bpf+0x5ba/0x890 [ 2841.960371][T14185] ? bpf_link_show_fdinfo+0x390/0x390 [ 2841.965789][T14185] ? lock_chain_count+0x20/0x20 [ 2841.970666][T14185] __x64_sys_bpf+0x7c/0x90 [ 2841.975108][T14185] do_syscall_64+0x55/0xa0 [ 2841.979610][T14185] ? clear_bhb_loop+0x40/0x90 [ 2841.984316][T14185] ? clear_bhb_loop+0x40/0x90 [ 2841.989014][T14185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2841.995014][T14185] RIP: 0033:0x7f297219c819 [ 2841.999446][T14185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2842.019338][T14185] RSP: 002b:00007f297304b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2842.027792][T14185] RAX: ffffffffffffffda RBX: 00007f2972416180 RCX: 00007f297219c819 [ 2842.035777][T14185] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2842.043768][T14185] RBP: 00007f297304b090 R08: 0000000000000000 R09: 0000000000000000 [ 2842.051759][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2842.059744][T14185] R13: 00007f2972416218 R14: 00007f2972416180 R15: 00007ffc6b15eef8 [ 2842.067789][T14185] [ 2842.111119][T14185] Mem-Info: [ 2842.114421][T14185] active_anon:9586 inactive_anon:0 isolated_anon:0 [ 2842.114421][T14185] active_file:19461 inactive_file:41011 isolated_file:0 [ 2842.114421][T14185] unevictable:768 dirty:246 writeback:0 [ 2842.114421][T14185] slab_reclaimable:11659 slab_unreclaimable:94125 [ 2842.114421][T14185] mapped:25928 shmem:2642 pagetables:624 [ 2842.114421][T14185] sec_pagetables:0 bounce:0 [ 2842.114421][T14185] kernel_misc_reclaimable:0 [ 2842.114421][T14185] free:1339093 free_pcp:4064 free_cma:0 [ 2842.176380][T14185] Node 0 active_anon:38844kB inactive_anon:0kB active_file:77844kB inactive_file:163840kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104312kB dirty:984kB writeback:0kB shmem:9532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11972kB pagetables:2396kB sec_pagetables:0kB all_unreclaimable? no [ 2842.222289][T14185] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2842.300452][T14185] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2842.371039][T14185] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2842.387174][T14185] Node 0 DMA32 free:1435868kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:41372kB inactive_anon:0kB active_file:77844kB inactive_file:163012kB unevictable:1536kB writepending:984kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:7420kB local_pcp:4420kB free_cma:0kB [ 2842.439530][T14185] lowmem_reserve[]: 0 0 0 0 0 [ 2842.494623][T14185] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2842.528778][T14185] lowmem_reserve[]: 0 0 0 0 0 [ 2842.533845][T14185] Node 1 Normal free:3905144kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:6112kB local_pcp:6112kB free_cma:0kB [ 2842.601057][T14185] lowmem_reserve[]: 0 0 0 0 0 [ 2842.611220][T14185] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2842.641730][T14185] Node 0 DMA32: 1418*4kB (UME) 2679*8kB (UME) 2584*16kB (UME) 1427*32kB (UME) 2771*64kB (UME) 923*128kB (UME) 369*256kB (UME) 141*512kB (UME) 51*1024kB (UME) 30*2048kB (UME) 182*4096kB (UM) = 1435392kB [ 2842.681018][T14185] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2842.701034][T14185] Node 1 Normal: 278*4kB (UME) 64*8kB (UME) 54*16kB (UME) 246*32kB (UME) 110*64kB (UE) 35*128kB (UME) 7*256kB (UE) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3905144kB [ 2842.743327][T14185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.771198][T14185] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2842.780599][T14185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2842.801225][T14185] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2842.821498][T14185] 65513 total pagecache pages [ 2842.826260][T14185] 0 pages in swap cache [ 2842.830484][T14185] Free swap = 124996kB [ 2842.834739][T14185] Total swap = 124996kB [ 2842.838937][T14185] 2097051 pages RAM [ 2842.851017][T14185] 0 pages HighMem/MovableOnly [ 2842.856679][T14185] 416927 pages reserved [ 2842.860871][T14185] 0 pages cma reserved [ 2843.285565][T14214] netlink: 'syz.0.12650': attribute type 10 has an invalid length. [ 2843.311162][T14214] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12650'. [ 2843.320332][T14214] vcan0: entered promiscuous mode [ 2843.349097][T14214] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 2843.353252][T14215] netlink: 'syz.2.12649': attribute type 11 has an invalid length. [ 2843.411113][T14215] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12649'. [ 2843.996000][T14229] tap0: tun_chr_ioctl cmd 1074025677 [ 2844.022277][T14229] tap0: linktype set to 778 [ 2844.057528][T14227] tap0: tun_chr_ioctl cmd 2147767511 [ 2844.152237][T14227] netlink: 'syz.0.12655': attribute type 10 has an invalid length. [ 2844.309487][T14233] netlink: 10 bytes leftover after parsing attributes in process `syz.1.12657'. [ 2844.873667][T14247] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.12660'. [ 2845.655940][T14268] netlink: 'syz.2.12666': attribute type 11 has an invalid length. [ 2845.709526][T14268] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12666'. [ 2846.380547][T14279] netlink: 'syz.3.12669': attribute type 10 has an invalid length. [ 2846.430803][T14279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12669'. [ 2848.278849][T14294] netlink: 'syz.0.12675': attribute type 9 has an invalid length. [ 2848.959880][T14317] netlink: 'syz.1.12681': attribute type 11 has an invalid length. [ 2848.977523][T14317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12681'. [ 2849.854302][T14342] netlink: 'syz.3.12690': attribute type 25 has an invalid length. [ 2850.231235][T14354] netlink: 'syz.2.12693': attribute type 7 has an invalid length. [ 2850.256953][T14355] netlink: 'syz.1.12695': attribute type 1 has an invalid length. [ 2850.267799][T14354] netlink: 'syz.2.12693': attribute type 6 has an invalid length. [ 2850.286155][T14355] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12695'. [ 2850.735404][T14366] netlink: 'syz.2.12697': attribute type 10 has an invalid length. [ 2851.260688][T14374] netlink: 'syz.1.12700': attribute type 11 has an invalid length. [ 2851.319961][T14374] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12700'. [ 2851.592673][T14384] netlink: 'syz.2.12703': attribute type 11 has an invalid length. [ 2851.631454][T14384] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.12703'. [ 2851.830821][T14388] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12706'. [ 2852.362915][T14395] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.12707'. [ 2853.220025][T14409] netlink: 180 bytes leftover after parsing attributes in process `syz.3.12713'. [ 2853.823361][T14424] netlink: 'syz.0.12718': attribute type 11 has an invalid length. [ 2853.873036][T14424] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12718'. [ 2855.449316][T14434] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.12721'. [ 2855.669107][T14436] netlink: 'syz.0.12722': attribute type 13 has an invalid length. [ 2855.705497][T14436] netlink: 'syz.0.12722': attribute type 58 has an invalid length. [ 2855.741779][T14436] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12722'. [ 2855.763438][T14443] netlink: 'syz.1.12725': attribute type 33 has an invalid length. [ 2855.777213][T14443] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12725'. [ 2855.955149][T14450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12728'. [ 2856.070742][T14455] netlink: 'syz.3.12730': attribute type 11 has an invalid length. [ 2857.243993][T14473] netlink: 'syz.2.12736': attribute type 10 has an invalid length. [ 2858.412605][T14494] netlink: 'syz.1.12742': attribute type 11 has an invalid length. [ 2858.479649][T14494] __nla_validate_parse: 1 callbacks suppressed [ 2858.479671][T14494] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12742'. [ 2858.596634][T14497] netlink: 'syz.3.12743': attribute type 10 has an invalid length. [ 2858.677194][T14497] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12743'. [ 2858.746874][T14497] batman_adv: batadv0: Adding interface: vlan1 [ 2858.771129][T14497] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2858.810223][T14497] batman_adv: batadv0: Interface activated: vlan1 [ 2861.224362][T14518] netlink: 'syz.2.12751': attribute type 29 has an invalid length. [ 2861.261125][T14518] netlink: 'syz.2.12751': attribute type 29 has an invalid length. [ 2861.289769][T14518] netlink: 'syz.2.12751': attribute type 29 has an invalid length. [ 2861.329683][T14518] netlink: 'syz.2.12751': attribute type 29 has an invalid length. [ 2862.062896][T14535] netlink: 'syz.2.12757': attribute type 29 has an invalid length. [ 2862.081576][T14535] netlink: 'syz.2.12757': attribute type 29 has an invalid length. [ 2862.112786][T14535] netlink: 'syz.2.12757': attribute type 29 has an invalid length. [ 2862.511262][T14547] netlink: 'syz.3.12760': attribute type 29 has an invalid length. [ 2862.538127][T14547] netlink: 'syz.3.12760': attribute type 29 has an invalid length. [ 2862.547868][T14547] FAULT_INJECTION: forcing a failure. [ 2862.547868][T14547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2862.581160][T14547] CPU: 0 PID: 14547 Comm: syz.3.12760 Not tainted syzkaller #0 [ 2862.588783][T14547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2862.599133][T14547] Call Trace: [ 2862.602447][T14547] [ 2862.605502][T14547] dump_stack_lvl+0x18c/0x250 [ 2862.610230][T14547] ? show_regs_print_info+0x20/0x20 [ 2862.615459][T14547] ? load_image+0x420/0x420 [ 2862.620001][T14547] ? __might_fault+0xaa/0x120 [ 2862.624789][T14547] should_fail_ex+0x39d/0x4d0 [ 2862.629582][T14547] copyout+0x1a/0x90 [ 2862.633501][T14547] _copy_to_iter+0x432/0x1120 [ 2862.638213][T14547] ? iov_iter_init+0x1e0/0x1e0 [ 2862.643019][T14547] ? __virt_addr_valid+0x18c/0x540 [ 2862.648164][T14547] ? __virt_addr_valid+0x469/0x540 [ 2862.653321][T14547] ? __phys_addr_symbol+0x2f/0x70 [ 2862.658398][T14547] __skb_datagram_iter+0xdb/0x780 [ 2862.663455][T14547] ? skb_copy_datagram_iter+0x200/0x200 [ 2862.669033][T14547] skb_copy_datagram_iter+0xb1/0x200 [ 2862.674346][T14547] netlink_recvmsg+0x2d4/0xe60 [ 2862.679155][T14547] ? netlink_sendmsg+0xbf0/0xbf0 [ 2862.684123][T14547] ? aa_af_perm+0x330/0x330 [ 2862.688657][T14547] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 2862.693959][T14547] ? security_socket_recvmsg+0x89/0xb0 [ 2862.699439][T14547] ? netlink_sendmsg+0xbf0/0xbf0 [ 2862.704406][T14547] ____sys_recvmsg+0x2ce/0x5e0 [ 2862.709210][T14547] ? __sys_recvmsg_sock+0x50/0x50 [ 2862.714265][T14547] ? import_iovec+0x73/0xa0 [ 2862.718883][T14547] ___sys_recvmsg+0x216/0x590 [ 2862.723582][T14547] ? __sys_recvmsg+0x2a0/0x2a0 [ 2862.728713][T14547] ? ksys_write+0x1c4/0x260 [ 2862.733246][T14547] ? __fget_files+0x43d/0x4b0 [ 2862.737955][T14547] __x64_sys_recvmsg+0x20c/0x2e0 [ 2862.742999][T14547] ? ___sys_recvmsg+0x590/0x590 [ 2862.747886][T14547] ? lockdep_hardirqs_on+0x98/0x150 [ 2862.753114][T14547] do_syscall_64+0x55/0xa0 [ 2862.757582][T14547] ? clear_bhb_loop+0x40/0x90 [ 2862.762336][T14547] ? clear_bhb_loop+0x40/0x90 [ 2862.767053][T14547] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2862.772971][T14547] RIP: 0033:0x7fb6ddd9c819 [ 2862.777416][T14547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2862.797046][T14547] RSP: 002b:00007fb6ded47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2862.805495][T14547] RAX: ffffffffffffffda RBX: 00007fb6de015fa0 RCX: 00007fb6ddd9c819 [ 2862.813570][T14547] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 2862.821567][T14547] RBP: 00007fb6ded47090 R08: 0000000000000000 R09: 0000000000000000 [ 2862.829560][T14547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2862.837594][T14547] R13: 00007fb6de016038 R14: 00007fb6de015fa0 R15: 00007fffcf685878 [ 2862.845614][T14547] [ 2862.919720][T14550] netlink: 'syz.2.12762': attribute type 7 has an invalid length. [ 2863.972217][T14567] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12765'. [ 2863.987112][T14566] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.12765'. [ 2864.297920][T14570] sock: sock_timestamping_bind_phc: sock not bind to device [ 2864.978790][T14578] hsr_slave_1 (unregistering): left promiscuous mode [ 2866.366169][T14595] validate_nla: 2 callbacks suppressed [ 2866.366189][T14595] netlink: 'syz.2.12774': attribute type 9 has an invalid length. [ 2868.313022][T14614] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12780'. [ 2868.646229][T14616] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12781'. [ 2868.665354][T14616] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2869.250874][T14626] netlink: 'syz.1.12785': attribute type 10 has an invalid length. [ 2869.271184][T14626] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12785'. [ 2870.976985][T14642] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.12790'. [ 2871.644243][T14656] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12795'. [ 2874.715096][T14705] netlink: 'syz.0.12812': attribute type 15 has an invalid length. [ 2874.750590][T14705] netlink: 'syz.0.12812': attribute type 7 has an invalid length. [ 2874.857332][T14698] netlink: 'syz.2.12809': attribute type 8 has an invalid length. [ 2874.920565][T14698] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12809'. [ 2875.906083][T14725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12817'. [ 2875.980418][T14725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12817'. [ 2876.039593][T14728] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12817'. [ 2876.077570][T14725] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12817'. [ 2876.812942][T14744] netlink: 'syz.0.12825': attribute type 21 has an invalid length. [ 2876.851236][T14744] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12825'. [ 2876.911635][T14744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12825'. [ 2876.931769][T14744] bridge_slave_0: entered allmulticast mode [ 2877.555256][T14767] netlink: 'syz.1.12831': attribute type 13 has an invalid length. [ 2877.569998][T14767] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12831'. [ 2877.653064][T14767] syz_tun: refused to change device tx_queue_len [ 2877.726653][T14767] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 2878.133804][T14769] netlink: 'syz.1.12832': attribute type 4 has an invalid length. [ 2880.636818][T14817] netlink: 'syz.1.12846': attribute type 8 has an invalid length. [ 2880.671269][T14817] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.12846'. [ 2881.087340][T14820] netlink: 'syz.2.12848': attribute type 4 has an invalid length. [ 2881.424941][T14827] FAULT_INJECTION: forcing a failure. [ 2881.424941][T14827] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2881.471161][T14827] CPU: 0 PID: 14827 Comm: syz.3.12851 Not tainted syzkaller #0 [ 2881.478819][T14827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2881.488928][T14827] Call Trace: [ 2881.492249][T14827] [ 2881.495349][T14827] dump_stack_lvl+0x18c/0x250 [ 2881.500184][T14827] ? show_regs_print_info+0x20/0x20 [ 2881.505443][T14827] ? load_image+0x420/0x420 [ 2881.510018][T14827] ? __might_fault+0xaa/0x120 [ 2881.514755][T14827] ? __lock_acquire+0x7d40/0x7d40 [ 2881.519840][T14827] should_fail_ex+0x39d/0x4d0 [ 2881.524585][T14827] _copy_from_iter+0x1d9/0x12e0 [ 2881.529503][T14827] ? __virt_addr_valid+0x18c/0x540 [ 2881.534671][T14827] ? __lock_acquire+0x7d40/0x7d40 [ 2881.539746][T14827] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 2881.545264][T14827] ? copyout_mc+0x70/0x70 [ 2881.549691][T14827] ? __virt_addr_valid+0x18c/0x540 [ 2881.556525][T14827] ? __virt_addr_valid+0x18c/0x540 [ 2881.561739][T14827] ? __virt_addr_valid+0x469/0x540 [ 2881.566922][T14827] ? __check_object_size+0x506/0xa20 [ 2881.572247][T14827] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 2881.578005][T14827] ? dev_get_by_index+0x22/0x2d0 [ 2881.582966][T14827] ? skb_put+0x11b/0x210 [ 2881.587354][T14827] packet_sendmsg+0x3566/0x4d70 [ 2881.592290][T14827] ? verify_lock_unused+0x140/0x140 [ 2881.597527][T14827] ? mark_lock+0x94/0x320 [ 2881.601893][T14827] ? __lock_acquire+0x1273/0x7d40 [ 2881.607161][T14827] ? aa_sk_perm+0x83c/0x970 [ 2881.611750][T14827] ? packet_getsockopt+0xad0/0xad0 [ 2881.616909][T14827] ? aa_sock_msg_perm+0x94/0x150 [ 2881.621881][T14827] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2881.627192][T14827] ? security_socket_sendmsg+0x80/0xa0 [ 2881.632671][T14827] ? packet_getsockopt+0xad0/0xad0 [ 2881.637807][T14827] ____sys_sendmsg+0x5ba/0x960 [ 2881.642587][T14827] ? __lock_acquire+0x7d40/0x7d40 [ 2881.647631][T14827] ? __asan_memset+0x22/0x40 [ 2881.652330][T14827] ? __sys_sendmsg_sock+0x30/0x30 [ 2881.657376][T14827] ? __import_iovec+0x5f2/0x850 [ 2881.662293][T14827] ? import_iovec+0x73/0xa0 [ 2881.666928][T14827] ___sys_sendmsg+0x2a6/0x360 [ 2881.671645][T14827] ? __sys_sendmsg+0x2a0/0x2a0 [ 2881.676443][T14827] ? __lock_acquire+0x7d40/0x7d40 [ 2881.681522][T14827] __se_sys_sendmsg+0x1c2/0x2b0 [ 2881.686479][T14827] ? __x64_sys_sendmsg+0x80/0x80 [ 2881.691546][T14827] ? lockdep_hardirqs_on+0x98/0x150 [ 2881.696793][T14827] do_syscall_64+0x55/0xa0 [ 2881.701506][T14827] ? clear_bhb_loop+0x40/0x90 [ 2881.706197][T14827] ? clear_bhb_loop+0x40/0x90 [ 2881.710891][T14827] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2881.716817][T14827] RIP: 0033:0x7fb6ddd9c819 [ 2881.721423][T14827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2881.741051][T14827] RSP: 002b:00007fb6ded47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2881.749516][T14827] RAX: ffffffffffffffda RBX: 00007fb6de015fa0 RCX: 00007fb6ddd9c819 [ 2881.757509][T14827] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 2881.765502][T14827] RBP: 00007fb6ded47090 R08: 0000000000000000 R09: 0000000000000000 [ 2881.773497][T14827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2881.781480][T14827] R13: 00007fb6de016038 R14: 00007fb6de015fa0 R15: 00007fffcf685878 [ 2881.789508][T14827] [ 2882.260869][T14847] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12859'. [ 2882.337624][T14847] team0: Port device team_slave_0 removed [ 2882.351864][T14847] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2883.361138][T14878] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 2883.405557][T14870] syzkaller0: tun_chr_ioctl cmd 35108 [ 2886.017193][T14926] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12886'. [ 2886.041136][T14926] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 2886.454261][T14934] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12890'. [ 2889.589748][T14977] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12902'. [ 2889.736669][T14984] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12905'. [ 2893.497240][T14999] mac80211_hwsim hwsim301 ..c: renamed from wlan1 (while UP) [ 2893.808416][T15006] netlink: 'syz.0.12920': attribute type 11 has an invalid length. [ 2893.836156][T15006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12920'. [ 2895.947519][T15030] netlink: 'syz.0.12919': attribute type 29 has an invalid length. [ 2895.967180][T15030] netlink: 'syz.0.12919': attribute type 29 has an invalid length. [ 2896.012836][T15034] netlink: 'syz.0.12919': attribute type 29 has an invalid length. [ 2896.038378][T15035] netlink: 'syz.0.12919': attribute type 29 has an invalid length. [ 2896.476096][T15040] netlink: 188 bytes leftover after parsing attributes in process `syz.3.12922'. [ 2896.853647][T15048] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12924'. [ 2896.952165][T15046] syzkaller0: entered promiscuous mode [ 2896.957736][T15046] syzkaller0: entered allmulticast mode [ 2897.023313][T15048] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2897.051754][T15048] CPU: 0 PID: 15048 Comm: syz.0.12924 Not tainted syzkaller #0 [ 2897.059396][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2897.069513][T15048] Call Trace: [ 2897.072855][T15048] [ 2897.075859][T15048] dump_stack_lvl+0x18c/0x250 [ 2897.080957][T15048] ? show_regs_print_info+0x20/0x20 [ 2897.086230][T15048] ? load_image+0x420/0x420 [ 2897.090804][T15048] sysfs_warn_dup+0x8e/0xa0 [ 2897.095363][T15048] sysfs_do_create_link_sd+0xc0/0x110 [ 2897.100797][T15048] device_add_class_symlinks+0x1cf/0x240 [ 2897.106501][T15048] device_add+0x507/0xc20 [ 2897.110918][T15048] wiphy_register+0x1dad/0x2ae0 [ 2897.115837][T15048] ? cfg80211_event_work+0x40/0x40 [ 2897.121090][T15048] ? minstrel_ht_alloc+0x88a/0x990 [ 2897.126381][T15048] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2897.132488][T15048] ieee80211_register_hw+0x3464/0x4250 [ 2897.137992][T15048] ? ieee80211_tasklet_handler+0x20/0x20 [ 2897.143641][T15048] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2897.149559][T15048] ? __debug_object_init+0xec/0x450 [ 2897.154784][T15048] ? __asan_memset+0x22/0x40 [ 2897.159482][T15048] ? __hrtimer_init+0x186/0x270 [ 2897.164352][T15048] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2897.170204][T15048] ? mac80211_hwsim_free+0x220/0x220 [ 2897.175531][T15048] ? rcu_is_watching+0x15/0xb0 [ 2897.180347][T15048] ? kstrndup+0xbd/0x140 [ 2897.184646][T15048] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2897.189884][T15048] ? __nla_validate+0x50/0x50 [ 2897.194592][T15048] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2897.200960][T15048] ? __nla_parse+0x40/0x50 [ 2897.205409][T15048] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2897.211763][T15048] genl_family_rcv_msg_doit+0x211/0x310 [ 2897.217322][T15048] ? end_current_label_crit_section+0x170/0x170 [ 2897.223589][T15048] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2897.229680][T15048] ? bpf_lsm_capable+0x9/0x10 [ 2897.234388][T15048] ? security_capable+0x89/0xb0 [ 2897.239266][T15048] genl_rcv_msg+0x619/0x7a0 [ 2897.243795][T15048] ? genl_bind+0x360/0x360 [ 2897.248232][T15048] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2897.254755][T15048] ? ref_tracker_free+0x690/0x840 [ 2897.259808][T15048] netlink_rcv_skb+0x241/0x4d0 [ 2897.264601][T15048] ? genl_bind+0x360/0x360 [ 2897.269032][T15048] ? netlink_ack+0x1180/0x1180 [ 2897.273833][T15048] ? __lock_acquire+0x7d40/0x7d40 [ 2897.278974][T15048] ? down_read+0x1ac/0x2e0 [ 2897.283414][T15048] genl_rcv+0x28/0x40 [ 2897.287416][T15048] netlink_unicast+0x751/0x8d0 [ 2897.292214][T15048] netlink_sendmsg+0x8d0/0xbf0 [ 2897.297108][T15048] ? netlink_getsockopt+0x590/0x590 [ 2897.302336][T15048] ? aa_sock_msg_perm+0x94/0x150 [ 2897.307304][T15048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2897.312610][T15048] ? security_socket_sendmsg+0x80/0xa0 [ 2897.318094][T15048] ? netlink_getsockopt+0x590/0x590 [ 2897.323318][T15048] ____sys_sendmsg+0x5ba/0x960 [ 2897.328218][T15048] ? __asan_memset+0x22/0x40 [ 2897.332833][T15048] ? __sys_sendmsg_sock+0x30/0x30 [ 2897.337916][T15048] ? __import_iovec+0x5f2/0x850 [ 2897.342800][T15048] ? import_iovec+0x73/0xa0 [ 2897.347323][T15048] ___sys_sendmsg+0x2a6/0x360 [ 2897.352027][T15048] ? __sys_sendmsg+0x2a0/0x2a0 [ 2897.357031][T15048] __se_sys_sendmsg+0x1c2/0x2b0 [ 2897.361923][T15048] ? __x64_sys_sendmsg+0x80/0x80 [ 2897.366906][T15048] ? lockdep_hardirqs_on+0x98/0x150 [ 2897.372127][T15048] do_syscall_64+0x55/0xa0 [ 2897.376556][T15048] ? clear_bhb_loop+0x40/0x90 [ 2897.381348][T15048] ? clear_bhb_loop+0x40/0x90 [ 2897.386055][T15048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2897.391963][T15048] RIP: 0033:0x7f297219c819 [ 2897.396400][T15048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2897.416023][T15048] RSP: 002b:00007f297306c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2897.424499][T15048] RAX: ffffffffffffffda RBX: 00007f2972416090 RCX: 00007f297219c819 [ 2897.432500][T15048] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2897.440686][T15048] RBP: 00007f2972232c91 R08: 0000000000000000 R09: 0000000000000000 [ 2897.448684][T15048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2897.457554][T15048] R13: 00007f2972416128 R14: 00007f2972416090 R15: 00007ffc6b15eef8 [ 2897.465651][T15048] [ 2897.621417][T15052] netlink: 'syz.3.12925': attribute type 11 has an invalid length. [ 2897.631068][T15052] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12925'. [ 2898.039590][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.046918][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2899.638133][T15076] netlink: 'syz.3.12932': attribute type 29 has an invalid length. [ 2900.914421][T15084] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.12934'. [ 2903.239430][T15076] netlink: 'syz.3.12932': attribute type 29 has an invalid length. [ 2903.247616][T15083] netlink: 'syz.1.12934': attribute type 10 has an invalid length. [ 2903.295605][T15083] team0: Device wg1 is of different type [ 2903.359927][T15086] netlink: 'syz.3.12935': attribute type 11 has an invalid length. [ 2903.387145][T15086] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12935'. [ 2903.676581][T15092] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2903.684309][T15092] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2903.727506][T15100] netlink: 830 bytes leftover after parsing attributes in process `syz.3.12939'. [ 2905.327962][T15116] netlink: 'syz.1.12945': attribute type 29 has an invalid length. [ 2905.350044][T15116] netlink: 'syz.1.12945': attribute type 29 has an invalid length. [ 2905.370429][T15119] netlink: 'syz.1.12945': attribute type 29 has an invalid length. [ 2905.421242][T15116] netlink: 'syz.1.12945': attribute type 29 has an invalid length. [ 2905.645239][T15126] netlink: 'syz.1.12947': attribute type 21 has an invalid length. [ 2905.666930][T15128] netlink: 'syz.2.12948': attribute type 11 has an invalid length. [ 2905.695641][T15128] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12948'. [ 2906.121637][T15140] netlink: 830 bytes leftover after parsing attributes in process `syz.2.12953'. [ 2906.938467][T15153] netlink: 'syz.2.12955': attribute type 10 has an invalid length. [ 2906.964366][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 2907.002155][T15153] bridge_slave_1: left allmulticast mode [ 2907.011277][T15153] bridge_slave_1: left promiscuous mode [ 2907.018779][T15153] bridge0: port 2(bridge_slave_1) entered disabled state [ 2907.090568][T15156] netlink: 'syz.1.12956': attribute type 9 has an invalid length. [ 2907.099583][T15156] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.12956'. [ 2907.863534][T15174] netlink: 'syz.2.12963': attribute type 10 has an invalid length. [ 2907.982602][T15177] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.12963'. [ 2908.556363][T15174] team0: Device wg1 is of different type [ 2908.869015][T15186] netlink: 830 bytes leftover after parsing attributes in process `syz.0.12964'. [ 2909.813684][T15200] FAULT_INJECTION: forcing a failure. [ 2909.813684][T15200] name failslab, interval 1, probability 0, space 0, times 0 [ 2909.886010][T15200] CPU: 0 PID: 15200 Comm: syz.0.12968 Not tainted syzkaller #0 [ 2909.893660][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2909.904015][T15200] Call Trace: [ 2909.907338][T15200] [ 2909.910312][T15200] dump_stack_lvl+0x18c/0x250 [ 2909.915045][T15200] ? show_regs_print_info+0x20/0x20 [ 2909.920308][T15200] ? load_image+0x420/0x420 [ 2909.924867][T15200] ? __lock_acquire+0x7d40/0x7d40 [ 2909.929946][T15200] should_fail_ex+0x39d/0x4d0 [ 2909.934692][T15200] should_failslab+0x9/0x20 [ 2909.939245][T15200] slab_pre_alloc_hook+0x59/0x310 [ 2909.944468][T15200] ? sctp_stream_init_ext+0x57/0x170 [ 2909.949971][T15200] __kmem_cache_alloc_node+0x53/0x250 [ 2909.955400][T15200] ? sctp_stream_init_ext+0x57/0x170 [ 2909.960722][T15200] kmalloc_trace+0x2a/0xe0 [ 2909.965345][T15200] sctp_stream_init_ext+0x57/0x170 [ 2909.970500][T15200] sctp_sendmsg_to_asoc+0x1324/0x1830 [ 2909.975996][T15200] ? __asan_memcpy+0x40/0x70 [ 2909.980813][T15200] ? sctp_assoc_set_primary+0x249/0x340 [ 2909.986423][T15200] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 2909.991848][T15200] ? sctp_connect_new_asoc+0x404/0x6a0 [ 2909.998081][T15200] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 2910.003981][T15200] ? __sctp_connect+0xd80/0xd80 [ 2910.008867][T15200] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2910.014289][T15200] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2910.019962][T15200] ? security_sctp_bind_connect+0x89/0xb0 [ 2910.025729][T15200] sctp_sendmsg+0x1b83/0x28c0 [ 2910.030460][T15200] ? sctp_getsockopt+0xb60/0xb60 [ 2910.035524][T15200] ? aa_sk_perm+0x83c/0x970 [ 2910.040100][T15200] ? aa_af_perm+0x330/0x330 [ 2910.044641][T15200] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2910.051097][T15200] ? sock_rps_record_flow+0x19/0x3f0 [ 2910.056439][T15200] ? inet_sendmsg+0xe9/0x2f0 [ 2910.061086][T15200] ? inet_send_prepare+0x260/0x260 [ 2910.066247][T15200] ____sys_sendmsg+0x5ba/0x960 [ 2910.071063][T15200] ? __lock_acquire+0x7d40/0x7d40 [ 2910.076146][T15200] ? __asan_memset+0x22/0x40 [ 2910.080784][T15200] ? __sys_sendmsg_sock+0x30/0x30 [ 2910.085936][T15200] ? __import_iovec+0x5f2/0x850 [ 2910.090872][T15200] ? import_iovec+0x73/0xa0 [ 2910.095419][T15200] ___sys_sendmsg+0x2a6/0x360 [ 2910.100134][T15200] ? get_pid_task+0x20/0x1e0 [ 2910.104769][T15200] ? __sys_sendmsg+0x2a0/0x2a0 [ 2910.109605][T15200] ? __lock_acquire+0x7d40/0x7d40 [ 2910.114718][T15200] __se_sys_sendmsg+0x1c2/0x2b0 [ 2910.119710][T15200] ? __x64_sys_sendmsg+0x80/0x80 [ 2910.124710][T15200] ? lockdep_hardirqs_on+0x98/0x150 [ 2910.129968][T15200] do_syscall_64+0x55/0xa0 [ 2910.134423][T15200] ? clear_bhb_loop+0x40/0x90 [ 2910.139144][T15200] ? clear_bhb_loop+0x40/0x90 [ 2910.143869][T15200] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2910.149803][T15200] RIP: 0033:0x7f297219c819 [ 2910.154346][T15200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2910.174009][T15200] RSP: 002b:00007f297308d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2910.182486][T15200] RAX: ffffffffffffffda RBX: 00007f2972415fa0 RCX: 00007f297219c819 [ 2910.190581][T15200] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000003 [ 2910.198592][T15200] RBP: 00007f297308d090 R08: 0000000000000000 R09: 0000000000000000 [ 2910.206602][T15200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2910.214701][T15200] R13: 00007f2972416038 R14: 00007f2972415fa0 R15: 00007ffc6b15eef8 [ 2910.222743][T15200] [ 2911.014892][T15208] netlink: 'syz.2.12972': attribute type 10 has an invalid length. [ 2911.041586][T15208] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12972'. [ 2911.059565][T15208] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 2911.070613][T15208] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2911.104994][T15208] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 2911.179862][T15216] netlink: 'syz.3.12973': attribute type 10 has an invalid length. [ 2911.249267][T15217] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.12973'. [ 2911.615272][T15216] wg1: entered promiscuous mode [ 2911.653916][T15216] wg1: entered allmulticast mode [ 2911.659527][T15216] team0: Device wg1 is of different type [ 2917.016667][T15273] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 2917.056792][T15266] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.12988'. [ 2917.072181][T15275] FAULT_INJECTION: forcing a failure. [ 2917.072181][T15275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2917.108502][T15275] CPU: 0 PID: 15275 Comm: syz.1.12990 Not tainted syzkaller #0 [ 2917.116138][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2917.126249][T15275] Call Trace: [ 2917.129672][T15275] [ 2917.132651][T15275] dump_stack_lvl+0x18c/0x250 [ 2917.137389][T15275] ? show_regs_print_info+0x20/0x20 [ 2917.142648][T15275] ? load_image+0x420/0x420 [ 2917.147236][T15275] ? __might_fault+0xaa/0x120 [ 2917.151974][T15275] ? __lock_acquire+0x7d40/0x7d40 [ 2917.157377][T15275] should_fail_ex+0x39d/0x4d0 [ 2917.162129][T15275] _copy_from_user+0x2f/0xe0 [ 2917.166958][T15275] ____sys_sendmsg+0x2fd/0x960 [ 2917.172034][T15275] ? __lock_acquire+0x7d40/0x7d40 [ 2917.177213][T15275] ? __sys_sendmsg_sock+0x30/0x30 [ 2917.182281][T15275] ? __import_iovec+0x3fa/0x850 [ 2917.187190][T15275] ? import_iovec+0x73/0xa0 [ 2917.192011][T15275] ___sys_sendmsg+0x2a6/0x360 [ 2917.196913][T15275] ? get_pid_task+0x20/0x1e0 [ 2917.201679][T15275] ? __sys_sendmsg+0x2a0/0x2a0 [ 2917.206598][T15275] ? __lock_acquire+0x7d40/0x7d40 [ 2917.212065][T15275] __se_sys_sendmsg+0x1c2/0x2b0 [ 2917.217164][T15275] ? __x64_sys_sendmsg+0x80/0x80 [ 2917.222182][T15275] ? lockdep_hardirqs_on+0x98/0x150 [ 2917.227541][T15275] do_syscall_64+0x55/0xa0 [ 2917.232088][T15275] ? clear_bhb_loop+0x40/0x90 [ 2917.236917][T15275] ? clear_bhb_loop+0x40/0x90 [ 2917.241845][T15275] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2917.247790][T15275] RIP: 0033:0x7fbd8dd9c819 [ 2917.252341][T15275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2917.272008][T15275] RSP: 002b:00007fbd8ed22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2917.280654][T15275] RAX: ffffffffffffffda RBX: 00007fbd8e015fa0 RCX: 00007fbd8dd9c819 [ 2917.288675][T15275] RDX: 0000000000000840 RSI: 0000200000000380 RDI: 0000000000000003 [ 2917.296785][T15275] RBP: 00007fbd8ed22090 R08: 0000000000000000 R09: 0000000000000000 [ 2917.305075][T15275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2917.313112][T15275] R13: 00007fbd8e016038 R14: 00007fbd8e015fa0 R15: 00007ffe948342f8 [ 2917.321162][T15275] [ 2923.081283][T15348] netlink: 'syz.2.13015': attribute type 10 has an invalid length. [ 2927.878611][T15424] netlink: 'syz.2.13039': attribute type 1 has an invalid length. [ 2928.202482][T15424] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.13039'. [ 2928.296458][T15418] mac80211_hwsim hwsim305 : renamed from wlan0 [ 2928.873820][T15437] syz.2.13044[15437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2928.873969][T15437] syz.2.13044[15437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2929.195010][T15443] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.13045'. [ 2929.357268][T15442] netlink: 'syz.2.13046': attribute type 4 has an invalid length. [ 2929.400496][T15442] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13046'. [ 2929.477007][T15451] netlink: 'syz.1.13048': attribute type 3 has an invalid length. [ 2929.581260][T15451] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.13048'. [ 2929.862181][T15449] netlink: 'syz.3.13047': attribute type 10 has an invalid length. [ 2929.966976][T15449] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13047'. [ 2930.901827][T15470] veth1_vlan: left promiscuous mode [ 2930.922703][T15470] macvlan1: entered promiscuous mode [ 2931.092480][T15471] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.13055'. [ 2931.141870][T15471] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.13055'. [ 2931.186540][T15471] tipc: Started in network mode [ 2931.207643][T15471] tipc: Node identity d, cluster identity 56 [ 2931.241777][T15471] tipc: Node number set to 13 [ 2932.057921][T15490] mac80211_hwsim hwsim297 : renamed from wlan0 [ 2932.283319][T15501] netlink: 'syz.1.13063': attribute type 10 has an invalid length. [ 2932.619494][T15503] netlink: 'syz.1.13064': attribute type 11 has an invalid length. [ 2932.645174][T15503] netlink: 184116 bytes leftover after parsing attributes in process `syz.1.13064'. [ 2932.714957][T15503] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 2933.175905][T15513] netlink: 'syz.2.13067': attribute type 39 has an invalid length. [ 2933.518119][T15517] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13068'. [ 2935.136151][T15534] mac80211_hwsim hwsim288 : renamed from wlan0 [ 2935.212888][T15546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13078'. [ 2935.305284][T15546] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13078'. [ 2935.336954][T15549] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13078'. [ 2935.722934][T15558] FAULT_INJECTION: forcing a failure. [ 2935.722934][T15558] name failslab, interval 1, probability 0, space 0, times 0 [ 2935.736457][T15558] CPU: 1 PID: 15558 Comm: syz.0.13082 Not tainted syzkaller #0 [ 2935.744055][T15558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2935.754148][T15558] Call Trace: [ 2935.757457][T15558] [ 2935.760400][T15558] dump_stack_lvl+0x18c/0x250 [ 2935.765112][T15558] ? show_regs_print_info+0x20/0x20 [ 2935.770337][T15558] ? load_image+0x420/0x420 [ 2935.774962][T15558] ? verify_lock_unused+0x140/0x140 [ 2935.780269][T15558] should_fail_ex+0x39d/0x4d0 [ 2935.784975][T15558] should_failslab+0x9/0x20 [ 2935.789495][T15558] slab_pre_alloc_hook+0x59/0x310 [ 2935.794562][T15558] kmem_cache_alloc+0x5a/0x2d0 [ 2935.799350][T15558] ? skb_clone+0x1eb/0x370 [ 2935.803785][T15558] skb_clone+0x1eb/0x370 [ 2935.808046][T15558] __netlink_deliver_tap+0x41c/0x830 [ 2935.813369][T15558] ? netlink_deliver_tap+0x2e/0x1b0 [ 2935.818679][T15558] netlink_deliver_tap+0x19c/0x1b0 [ 2935.824008][T15558] netlink_unicast+0x72c/0x8d0 [ 2935.828984][T15558] netlink_sendmsg+0x8d0/0xbf0 [ 2935.833883][T15558] ? netlink_getsockopt+0x590/0x590 [ 2935.839193][T15558] ? aa_sock_msg_perm+0x94/0x150 [ 2935.844150][T15558] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2935.849541][T15558] ? security_socket_sendmsg+0x80/0xa0 [ 2935.855135][T15558] ? netlink_getsockopt+0x590/0x590 [ 2935.860355][T15558] ____sys_sendmsg+0x5ba/0x960 [ 2935.865146][T15558] ? __asan_memset+0x22/0x40 [ 2935.869758][T15558] ? __sys_sendmsg_sock+0x30/0x30 [ 2935.874966][T15558] ? __import_iovec+0x5f2/0x850 [ 2935.879931][T15558] ? import_iovec+0x73/0xa0 [ 2935.884596][T15558] ___sys_sendmsg+0x2a6/0x360 [ 2935.889375][T15558] ? get_pid_task+0x20/0x1e0 [ 2935.893989][T15558] ? __sys_sendmsg+0x2a0/0x2a0 [ 2935.898877][T15558] ? __lock_acquire+0x7d40/0x7d40 [ 2935.904031][T15558] __se_sys_sendmsg+0x1c2/0x2b0 [ 2935.909023][T15558] ? __x64_sys_sendmsg+0x80/0x80 [ 2935.914082][T15558] ? lockdep_hardirqs_on+0x98/0x150 [ 2935.919403][T15558] do_syscall_64+0x55/0xa0 [ 2935.923828][T15558] ? clear_bhb_loop+0x40/0x90 [ 2935.928526][T15558] ? clear_bhb_loop+0x40/0x90 [ 2935.933328][T15558] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2935.939241][T15558] RIP: 0033:0x7f297219c819 [ 2935.943696][T15558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2935.963417][T15558] RSP: 002b:00007f297308d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2935.972197][T15558] RAX: ffffffffffffffda RBX: 00007f2972415fa0 RCX: 00007f297219c819 [ 2935.980181][T15558] RDX: 0000000020000090 RSI: 0000200000000940 RDI: 0000000000000003 [ 2935.988252][T15558] RBP: 00007f297308d090 R08: 0000000000000000 R09: 0000000000000000 [ 2935.996331][T15558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2936.004424][T15558] R13: 00007f2972416038 R14: 00007f2972415fa0 R15: 00007ffc6b15eef8 [ 2936.012423][T15558] [ 2937.617358][T15577] netlink: 'syz.1.13089': attribute type 21 has an invalid length. [ 2937.698712][T15582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13090'. [ 2937.746769][T15582] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13090'. [ 2937.798730][T15586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13090'. [ 2938.106352][T15595] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13093'. [ 2938.147885][T15592] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.13093'. [ 2940.963466][T15630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13104'. [ 2941.003144][T15630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13104'. [ 2941.036442][T15631] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13104'. [ 2941.251844][T15636] netlink: 668 bytes leftover after parsing attributes in process `syz.0.13107'. [ 2941.271210][T15636] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2941.302234][T15636] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2941.344375][T15639] netlink: 'syz.1.13108': attribute type 10 has an invalid length. [ 2941.367843][T15639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13108'. [ 2941.392638][T15639] vcan0: entered promiscuous mode [ 2941.417238][T15639] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 2942.114327][T15658] netlink: 'syz.1.13113': attribute type 23 has an invalid length. [ 2942.125285][T15658] netlink: 'syz.1.13113': attribute type 3 has an invalid length. [ 2942.143674][T15658] netlink: 'syz.1.13113': attribute type 4 has an invalid length. [ 2942.170989][T15658] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.13113'. [ 2943.905008][T15689] @: renamed from bond_slave_0 [ 2944.992465][T15701] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13127'. [ 2945.506609][T15707] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.13129'. [ 2945.907605][T15724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2945.923427][T15724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2946.004643][T15724] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2946.092229][T15730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13137'. [ 2946.941166][T15748] netlink: 'syz.3.13144': attribute type 13 has an invalid length. [ 2946.961051][T15748] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13144'. [ 2947.401489][T15756] netlink: 'syz.3.13145': attribute type 4 has an invalid length. [ 2949.877827][T15775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2950.242880][T15785] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.13154'. [ 2950.341118][T15788] FAULT_INJECTION: forcing a failure. [ 2950.341118][T15788] name failslab, interval 1, probability 0, space 0, times 0 [ 2950.353903][T15788] CPU: 0 PID: 15788 Comm: syz.1.13156 Not tainted syzkaller #0 [ 2950.361616][T15788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2950.371993][T15788] Call Trace: [ 2950.375412][T15788] [ 2950.378572][T15788] dump_stack_lvl+0x18c/0x250 [ 2950.383329][T15788] ? show_regs_print_info+0x20/0x20 [ 2950.388944][T15788] ? load_image+0x420/0x420 [ 2950.393536][T15788] ? fib_rules_lookup+0x9c/0xb40 [ 2950.398634][T15788] should_fail_ex+0x39d/0x4d0 [ 2950.403543][T15788] should_failslab+0x9/0x20 [ 2950.408086][T15788] slab_pre_alloc_hook+0x59/0x310 [ 2950.413156][T15788] kmem_cache_alloc+0x5a/0x2d0 [ 2950.417964][T15788] ? dst_alloc+0x105/0x170 [ 2950.422520][T15788] dst_alloc+0x105/0x170 [ 2950.427181][T15788] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 2950.433390][T15788] ? ip_route_output_key_hash+0x13d/0x330 [ 2950.439147][T15788] ip_route_output_key_hash+0x1f3/0x330 [ 2950.444844][T15788] ? ip_route_input_rcu+0x30f0/0x30f0 [ 2950.450261][T15788] ? bpf_lsm_xfrm_decode_session+0x9/0x10 [ 2950.456437][T15788] xfrmi_xmit+0x3e0/0x17e0 [ 2950.460896][T15788] ? validate_xmit_xfrm+0xbc/0x12c0 [ 2950.466230][T15788] ? xfrmi_dev_uninit+0x200/0x200 [ 2950.471300][T15788] dev_hard_start_xmit+0x246/0x740 [ 2950.476663][T15788] __dev_queue_xmit+0x19a3/0x3660 [ 2950.481723][T15788] ? __dev_queue_xmit+0x265/0x3660 [ 2950.486890][T15788] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 2950.492319][T15788] ? netdev_core_pick_tx+0x340/0x340 [ 2950.497634][T15788] ? packet_parse_headers+0x7cb/0xac0 [ 2950.503142][T15788] ? packet_parse_headers+0x7dc/0xac0 [ 2950.508643][T15788] ? __virt_addr_valid+0x18c/0x540 [ 2950.513808][T15788] ? __check_object_size+0x506/0xa20 [ 2950.519305][T15788] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 2950.524963][T15788] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 2950.531084][T15788] ? packet_xmit+0x66/0x330 [ 2950.535623][T15788] ? packet_sendmsg+0x3a37/0x4d70 [ 2950.540680][T15788] packet_sendmsg+0x3b7a/0x4d70 [ 2950.545595][T15788] ? verify_lock_unused+0x140/0x140 [ 2950.550820][T15788] ? perf_trace_lock_acquire+0x104/0x410 [ 2950.556601][T15788] ? aa_sk_perm+0x83c/0x970 [ 2950.561422][T15788] ? packet_getsockopt+0xad0/0xad0 [ 2950.566586][T15788] ? aa_sock_msg_perm+0x94/0x150 [ 2950.571549][T15788] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2950.576898][T15788] ? security_socket_sendmsg+0x80/0xa0 [ 2950.582382][T15788] ? packet_getsockopt+0xad0/0xad0 [ 2950.587607][T15788] ____sys_sendmsg+0x5ba/0x960 [ 2950.592581][T15788] ? __lock_acquire+0x7d40/0x7d40 [ 2950.597808][T15788] ? __asan_memset+0x22/0x40 [ 2950.602529][T15788] ? __sys_sendmsg_sock+0x30/0x30 [ 2950.607599][T15788] ? __import_iovec+0x5f2/0x850 [ 2950.612574][T15788] ? import_iovec+0x73/0xa0 [ 2950.617191][T15788] ___sys_sendmsg+0x2a6/0x360 [ 2950.621899][T15788] ? get_pid_task+0x20/0x1e0 [ 2950.626517][T15788] ? __sys_sendmsg+0x2a0/0x2a0 [ 2950.631414][T15788] ? __lock_acquire+0x7d40/0x7d40 [ 2950.636521][T15788] __se_sys_sendmsg+0x1c2/0x2b0 [ 2950.641400][T15788] ? __x64_sys_sendmsg+0x80/0x80 [ 2950.646526][T15788] ? lockdep_hardirqs_on+0x98/0x150 [ 2950.651833][T15788] do_syscall_64+0x55/0xa0 [ 2950.656561][T15788] ? clear_bhb_loop+0x40/0x90 [ 2950.661434][T15788] ? clear_bhb_loop+0x40/0x90 [ 2950.666154][T15788] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2950.672092][T15788] RIP: 0033:0x7fbd8dd9c819 [ 2950.676712][T15788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2950.696872][T15788] RSP: 002b:00007fbd8ed22028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2950.705395][T15788] RAX: ffffffffffffffda RBX: 00007fbd8e015fa0 RCX: 00007fbd8dd9c819 [ 2950.713493][T15788] RDX: 00000000000480c0 RSI: 0000200000000200 RDI: 0000000000000004 [ 2950.721493][T15788] RBP: 00007fbd8ed22090 R08: 0000000000000000 R09: 0000000000000000 [ 2950.730493][T15788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2950.738915][T15788] R13: 00007fbd8e016038 R14: 00007fbd8e015fa0 R15: 00007ffe948342f8 [ 2950.747080][T15788] [ 2953.379804][T15826] tap0: tun_chr_ioctl cmd 1074025675 [ 2953.387561][T15826] tap0: persist enabled [ 2954.331381][T15841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2955.924490][T15870] netlink: 'syz.3.13181': attribute type 3 has an invalid length. [ 2955.950759][T15870] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13181'. [ 2957.571337][T15892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13190'. [ 2959.469105][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.475655][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 2960.279344][T15942] netlink: zone id is out of range [ 2960.340816][T15942] netlink: set zone limit has 8 unknown bytes [ 3065.060879][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 3065.067897][ C1] rcu: 1-...!: (10499 ticks this GP) idle=35ec/1/0x4000000000000000 softirq=211737/211737 fqs=16 [ 3065.080236][ C1] rcu: (t=10500 jiffies g=293077 q=240 ncpus=2) [ 3065.086791][ C1] rcu: rcu_preempt kthread starved for 10461 jiffies! g293077 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 3065.098316][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 3065.108493][ C1] rcu: RCU grace-period kthread stack dump: [ 3065.114438][ C1] task:rcu_preempt state:R running task stack:26664 pid:17 ppid:2 flags:0x00004000 [ 3065.125403][ C1] Call Trace: [ 3065.128810][ C1] [ 3065.131873][ C1] __schedule+0x1553/0x45a0 [ 3065.136476][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3065.142541][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 3065.148592][ C1] ? asan.module_dtor+0x20/0x20 [ 3065.153497][ C1] ? enqueue_timer+0x23d/0x550 [ 3065.158310][ C1] ? __mod_timer+0x984/0xdb0 [ 3065.162956][ C1] schedule+0xbd/0x170 [ 3065.167215][ C1] schedule_timeout+0x188/0x2d0 [ 3065.172457][ C1] ? console_conditional_schedule+0x40/0x40 [ 3065.178529][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 3065.184503][ C1] ? update_process_times+0x1b0/0x1b0 [ 3065.190142][ C1] ? prepare_to_swait_event+0x339/0x360 [ 3065.195928][ C1] rcu_gp_fqs_loop+0x313/0x1590 [ 3065.200862][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 3065.207191][ C1] ? rcu_gp_init+0x1560/0x1560 [ 3065.212631][ C1] ? rcu_gp_cleanup+0xb41/0xc90 [ 3065.217533][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 3065.222781][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 3065.228074][ C1] rcu_gp_kthread+0x9d/0x3b0 [ 3065.232901][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3065.238241][ C1] ? __kthread_parkme+0x7a/0x1c0 [ 3065.243342][ C1] ? __kthread_parkme+0x162/0x1c0 [ 3065.248762][ C1] kthread+0x2fa/0x390 [ 3065.253392][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 3065.258654][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3065.263299][ C1] ret_from_fork+0x48/0x80 [ 3065.267784][ C1] ? kthread_blkcg+0xd0/0xd0 [ 3065.272692][ C1] ret_from_fork_asm+0x11/0x20 [ 3065.277709][ C1] [ 3065.281036][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 3065.287924][ C1] Sending NMI from CPU 1 to CPUs 0: [ 3065.293682][ C0] NMI backtrace for cpu 0 [ 3065.293692][ C0] CPU: 0 PID: 15943 Comm: syz.3.13206 Not tainted syzkaller #0 [ 3065.293708][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3065.293716][ C0] RIP: 0010:mark_lock+0x9c/0x320 [ 3065.293738][ C0] Code: 89 c7 41 81 e7 ff 1f 00 00 c1 e8 03 25 f8 03 00 00 48 8d b8 00 55 1c 91 be 08 00 00 00 e8 3c 72 76 00 4c 0f a3 3d d4 6b b3 0f <73> 10 49 69 c7 d0 00 00 00 4c 8d b8 c0 d3 b2 90 eb 24 48 c7 c0 80 [ 3065.293750][ C0] RSP: 0018:ffffc900000076c0 EFLAGS: 00000057 [ 3065.293765][ C0] RAX: 0000000000000001 RBX: ffff88802bae0000 RCX: ffffffff8168e924 [ 3065.293776][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911c55a0 [ 3065.293785][ C0] RBP: 0000000000000003 R08: ffffffff911c55a7 R09: 1ffffffff2238ab4 [ 3065.293795][ C0] R10: dffffc0000000000 R11: fffffbfff2238ab5 R12: 0000000000000008 [ 3065.293805][ C0] R13: dffffc0000000000 R14: ffff88802bae0ae0 R15: 0000000000000501 [ 3065.293816][ C0] FS: 00007fb6ded056c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 3065.293830][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3065.293841][ C0] CR2: 00007fb6dece3ff8 CR3: 00000000666c3000 CR4: 00000000003506f0 [ 3065.293856][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3065.293865][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3065.293875][ C0] Call Trace: [ 3065.293881][ C0] [ 3065.293889][ C0] lockdep_hardirqs_on_prepare+0x24d/0x770 [ 3065.293908][ C0] ? lock_chain_count+0x20/0x20 [ 3065.293926][ C0] ? rcu_is_watching+0x15/0xb0 [ 3065.293945][ C0] trace_hardirqs_on+0x28/0x40 [ 3065.293963][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3065.293983][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 3065.294000][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 3065.294011][ C0] RSP: 0018:ffffc90000007880 EFLAGS: 00000206 [ 3065.294022][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 774685a0889f3f00 [ 3065.294032][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 3065.294041][ C0] RBP: ffffc90000007988 R08: dffffc0000000000 R09: 1ffffffff2238aa0 [ 3065.294052][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 1ffff92000000f1c [ 3065.294062][ C0] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000 [ 3065.294080][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 3065.294100][ C0] ? read_lock_is_recursive+0x20/0x20 [ 3065.294115][ C0] ? mark_lock+0x94/0x320 [ 3065.294135][ C0] ipv6_get_ifaddr+0x124/0x630 [ 3065.294153][ C0] ? ipv6_get_ifaddr+0x103/0x630 [ 3065.294178][ C0] ? ipv6_get_ifaddr+0x103/0x630 [ 3065.294197][ C0] ? ipv6_dev_find+0x40/0x40 [ 3065.294214][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 3065.294229][ C0] ? _local_bh_enable+0xa0/0xa0 [ 3065.294246][ C0] ndisc_send_rs+0x98/0x610 [ 3065.294261][ C0] ? ipv6_get_lladdr+0x378/0x3e0 [ 3065.294281][ C0] addrconf_rs_timer+0x2d5/0x630 [ 3065.294298][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 3065.294312][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3065.294332][ C0] call_timer_fn+0x189/0x540 [ 3065.294347][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 3065.294361][ C0] ? call_timer_fn+0xd2/0x540 [ 3065.294375][ C0] ? __run_timers+0x800/0x800 [ 3065.294394][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 3065.294409][ C0] __run_timers+0x542/0x800 [ 3065.294428][ C0] ? detach_timer+0x2b0/0x2b0 [ 3065.294449][ C0] run_timer_softirq+0x67/0xf0 [ 3065.294464][ C0] handle_softirqs+0x280/0x820 [ 3065.294480][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 3065.294497][ C0] ? do_softirq+0x1a0/0x1a0 [ 3065.294513][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 3065.294533][ C0] __irq_exit_rcu+0xd3/0x190 [ 3065.294547][ C0] ? irq_exit_rcu+0x20/0x20 [ 3065.294565][ C0] irq_exit_rcu+0x9/0x20 [ 3065.294578][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3065.294595][ C0] [ 3065.294600][ C0] [ 3065.294605][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3065.294622][ C0] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 3065.294640][ C0] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 3e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 3065.294652][ C0] RSP: 0018:ffffc90011237a00 EFLAGS: 00000246 [ 3065.294663][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88802bae0000 [ 3065.294673][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3065.294682][ C0] RBP: ffffc90011237ad0 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 3065.294693][ C0] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 1ffff92002246f44 [ 3065.294703][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92002246f65 [ 3065.294721][ C0] ? event_function+0x300/0x300 [ 3065.294739][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 3065.294760][ C0] smp_call_function_single+0x36d/0x5a0 [ 3065.294777][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 3065.294792][ C0] ? event_function+0x300/0x300 [ 3065.294809][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 3065.294826][ C0] ? event_function+0x300/0x300 [ 3065.294858][ C0] perf_install_in_context+0x5be/0x920 [ 3065.294879][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 3065.294897][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 3065.294921][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 3065.294940][ C0] ? perf_event__header_size+0x165/0x220 [ 3065.294960][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 3065.294983][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3065.295008][ C0] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3065.295025][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3065.295042][ C0] do_syscall_64+0x55/0xa0 [ 3065.295055][ C0] ? clear_bhb_loop+0x40/0x90 [ 3065.295072][ C0] ? clear_bhb_loop+0x40/0x90 [ 3065.295089][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3065.295107][ C0] RIP: 0033:0x7fb6ddd9c819 [ 3065.295120][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3065.295132][ C0] RSP: 002b:00007fb6ded05028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3065.295146][ C0] RAX: ffffffffffffffda RBX: 00007fb6de016180 RCX: 00007fb6ddd9c819 [ 3065.295157][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 3065.295173][ C0] RBP: 00007fb6dde32c91 R08: 0000000000000002 R09: 0000000000000000 [ 3065.295183][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3065.295192][ C0] R13: 00007fb6de016218 R14: 00007fb6de016180 R15: 00007fffcf685878 [ 3065.295209][ C0] [ 3065.295681][ C1] CPU: 1 PID: 15939 Comm: syz.3.13206 Not tainted syzkaller #0 [ 3065.971995][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 3065.982352][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 3065.989114][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 84 cc f6 65 8b 05 4c b1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 3066.009328][ C1] RSP: 0018:ffffc900001f0040 EFLAGS: 00000206 [ 3066.015875][ C1] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 85a1764459fa6e00 [ 3066.024942][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 3066.033041][ C1] RBP: ffffc900001f00d0 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 3066.041659][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: dffffc0000000000 [ 3066.050270][ C1] R13: ffff88806bfba700 R14: ffffffff9752afb8 R15: 1ffff9200003e008 [ 3066.058516][ C1] FS: 00007fb6ded476c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 3066.068203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3066.074996][ C1] CR2: 00007fb6ddc72140 CR3: 00000000666c3000 CR4: 00000000003506e0 [ 3066.083347][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3066.091404][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 3066.099760][ C1] Call Trace: [ 3066.103248][ C1] [ 3066.106232][ C1] ? _raw_spin_unlock+0x40/0x40 [ 3066.111494][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3066.118075][ C1] debug_object_activate+0x304/0x4f0 [ 3066.123968][ C1] ? rcuref_put+0x220/0x220 [ 3066.128789][ C1] call_rcu+0xa6/0x950 [ 3066.133026][ C1] ? percpu_counter_set+0x1a0/0x1a0 [ 3066.138646][ C1] ? rcuref_put+0x1cc/0x220 [ 3066.143211][ C1] ? dst_release+0x1a0/0x1a0 [ 3066.148277][ C1] ? __lock_acquire+0x1273/0x7d40 [ 3066.153582][ C1] ? rcu_force_quiescent_state+0x230/0x230 [ 3066.159443][ C1] ? dst_release+0x121/0x1a0 [ 3066.164233][ C1] skb_release_head_state+0x71/0x240 [ 3066.169652][ C1] kfree_skb_reason+0xd7/0x170 [ 3066.174455][ C1] dev_kfree_skb_any_reason+0x120/0x130 [ 3066.180233][ C1] ? refcount_dec_and_test+0x70/0x70 [ 3066.185595][ C1] ? validate_xmit_xfrm+0xbc/0x12c0 [ 3066.190962][ C1] team_dummy_transmit+0x1a/0x20 [ 3066.196171][ C1] team_xmit+0x2dd/0x470 [ 3066.200803][ C1] ? passthru_features_check+0x20/0x20 [ 3066.206354][ C1] ? team_close+0xd0/0xd0 [ 3066.210756][ C1] dev_hard_start_xmit+0x246/0x740 [ 3066.215927][ C1] __dev_queue_xmit+0x19a3/0x3660 [ 3066.221027][ C1] ? read_seqbegin+0x196/0x270 [ 3066.225915][ C1] ? __dev_queue_xmit+0x265/0x3660 [ 3066.231068][ C1] ? read_seqbegin+0x19a/0x270 [ 3066.235938][ C1] ? read_seqbegin+0x1c8/0x270 [ 3066.240917][ C1] ? neigh_event_send+0x110/0x110 [ 3066.246333][ C1] ? netdev_core_pick_tx+0x340/0x340 [ 3066.251676][ C1] ? __asan_memcpy+0x40/0x70 [ 3066.256315][ C1] ? eth_header+0x11b/0x200 [ 3066.260862][ C1] ? llc_sysctl_exit+0x70/0x70 [ 3066.265755][ C1] ? neigh_resolve_output+0x618/0x730 [ 3066.271272][ C1] ip6_finish_output2+0xe3d/0x1630 [ 3066.276520][ C1] ? ip6_finish_output2+0x645/0x1630 [ 3066.281931][ C1] ? ip6_mtu+0x7d/0x3f0 [ 3066.286302][ C1] ? nf_hook+0x390/0x390 [ 3066.290691][ C1] ? ip6_finish_output+0x57b/0x820 [ 3066.295879][ C1] ndisc_send_skb+0xc26/0x14f0 [ 3066.300685][ C1] ? ndisc_send_skb+0x1f5/0x14f0 [ 3066.305683][ C1] ? ndisc_mc_map+0x680/0x680 [ 3066.310837][ C1] ? skb_dst+0xd0/0xd0 [ 3066.315058][ C1] addrconf_rs_timer+0x2d5/0x630 [ 3066.320040][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3066.326277][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 3066.332368][ C1] call_timer_fn+0x189/0x540 [ 3066.337011][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3066.343243][ C1] ? call_timer_fn+0xd2/0x540 [ 3066.347987][ C1] ? __run_timers+0x800/0x800 [ 3066.352736][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 3066.358844][ C1] __run_timers+0x542/0x800 [ 3066.363487][ C1] ? detach_timer+0x2b0/0x2b0 [ 3066.368616][ C1] run_timer_softirq+0x67/0xf0 [ 3066.373594][ C1] handle_softirqs+0x280/0x820 [ 3066.378590][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 3066.383764][ C1] ? do_softirq+0x1a0/0x1a0 [ 3066.388572][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 3066.393925][ C1] __irq_exit_rcu+0xd3/0x190 [ 3066.398767][ C1] ? irq_exit_rcu+0x20/0x20 [ 3066.403506][ C1] irq_exit_rcu+0x9/0x20 [ 3066.407784][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 3066.413721][ C1] [ 3066.416695][ C1] [ 3066.419840][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3066.426304][ C1] RIP: 0010:generic_exec_single+0x481/0x4f0 [ 3066.432263][ C1] Code: 75 11 e8 42 05 0b 00 48 85 db 75 16 e8 38 05 0b 00 eb 15 e8 31 05 0b 00 e8 0c 3e 0a 09 48 85 db 74 ea e8 22 05 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 3066.452110][ C1] RSP: 0018:ffffc9000fde7a00 EFLAGS: 00000246 [ 3066.458280][ C1] RAX: 0000000000000000 RBX: 0000000000000200 RCX: ffff88801be40000 [ 3066.466479][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3066.474499][ C1] RBP: ffffc9000fde7ad0 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 3066.482884][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 1ffff92001fbcf44 [ 3066.491098][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001fbcf65 [ 3066.499232][ C1] ? event_function+0x300/0x300 [ 3066.504701][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 3066.510725][ C1] ? lock_chain_count+0x20/0x20 [ 3066.515788][ C1] ? smp_call_function_single+0xb0/0x5a0 [ 3066.521664][ C1] smp_call_function_single+0x36d/0x5a0 [ 3066.527784][ C1] ? event_function+0x300/0x300 [ 3066.532685][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 3066.539053][ C1] ? event_function+0x300/0x300 [ 3066.544081][ C1] perf_install_in_context+0x5be/0x920 [ 3066.550122][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 3066.556228][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 3066.561665][ C1] ? anon_inode_getfile+0x109/0x1a0 [ 3066.567078][ C1] ? perf_event__header_size+0x165/0x220 [ 3066.572874][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 3066.578840][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 3066.584709][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 3066.590927][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 3066.596987][ C1] do_syscall_64+0x55/0xa0 [ 3066.601459][ C1] ? clear_bhb_loop+0x40/0x90 [ 3066.606275][ C1] ? clear_bhb_loop+0x40/0x90 [ 3066.611092][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3066.617184][ C1] RIP: 0033:0x7fb6ddd9c819 [ 3066.621741][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3066.641751][ C1] RSP: 002b:00007fb6ded47028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 3066.650295][ C1] RAX: ffffffffffffffda RBX: 00007fb6de015fa0 RCX: 00007fb6ddd9c819 [ 3066.658653][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 3066.666755][ C1] RBP: 00007fb6dde32c91 R08: 0000000000000002 R09: 0000000000000000 [ 3066.674935][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 3066.683811][ C1] R13: 00007fb6de016038 R14: 00007fb6de015fa0 R15: 00007fffcf685878 [ 3066.691837][ C1]