last executing test programs: 6.995728273s ago: executing program 2 (id=3170): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="12000000030000000400000002"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000f4"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_clone(0x2a801400, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xf54, 0xd, 0x0, 0xffffffffffffffff, 0x3}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 6.706416251s ago: executing program 2 (id=3171): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000001, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x5, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x5, 0x9, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000300)=0x101, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf71, 0x0, 0x1, 0x10000000}, 0x0, 0x200000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 6.236829234s ago: executing program 2 (id=3175): r0 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r0, 0x0, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23004a) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230017) close(0x3) 5.723434178s ago: executing program 2 (id=3187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb6012887636086466670331ffe", @ANYRESDEC], 0xffdd) 4.957448078s ago: executing program 2 (id=3182): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0xae, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4be3f9cbb2623032, @perf_config_ext={0x5}, 0x402, 0x0, 0x0, 0xe80a6b4847db2a6d, 0x60, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0xffffffff80000002, 0x12) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) 4.173005769s ago: executing program 2 (id=3195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, 0x0, 0x0}, 0x20) r1 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x200000000000010b, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xec, 0x5, 0xd, 0xc, 0x0, 0x7fffffff, 0xc0000, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x0, @perf_config_ext={0x8, 0x6}, 0x2, 0x9, 0x7, 0x9, 0x81, 0x5, 0x9, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0x6, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) syz_clone(0x1022040, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r3, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r4, 0xb}, 0x94) socketpair(0x21, 0x3, 0x5, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.059160418s ago: executing program 4 (id=3209): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e00)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0), 0x5000000}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x915f}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x103) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x14, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) write$cgroup_subtree(r4, 0x0, 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r5}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 2.823092075s ago: executing program 4 (id=3211): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100)}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={0x0, 0xf6, 0x8}, 0x18) 2.710475128s ago: executing program 4 (id=3212): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x5, 0x1}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.63025041s ago: executing program 4 (id=3214): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100600, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x44090, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x2}, 0x100000, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xfdef) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000001000018010000202070250000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.522038573s ago: executing program 4 (id=3216): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/1551], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2.476528784s ago: executing program 4 (id=3217): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x108982, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3) 1.886510629s ago: executing program 1 (id=3235): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpid() r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000, 0x0, 0x6, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6493790710000000000080000b2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249f21c6eee84309e7a23c19a394830f2539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bfb1c0e6b1244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbb888b0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f94479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b844139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323478a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526894aa7fe5e68949a3b304723177d356c4604bca492ecec37e83efceefd78a2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bd43b5b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebcef5af469abe753314fae31a09c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa7000008000000000000117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d34264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5a71e0d7696caba172745c7dd919ffb631820420b75b6522c0e21c882c66f4f25ffb6d95e07e068000000000000eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6f0100000000000000f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e09d24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868db06fd892d68a547477f8ef686ff0dba7b8c18c94d5a89b0567a851750a35d9cc2217db890d89385fcaa00f0f2e524672e6f4c8bedfd5da5b157709b8265cf511dc5846ab1d85916c4a6b2d1b408575982e11230cbac0a9c6eaa03c945645581f678403c2a936c53ae72940aa92bcf22b82c6bc028e0acdddf9fef595f0f7a9f80c0e4c659ced769ec463d26a81e468846761a8e1efd6a031ab7adc8665e267be0065cc315aa23012423ec8b8492d9b50fa4d8c5891959b761eec6dc988532782fda13239c948e27853606e26225c796b79cc04f3d1a5a13000000001e301d82a27010d3ac6119d2b12caf282413672d20c852c50084d7b2d50754775ed63bc18023c31351af76e24788d96103455693b34e09a163a9f613a7e5530222cebd7fa0fbff32dc98088f9fab33648cc38e87dd2dd6ee157f5f018702696915661715c979b7796d4f101a257688af7c148e8615c938c4ca8a69f6fc585ec1dd1857a501f90b161eff23181a11a2b0da4c58d459cbf9db"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x57, 0xc4, 0xd, 0x0, 0x0, 0x16, 0x81000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3ff, 0x4, @perf_config_ext={0x7, 0x1}, 0x10, 0xfffffffffffffffe, 0x0, 0x1, 0x3a, 0x1, 0x4, 0x0, 0xc, 0x0, 0xffff}, r3, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0), 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eca", @ANYRES8=r7], 0x9a) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r2}, 0xc) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x10, &(0x7f00000006c0)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {0x3, 0x0}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x4, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x94}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.824819021s ago: executing program 0 (id=3226): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=@framed={{0x18, 0x6, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.595234327s ago: executing program 1 (id=3228): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(0x0, 0x0, 0x2, r0, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xa, 0x6, 0x4, 0xf, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r2}, 0xc) 1.536828049s ago: executing program 0 (id=3229): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x122) r2 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100100, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 1.449558831s ago: executing program 1 (id=3231): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) recvmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000100000000}) 750.36889ms ago: executing program 3 (id=3238): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r0, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 661.565642ms ago: executing program 0 (id=3239): sendmsg$sock(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 616.686354ms ago: executing program 3 (id=3240): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001740)=ANY=[@ANYRES32], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r2}, &(0x7f00000012c0), &(0x7f0000001300)}, 0x20) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x1, 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x1, 0x12) 586.939135ms ago: executing program 0 (id=3241): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711231000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x40000062) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 519.855466ms ago: executing program 1 (id=3242): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000800)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x915f}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x103) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0x0, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x14, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) write$cgroup_subtree(r4, 0x0, 0xfdef) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r5}, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 284.783782ms ago: executing program 1 (id=3245): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) 217.954244ms ago: executing program 1 (id=3246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x891d, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 182.114925ms ago: executing program 0 (id=3247): socketpair(0x1, 0x20000000000001, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83b23dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c11160fb20b1c581e7b0915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab3aa32f948c06b59b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2abd18cae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e26d0a5752813bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a7237841cef384b22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c74f0e2a9bf62ffec6459db40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced84680900000000000000d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d2782a70cf44ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d767671414c99d4894edff8249dc1e3428d2129369ee1b85af1eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038deb359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d40973109644fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f77abb21338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e155f455010b0cb578af7dc7d5e87d4cd376444e2de02f47c61e8e84ff828de453f3489460fd83210e95307e676e1fb4d5865c0ca177a4c7fbb4e62b4450900576b2b5cc7f819abd0f885cc4806f47ffbff01000054f5a2d3875e46000000000000e734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329a18cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481ed51a6359cade91fd645c6d924f36a86bf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf817becd9e5a225d67521d1128eac7d80a6225c3e2f0932223bfbf69ff861f4394836ddf128d6d19079e64336e09000000c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661fdcfa68f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b98a8bf6c747d9a1cc500bb892c3a16ff10feea20bdac89afb758cfa10000000000000000000000000200000000000000ed713df0c59e38928511a64845f1b21ed03369719fa905909d8ce35b42761c46d040e53a0a227e9cecd4d414231baa4894a13763ea5de7a52e61a588babaf5da9a28f477e032400938116cb294447898039724881de3ba3dd5e5e115b58d438b17ad11bf1b1f1ed057d89ec46b2b9bb434e9187a728d1136333958469b22d2126664b5299cc3167ac9a4d501638b978e1c692da5261dae5c9d13065b8ed8b358e7273dfa1e9a8dc1d16aa1edd0c274dedb7cd7e4753c152b4e0e3d124e561420587b9b00ab68c32d6b397c5e7cc4e803e6b6e8ed547e2875372023d111e64cd9ee3635888ecbc7352fd60f348456d74e9e7c09ee202dd09524ecfd3d8c836c0a13a9a45a7e2cec88fa2710ee35c9ed1b824fe4fe68849eee41b5e335aeec0f27053b3a07a001ffe29c5cc3a0ccdcc74330c2a995378d225495c5a543519d952c96da9257f47acc29c48d48b22b1f502b9d743d352de56efbb1b15158c4f0107ba5b3394d4cad4f0a1d31f694d0f559e7f82682775ec7569eeb7ef643dbcbafc4c1c5cbb0ad02dd2a69c5f2b5350049a817b546cf734a746a1cc147a6050bd16598e8e3a5c3515d0edc23e66bbdc6c117559357f49c59208af1162ba1d6667e3ab6bb1696c32dc3bcb2c8ab30d28265ff55c8a80c8e3ce29b2f576ea686d351a8cdb808739ed1a7022fb6e4e834593279c791085e49d1b8124adaf0010790e72ef2035e3da7ebb117c1a032a7378d5c62bb1a4e212618113bbd688091273028a44abfe09067e22fda361d6769d1f44bb06ca0cb9a14a54a8ba0dcb5445c4b368bd1dcce7500"/2356], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x596, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000500)="b9ff03076044238cb89e14f0080047e0ffff00004000632f77fb8035140cac14140c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) 132.773716ms ago: executing program 3 (id=3248): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d3e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 78.774788ms ago: executing program 3 (id=3249): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) 0s ago: executing program 3 (id=3250): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x98, 0x1, 0x0, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0xfffffffe, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3422, 0x0, 0x2, 0x3, 0x3, 0x7fffffc, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x6, 0x3ff, 0x8, 0x20000, 0x1, 0x100, '\x00', 0x0, r2, 0x0, 0x1, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4, @perf_bp={0x0, 0x8}, 0x100e68, 0x1, 0x4000, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0xfffffffffffffffd, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x1}, 0x81400, 0xca, 0xfffffffd, 0x5, 0xdf1e, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r3], 0x9a) kernel console output (not intermixed with test programs): : 'syz.0.2096': attribute type 9 has an invalid length. [ 242.757710][T10671] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2096'. [ 242.900204][T10676] netlink: 'syz.3.2097': attribute type 9 has an invalid length. [ 242.909576][T10679] ref_ctr_offset mismatch. inode: 0x8f2 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 242.949979][T10676] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2097'. [ 243.299522][T10694] netlink: 'syz.4.2105': attribute type 21 has an invalid length. [ 243.311867][T10694] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2105'. [ 243.312889][T10698] netlink: 'syz.4.2105': attribute type 3 has an invalid length. [ 243.376516][T10698] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2105'. [ 243.413585][T10694] netlink: 'syz.4.2105': attribute type 9 has an invalid length. [ 243.503124][T10694] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2105'. [ 243.851013][T10705] device syzkaller0 entered promiscuous mode [ 243.909930][T10708] netlink: 'syz.3.2109': attribute type 9 has an invalid length. [ 243.934300][T10708] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2109'. [ 244.516185][T10733] ref_ctr_offset mismatch. inode: 0x904 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 244.704599][T10744] netlink: 'syz.3.2114': attribute type 9 has an invalid length. [ 244.722475][T10744] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2114'. [ 244.772072][T10746] netlink: 'syz.4.2115': attribute type 9 has an invalid length. [ 244.782688][T10746] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2115'. [ 244.960516][T10759] ref_ctr_offset mismatch. inode: 0x955 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 245.203383][T10767] device syzkaller0 entered promiscuous mode [ 245.281349][T10773] netlink: 'syz.2.2123': attribute type 9 has an invalid length. [ 245.311106][T10773] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2123'. [ 245.519121][T10776] netlink: 'syz.2.2126': attribute type 21 has an invalid length. [ 245.549479][T10776] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2126'. [ 246.411961][T10796] ref_ctr_offset mismatch. inode: 0x8b3 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 246.498260][T10798] ref_ctr_offset mismatch. inode: 0x92e offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 246.893416][T10823] device syzkaller0 entered promiscuous mode [ 247.544651][T10841] ref_ctr_offset mismatch. inode: 0x8bf offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 247.762643][T10851] ref_ctr_offset mismatch. inode: 0x940 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 247.824007][T10856] validate_nla: 7 callbacks suppressed [ 247.824048][T10856] netlink: 'syz.3.2146': attribute type 9 has an invalid length. [ 247.863966][T10856] __nla_validate_parse: 7 callbacks suppressed [ 247.863985][T10856] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2146'. [ 248.141204][T10871] ref_ctr_offset mismatch. inode: 0x938 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 248.202886][T10872] ref_ctr_offset mismatch. inode: 0x8cb offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 248.309880][T10882] device syzkaller0 entered promiscuous mode [ 248.383068][T10891] netlink: 'syz.1.2152': attribute type 3 has an invalid length. [ 248.401445][T10891] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2152'. [ 248.426351][T10884] netlink: 'syz.1.2152': attribute type 21 has an invalid length. [ 248.448549][T10884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2152'. [ 248.521001][T10884] netlink: 'syz.1.2152': attribute type 9 has an invalid length. [ 248.607249][T10884] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2152'. [ 248.762233][T10902] ref_ctr_offset mismatch. inode: 0x953 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 248.860301][T10894] netlink: 'syz.4.2157': attribute type 9 has an invalid length. [ 248.879509][T10894] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2157'. [ 248.941831][T10901] ref_ctr_offset mismatch. inode: 0x8d6 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 249.067884][T10914] netlink: 'syz.1.2163': attribute type 21 has an invalid length. [ 249.093974][T10914] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2163'. [ 249.242728][T10914] netlink: 'syz.1.2163': attribute type 3 has an invalid length. [ 249.277801][T10914] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2163'. [ 249.350779][T10919] netlink: 'syz.3.2165': attribute type 9 has an invalid length. [ 249.368381][T10919] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2165'. [ 249.384009][T10920] netlink: 'syz.1.2163': attribute type 9 has an invalid length. [ 249.402262][T10920] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2163'. [ 249.731120][T10931] netlink: 'syz.3.2168': attribute type 9 has an invalid length. [ 249.820730][T10931] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2168'. [ 250.376142][T10942] device syzkaller0 entered promiscuous mode [ 250.812532][T10961] device syzkaller0 entered promiscuous mode [ 250.902316][T10965] ref_ctr_offset mismatch. inode: 0x8e8 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 252.655549][T11028] device syzkaller0 entered promiscuous mode [ 253.034801][T11043] validate_nla: 12 callbacks suppressed [ 253.034836][T11043] netlink: 'syz.4.2200': attribute type 21 has an invalid length. [ 253.072926][T11043] __nla_validate_parse: 12 callbacks suppressed [ 253.072968][T11043] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2200'. [ 253.176804][T11043] netlink: 'syz.4.2200': attribute type 3 has an invalid length. [ 253.202126][T11043] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2200'. [ 253.250908][T11044] netlink: 'syz.4.2200': attribute type 9 has an invalid length. [ 253.269571][T11044] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2200'. [ 253.620424][T11055] netlink: 'syz.3.2201': attribute type 3 has an invalid length. [ 253.682263][T11055] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2201'. [ 253.725690][T11052] netlink: 'syz.3.2201': attribute type 21 has an invalid length. [ 253.749598][T11052] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2201'. [ 253.898600][T11063] netlink: 'syz.2.2215': attribute type 21 has an invalid length. [ 253.916686][T11063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2215'. [ 253.946842][T11065] netlink: 'syz.2.2215': attribute type 3 has an invalid length. [ 253.993388][T11065] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2215'. [ 254.039103][T11063] netlink: 'syz.2.2215': attribute type 9 has an invalid length. [ 254.065339][T11063] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2215'. [ 255.066893][T11106] ref_ctr_offset mismatch. inode: 0x9c5 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 255.606056][T11126] netlink: 'syz.0.2221': attribute type 21 has an invalid length. [ 255.640454][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2221'. [ 255.683563][T11129] netlink: 'syz.0.2221': attribute type 3 has an invalid length. [ 255.692048][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.698543][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.707917][T11129] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2221'. [ 257.277785][T11159] ref_ctr_offset mismatch. inode: 0x9dc offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 257.730780][T11172] device syzkaller0 entered promiscuous mode [ 258.325362][T11195] validate_nla: 10 callbacks suppressed [ 258.325379][T11195] netlink: 'syz.2.2242': attribute type 3 has an invalid length. [ 258.354474][T11196] ref_ctr_offset mismatch. inode: 0x93d offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 258.377278][T11193] netlink: 'syz.2.2242': attribute type 21 has an invalid length. [ 258.398121][T11193] __nla_validate_parse: 10 callbacks suppressed [ 258.398154][T11193] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2242'. [ 258.443434][T11195] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2242'. [ 258.471639][T11193] netlink: 'syz.2.2242': attribute type 9 has an invalid length. [ 258.511055][T11193] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2242'. [ 259.110154][T11204] netlink: 'syz.3.2245': attribute type 9 has an invalid length. [ 259.132387][T11204] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2245'. [ 259.180055][T11206] ref_ctr_offset mismatch. inode: 0x9af offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 260.028963][T11236] device syzkaller0 entered promiscuous mode [ 260.136110][T11240] netlink: 'syz.3.2253': attribute type 21 has an invalid length. [ 260.145904][T11240] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2253'. [ 260.179164][T11240] netlink: 'syz.3.2253': attribute type 3 has an invalid length. [ 260.219541][T11240] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2253'. [ 260.238284][T11238] ref_ctr_offset mismatch. inode: 0x9a9 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 260.275486][T11244] netlink: 'syz.3.2253': attribute type 9 has an invalid length. [ 260.296178][T11243] device syzkaller0 entered promiscuous mode [ 260.324953][T11244] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2253'. [ 260.363940][T11248] ref_ctr_offset mismatch. inode: 0x9c0 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 260.474731][T11252] netlink: 'syz.1.2257': attribute type 21 has an invalid length. [ 260.483500][T11252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2257'. [ 260.515643][T11252] netlink: 'syz.1.2257': attribute type 3 has an invalid length. [ 260.523805][T11252] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2257'. [ 260.618792][T11252] netlink: 'syz.1.2257': attribute type 9 has an invalid length. [ 260.635473][T11252] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2257'. [ 261.043558][T11268] ref_ctr_offset mismatch. inode: 0x91f offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 261.251717][T11271] ref_ctr_offset mismatch. inode: 0x960 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 261.571393][T11293] device syzkaller0 entered promiscuous mode [ 261.766520][T11299] ref_ctr_offset mismatch. inode: 0x92b offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 261.955189][T11308] ref_ctr_offset mismatch. inode: 0x9bf offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 261.994071][T11301] device syzkaller0 entered promiscuous mode [ 262.451554][T11319] ref_ctr_offset mismatch. inode: 0xa13 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 262.897778][T11331] ref_ctr_offset mismatch. inode: 0x9cc offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 263.414983][T11355] validate_nla: 7 callbacks suppressed [ 263.415002][T11355] netlink: 'syz.3.2288': attribute type 3 has an invalid length. [ 263.428494][T11349] netlink: 'syz.1.2298': attribute type 9 has an invalid length. [ 263.453494][T11349] __nla_validate_parse: 7 callbacks suppressed [ 263.453583][T11349] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2298'. [ 263.474742][T11354] device syzkaller0 entered promiscuous mode [ 263.481288][T11355] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2288'. [ 263.526532][T11351] netlink: 'syz.3.2288': attribute type 21 has an invalid length. [ 263.545406][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2288'. [ 263.913489][T11366] netlink: 'syz.3.2292': attribute type 9 has an invalid length. [ 263.944432][T11366] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2292'. [ 264.634390][T11385] netlink: 'syz.1.2299': attribute type 9 has an invalid length. [ 264.676785][T11385] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2299'. [ 264.914352][T11394] ref_ctr_offset mismatch. inode: 0x9e1 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 265.016677][T11396] netlink: 'syz.0.2303': attribute type 21 has an invalid length. [ 265.019601][T11400] netlink: 'syz.0.2303': attribute type 3 has an invalid length. [ 265.024783][T11396] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2303'. [ 265.032739][T11400] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2303'. [ 265.247673][T11399] netlink: 'syz.3.2302': attribute type 9 has an invalid length. [ 265.288971][T11399] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2302'. [ 265.335839][T11396] netlink: 'syz.0.2303': attribute type 9 has an invalid length. [ 265.367383][T11396] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2303'. [ 265.614369][T11408] device syzkaller0 entered promiscuous mode [ 266.232290][T11422] device syzkaller0 entered promiscuous mode [ 266.665810][T11432] netlink: 'syz.0.2311': attribute type 9 has an invalid length. [ 266.706722][T11432] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2311'. [ 267.232900][T11446] ref_ctr_offset mismatch. inode: 0x95d offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 268.825192][T11502] ref_ctr_offset mismatch. inode: 0xa30 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 269.072398][T11514] validate_nla: 1 callbacks suppressed [ 269.072459][T11514] netlink: 'syz.1.2332': attribute type 9 has an invalid length. [ 269.114384][T11514] __nla_validate_parse: 1 callbacks suppressed [ 269.114400][T11514] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2332'. [ 270.374320][T11555] ref_ctr_offset mismatch. inode: 0xa2a offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 270.939085][T11576] device syzkaller0 entered promiscuous mode [ 271.770672][T11603] netlink: 'syz.2.2358': attribute type 21 has an invalid length. [ 271.802532][T11603] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2358'. [ 271.831105][T11606] netlink: 'syz.4.2359': attribute type 21 has an invalid length. [ 271.843214][T11612] netlink: 'syz.4.2359': attribute type 3 has an invalid length. [ 271.865191][T11613] netlink: 'syz.0.2360': attribute type 3 has an invalid length. [ 271.865777][T11603] netlink: 'syz.2.2358': attribute type 3 has an invalid length. [ 271.886975][T11606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2359'. [ 271.888463][T11603] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2358'. [ 271.896437][T11613] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2360'. [ 271.915731][T11612] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2359'. [ 271.916266][T11608] netlink: 'syz.0.2360': attribute type 21 has an invalid length. [ 271.937776][T11608] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2360'. [ 271.983676][T11621] netlink: 'syz.2.2358': attribute type 9 has an invalid length. [ 272.007889][T11621] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2358'. [ 272.053649][T11620] device syzkaller0 entered promiscuous mode [ 272.069811][T11610] ref_ctr_offset mismatch. inode: 0xa31 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 272.194404][T11606] netlink: 'syz.4.2359': attribute type 9 has an invalid length. [ 272.229201][T11606] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2359'. [ 272.781191][T11631] ref_ctr_offset mismatch. inode: 0x9d4 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 272.944821][T11635] device syzkaller0 entered promiscuous mode [ 273.614975][T11661] netlink: 'syz.3.2375': attribute type 21 has an invalid length. [ 273.640602][T11661] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2375'. [ 274.226790][T11672] ref_ctr_offset mismatch. inode: 0x99f offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 274.352053][T11679] device syzkaller0 entered promiscuous mode [ 274.362877][T11681] validate_nla: 2 callbacks suppressed [ 274.362894][T11681] netlink: 'syz.3.2379': attribute type 3 has an invalid length. [ 274.364930][T11678] netlink: 'syz.3.2379': attribute type 21 has an invalid length. [ 274.368927][T11681] __nla_validate_parse: 2 callbacks suppressed [ 274.368939][T11681] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2379'. [ 274.405043][T11678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2379'. [ 274.556790][T11678] netlink: 'syz.3.2379': attribute type 9 has an invalid length. [ 274.604736][T11678] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2379'. [ 274.626191][T11689] device syzkaller0 entered promiscuous mode [ 274.770069][T11694] ref_ctr_offset mismatch. inode: 0xa4e offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 275.059424][T11699] device syzkaller0 entered promiscuous mode [ 275.100092][T11697] netlink: 'syz.4.2385': attribute type 9 has an invalid length. [ 275.126751][T11697] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.2385'. [ 276.476917][T11735] ref_ctr_offset mismatch. inode: 0xa60 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 276.573308][T11747] ref_ctr_offset mismatch. inode: 0xa01 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 276.610907][T11748] netlink: 'syz.0.2398': attribute type 21 has an invalid length. [ 276.621191][T11748] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2398'. [ 276.642581][T11748] netlink: 'syz.0.2398': attribute type 3 has an invalid length. [ 276.650615][T11748] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2398'. [ 276.749684][T11748] netlink: 'syz.0.2398': attribute type 9 has an invalid length. [ 276.765850][T11748] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2398'. [ 276.803721][T11750] device syzkaller0 entered promiscuous mode [ 277.255389][T11756] netlink: 'syz.2.2399': attribute type 9 has an invalid length. [ 277.277086][T11756] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2399'. [ 278.023779][T11785] ref_ctr_offset mismatch. inode: 0xa7e offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 278.291079][T11796] netlink: 'syz.2.2413': attribute type 9 has an invalid length. [ 278.356845][T11796] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2413'. [ 278.730091][T11806] device syzkaller0 entered promiscuous mode [ 278.787329][T11805] ref_ctr_offset mismatch. inode: 0xa89 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 278.923069][T11815] netlink: 'syz.0.2418': attribute type 9 has an invalid length. [ 278.961604][T11815] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2418'. [ 279.430545][T11822] ref_ctr_offset mismatch. inode: 0xa83 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 279.777868][T11833] ref_ctr_offset mismatch. inode: 0x9d3 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 280.079861][T11844] ref_ctr_offset mismatch. inode: 0xa8f offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 280.132598][T11851] device syzkaller0 entered promiscuous mode [ 280.387621][T11856] validate_nla: 3 callbacks suppressed [ 280.387640][T11856] netlink: 'syz.3.2432': attribute type 9 has an invalid length. [ 280.425499][T11856] __nla_validate_parse: 3 callbacks suppressed [ 280.425516][T11856] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2432'. [ 280.454306][T11859] ref_ctr_offset mismatch. inode: 0xa95 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 280.531887][T11865] netlink: 'syz.2.2434': attribute type 21 has an invalid length. [ 280.545854][T11865] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2434'. [ 280.576272][T11865] netlink: 'syz.2.2434': attribute type 3 has an invalid length. [ 280.590681][T11863] device syzkaller0 entered promiscuous mode [ 280.597621][T11865] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2434'. [ 280.631127][T11866] netlink: 'syz.2.2434': attribute type 9 has an invalid length. [ 280.648184][T11866] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2434'. [ 280.783285][T11871] netlink: 'syz.1.2435': attribute type 21 has an invalid length. [ 280.796250][T11871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2435'. [ 280.871878][T11871] netlink: 'syz.1.2435': attribute type 3 has an invalid length. [ 280.915347][T11871] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2435'. [ 280.994176][T11869] ref_ctr_offset mismatch. inode: 0xa22 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 281.022756][T11874] netlink: 'syz.1.2435': attribute type 9 has an invalid length. [ 281.036263][T11874] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2435'. [ 281.536955][T11892] netlink: 'syz.3.2441': attribute type 9 has an invalid length. [ 281.554816][T11892] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2441'. [ 281.753801][T11911] netlink: 'syz.3.2446': attribute type 21 has an invalid length. [ 281.794122][T11911] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2446'. [ 281.819789][T11912] netlink: 'syz.3.2446': attribute type 3 has an invalid length. [ 281.930967][T11917] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2446'. [ 281.965968][T11913] ref_ctr_offset mismatch. inode: 0xa89 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 282.400499][T11927] device syzkaller0 entered promiscuous mode [ 283.803397][T11967] ref_ctr_offset mismatch. inode: 0xab6 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 284.120680][T11973] device syzkaller0 entered promiscuous mode [ 284.302958][T11980] ref_ctr_offset mismatch. inode: 0xa9f offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 284.791676][T11990] ref_ctr_offset mismatch. inode: 0xaa6 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 285.467980][T12029] validate_nla: 20 callbacks suppressed [ 285.467999][T12029] netlink: 'syz.1.2475': attribute type 3 has an invalid length. [ 285.549347][T12029] __nla_validate_parse: 20 callbacks suppressed [ 285.549366][T12029] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2475'. [ 285.578000][T12024] netlink: 'syz.1.2475': attribute type 21 has an invalid length. [ 285.586670][T12024] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2475'. [ 286.138335][T12044] device syzkaller0 entered promiscuous mode [ 286.294347][T12048] netlink: 'syz.4.2483': attribute type 21 has an invalid length. [ 286.326800][T12048] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2483'. [ 286.330637][T12051] netlink: 'syz.4.2483': attribute type 3 has an invalid length. [ 286.368372][T12051] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2483'. [ 286.483961][T12055] netlink: 'syz.4.2483': attribute type 9 has an invalid length. [ 286.494572][T12055] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2483'. [ 287.018568][T12061] ref_ctr_offset mismatch. inode: 0xad8 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 287.523968][T12084] netlink: 'syz.0.2491': attribute type 21 has an invalid length. [ 287.561069][T12084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2491'. [ 287.675140][T12084] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 287.705230][T12084] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2491'. [ 287.737588][T12087] netlink: 'syz.0.2491': attribute type 9 has an invalid length. [ 287.794183][T12087] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2491'. [ 288.223584][T12096] device syzkaller0 entered promiscuous mode [ 288.432946][T12102] netlink: 'syz.0.2497': attribute type 3 has an invalid length. [ 288.449488][T12101] netlink: 'syz.0.2497': attribute type 21 has an invalid length. [ 288.462308][T12102] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2497'. [ 288.470623][T12101] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2497'. [ 289.794663][T12121] device syzkaller0 entered promiscuous mode [ 290.008069][T12123] ref_ctr_offset mismatch. inode: 0xa3c offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 290.810821][T12153] device syzkaller0 entered promiscuous mode [ 291.708000][T12179] validate_nla: 4 callbacks suppressed [ 291.708045][T12179] netlink: 'syz.0.2520': attribute type 21 has an invalid length. [ 291.725970][T12179] __nla_validate_parse: 4 callbacks suppressed [ 291.726007][T12179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2520'. [ 291.789546][T12179] netlink: 'syz.0.2520': attribute type 3 has an invalid length. [ 291.817109][T12179] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2520'. [ 291.887673][T12182] netlink: 'syz.0.2520': attribute type 9 has an invalid length. [ 291.903386][T12182] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2520'. [ 292.395147][T12188] ref_ctr_offset mismatch. inode: 0xa5b offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 292.451648][T12196] device syzkaller0 entered promiscuous mode [ 292.680741][T12204] ref_ctr_offset mismatch. inode: 0xa61 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 293.480323][T12243] ref_ctr_offset mismatch. inode: 0xaff offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 293.789292][T12256] device syzkaller0 entered promiscuous mode [ 293.867489][T12263] netlink: 'syz.4.2544': attribute type 21 has an invalid length. [ 293.912035][T12263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2544'. [ 293.969723][T12264] netlink: 'syz.4.2544': attribute type 3 has an invalid length. [ 293.978789][T12264] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2544'. [ 294.066051][T12263] netlink: 'syz.4.2544': attribute type 9 has an invalid length. [ 294.076940][T12263] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2544'. [ 294.158427][T12267] ref_ctr_offset mismatch. inode: 0xb09 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 294.643208][T12280] ref_ctr_offset mismatch. inode: 0xb0f offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 294.893037][T12288] ref_ctr_offset mismatch. inode: 0xa79 offset: 0xe ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x7602 [ 294.995379][T12294] ref_ctr_offset mismatch. inode: 0xb15 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 295.792674][T12318] ref_ctr_offset mismatch. inode: 0xb22 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 295.829350][T12325] netlink: 'syz.0.2563': attribute type 21 has an invalid length. [ 295.854772][T12323] ref_ctr_offset mismatch. inode: 0xafc offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 295.866778][T12325] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2563'. [ 295.930418][T12325] netlink: 'syz.0.2563': attribute type 3 has an invalid length. [ 295.939912][T12325] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2563'. [ 295.971303][T12325] netlink: 'syz.0.2563': attribute type 9 has an invalid length. [ 295.980656][T12325] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2563'. [ 296.975324][T12347] ref_ctr_offset mismatch. inode: 0xb08 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 297.910140][T12373] ref_ctr_offset mismatch. inode: 0xa90 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 298.175057][T12381] ref_ctr_offset mismatch. inode: 0xb37 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 300.294348][T12433] device syzkaller0 entered promiscuous mode [ 301.463442][T12469] ref_ctr_offset mismatch. inode: 0xb35 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 301.835831][T12481] device syzkaller0 entered promiscuous mode [ 302.245070][T12495] ref_ctr_offset mismatch. inode: 0xaf3 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 302.605106][T12506] netlink: 'syz.4.2619': attribute type 21 has an invalid length. [ 302.625481][T12506] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2619'. [ 302.712377][T12506] netlink: 'syz.4.2619': attribute type 3 has an invalid length. [ 302.736023][T12506] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2619'. [ 302.758930][T12513] netlink: 'syz.0.2620': attribute type 21 has an invalid length. [ 302.775652][T12513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2620'. [ 302.810156][T12513] netlink: 'syz.0.2620': attribute type 3 has an invalid length. [ 302.829765][T12516] netlink: 'syz.4.2619': attribute type 9 has an invalid length. [ 302.847451][T12513] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2620'. [ 302.864041][T12516] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2619'. [ 303.214274][T12519] netlink: 'syz.0.2620': attribute type 9 has an invalid length. [ 303.230354][T12519] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2620'. [ 303.472763][T12524] ref_ctr_offset mismatch. inode: 0xb4b offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 303.597770][T12529] device syzkaller0 entered promiscuous mode [ 304.255105][T12560] ref_ctr_offset mismatch. inode: 0xb62 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 304.280054][T12563] ref_ctr_offset mismatch. inode: 0xb57 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 304.861659][T12581] ref_ctr_offset mismatch. inode: 0xacd offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 304.973548][T12586] ref_ctr_offset mismatch. inode: 0xb80 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 305.000040][T12588] device syzkaller0 entered promiscuous mode [ 306.642156][T12653] device syzkaller0 entered promiscuous mode [ 306.875550][T12656] ref_ctr_offset mismatch. inode: 0xb25 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 307.180017][T12669] netlink: 'syz.4.2660': attribute type 21 has an invalid length. [ 307.196768][T12669] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2660'. [ 307.314191][T12669] netlink: 'syz.4.2660': attribute type 3 has an invalid length. [ 307.327483][T12674] ref_ctr_offset mismatch. inode: 0xb7e offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 307.379908][T12669] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.2660'. [ 307.381577][T12675] netlink: 'syz.4.2660': attribute type 9 has an invalid length. [ 307.563154][T12675] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2660'. [ 308.374997][T12704] device syzkaller0 entered promiscuous mode [ 310.309259][T12752] device syzkaller0 entered promiscuous mode [ 312.452849][T12820] device syzkaller0 entered promiscuous mode [ 313.568115][T12856] FAULT_INJECTION: forcing a failure. [ 313.568115][T12856] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 313.638670][T12856] CPU: 0 PID: 12856 Comm: syz.3.2715 Not tainted syzkaller #0 [ 313.642799][T12853] device syzkaller0 entered promiscuous mode [ 313.646178][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.646205][T12856] Call Trace: [ 313.646211][T12856] [ 313.646219][T12856] dump_stack_lvl+0x188/0x250 [ 313.646257][T12856] ? show_regs_print_info+0x20/0x20 [ 313.678414][T12856] ? load_image+0x400/0x400 [ 313.682927][T12856] ? __lock_acquire+0x7d10/0x7d10 [ 313.687973][T12856] ? vfs_write+0x8b2/0xd60 [ 313.692587][T12856] should_fail+0x38c/0x4c0 [ 313.697025][T12856] _copy_from_user+0x2e/0x170 [ 313.701811][T12856] __sys_bpf+0x26d/0x6f0 [ 313.706336][T12856] ? bpf_link_show_fdinfo+0x380/0x380 [ 313.711737][T12856] ? vtime_user_exit+0x2c8/0x3e0 [ 313.716783][T12856] __x64_sys_bpf+0x78/0x90 [ 313.721231][T12856] do_syscall_64+0x4c/0xa0 [ 313.725759][T12856] ? clear_bhb_loop+0x30/0x80 [ 313.730450][T12856] ? clear_bhb_loop+0x30/0x80 [ 313.735143][T12856] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 313.741161][T12856] RIP: 0033:0x7fb565e05e59 [ 313.745598][T12856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.765595][T12856] RSP: 002b:00007fb56405f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 313.774120][T12856] RAX: ffffffffffffffda RBX: 00007fb56607efa0 RCX: 00007fb565e05e59 [ 313.782154][T12856] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 313.790307][T12856] RBP: 00007fb56405f090 R08: 0000000000000000 R09: 0000000000000000 [ 313.798291][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 313.806456][T12856] R13: 00007fb56607f038 R14: 00007fb56607efa0 R15: 00007ffe4a7b89f8 [ 313.814456][T12856] [ 314.171856][T12866] device syzkaller0 entered promiscuous mode [ 315.002207][T12892] device syzkaller0 entered promiscuous mode [ 315.525881][T12909] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2730'. [ 315.779685][T12915] device syzkaller0 entered promiscuous mode [ 317.136009][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.143143][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.065226][T12963] device syzkaller0 entered promiscuous mode [ 318.644718][T12977] FAULT_INJECTION: forcing a failure. [ 318.644718][T12977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.689149][T12977] CPU: 0 PID: 12977 Comm: syz.1.2744 Not tainted syzkaller #0 [ 318.697006][T12977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 318.707073][T12977] Call Trace: [ 318.710361][T12977] [ 318.713304][T12977] dump_stack_lvl+0x188/0x250 [ 318.717996][T12977] ? show_regs_print_info+0x20/0x20 [ 318.723208][T12977] ? load_image+0x400/0x400 [ 318.727733][T12977] ? __lock_acquire+0x7d10/0x7d10 [ 318.732781][T12977] should_fail+0x38c/0x4c0 [ 318.737219][T12977] _copy_to_user+0x2e/0x130 [ 318.741745][T12977] simple_read_from_buffer+0xe3/0x150 [ 318.747142][T12977] proc_fail_nth_read+0x1a6/0x220 [ 318.752183][T12977] ? proc_fault_inject_write+0x310/0x310 [ 318.757834][T12977] ? fsnotify_perm+0x254/0x560 [ 318.762623][T12977] ? proc_fault_inject_write+0x310/0x310 [ 318.768272][T12977] vfs_read+0x301/0xd60 [ 318.772453][T12977] ? kernel_read+0x1e0/0x1e0 [ 318.777064][T12977] ? __fget_files+0x40f/0x480 [ 318.781768][T12977] ? mutex_lock_nested+0x17/0x20 [ 318.786716][T12977] ? __fdget_pos+0x2bf/0x370 [ 318.791579][T12977] ? ksys_read+0x71/0x260 [ 318.795932][T12977] ksys_read+0x152/0x260 [ 318.800213][T12977] ? vfs_write+0xd60/0xd60 [ 318.804760][T12977] ? lockdep_hardirqs_on+0x94/0x140 [ 318.809988][T12977] do_syscall_64+0x4c/0xa0 [ 318.814421][T12977] ? clear_bhb_loop+0x30/0x80 [ 318.819133][T12977] ? clear_bhb_loop+0x30/0x80 [ 318.824005][T12977] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 318.830001][T12977] RIP: 0033:0x7eff01c6768e [ 318.834427][T12977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 318.854049][T12977] RSP: 002b:00007efeffefffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.862481][T12977] RAX: ffffffffffffffda RBX: 00007efefff006c0 RCX: 00007eff01c6768e [ 318.870569][T12977] RDX: 000000000000000f RSI: 00007efefff000a0 RDI: 0000000000000003 [ 318.878651][T12977] RBP: 00007efefff00090 R08: 0000000000000000 R09: 0000000000000000 [ 318.886738][T12977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.894817][T12977] R13: 00007eff01f20038 R14: 00007eff01f1ffa0 R15: 00007ffc4532f2d8 [ 318.902825][T12977] [ 320.723403][T13002] device syzkaller0 entered promiscuous mode [ 321.169944][T13019] device syzkaller0 entered promiscuous mode [ 322.145030][T13035] device syzkaller0 entered promiscuous mode [ 326.190113][T13122] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2799'. [ 328.488774][T13181] netlink: 'syz.2.2801': attribute type 2 has an invalid length. [ 328.502202][T13181] netlink: 'syz.2.2801': attribute type 1 has an invalid length. [ 331.063109][T13235] FAULT_INJECTION: forcing a failure. [ 331.063109][T13235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.129404][T13236] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2815'. [ 331.149248][T13235] CPU: 1 PID: 13235 Comm: syz.2.2819 Not tainted syzkaller #0 [ 331.156801][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.166879][T13235] Call Trace: [ 331.170174][T13235] [ 331.173190][T13235] dump_stack_lvl+0x188/0x250 [ 331.177894][T13235] ? show_regs_print_info+0x20/0x20 [ 331.183114][T13235] ? load_image+0x400/0x400 [ 331.187667][T13235] ? __lock_acquire+0x7d10/0x7d10 [ 331.192714][T13235] should_fail+0x38c/0x4c0 [ 331.197144][T13235] _copy_from_user+0x2e/0x170 [ 331.202017][T13235] __copy_msghdr_from_user+0xc9/0x630 [ 331.207390][T13235] ? verify_lock_unused+0x140/0x140 [ 331.212608][T13235] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 331.217907][T13235] ___sys_sendmsg+0x19a/0x2e0 [ 331.222602][T13235] ? __sys_sendmsg+0x2a0/0x2a0 [ 331.227394][T13235] ? vfs_write+0x8b2/0xd60 [ 331.231831][T13235] __se_sys_sendmsg+0x1af/0x290 [ 331.236688][T13235] ? __x64_sys_sendmsg+0x80/0x80 [ 331.241630][T13235] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 331.247632][T13235] ? lockdep_hardirqs_on+0x94/0x140 [ 331.252845][T13235] do_syscall_64+0x4c/0xa0 [ 331.257362][T13235] ? clear_bhb_loop+0x30/0x80 [ 331.262034][T13235] ? clear_bhb_loop+0x30/0x80 [ 331.266702][T13235] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.272605][T13235] RIP: 0033:0x7f701da0ae59 [ 331.277022][T13235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.296627][T13235] RSP: 002b:00007f701bc64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.305309][T13235] RAX: ffffffffffffffda RBX: 00007f701dc83fa0 RCX: 00007f701da0ae59 [ 331.313478][T13235] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 331.321729][T13235] RBP: 00007f701bc64090 R08: 0000000000000000 R09: 0000000000000000 [ 331.329708][T13235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.337876][T13235] R13: 00007f701dc84038 R14: 00007f701dc83fa0 R15: 00007ffc29958e58 [ 331.346241][T13235] [ 332.144946][T13262] netlink: 'syz.2.2827': attribute type 2 has an invalid length. [ 332.240306][T13262] netlink: 'syz.2.2827': attribute type 1 has an invalid length. [ 333.502840][T13291] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2838'. [ 333.535925][T13294] FAULT_INJECTION: forcing a failure. [ 333.535925][T13294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.624208][T13294] CPU: 0 PID: 13294 Comm: syz.0.2841 Not tainted syzkaller #0 [ 333.631825][T13294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.641881][T13294] Call Trace: [ 333.645170][T13294] [ 333.648112][T13294] dump_stack_lvl+0x188/0x250 [ 333.653051][T13294] ? show_regs_print_info+0x20/0x20 [ 333.658349][T13294] ? load_image+0x400/0x400 [ 333.662981][T13294] ? __lock_acquire+0x7d10/0x7d10 [ 333.668272][T13294] ? vfs_write+0x8b2/0xd60 [ 333.672782][T13294] should_fail+0x38c/0x4c0 [ 333.677713][T13294] _copy_from_user+0x2e/0x170 [ 333.682382][T13294] __sys_bpf+0x26d/0x6f0 [ 333.686617][T13294] ? bpf_link_show_fdinfo+0x380/0x380 [ 333.691993][T13294] ? vtime_user_exit+0x2c8/0x3e0 [ 333.696931][T13294] __x64_sys_bpf+0x78/0x90 [ 333.701478][T13294] do_syscall_64+0x4c/0xa0 [ 333.705894][T13294] ? clear_bhb_loop+0x30/0x80 [ 333.710565][T13294] ? clear_bhb_loop+0x30/0x80 [ 333.715248][T13294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 333.721131][T13294] RIP: 0033:0x7f060178ae59 [ 333.725698][T13294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.745498][T13294] RSP: 002b:00007f05ff9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.753922][T13294] RAX: ffffffffffffffda RBX: 00007f0601a03fa0 RCX: 00007f060178ae59 [ 333.761893][T13294] RDX: 000000000000000c RSI: 0000200000000000 RDI: 000000000000000a [ 333.770376][T13294] RBP: 00007f05ff9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 333.778429][T13294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.786402][T13294] R13: 00007f0601a04038 R14: 00007f0601a03fa0 R15: 00007ffc7bc97e58 [ 333.794379][T13294] [ 333.819432][T13302] netlink: 'syz.1.2842': attribute type 29 has an invalid length. [ 333.934082][T13302] netlink: 'syz.1.2842': attribute type 29 has an invalid length. [ 333.963077][T13299] netlink: 'syz.1.2842': attribute type 29 has an invalid length. [ 334.372085][T13313] FAULT_INJECTION: forcing a failure. [ 334.372085][T13313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.466758][T13313] CPU: 0 PID: 13313 Comm: syz.4.2846 Not tainted syzkaller #0 [ 334.474539][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 334.484610][T13313] Call Trace: [ 334.487988][T13313] [ 334.490924][T13313] dump_stack_lvl+0x188/0x250 [ 334.495617][T13313] ? show_regs_print_info+0x20/0x20 [ 334.500848][T13313] ? load_image+0x400/0x400 [ 334.505373][T13313] ? __lock_acquire+0x7d10/0x7d10 [ 334.510430][T13313] should_fail+0x38c/0x4c0 [ 334.517745][T13313] _copy_to_user+0x2e/0x130 [ 334.531022][T13313] simple_read_from_buffer+0xe3/0x150 [ 334.538102][T13313] proc_fail_nth_read+0x1a6/0x220 [ 334.549927][T13313] ? proc_fault_inject_write+0x310/0x310 [ 334.562917][T13313] ? fsnotify_perm+0x254/0x560 [ 334.570646][T13313] ? proc_fault_inject_write+0x310/0x310 [ 334.578274][T13313] vfs_read+0x301/0xd60 [ 334.583518][T13313] ? kernel_read+0x1e0/0x1e0 [ 334.588243][T13313] ? __fget_files+0x40f/0x480 [ 334.592947][T13313] ? mutex_lock_nested+0x17/0x20 [ 334.597908][T13313] ? __fdget_pos+0x2bf/0x370 [ 334.602516][T13313] ? ksys_read+0x71/0x260 [ 334.607115][T13313] ksys_read+0x152/0x260 [ 334.611385][T13313] ? vfs_write+0xd60/0xd60 [ 334.615838][T13313] ? lockdep_hardirqs_on+0x94/0x140 [ 334.621082][T13313] do_syscall_64+0x4c/0xa0 [ 334.625561][T13313] ? clear_bhb_loop+0x30/0x80 [ 334.630267][T13313] ? clear_bhb_loop+0x30/0x80 [ 334.634982][T13313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 334.640905][T13313] RIP: 0033:0x7f93e65d368e [ 334.645344][T13313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 334.665241][T13313] RSP: 002b:00007f93e484afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.674388][T13313] RAX: ffffffffffffffda RBX: 00007f93e484b6c0 RCX: 00007f93e65d368e [ 334.682486][T13313] RDX: 000000000000000f RSI: 00007f93e484b0a0 RDI: 0000000000000005 [ 334.690482][T13313] RBP: 00007f93e484b090 R08: 0000000000000000 R09: 0000000000000000 [ 334.698477][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.706878][T13313] R13: 00007f93e688c128 R14: 00007f93e688c090 R15: 00007ffc33c5f138 [ 334.714899][T13313] [ 337.064641][T13367] FAULT_INJECTION: forcing a failure. [ 337.064641][T13367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.103017][T13367] CPU: 1 PID: 13367 Comm: syz.4.2865 Not tainted syzkaller #0 [ 337.110809][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.120967][T13367] Call Trace: [ 337.124268][T13367] [ 337.127299][T13367] dump_stack_lvl+0x188/0x250 [ 337.132109][T13367] ? show_regs_print_info+0x20/0x20 [ 337.137464][T13367] ? load_image+0x400/0x400 [ 337.142011][T13367] ? __lock_acquire+0x7d10/0x7d10 [ 337.147074][T13367] should_fail+0x38c/0x4c0 [ 337.151718][T13367] _copy_from_user+0x2e/0x170 [ 337.156429][T13367] ___sys_recvmsg+0x173/0x5c0 [ 337.161115][T13367] ? __sys_recvmsg+0x280/0x280 [ 337.165882][T13367] ? __lock_acquire+0x7d10/0x7d10 [ 337.171023][T13367] __x64_sys_recvmsg+0x1f9/0x2c0 [ 337.176045][T13367] ? ___sys_recvmsg+0x5c0/0x5c0 [ 337.180975][T13367] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 337.187139][T13367] ? lockdep_hardirqs_on+0x94/0x140 [ 337.192351][T13367] do_syscall_64+0x4c/0xa0 [ 337.197038][T13367] ? clear_bhb_loop+0x30/0x80 [ 337.201718][T13367] ? clear_bhb_loop+0x30/0x80 [ 337.206479][T13367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 337.212452][T13367] RIP: 0033:0x7f93e6612e59 [ 337.216861][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.236638][T13367] RSP: 002b:00007f93e484b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 337.245061][T13367] RAX: ffffffffffffffda RBX: 00007f93e688c090 RCX: 00007f93e6612e59 [ 337.253115][T13367] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003 [ 337.261164][T13367] RBP: 00007f93e484b090 R08: 0000000000000000 R09: 0000000000000000 [ 337.269126][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.277183][T13367] R13: 00007f93e688c128 R14: 00007f93e688c090 R15: 00007ffc33c5f138 [ 337.285162][T13367] [ 337.445612][T13370] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2868'. [ 337.481807][T13370] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 337.613928][T13375] device syzkaller0 entered promiscuous mode [ 337.783297][T13385] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2872'. [ 337.870063][T13390] FAULT_INJECTION: forcing a failure. [ 337.870063][T13390] name failslab, interval 1, probability 0, space 0, times 1 [ 337.941777][T13390] CPU: 0 PID: 13390 Comm: syz.0.2873 Not tainted syzkaller #0 [ 337.949386][T13390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.959777][T13390] Call Trace: [ 337.963070][T13390] [ 337.966005][T13390] dump_stack_lvl+0x188/0x250 [ 337.970693][T13390] ? show_regs_print_info+0x20/0x20 [ 337.975906][T13390] ? load_image+0x400/0x400 [ 337.980420][T13390] ? __lock_acquire+0x7d10/0x7d10 [ 337.985465][T13390] should_fail+0x38c/0x4c0 [ 337.989917][T13390] should_failslab+0x5/0x20 [ 337.994419][T13390] slab_pre_alloc_hook+0x51/0xc0 [ 337.999360][T13390] __kmalloc+0x6b/0x330 [ 338.003517][T13390] ? kernfs_fop_write_iter+0x155/0x4c0 [ 338.009071][T13390] ? end_current_label_crit_section+0x14b/0x170 [ 338.015314][T13390] kernfs_fop_write_iter+0x155/0x4c0 [ 338.020656][T13390] ? iov_iter_init+0xb4/0x170 [ 338.025668][T13390] vfs_write+0x745/0xd60 [ 338.030021][T13390] ? file_end_write+0x250/0x250 [ 338.034977][T13390] ? __fget_files+0x40f/0x480 [ 338.039667][T13390] ? mutex_lock_nested+0x17/0x20 [ 338.044612][T13390] ? __fdget_pos+0x2bf/0x370 [ 338.049301][T13390] ? ksys_write+0x71/0x260 [ 338.053721][T13390] ksys_write+0x152/0x260 [ 338.058057][T13390] ? __ia32_sys_read+0x80/0x80 [ 338.062832][T13390] ? lockdep_hardirqs_on+0x94/0x140 [ 338.068129][T13390] do_syscall_64+0x4c/0xa0 [ 338.072646][T13390] ? clear_bhb_loop+0x30/0x80 [ 338.077377][T13390] ? clear_bhb_loop+0x30/0x80 [ 338.082066][T13390] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 338.088352][T13390] RIP: 0033:0x7f060178ae59 [ 338.095162][T13390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.123693][T13390] RSP: 002b:00007f05ff9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 338.132263][T13390] RAX: ffffffffffffffda RBX: 00007f0601a03fa0 RCX: 00007f060178ae59 [ 338.140363][T13390] RDX: 000000000000000e RSI: 0000200000000100 RDI: 0000000000000004 [ 338.148353][T13390] RBP: 00007f05ff9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 338.156818][T13390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.164803][T13390] R13: 00007f0601a04038 R14: 00007f0601a03fa0 R15: 00007ffc7bc97e58 [ 338.173084][T13390] [ 338.210297][T13368] syz.1.2867 (13368) used greatest stack depth: 18512 bytes left [ 338.692286][T13403] netlink: 'syz.3.2879': attribute type 10 has an invalid length. [ 338.764087][T13408] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2879'. [ 338.834563][T13403] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.868031][T13411] FAULT_INJECTION: forcing a failure. [ 338.868031][T13411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.950982][T13411] CPU: 0 PID: 13411 Comm: syz.0.2882 Not tainted syzkaller #0 [ 338.959085][T13411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 338.969172][T13411] Call Trace: [ 338.972457][T13411] [ 338.975395][T13411] dump_stack_lvl+0x188/0x250 [ 338.980234][T13411] ? show_regs_print_info+0x20/0x20 [ 338.985889][T13411] ? load_image+0x400/0x400 [ 338.990413][T13411] ? __lock_acquire+0x7d10/0x7d10 [ 338.995465][T13411] ? vfs_write+0x8b2/0xd60 [ 338.999920][T13411] should_fail+0x38c/0x4c0 [ 339.004462][T13411] _copy_from_user+0x2e/0x170 [ 339.009595][T13411] __sys_bpf+0x26d/0x6f0 [ 339.011908][T13403] bond0: (slave team0): Enslaving as an active interface with an up link [ 339.014490][T13411] ? bpf_link_show_fdinfo+0x380/0x380 [ 339.028720][T13411] ? vtime_user_exit+0x2c8/0x3e0 [ 339.033843][T13411] __x64_sys_bpf+0x78/0x90 [ 339.038522][T13411] do_syscall_64+0x4c/0xa0 [ 339.043050][T13411] ? clear_bhb_loop+0x30/0x80 [ 339.047848][T13411] ? clear_bhb_loop+0x30/0x80 [ 339.052553][T13411] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 339.058658][T13411] RIP: 0033:0x7f060178ae59 [ 339.063090][T13411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.082832][T13411] RSP: 002b:00007f05ff9e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.091263][T13411] RAX: ffffffffffffffda RBX: 00007f0601a03fa0 RCX: 00007f060178ae59 [ 339.103140][T13411] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 339.113221][T13411] RBP: 00007f05ff9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 339.122359][T13411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.130540][T13411] R13: 00007f0601a04038 R14: 00007f0601a03fa0 R15: 00007ffc7bc97e58 [ 339.138742][T13411] [ 339.562358][T13424] FAULT_INJECTION: forcing a failure. [ 339.562358][T13424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.591052][T13424] CPU: 0 PID: 13424 Comm: syz.1.2886 Not tainted syzkaller #0 [ 339.598580][T13424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 339.608644][T13424] Call Trace: [ 339.612032][T13424] [ 339.615152][T13424] dump_stack_lvl+0x188/0x250 [ 339.619849][T13424] ? show_regs_print_info+0x20/0x20 [ 339.625062][T13424] ? load_image+0x400/0x400 [ 339.629577][T13424] ? __lock_acquire+0x7d10/0x7d10 [ 339.634609][T13424] ? vfs_write+0x8b2/0xd60 [ 339.639030][T13424] should_fail+0x38c/0x4c0 [ 339.643457][T13424] _copy_from_user+0x2e/0x170 [ 339.648141][T13424] __sys_bpf+0x26d/0x6f0 [ 339.652400][T13424] ? bpf_link_show_fdinfo+0x380/0x380 [ 339.657887][T13424] ? vtime_user_exit+0x2c8/0x3e0 [ 339.662840][T13424] __x64_sys_bpf+0x78/0x90 [ 339.667277][T13424] do_syscall_64+0x4c/0xa0 [ 339.671748][T13424] ? clear_bhb_loop+0x30/0x80 [ 339.676450][T13424] ? clear_bhb_loop+0x30/0x80 [ 339.681154][T13424] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 339.687062][T13424] RIP: 0033:0x7eff01ca6e59 [ 339.691583][T13424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.711403][T13424] RSP: 002b:00007efefff00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.720104][T13424] RAX: ffffffffffffffda RBX: 00007eff01f1ffa0 RCX: 00007eff01ca6e59 [ 339.728093][T13424] RDX: 000000000000000c RSI: 0000200000000840 RDI: 000000000000000a [ 339.736082][T13424] RBP: 00007efefff00090 R08: 0000000000000000 R09: 0000000000000000 [ 339.744324][T13424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.752310][T13424] R13: 00007eff01f20038 R14: 00007eff01f1ffa0 R15: 00007ffc4532f2d8 [ 339.760536][T13424] [ 339.762658][T13422] device syzkaller0 entered promiscuous mode [ 340.035949][T13437] netlink: 'syz.1.2899': attribute type 3 has an invalid length. [ 340.048898][T13440] FAULT_INJECTION: forcing a failure. [ 340.048898][T13440] name failslab, interval 1, probability 0, space 0, times 0 [ 340.061784][T13437] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.2899'. [ 340.096515][T13440] CPU: 1 PID: 13440 Comm: syz.3.2889 Not tainted syzkaller #0 [ 340.104967][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 340.115333][T13440] Call Trace: [ 340.118869][T13440] [ 340.121815][T13440] dump_stack_lvl+0x188/0x250 [ 340.126491][T13440] ? show_regs_print_info+0x20/0x20 [ 340.131681][T13440] ? load_image+0x400/0x400 [ 340.136698][T13440] ? __might_sleep+0xf0/0xf0 [ 340.141276][T13440] ? __lock_acquire+0x7d10/0x7d10 [ 340.146294][T13440] ? mark_lock+0x94/0x320 [ 340.150701][T13440] should_fail+0x38c/0x4c0 [ 340.155219][T13440] should_failslab+0x5/0x20 [ 340.159736][T13440] slab_pre_alloc_hook+0x51/0xc0 [ 340.164895][T13440] __kmalloc+0x6b/0x330 [ 340.169076][T13440] ? tomoyo_realpath_from_path+0x118/0x610 [ 340.175007][T13440] tomoyo_realpath_from_path+0x118/0x610 [ 340.180882][T13440] tomoyo_path_number_perm+0x242/0x660 [ 340.186343][T13440] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 340.192958][T13440] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 340.198786][T13440] security_file_ioctl+0x6c/0xa0 [ 340.203736][T13440] __se_sys_ioctl+0x48/0x170 [ 340.208337][T13440] do_syscall_64+0x4c/0xa0 [ 340.212785][T13440] ? clear_bhb_loop+0x30/0x80 [ 340.217482][T13440] ? clear_bhb_loop+0x30/0x80 [ 340.222293][T13440] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 340.228203][T13440] RIP: 0033:0x7fb565e05e59 [ 340.232618][T13440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.252318][T13440] RSP: 002b:00007fb56405f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.260744][T13440] RAX: ffffffffffffffda RBX: 00007fb56607efa0 RCX: 00007fb565e05e59 [ 340.268749][T13440] RDX: 0000000000000003 RSI: 0000000040042408 RDI: 0000000000000004 [ 340.276840][T13440] RBP: 00007fb56405f090 R08: 0000000000000000 R09: 0000000000000000 [ 340.284929][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.293026][T13440] R13: 00007fb56607f038 R14: 00007fb56607efa0 R15: 00007ffe4a7b89f8 [ 340.301030][T13440] [ 340.309011][T13440] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.448426][T13448] netlink: 'syz.1.2890': attribute type 2 has an invalid length. [ 340.484130][T13448] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2890'. [ 340.635388][T13456] netlink: 'syz.4.2894': attribute type 29 has an invalid length. [ 340.651540][T13456] netlink: 'syz.4.2894': attribute type 29 has an invalid length. [ 340.679451][T13456] netlink: 'syz.4.2894': attribute type 29 has an invalid length. [ 341.028192][T13470] FAULT_INJECTION: forcing a failure. [ 341.028192][T13470] name failslab, interval 1, probability 0, space 0, times 0 [ 341.112549][T13470] CPU: 0 PID: 13470 Comm: syz.4.2900 Not tainted syzkaller #0 [ 341.120233][T13470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.130407][T13470] Call Trace: [ 341.133803][T13470] [ 341.136919][T13470] dump_stack_lvl+0x188/0x250 [ 341.141713][T13470] ? show_regs_print_info+0x20/0x20 [ 341.146941][T13470] ? load_image+0x400/0x400 [ 341.151461][T13470] ? __might_sleep+0xf0/0xf0 [ 341.156082][T13470] ? __lock_acquire+0x7d10/0x7d10 [ 341.161135][T13470] should_fail+0x38c/0x4c0 [ 341.165578][T13470] should_failslab+0x5/0x20 [ 341.170090][T13470] slab_pre_alloc_hook+0x51/0xc0 [ 341.174074][T13483] FAULT_INJECTION: forcing a failure. [ 341.174074][T13483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.175045][T13470] kmem_cache_alloc_node+0x47/0x2d0 [ 341.175069][T13470] ? __alloc_skb+0xf4/0x750 [ 341.175094][T13470] __alloc_skb+0xf4/0x750 [ 341.202171][T13470] vhci_write+0xbc/0x450 [ 341.206434][T13470] ? iov_iter_init+0xb4/0x170 [ 341.211142][T13470] vfs_write+0x745/0xd60 [ 341.215394][T13470] ? file_end_write+0x250/0x250 [ 341.220254][T13470] ? __fget_files+0x40f/0x480 [ 341.224955][T13470] ? __fdget_pos+0x1e2/0x370 [ 341.229564][T13470] ? ksys_write+0x71/0x260 [ 341.234023][T13470] ksys_write+0x152/0x260 [ 341.238481][T13470] ? __ia32_sys_read+0x80/0x80 [ 341.243359][T13470] ? lockdep_hardirqs_on+0x94/0x140 [ 341.248575][T13470] do_syscall_64+0x4c/0xa0 [ 341.253093][T13470] ? clear_bhb_loop+0x30/0x80 [ 341.257784][T13470] ? clear_bhb_loop+0x30/0x80 [ 341.262475][T13470] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.268569][T13470] RIP: 0033:0x7f93e6612e59 [ 341.272991][T13470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.292623][T13470] RSP: 002b:00007f93e486c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 341.301051][T13470] RAX: ffffffffffffffda RBX: 00007f93e688bfa0 RCX: 00007f93e6612e59 [ 341.309053][T13470] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 00000000000000ca [ 341.317132][T13470] RBP: 00007f93e486c090 R08: 0000000000000000 R09: 0000000000000000 [ 341.325115][T13470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.333191][T13470] R13: 00007f93e688c038 R14: 00007f93e688bfa0 R15: 00007ffc33c5f138 [ 341.341191][T13470] [ 341.369343][T13483] CPU: 1 PID: 13483 Comm: syz.2.2903 Not tainted syzkaller #0 [ 341.377142][T13483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 341.387211][T13483] Call Trace: [ 341.390504][T13483] [ 341.393620][T13483] dump_stack_lvl+0x188/0x250 [ 341.398574][T13483] ? show_regs_print_info+0x20/0x20 [ 341.403858][T13483] ? load_image+0x400/0x400 [ 341.408447][T13483] ? __lock_acquire+0x7d10/0x7d10 [ 341.413586][T13483] should_fail+0x38c/0x4c0 [ 341.418024][T13483] _copy_from_user+0x2e/0x170 [ 341.422707][T13483] __copy_msghdr_from_user+0xc9/0x630 [ 341.428078][T13483] ? verify_lock_unused+0x140/0x140 [ 341.433292][T13483] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 341.438596][T13483] ___sys_sendmsg+0x19a/0x2e0 [ 341.443355][T13483] ? __sys_sendmsg+0x2a0/0x2a0 [ 341.448130][T13483] ? vfs_write+0x8b2/0xd60 [ 341.452641][T13483] __se_sys_sendmsg+0x1af/0x290 [ 341.457489][T13483] ? __x64_sys_sendmsg+0x80/0x80 [ 341.462527][T13483] ? syscall_enter_from_user_mode+0x2a/0x70 [ 341.468420][T13483] do_syscall_64+0x4c/0xa0 [ 341.472829][T13483] ? clear_bhb_loop+0x30/0x80 [ 341.477495][T13483] ? clear_bhb_loop+0x30/0x80 [ 341.482162][T13483] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 341.488141][T13483] RIP: 0033:0x7f701da0ae59 [ 341.492543][T13483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.512138][T13483] RSP: 002b:00007f701bc64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.520544][T13483] RAX: ffffffffffffffda RBX: 00007f701dc83fa0 RCX: 00007f701da0ae59 [ 341.528505][T13483] RDX: 0000000000000000 RSI: 0000200000001240 RDI: 0000000000000004 [ 341.536461][T13483] RBP: 00007f701bc64090 R08: 0000000000000000 R09: 0000000000000000 [ 341.544421][T13483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.552410][T13483] R13: 00007f701dc84038 R14: 00007f701dc83fa0 R15: 00007ffc29958e58 [ 341.560420][T13483] [ 341.949730][T13514] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2909'. [ 341.970470][T13514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.971765][T13518] FAULT_INJECTION: forcing a failure. [ 341.971765][T13518] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.994145][T13518] CPU: 0 PID: 13518 Comm: syz.1.2907 Not tainted syzkaller #0 [ 342.007651][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.017717][T13518] Call Trace: [ 342.021182][T13518] [ 342.024149][T13518] dump_stack_lvl+0x188/0x250 [ 342.028850][T13518] ? show_regs_print_info+0x20/0x20 [ 342.034066][T13518] ? load_image+0x400/0x400 [ 342.038572][T13518] ? __lock_acquire+0x7d10/0x7d10 [ 342.043628][T13518] ? mark_lock+0x94/0x320 [ 342.047948][T13518] should_fail+0x38c/0x4c0 [ 342.052363][T13518] _copy_from_user+0x2e/0x170 [ 342.057029][T13518] ipv6_setsockopt+0x413/0x3cc0 [ 342.061973][T13518] ? ipv6_update_options+0x400/0x400 [ 342.067244][T13518] ? verify_lock_unused+0x140/0x140 [ 342.072431][T13518] ? mark_lock+0x94/0x320 [ 342.076744][T13518] ? __lock_acquire+0x12e8/0x7d10 [ 342.081765][T13518] ? __lock_acquire+0x13bc/0x7d10 [ 342.086793][T13518] ? verify_lock_unused+0x140/0x140 [ 342.092343][T13518] ? aa_label_sk_perm+0x3d0/0x530 [ 342.097915][T13518] ? aa_sk_perm+0x910/0x910 [ 342.102533][T13518] ? __might_sleep+0xf0/0xf0 [ 342.107314][T13518] ? rcu_lock_release+0x9/0x20 [ 342.112564][T13518] ? __lock_acquire+0x7d10/0x7d10 [ 342.117607][T13518] ? aa_sk_perm+0x7dc/0x910 [ 342.122237][T13518] ? aa_af_perm+0x340/0x340 [ 342.126742][T13518] ? __fget_files+0x40f/0x480 [ 342.131414][T13518] ? aa_sock_opt_perm+0x74/0x100 [ 342.136338][T13518] ? udpv6_setsockopt+0x7a/0xa0 [ 342.141176][T13518] ? sock_common_recvmsg+0x1c0/0x1c0 [ 342.146449][T13518] __sys_setsockopt+0x2bf/0x3d0 [ 342.151301][T13518] __x64_sys_setsockopt+0xb1/0xc0 [ 342.156401][T13518] do_syscall_64+0x4c/0xa0 [ 342.160805][T13518] ? clear_bhb_loop+0x30/0x80 [ 342.165464][T13518] ? clear_bhb_loop+0x30/0x80 [ 342.170126][T13518] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.176002][T13518] RIP: 0033:0x7eff01ca6e59 [ 342.180405][T13518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.200215][T13518] RSP: 002b:00007efefff00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 342.208622][T13518] RAX: ffffffffffffffda RBX: 00007eff01f1ffa0 RCX: 00007eff01ca6e59 [ 342.216582][T13518] RDX: 0000000000000023 RSI: 0000000000000029 RDI: 0000000000000004 [ 342.224680][T13518] RBP: 00007efefff00090 R08: 00000000000000cf R09: 0000000000000000 [ 342.232640][T13518] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 342.240771][T13518] R13: 00007eff01f20038 R14: 00007eff01f1ffa0 R15: 00007ffc4532f2d8 [ 342.249003][T13518] [ 342.429833][T13526] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2914'. [ 342.499539][T13530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 342.554160][T13532] FAULT_INJECTION: forcing a failure. [ 342.554160][T13532] name failslab, interval 1, probability 0, space 0, times 0 [ 342.647429][T13532] CPU: 0 PID: 13532 Comm: syz.4.2915 Not tainted syzkaller #0 [ 342.654950][T13532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.665377][T13532] Call Trace: [ 342.668678][T13532] [ 342.671977][T13532] dump_stack_lvl+0x188/0x250 [ 342.676973][T13532] ? show_regs_print_info+0x20/0x20 [ 342.682457][T13532] ? load_image+0x400/0x400 [ 342.687268][T13532] ? __might_sleep+0xf0/0xf0 [ 342.692015][T13532] ? __lock_acquire+0x7d10/0x7d10 [ 342.697689][T13532] should_fail+0x38c/0x4c0 [ 342.702603][T13532] should_failslab+0x5/0x20 [ 342.707309][T13532] slab_pre_alloc_hook+0x51/0xc0 [ 342.712983][T13532] ? sockfs_init_fs_context+0xa0/0xa0 [ 342.719212][T13532] ? sock_alloc_inode+0x17/0xb0 [ 342.724570][T13532] kmem_cache_alloc+0x3d/0x290 [ 342.729443][T13532] ? sockfs_init_fs_context+0xa0/0xa0 [ 342.735209][T13532] sock_alloc_inode+0x17/0xb0 [ 342.740161][T13532] ? sockfs_init_fs_context+0xa0/0xa0 [ 342.745659][T13532] new_inode_pseudo+0x5f/0x210 [ 342.750479][T13532] __sock_create+0x129/0x900 [ 342.755088][T13532] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 342.761435][T13532] __sys_socket+0xe2/0x170 [ 342.765986][T13532] __x64_sys_socket+0x76/0x80 [ 342.770680][T13532] do_syscall_64+0x4c/0xa0 [ 342.773421][T13540] FAULT_INJECTION: forcing a failure. [ 342.773421][T13540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.775210][T13532] ? clear_bhb_loop+0x30/0x80 [ 342.775234][T13532] ? clear_bhb_loop+0x30/0x80 [ 342.797899][T13532] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 342.803979][T13532] RIP: 0033:0x7f93e6612e59 [ 342.808588][T13532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.828825][T13532] RSP: 002b:00007f93e486c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 342.837260][T13532] RAX: ffffffffffffffda RBX: 00007f93e688bfa0 RCX: 00007f93e6612e59 [ 342.845337][T13532] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 342.853504][T13532] RBP: 00007f93e486c090 R08: 0000000000000000 R09: 0000000000000000 [ 342.861621][T13532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.869698][T13532] R13: 00007f93e688c038 R14: 00007f93e688bfa0 R15: 00007ffc33c5f138 [ 342.877866][T13532] [ 342.880924][T13540] CPU: 1 PID: 13540 Comm: syz.1.2918 Not tainted syzkaller #0 [ 342.888583][T13540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.898731][T13540] Call Trace: [ 342.902019][T13540] [ 342.904948][T13540] dump_stack_lvl+0x188/0x250 [ 342.909829][T13540] ? show_regs_print_info+0x20/0x20 [ 342.915023][T13540] ? load_image+0x400/0x400 [ 342.919512][T13540] ? __lock_acquire+0x7d10/0x7d10 [ 342.924813][T13540] should_fail+0x38c/0x4c0 [ 342.929624][T13540] _copy_from_user+0x2e/0x170 [ 342.934314][T13540] __copy_msghdr_from_user+0xc9/0x630 [ 342.939778][T13540] ? verify_lock_unused+0x140/0x140 [ 342.944975][T13540] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 342.950552][T13540] ___sys_sendmsg+0x19a/0x2e0 [ 342.955322][T13540] ? __sys_sendmsg+0x2a0/0x2a0 [ 342.960082][T13540] ? vfs_write+0x8b2/0xd60 [ 342.964646][T13540] __se_sys_sendmsg+0x1af/0x290 [ 342.969509][T13540] ? __x64_sys_sendmsg+0x80/0x80 [ 342.974438][T13540] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 342.980421][T13540] ? lockdep_hardirqs_on+0x94/0x140 [ 342.985627][T13540] do_syscall_64+0x4c/0xa0 [ 342.990035][T13540] ? clear_bhb_loop+0x30/0x80 [ 342.994702][T13540] ? clear_bhb_loop+0x30/0x80 [ 342.999371][T13540] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.005251][T13540] RIP: 0033:0x7eff01ca6e59 [ 343.009750][T13540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.029350][T13540] RSP: 002b:00007efefff00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.037842][T13540] RAX: ffffffffffffffda RBX: 00007eff01f1ffa0 RCX: 00007eff01ca6e59 [ 343.045803][T13540] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 343.053767][T13540] RBP: 00007efefff00090 R08: 0000000000000000 R09: 0000000000000000 [ 343.062240][T13540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.070300][T13540] R13: 00007eff01f20038 R14: 00007eff01f1ffa0 R15: 00007ffc4532f2d8 [ 343.078277][T13540] [ 343.086554][T13532] socket: no more sockets [ 343.319596][T13544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 343.374617][T13537] chnl_net:caif_netlink_parms(): no params data found [ 343.531712][T13565] FAULT_INJECTION: forcing a failure. [ 343.531712][T13565] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 343.548117][T13565] CPU: 1 PID: 13565 Comm: syz.4.2925 Not tainted syzkaller #0 [ 343.555619][T13565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.566045][T13565] Call Trace: [ 343.569323][T13565] [ 343.572247][T13565] dump_stack_lvl+0x188/0x250 [ 343.576913][T13565] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 343.583058][T13565] ? show_regs_print_info+0x20/0x20 [ 343.588515][T13565] ? load_image+0x400/0x400 [ 343.593230][T13565] should_fail+0x38c/0x4c0 [ 343.597660][T13565] prepare_alloc_pages+0x1e4/0x5f0 [ 343.603304][T13565] __alloc_pages+0x11b/0x480 [ 343.607888][T13565] ? zone_statistics+0x170/0x170 [ 343.612832][T13565] ? count_memcg_event_mm+0x324/0x370 [ 343.618191][T13565] ? remove_device_exclusive_entry+0xa90/0xa90 [ 343.624420][T13565] alloc_pages_vma+0x393/0x7c0 [ 343.629353][T13565] handle_mm_fault+0x23be/0x4410 [ 343.634372][T13565] ? get_page+0xe0/0xe0 [ 343.638603][T13565] ? vmacache_find+0x4f0/0x590 [ 343.643353][T13565] ? vmacache_update+0xa0/0x100 [ 343.648192][T13565] ? find_vma+0x1df/0x230 [ 343.652510][T13565] do_user_addr_fault+0x489/0xc80 [ 343.657539][T13565] exc_page_fault+0x60/0x100 [ 343.662392][T13565] asm_exc_page_fault+0x22/0x30 [ 343.667320][T13565] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 343.673136][T13565] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 90 90 90 90 90 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 90 90 90 90 90 90 48 bb f9 ef ff ff ff 7f [ 343.693175][T13565] RSP: 0018:ffffc9000387fe80 EFLAGS: 00050297 [ 343.699333][T13565] RAX: 0000000000000008 RBX: 00007fffffffeffd RCX: 00002000000029c0 [ 343.707395][T13565] RDX: 0000000000000000 RSI: ffffffff8a2b43a0 RDI: ffffffff8a7a0700 [ 343.716309][T13565] RBP: 0000000000000008 R08: ffffffff8d89f82f R09: 1ffffffff1b13f05 [ 343.724465][T13565] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: 0000000000000000 [ 343.732623][T13565] R13: 00002000000029c0 R14: 0000000000000001 R15: 0000000000000005 [ 343.740690][T13565] __sys_socketpair+0xb4/0x540 [ 343.745456][T13565] __x64_sys_socketpair+0x97/0xb0 [ 343.750558][T13565] do_syscall_64+0x4c/0xa0 [ 343.754993][T13565] ? clear_bhb_loop+0x30/0x80 [ 343.759774][T13565] ? clear_bhb_loop+0x30/0x80 [ 343.764437][T13565] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 343.770499][T13565] RIP: 0033:0x7f93e6612e59 [ 343.774992][T13565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.794865][T13565] RSP: 002b:00007f93e486c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 343.803295][T13565] RAX: ffffffffffffffda RBX: 00007f93e688bfa0 RCX: 00007f93e6612e59 [ 343.811356][T13565] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 343.819317][T13565] RBP: 00007f93e486c090 R08: 0000000000000000 R09: 0000000000000000 [ 343.827283][T13565] R10: 00002000000029c0 R11: 0000000000000246 R12: 0000000000000001 [ 343.835239][T13565] R13: 00007f93e688c038 R14: 00007f93e688bfa0 R15: 00007ffc33c5f138 [ 343.843209][T13565] [ 343.534409][T13537] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.913169][T13537] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.918670][T13566] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2924'. [ 343.932444][T13537] device bridge_slave_0 entered promiscuous mode [ 343.956254][T13537] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.988373][T13537] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.015258][T13537] device bridge_slave_1 entered promiscuous mode [ 344.080918][T13569] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2926'. [ 344.105874][T13537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.122138][T13537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.185802][T13584] FAULT_INJECTION: forcing a failure. [ 344.185802][T13584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.233758][T13537] team0: Port device team_slave_0 added [ 344.236524][T13584] CPU: 1 PID: 13584 Comm: syz.3.2932 Not tainted syzkaller #0 [ 344.242631][T13537] team0: Port device team_slave_1 added [ 344.247032][T13584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.247045][T13584] Call Trace: [ 344.247051][T13584] [ 344.247057][T13584] dump_stack_lvl+0x188/0x250 [ 344.247082][T13584] ? show_regs_print_info+0x20/0x20 [ 344.247097][T13584] ? load_image+0x400/0x400 [ 344.247116][T13584] ? __lock_acquire+0x7d10/0x7d10 [ 344.288496][T13584] should_fail+0x38c/0x4c0 [ 344.293032][T13584] _copy_from_user+0x2e/0x170 [ 344.297707][T13584] perf_copy_attr+0x167/0x840 [ 344.302470][T13584] __se_sys_perf_event_open+0xf5/0x1bb0 [ 344.308103][T13584] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 344.314087][T13584] ? lockdep_hardirqs_on+0x94/0x140 [ 344.319282][T13584] ? __x64_sys_perf_event_open+0x1c/0xc0 [ 344.325080][T13584] do_syscall_64+0x4c/0xa0 [ 344.329580][T13584] ? clear_bhb_loop+0x30/0x80 [ 344.334244][T13584] ? clear_bhb_loop+0x30/0x80 [ 344.338995][T13584] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.344888][T13584] RIP: 0033:0x7fb565e05e59 [ 344.349317][T13584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.369012][T13584] RSP: 002b:00007fb56405f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 344.377527][T13584] RAX: ffffffffffffffda RBX: 00007fb56607efa0 RCX: 00007fb565e05e59 [ 344.385511][T13584] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000003c0 [ 344.393954][T13584] RBP: 00007fb56405f090 R08: 0000000000000000 R09: 0000000000000000 [ 344.402560][T13584] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 344.410805][T13584] R13: 00007fb56607f038 R14: 00007fb56607efa0 R15: 00007ffe4a7b89f8 [ 344.419466][T13584] [ 344.464105][T13537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.471776][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.502422][T13537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.516673][T13537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.523792][T13537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.565302][T13537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.626046][T13595] FAULT_INJECTION: forcing a failure. [ 344.626046][T13595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.662496][T13537] device hsr_slave_0 entered promiscuous mode [ 344.687293][T13537] device hsr_slave_1 entered promiscuous mode [ 344.696066][T13595] CPU: 0 PID: 13595 Comm: syz.2.2935 Not tainted syzkaller #0 [ 344.703565][T13595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.713724][T13595] Call Trace: [ 344.717020][T13595] [ 344.720083][T13595] dump_stack_lvl+0x188/0x250 [ 344.724884][T13595] ? show_regs_print_info+0x20/0x20 [ 344.730120][T13595] ? load_image+0x400/0x400 [ 344.734820][T13595] ? __lock_acquire+0x7d10/0x7d10 [ 344.739887][T13595] should_fail+0x38c/0x4c0 [ 344.744334][T13595] _copy_from_user+0x2e/0x170 [ 344.749032][T13595] __sys_bpf+0x26d/0x6f0 [ 344.753289][T13595] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 344.759544][T13595] ? bpf_link_show_fdinfo+0x380/0x380 [ 344.765011][T13595] ? rcu_nmi_exit+0x6f/0xf0 [ 344.769617][T13595] ? vtime_user_exit+0x2c8/0x3e0 [ 344.774663][T13595] __x64_sys_bpf+0x78/0x90 [ 344.779266][T13595] do_syscall_64+0x4c/0xa0 [ 344.783786][T13595] ? clear_bhb_loop+0x30/0x80 [ 344.788599][T13595] ? clear_bhb_loop+0x30/0x80 [ 344.793462][T13595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 344.799382][T13595] RIP: 0033:0x7f701da0ae59 [ 344.803810][T13595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.823680][T13595] RSP: 002b:00007f701bc64028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.832195][T13595] RAX: ffffffffffffffda RBX: 00007f701dc83fa0 RCX: 00007f701da0ae59 [ 344.840253][T13595] RDX: 0000000000000048 RSI: 0000200000001740 RDI: 0000000000000000 [ 344.848333][T13595] RBP: 00007f701bc64090 R08: 0000000000000000 R09: 0000000000000000 [ 344.856404][T13595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.864646][T13595] R13: 00007f701dc84038 R14: 00007f701dc83fa0 R15: 00007ffc29958e58 [ 344.873113][T13595] [ 344.879370][ T8722] Bluetooth: hci5: command 0x0409 tx timeout [ 344.885679][T13537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.896047][T13537] Cannot create hsr debugfs directory [ 344.902930][T13597] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2936'. [ 344.994782][T13607] FAULT_INJECTION: forcing a failure. [ 344.994782][T13607] name failslab, interval 1, probability 0, space 0, times 0 [ 345.028070][T13607] CPU: 0 PID: 13607 Comm: syz.1.2940 Not tainted syzkaller #0 [ 345.035594][T13607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.045662][T13607] Call Trace: [ 345.049061][T13607] [ 345.052010][T13607] dump_stack_lvl+0x188/0x250 [ 345.056706][T13607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.062907][T13607] ? show_regs_print_info+0x20/0x20 [ 345.068129][T13607] ? load_image+0x400/0x400 [ 345.072759][T13607] should_fail+0x38c/0x4c0 [ 345.077212][T13607] should_failslab+0x5/0x20 [ 345.081743][T13607] slab_pre_alloc_hook+0x51/0xc0 [ 345.086796][T13607] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.093864][T13607] ? sock_alloc_inode+0x17/0xb0 [ 345.098966][T13607] kmem_cache_alloc+0x3d/0x290 [ 345.103864][T13607] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.109276][T13607] sock_alloc_inode+0x17/0xb0 [ 345.113986][T13607] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.119386][T13607] new_inode_pseudo+0x5f/0x210 [ 345.124426][T13607] __sock_create+0x129/0x900 [ 345.129071][T13607] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.135262][T13607] __sys_socket+0xe2/0x170 [ 345.139794][T13607] __x64_sys_socket+0x76/0x80 [ 345.144509][T13607] do_syscall_64+0x4c/0xa0 [ 345.149293][T13607] ? clear_bhb_loop+0x30/0x80 [ 345.154310][T13607] ? clear_bhb_loop+0x30/0x80 [ 345.158982][T13607] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.164914][T13607] RIP: 0033:0x7eff01ca6e59 [ 345.169428][T13607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.189162][T13607] RSP: 002b:00007efefff00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.197595][T13607] RAX: ffffffffffffffda RBX: 00007eff01f1ffa0 RCX: 00007eff01ca6e59 [ 345.205839][T13607] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000025 [ 345.213808][T13607] RBP: 00007efefff00090 R08: 0000000000000000 R09: 0000000000000000 [ 345.221791][T13607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.229763][T13607] R13: 00007eff01f20038 R14: 00007eff01f1ffa0 R15: 00007ffc4532f2d8 [ 345.237917][T13607] [ 345.252991][T13607] socket: no more sockets [ 345.668110][T13630] FAULT_INJECTION: forcing a failure. [ 345.668110][T13630] name failslab, interval 1, probability 0, space 0, times 0 [ 345.668440][T13622] device syzkaller0 entered promiscuous mode [ 345.681701][T13630] CPU: 0 PID: 13630 Comm: syz.4.2949 Not tainted syzkaller #0 [ 345.695782][T13630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 345.706047][T13630] Call Trace: [ 345.709454][T13630] [ 345.712392][T13630] dump_stack_lvl+0x188/0x250 [ 345.717086][T13630] ? show_regs_print_info+0x20/0x20 [ 345.722302][T13630] ? load_image+0x400/0x400 [ 345.726827][T13630] ? __might_sleep+0xf0/0xf0 [ 345.731431][T13630] ? __lock_acquire+0x7d10/0x7d10 [ 345.736974][T13630] should_fail+0x38c/0x4c0 [ 345.742028][T13630] should_failslab+0x5/0x20 [ 345.746541][T13630] slab_pre_alloc_hook+0x51/0xc0 [ 345.751504][T13630] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.757247][T13630] ? sock_alloc_inode+0x17/0xb0 [ 345.762084][T13630] kmem_cache_alloc+0x3d/0x290 [ 345.766918][T13630] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.772275][T13630] sock_alloc_inode+0x17/0xb0 [ 345.777111][T13630] ? sockfs_init_fs_context+0xa0/0xa0 [ 345.782524][T13630] new_inode_pseudo+0x5f/0x210 [ 345.787379][T13630] __sock_create+0x129/0x900 [ 345.791959][T13630] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 345.798118][T13630] __sys_socket+0xe2/0x170 [ 345.802524][T13630] __x64_sys_socket+0x76/0x80 [ 345.807198][T13630] do_syscall_64+0x4c/0xa0 [ 345.811614][T13630] ? clear_bhb_loop+0x30/0x80 [ 345.816274][T13630] ? clear_bhb_loop+0x30/0x80 [ 345.821040][T13630] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 345.827183][T13630] RIP: 0033:0x7f93e6612e59 [ 345.831588][T13630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.851503][T13630] RSP: 002b:00007f93e486c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 345.860022][T13630] RAX: ffffffffffffffda RBX: 00007f93e688bfa0 RCX: 00007f93e6612e59 [ 345.867992][T13630] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 345.876046][T13630] RBP: 00007f93e486c090 R08: 0000000000000000 R09: 0000000000000000 [ 345.884006][T13630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.892062][T13630] R13: 00007f93e688c038 R14: 00007f93e688bfa0 R15: 00007ffc33c5f138 [ 345.900043][T13630] [ 345.928650][T13630] socket: no more sockets [ 346.182254][T13537] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.421345][T13537] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.557548][T13537] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.829373][T13537] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.843316][T13655] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2957'. [ 346.886728][T13148] Bluetooth: hci5: command 0x041b tx timeout [ 347.134365][T13675] FAULT_INJECTION: forcing a failure. [ 347.134365][T13675] name failslab, interval 1, probability 0, space 0, times 0 [ 347.179998][T13675] CPU: 1 PID: 13675 Comm: syz.3.2963 Not tainted syzkaller #0 [ 347.187517][T13675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.197598][T13675] Call Trace: [ 347.200908][T13675] [ 347.203859][T13675] dump_stack_lvl+0x188/0x250 [ 347.208574][T13675] ? show_regs_print_info+0x20/0x20 [ 347.213799][T13675] ? load_image+0x400/0x400 [ 347.218357][T13675] ? __might_sleep+0xf0/0xf0 [ 347.222983][T13675] ? __lock_acquire+0x7d10/0x7d10 [ 347.228045][T13675] ? mark_lock+0x94/0x320 [ 347.232616][T13675] should_fail+0x38c/0x4c0 [ 347.237076][T13675] should_failslab+0x5/0x20 [ 347.241611][T13675] slab_pre_alloc_hook+0x51/0xc0 [ 347.246675][T13675] __kmalloc+0x6b/0x330 [ 347.250906][T13675] ? tomoyo_realpath_from_path+0x118/0x610 [ 347.256731][T13675] tomoyo_realpath_from_path+0x118/0x610 [ 347.262544][T13675] tomoyo_path_number_perm+0x242/0x660 [ 347.268138][T13675] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 347.275453][T13675] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 347.281361][T13675] security_file_ioctl+0x6c/0xa0 [ 347.286317][T13675] __se_sys_ioctl+0x48/0x170 [ 347.290922][T13675] do_syscall_64+0x4c/0xa0 [ 347.295434][T13675] ? clear_bhb_loop+0x30/0x80 [ 347.300131][T13675] ? clear_bhb_loop+0x30/0x80 [ 347.304921][T13675] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 347.310855][T13675] RIP: 0033:0x7fb565e05e59 [ 347.315312][T13675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.335221][T13675] RSP: 002b:00007fb56405f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 347.343666][T13675] RAX: ffffffffffffffda RBX: 00007fb56607efa0 RCX: 00007fb565e05e59 [ 347.351662][T13675] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000005 [ 347.360010][T13675] RBP: 00007fb56405f090 R08: 0000000000000000 R09: 0000000000000000 [ 347.368016][T13675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.376101][T13675] R13: 00007fb56607f038 R14: 00007fb56607efa0 R15: 00007ffe4a7b89f8 [ 347.384312][T13675] [ 347.431061][T13675] ERROR: Out of memory at tomoyo_realpath_from_path. [ 347.495197][T13677] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 347.514185][T13677] device syzkaller0 entered promiscuous mode [ 347.840226][T13537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.905960][T13537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.950052][T13537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.979745][T13537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.195848][T13704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2971'. [ 348.388654][T13720] raw_sendmsg: syz.1.2976 forgot to set AF_INET. Fix it! [ 348.431686][T13717] netlink: 17243 bytes leftover after parsing attributes in process `syz.1.2976'. [ 348.671917][T13731] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2981'. [ 348.679193][T13725] device syzkaller0 entered promiscuous mode [ 348.719828][T13731] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.2981'. [ 348.728090][T13735] FAULT_INJECTION: forcing a failure. [ 348.728090][T13735] name failslab, interval 1, probability 0, space 0, times 0 [ 348.737886][T13731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 348.752054][T13735] CPU: 1 PID: 13735 Comm: syz.3.2981 Not tainted syzkaller #0 [ 348.759547][T13735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.769781][T13735] Call Trace: [ 348.773053][T13735] [ 348.775974][T13735] dump_stack_lvl+0x188/0x250 [ 348.780663][T13735] ? show_regs_print_info+0x20/0x20 [ 348.785861][T13735] ? load_image+0x400/0x400 [ 348.790367][T13735] ? __might_sleep+0xf0/0xf0 [ 348.794964][T13735] ? __lock_acquire+0x7d10/0x7d10 [ 348.800011][T13735] should_fail+0x38c/0x4c0 [ 348.804457][T13735] should_failslab+0x5/0x20 [ 348.809066][T13735] slab_pre_alloc_hook+0x51/0xc0 [ 348.814109][T13735] ? getname_flags+0xb5/0x500 [ 348.818812][T13735] kmem_cache_alloc+0x3d/0x290 [ 348.823600][T13735] getname_flags+0xb5/0x500 [ 348.828200][T13735] do_sys_openat2+0xdd/0x4b0 [ 348.832801][T13735] ? __lock_acquire+0x7d10/0x7d10 [ 348.837998][T13735] ? do_sys_open+0xe0/0xe0 [ 348.842416][T13735] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 348.849120][T13735] ? lock_chain_count+0x20/0x20 [ 348.854054][T13735] ? vtime_user_exit+0x2c8/0x3e0 [ 348.859074][T13735] __x64_sys_openat+0x135/0x160 [ 348.863919][T13735] do_syscall_64+0x4c/0xa0 [ 348.868414][T13735] ? clear_bhb_loop+0x30/0x80 [ 348.873522][T13735] ? clear_bhb_loop+0x30/0x80 [ 348.878291][T13735] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 348.884184][T13735] RIP: 0033:0x7fb565e05e59 [ 348.888592][T13735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.908547][T13735] RSP: 002b:00007fb56403e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 348.917042][T13735] RAX: ffffffffffffffda RBX: 00007fb56607f090 RCX: 00007fb565e05e59 [ 348.925024][T13735] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 348.933601][T13735] RBP: 00007fb56403e090 R08: 0000000000000000 R09: 0000000000000000 [ 348.941578][T13735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.949553][T13735] R13: 00007fb56607f128 R14: 00007fb56607f090 R15: 00007ffe4a7b89f8 [ 348.957667][T13735] [ 348.976442][T13148] Bluetooth: hci5: command 0x040f tx timeout [ 348.996105][T13537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.146014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.158861][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.171984][T13537] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.200178][T13741] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2983'. [ 349.243587][T13745] FAULT_INJECTION: forcing a failure. [ 349.243587][T13745] name failslab, interval 1, probability 0, space 0, times 0 [ 349.262647][T13745] CPU: 0 PID: 13745 Comm: syz.4.2983 Not tainted syzkaller #0 [ 349.270153][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.280313][T13745] Call Trace: [ 349.283619][T13745] [ 349.286558][T13745] dump_stack_lvl+0x188/0x250 [ 349.291262][T13745] ? show_regs_print_info+0x20/0x20 [ 349.296569][T13745] ? load_image+0x400/0x400 [ 349.301238][T13745] ? __might_sleep+0xf0/0xf0 [ 349.307278][T13745] ? __lock_acquire+0x7d10/0x7d10 [ 349.312339][T13745] should_fail+0x38c/0x4c0 [ 349.316968][T13745] should_failslab+0x5/0x20 [ 349.321574][T13745] slab_pre_alloc_hook+0x51/0xc0 [ 349.327063][T13745] kmem_cache_alloc_node+0x47/0x2d0 [ 349.332283][T13745] ? dup_task_struct+0x57/0xb30 [ 349.337240][T13745] ? _raw_spin_lock_irq+0xb7/0xf0 [ 349.342287][T13745] dup_task_struct+0x57/0xb30 [ 349.347000][T13745] ? _raw_spin_unlock_irq+0x1f/0x40 [ 349.352216][T13745] ? lockdep_hardirqs_on+0x94/0x140 [ 349.357438][T13745] copy_process+0x5f0/0x3e20 [ 349.362055][T13745] ? __pidfd_prepare+0x140/0x140 [ 349.367259][T13745] kernel_clone+0x23f/0x990 [ 349.372015][T13745] ? __lock_acquire+0x7d10/0x7d10 [ 349.377140][T13745] ? vfs_write+0x8b2/0xd60 [ 349.381570][T13745] ? create_io_thread+0x180/0x180 [ 349.386595][T13745] __x64_sys_clone+0x19a/0x210 [ 349.391362][T13745] ? __ia32_sys_vfork+0x130/0x130 [ 349.396401][T13745] ? lockdep_hardirqs_on+0x94/0x140 [ 349.401626][T13745] do_syscall_64+0x4c/0xa0 [ 349.406134][T13745] ? clear_bhb_loop+0x30/0x80 [ 349.410894][T13745] ? clear_bhb_loop+0x30/0x80 [ 349.415576][T13745] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 349.421733][T13745] RIP: 0033:0x7f93e6612e59 [ 349.426382][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.446146][T13745] RSP: 002b:00007f93e484afd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 349.454589][T13745] RAX: ffffffffffffffda RBX: 00007f93e688c090 RCX: 00007f93e6612e59 [ 349.462555][T13745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000048400 [ 349.470515][T13745] RBP: 00007f93e484b090 R08: 0000000000000000 R09: 0000000000000000 [ 349.478476][T13745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 349.486440][T13745] R13: 00007f93e688c128 R14: 00007f93e688c090 R15: 00007ffc33c5f138 [ 349.494413][T13745] [ 349.512438][T13741] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.2983'. [ 349.537034][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2983'. [ 349.552832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.565365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.580043][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.587192][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.604871][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.626324][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.661874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.694704][T13751] netlink: 'syz.3.2986': attribute type 29 has an invalid length. [ 349.704322][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.712051][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.724120][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.744483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.753216][T13756] netlink: 'syz.3.2986': attribute type 3 has an invalid length. [ 349.761349][T13756] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2986'. [ 349.762889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.784092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.794492][T13754] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2985'. [ 349.813812][T13751] netlink: 'syz.3.2986': attribute type 29 has an invalid length. [ 349.848175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.861586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.875125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.913900][T13760] FAULT_INJECTION: forcing a failure. [ 349.913900][T13760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.927262][T13760] CPU: 1 PID: 13760 Comm: syz.2.2988 Not tainted syzkaller #0 [ 349.934857][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 349.944918][T13760] Call Trace: [ 349.948205][T13760] [ 349.951369][T13760] dump_stack_lvl+0x188/0x250 [ 349.956145][T13760] ? show_regs_print_info+0x20/0x20 [ 349.961728][T13760] ? load_image+0x400/0x400 [ 349.966259][T13760] ? __lock_acquire+0x7d10/0x7d10 [ 349.971500][T13760] should_fail+0x38c/0x4c0 [ 349.975930][T13760] _copy_from_user+0x2e/0x170 [ 349.980597][T13760] __copy_msghdr_from_user+0xc9/0x630 [ 349.985988][T13760] ? verify_lock_unused+0x140/0x140 [ 349.991319][T13760] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 349.997067][T13760] ___sys_sendmsg+0x19a/0x2e0 [ 350.001917][T13760] ? __sys_sendmsg+0x2a0/0x2a0 [ 350.006980][T13760] ? ktime_get_real_ts64+0x440/0x440 [ 350.012619][T13760] __se_sys_sendmsg+0x1af/0x290 [ 350.017474][T13760] ? __x64_sys_sendmsg+0x80/0x80 [ 350.022420][T13760] ? syscall_enter_from_user_mode+0x2a/0x70 [ 350.028332][T13760] do_syscall_64+0x4c/0xa0 [ 350.032973][T13760] ? clear_bhb_loop+0x30/0x80 [ 350.037651][T13760] ? clear_bhb_loop+0x30/0x80 [ 350.042458][T13760] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 350.048373][T13760] RIP: 0033:0x7f701da0ae59 [ 350.052885][T13760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.072680][T13760] RSP: 002b:00007f701bc64028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.081089][T13760] RAX: ffffffffffffffda RBX: 00007f701dc83fa0 RCX: 00007f701da0ae59 [ 350.089233][T13760] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 350.099930][T13760] RBP: 00007f701bc64090 R08: 0000000000000000 R09: 0000000000000000 [ 350.111391][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.119819][T13760] R13: 00007f701dc84038 R14: 00007f701dc83fa0 R15: 00007ffc29958e58 [ 350.128861][T13760] [ 350.145764][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.160442][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.206505][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.251418][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.253344][T13768] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.2990'. [ 350.274324][T13537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.303927][T13768] netlink: 16770 bytes leftover after parsing attributes in process `syz.4.2990'. [ 350.355738][T13768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2990'. [ 350.617647][T13782] device syzkaller0 entered promiscuous mode [ 350.680883][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 350.699245][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 350.856113][ T4207] Bluetooth: hci1: Received unexpected HCI Event 00000000 [ 350.868933][T13537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.056930][T13147] Bluetooth: hci5: command 0x0419 tx timeout [ 351.110169][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 351.148819][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 351.195413][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 351.232995][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 351.251494][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 351.265887][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 351.318165][T13537] device veth0_vlan entered promiscuous mode [ 351.397971][T13537] device veth1_vlan entered promiscuous mode [ 351.561281][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 351.578005][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 351.603140][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.635130][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.665997][T13537] device veth0_macvtap entered promiscuous mode [ 351.705596][T13537] device veth1_macvtap entered promiscuous mode [ 351.778016][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.814046][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.844347][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.884919][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.915663][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.953070][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.983482][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.004701][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.035354][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.072861][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.106139][T13537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.130601][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 352.150544][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 352.182915][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 352.233582][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 352.260364][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.288925][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.320562][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.360409][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.382457][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.421567][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.461865][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.489705][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.522639][T13537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.562529][T13537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.582423][T13537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.610220][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.619882][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 352.642643][T13537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.667182][T13537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.676101][T13537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.708290][T13537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.122482][ T1224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.156611][ T1224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.233478][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 353.428403][ T1224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.441582][ T1224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.482618][ T1224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 354.568990][T13871] chnl_net:caif_netlink_parms(): no params data found [ 354.782793][T13871] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.817338][T13871] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.877384][T13871] device bridge_slave_0 entered promiscuous mode [ 354.886208][T13871] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.918704][T13871] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.927539][T13871] device bridge_slave_1 entered promiscuous mode [ 355.020262][T13871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.098156][T13871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.180079][T13871] team0: Port device team_slave_0 added [ 355.223056][T13871] team0: Port device team_slave_1 added [ 355.289291][T13871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.309910][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.396783][T13871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.450208][T13871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.489123][T13871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.527896][T13871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.650024][T13871] device hsr_slave_0 entered promiscuous mode [ 355.687161][T13871] device hsr_slave_1 entered promiscuous mode [ 355.705396][T13871] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.728193][T13871] Cannot create hsr debugfs directory [ 355.905095][ T4268] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.059473][ T4268] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.183729][ T8722] Bluetooth: hci0: command 0x0409 tx timeout [ 356.203874][ T4268] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.325937][ T4268] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.624717][T13871] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 357.699527][T13871] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 357.760006][T13871] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 357.809711][T13871] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 358.077582][T13996] device syzkaller0 entered promiscuous mode [ 358.188518][T13871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.258196][ T4235] Bluetooth: hci0: command 0x041b tx timeout [ 358.385083][T13871] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.399022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.413894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.691203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.711743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.740482][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.747722][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.775759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.793321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.824531][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.831764][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.864391][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.904354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.934864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.988113][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 359.075304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 359.094838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 359.141019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 359.164398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 359.202765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 359.231680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 359.262032][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 359.275654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 359.315378][T13871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 359.573460][T14032] bond0: (slave team0): Error: Slave device does not support XDP [ 360.183347][T14046] device syzkaller0 entered promiscuous mode [ 360.241632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 360.263298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 360.295239][T13871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.333453][T11440] Bluetooth: hci0: command 0x040f tx timeout [ 360.500127][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.518469][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.668237][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.697446][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.747293][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.777605][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.804530][T13871] device veth0_vlan entered promiscuous mode [ 361.150801][T13871] device veth1_vlan entered promiscuous mode [ 361.437961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 361.495242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 361.584387][T13871] device veth0_macvtap entered promiscuous mode [ 361.601868][T13871] device veth1_macvtap entered promiscuous mode [ 361.609786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 361.623397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 361.635340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 361.681642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 362.058301][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.095380][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.113890][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.124808][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.142816][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.154870][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.173032][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.185194][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.203140][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.231105][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.270805][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.296507][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.308740][T13871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.346631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 362.371547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 362.409182][ T8722] Bluetooth: hci0: command 0x0419 tx timeout [ 362.439915][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.458742][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.475367][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.502857][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.533148][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.561178][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.580440][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.597213][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.615764][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.634357][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.646718][T13871] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 362.658937][T13871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.671527][T13871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.689607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 362.717864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 362.745867][T13871] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.805690][T13871] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.857505][T13871] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.892943][T13871] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.482487][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.517499][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.556170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 363.617008][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.667006][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.674663][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 364.928734][T14182] chnl_net:caif_netlink_parms(): no params data found [ 365.268475][T14182] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.276657][T14182] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.285116][T14182] device bridge_slave_0 entered promiscuous mode [ 365.296297][T14182] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.304829][T14182] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.313708][T14182] device bridge_slave_1 entered promiscuous mode [ 365.393155][T14182] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.433309][T14182] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.443493][T14220] -: renamed from syzkaller0 [ 365.578288][T14182] team0: Port device team_slave_0 added [ 365.638988][T14182] team0: Port device team_slave_1 added [ 365.749120][T14182] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.757946][T14182] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.810538][T14182] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.862051][T14182] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.903650][T14182] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.964377][T14182] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.232853][T14182] device hsr_slave_0 entered promiscuous mode [ 366.254320][T14182] device hsr_slave_1 entered promiscuous mode [ 366.346714][T14182] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.383426][T14182] Cannot create hsr debugfs directory [ 366.409971][T12635] Bluetooth: hci2: command 0x0409 tx timeout [ 366.742244][T14182] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.802813][T14182] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.902839][T14182] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.034195][T14182] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.373466][T14182] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.440110][T14182] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.529298][T14182] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.591550][T14182] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.933295][T14182] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.014011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 368.033122][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 368.046079][T14182] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.196145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 368.218494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 368.256996][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.264138][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.339699][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 368.358016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 368.387735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 368.416986][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.424075][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.486642][T13149] Bluetooth: hci2: command 0x041b tx timeout [ 368.753635][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 368.771611][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 368.788089][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 368.813517][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 368.833804][T14182] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 368.857565][T14182] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.907247][T14296] device syzkaller0 entered promiscuous mode [ 368.962027][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 368.971989][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 368.997941][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 369.009749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 369.019165][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 369.029417][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 369.038500][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.049716][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 369.422407][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.462915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 369.537340][T14182] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.663676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 369.673253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 369.755250][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 369.769772][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.794807][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.814914][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.859739][T14182] device veth0_vlan entered promiscuous mode [ 369.874192][T14182] device veth1_vlan entered promiscuous mode [ 369.934661][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.972874][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 369.992399][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.018976][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 370.033261][T14182] device veth0_macvtap entered promiscuous mode [ 370.076281][T14182] device veth1_macvtap entered promiscuous mode [ 370.099172][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.137188][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.166755][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.208012][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.220184][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.233222][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.250211][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.284091][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.320015][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.334842][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.353483][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.365030][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.385842][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 370.404818][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.430067][T14182] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.452457][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.515325][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.527866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.539730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.577452][T13145] Bluetooth: hci2: command 0x040f tx timeout [ 370.631320][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.646953][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.668303][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.686298][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.710188][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.728926][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.752363][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.763640][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.779035][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.794543][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.807609][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.821701][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.833490][T14182] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.847889][T14182] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.862972][T14182] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.880014][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 370.907467][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 370.944744][T14182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.978889][T14182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.024323][T14182] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.036077][T14182] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.476279][T14365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.497745][T14365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.591949][ T150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.719065][T14365] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.739903][T14365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.797631][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 372.646618][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 373.030836][T14426] chnl_net:caif_netlink_parms(): no params data found [ 373.521021][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.545373][T14426] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.598243][T14426] device bridge_slave_0 entered promiscuous mode [ 373.629713][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.646579][T14426] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.661751][T14426] device bridge_slave_1 entered promiscuous mode [ 373.897755][T14426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.959587][T14426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.205680][ T4203] ================================================================== [ 374.213997][ T4203] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x1324/0x3c90 [ 374.222276][ T4203] Read of size 1 at addr ffff8880187bae03 by task kworker/u5:5/4203 [ 374.230338][ T4203] [ 374.232654][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 374.240272][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.250644][ T4203] Workqueue: hci2 hci_rx_work [ 374.255419][ T4203] Call Trace: [ 374.258689][ T4203] [ 374.261609][ T4203] dump_stack_lvl+0x188/0x250 [ 374.266283][ T4203] ? show_regs_print_info+0x20/0x20 [ 374.271483][ T4203] ? load_image+0x400/0x400 [ 374.276095][ T4203] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 374.281658][ T4203] ? mutex_lock_io_nested+0x60/0x60 [ 374.286939][ T4203] print_address_description+0x60/0x2d0 [ 374.292490][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 374.297675][ T4203] kasan_report+0xdf/0x130 [ 374.302106][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 374.307225][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 374.312193][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 374.318347][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 374.324058][ T4203] ? mark_lock+0x94/0x320 [ 374.328380][ T4203] ? mutex_unlock+0x10/0x10 [ 374.333010][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 374.339434][ T4203] ? lock_chain_count+0x20/0x20 [ 374.344361][ T4203] ? __rwlock_init+0x140/0x140 [ 374.349201][ T4203] hci_event_packet+0xe48/0x1370 [ 374.354300][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 374.359588][ T4203] ? rcu_lock_release+0x20/0x20 [ 374.364437][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 374.369625][ T4203] hci_rx_work+0x255/0xa10 [ 374.374043][ T4203] process_one_work+0x85f/0x1010 [ 374.378982][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 374.384603][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 374.389881][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 374.395069][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 374.400786][ T4203] ? wq_worker_running+0x97/0x170 [ 374.406014][ T4203] worker_thread+0xaa6/0x1290 [ 374.410897][ T4203] kthread+0x436/0x520 [ 374.414970][ T4203] ? rcu_lock_release+0x20/0x20 [ 374.420416][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 374.425013][ T4203] ret_from_fork+0x1f/0x30 [ 374.429476][ T4203] [ 374.432482][ T4203] [ 374.434799][ T4203] Allocated by task 14485: [ 374.439376][ T4203] __kasan_kmalloc+0xb5/0xf0 [ 374.444041][ T4203] __alloc_skb+0x22c/0x750 [ 374.448445][ T4203] vhci_write+0xbc/0x450 [ 374.452764][ T4203] vfs_write+0x745/0xd60 [ 374.456993][ T4203] ksys_write+0x152/0x260 [ 374.461479][ T4203] do_syscall_64+0x4c/0xa0 [ 374.465884][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.471765][ T4203] [ 374.474077][ T4203] Last potentially related work creation: [ 374.479785][ T4203] kasan_save_stack+0x35/0x60 [ 374.484563][ T4203] kasan_record_aux_stack+0xb8/0x100 [ 374.489862][ T4203] kvfree_call_rcu+0x105/0x7d0 [ 374.494621][ T4203] ipv6_mc_destroy_dev+0x3b7/0x590 [ 374.499726][ T4203] addrconf_ifdown+0x14cd/0x19c0 [ 374.504649][ T4203] addrconf_notify+0x445/0xf00 [ 374.509512][ T4203] raw_notifier_call_chain+0xcb/0x160 [ 374.514871][ T4203] unregister_netdevice_many+0x1049/0x19f0 [ 374.521013][ T4203] ip6gre_exit_batch_net+0x44d/0x4a0 [ 374.526285][ T4203] cleanup_net+0x791/0xba0 [ 374.530776][ T4203] process_one_work+0x85f/0x1010 [ 374.535699][ T4203] worker_thread+0xaa6/0x1290 [ 374.541151][ T4203] kthread+0x436/0x520 [ 374.545204][ T4203] ret_from_fork+0x1f/0x30 [ 374.549606][ T4203] [ 374.551929][ T4203] The buggy address belongs to the object at ffff8880187bac00 [ 374.551929][ T4203] which belongs to the cache kmalloc-512 of size 512 [ 374.565980][ T4203] The buggy address is located 3 bytes to the right of [ 374.565980][ T4203] 512-byte region [ffff8880187bac00, ffff8880187bae00) [ 374.579599][ T4203] The buggy address belongs to the page: [ 374.585230][ T4203] page:ffffea000061ee00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x187b8 [ 374.595383][ T4203] head:ffffea000061ee00 order:2 compound_mapcount:0 compound_pincount:0 [ 374.603694][ T4203] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 374.611799][ T4203] raw: 00fff00000010200 0000000000000000 0000000600000001 ffff888016c41c80 [ 374.620406][ T4203] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 374.629098][ T4203] page dumped because: kasan: bad access detected [ 374.635713][ T4203] page_owner tracks the page as allocated [ 374.641500][ T4203] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3562, ts 19187999887, free_ts 19104021456 [ 374.660682][ T4203] get_page_from_freelist+0x1bbd/0x1ca0 [ 374.666227][ T4203] __alloc_pages+0x1ee/0x480 [ 374.670800][ T4203] new_slab+0xc0/0x4b0 [ 374.674869][ T4203] ___slab_alloc+0x80a/0xdd0 [ 374.679449][ T4203] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 374.684901][ T4203] kernfs_fop_open+0x3da/0xbf0 [ 374.689655][ T4203] do_dentry_open+0x7ff/0xf80 [ 374.694321][ T4203] path_openat+0x26f5/0x2fa0 [ 374.698899][ T4203] do_filp_open+0x1e2/0x410 [ 374.703393][ T4203] do_sys_openat2+0x150/0x4b0 [ 374.708064][ T4203] __x64_sys_openat+0x135/0x160 [ 374.712993][ T4203] do_syscall_64+0x4c/0xa0 [ 374.717394][ T4203] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 374.723277][ T4203] page last free stack trace: [ 374.727930][ T4203] free_unref_page_prepare+0x637/0x6c0 [ 374.733479][ T4203] free_unref_page+0x8f/0x2a0 [ 374.738141][ T4203] __unfreeze_partials+0x1a5/0x200 [ 374.743255][ T4203] put_cpu_partial+0x12d/0x190 [ 374.748000][ T4203] qlist_free_all+0x35/0x90 [ 374.752588][ T4203] kasan_quarantine_reduce+0x150/0x160 [ 374.758118][ T4203] __kasan_slab_alloc+0x2f/0xd0 [ 374.763094][ T4203] slab_post_alloc_hook+0x4c/0x380 [ 374.768272][ T4203] kmem_cache_alloc+0x100/0x290 [ 374.773365][ T4203] __alloc_file+0x25/0x240 [ 374.777851][ T4203] alloc_empty_file+0x90/0x180 [ 374.782598][ T4203] path_openat+0x10f/0x2fa0 [ 374.787098][ T4203] do_filp_open+0x1e2/0x410 [ 374.791683][ T4203] do_sys_openat2+0x150/0x4b0 [ 374.796402][ T4203] __x64_sys_openat+0x135/0x160 [ 374.801245][ T4203] do_syscall_64+0x4c/0xa0 [ 374.805651][ T4203] [ 374.807959][ T4203] Memory state around the buggy address: [ 374.813581][ T4203] ffff8880187bad00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.821741][ T4203] ffff8880187bad80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 374.829823][ T4203] >ffff8880187bae00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.838156][ T4203] ^ [ 374.842235][ T4203] ffff8880187bae80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.850515][ T4203] ffff8880187baf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.858694][ T4203] ================================================================== [ 374.866898][ T4203] Disabling lock debugging due to kernel taint [ 374.875821][ T9243] Bluetooth: hci1: command 0x0409 tx timeout [ 374.886290][ T4203] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 374.887023][T14426] team0: Port device team_slave_0 added [ 374.893623][ T4203] CPU: 1 PID: 4203 Comm: kworker/u5:5 Tainted: G B syzkaller #0 [ 374.908191][ T4203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.918336][ T4203] Workqueue: hci2 hci_rx_work [ 374.923028][ T4203] Call Trace: [ 374.926295][ T4203] [ 374.929212][ T4203] dump_stack_lvl+0x188/0x250 [ 374.934052][ T4203] ? show_regs_print_info+0x20/0x20 [ 374.939242][ T4203] ? load_image+0x400/0x400 [ 374.943737][ T4203] panic+0x2e5/0x810 [ 374.947640][ T4203] ? bpf_jit_dump+0xd0/0xd0 [ 374.952158][ T4203] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 374.958159][ T4203] ? _raw_spin_unlock+0x40/0x40 [ 374.963011][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 374.968130][ T4203] check_panic_on_warn+0x80/0xa0 [ 374.973065][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 374.978174][ T4203] end_report+0x6d/0xf0 [ 374.982318][ T4203] kasan_report+0x102/0x130 [ 374.986812][ T4203] ? hci_le_meta_evt+0x1324/0x3c90 [ 374.991911][ T4203] hci_le_meta_evt+0x1324/0x3c90 [ 374.996835][ T4203] ? hci_remote_host_features_evt+0x280/0x280 [ 375.002885][ T4203] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 375.008506][ T4203] ? mark_lock+0x94/0x320 [ 375.012835][ T4203] ? mutex_unlock+0x10/0x10 [ 375.017641][ T4203] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 375.023706][ T4203] ? lock_chain_count+0x20/0x20 [ 375.028638][ T4203] ? __rwlock_init+0x140/0x140 [ 375.033392][ T4203] hci_event_packet+0xe48/0x1370 [ 375.038401][ T4203] ? lockdep_hardirqs_on+0x94/0x140 [ 375.043609][ T4203] ? rcu_lock_release+0x20/0x20 [ 375.048467][ T4203] ? hci_send_to_monitor+0x9c/0x4a0 [ 375.053655][ T4203] hci_rx_work+0x255/0xa10 [ 375.058060][ T4203] process_one_work+0x85f/0x1010 [ 375.063430][ T4203] ? worker_detach_from_pool+0x240/0x240 [ 375.069219][ T4203] ? lockdep_hardirqs_off+0x70/0x100 [ 375.074512][ T4203] ? _raw_spin_lock_irq+0xb7/0xf0 [ 375.079522][ T4203] ? _raw_spin_lock_irqsave+0x100/0x100 [ 375.085051][ T4203] ? wq_worker_running+0x97/0x170 [ 375.090767][ T4203] worker_thread+0xaa6/0x1290 [ 375.097323][ T4203] kthread+0x436/0x520 [ 375.101812][ T4203] ? rcu_lock_release+0x20/0x20 [ 375.106760][ T4203] ? kthread_blkcg+0xd0/0xd0 [ 375.111334][ T4203] ret_from_fork+0x1f/0x30 [ 375.115778][ T4203] [ 375.118963][ T4203] Kernel Offset: disabled [ 375.123293][ T4203] Rebooting in 86400 seconds..