last executing test programs: 12.613865396s ago: executing program 2 (id=6915): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000100000000000000000001"], 0xfdef) 12.46846977s ago: executing program 2 (id=6916): socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="109ba5d0a437d4f023982cfda7ff0400"/42], 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400300000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r3, @ANYRES8=r3], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x3f) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000f80)={r4}, 0xc) socket$kcm(0x11, 0x200000000000002, 0x300) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10.169666293s ago: executing program 2 (id=6926): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000200000000000000000001"], 0xfdef) 10.062846076s ago: executing program 2 (id=6928): syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x40400, 0x9, 0x4000}, 0x50) (async, rerun: 64) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async, rerun: 64) syz_clone(0x80200, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xa00000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.026710808s ago: executing program 0 (id=6942): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x56, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 5.314798665s ago: executing program 0 (id=6951): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 2.672440197s ago: executing program 1 (id=6954): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) 2.657968907s ago: executing program 3 (id=6955): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000040)=0x1000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0xdba}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, 0x0, 0x84) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00 \x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8982, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000"], &(0x7f0000000640)='GPL\x00', 0x5, 0x80, &(0x7f00000002c0)=""/128, 0x41000}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) openat$cgroup(r0, &(0x7f0000000200)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000060000000400c5bc049257684e9d00000060c5d0cd618b89be93070308830000000000000b010000000000000001000005fdffffff"], &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1}, 0x28) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001340)={{r6}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0xbc, 0x8000000}, {0x6, 0x7, 0x0, 0xc37}]}) 2.599977319s ago: executing program 1 (id=6956): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x2, 0x1, 0x84) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_config_ext={0x3, 0x1ff}, 0x10781, 0x10, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) syz_clone(0x9900000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r0, 0xa, 0x2028}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000001c0)={0x4, 0x80, 0xf9, 0x3, 0x0, 0x0, 0x0, 0x62af, 0x62f02, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x800, 0x1, @perf_bp={&(0x7f00000000c0), 0x4}, 0x110, 0xfffffffffffffff0, 0x4b2, 0x5, 0x1000, 0x5, 0x88cc, 0x0, 0x0, 0x0, 0x8000000000000001}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 2.599104109s ago: executing program 0 (id=6957): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12023) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800180000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.239187249s ago: executing program 2 (id=6958): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r2, &(0x7f00000005c0)}, 0x20) 2.094907582s ago: executing program 3 (id=6959): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000500000000000000000001"], 0xfdef) 1.873159859s ago: executing program 3 (id=6960): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000680)=""/226, 0x0, 0xe2, 0x1, 0x6}, 0x28) 1.662635134s ago: executing program 3 (id=6961): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xcf5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000080)={0x2a, 0x0, @empty=0x1000000}, 0x5, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000500)=r0, 0x4) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES64, @ANYRES32, @ANYRESDEC=r0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b70500000800000085000000c900000095", @ANYRES64=r2, @ANYRES8=r2], &(0x7f0000000300)='GPL\x00', 0x4, 0x2c, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 1.562341897s ago: executing program 1 (id=6962): socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfe, 0xbd, 0x0, 0x0, 0x0, 0x0, 0x4401, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x104101, 0x4, 0x0, 0x1, 0x9, 0x10000000, 0x1, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x8, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="9b12a7e1e55444a86115dc391addfcdcca7e7c276ab98c98c3c21316b071ce42cdc0ce307608260dac83bd7b12fa2cab2560b8d864d85280bcee4296612147ea6bbe0415574b59f2c98898c5c1c0442068afae5f7eb80a511d43234eddd930a570e012af12ec3f31da82bd04c8d294022fb49732fca7c7967d1db1c3a8be8007b49a691c61e6ba6bb79b596107853137901b5de2a1fa0fb414470ce92e03b6d4fff112ae7e75965962eba26bee0a843a2e632f3ecc0d5faf2c4633b3afd648f5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x8020) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb7910009875f37538e486dd6317ce8102038700fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) (fail_nth: 22) 1.543896297s ago: executing program 0 (id=6963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106d000000000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)={[{0x2d, 'net_prio'}, {0x0, 'rdma'}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8601, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, @perf_config_ext={0x1, 0x80000de}, 0x0, 0xd8, 0x0, 0x7, 0x4000000000, 0x2, 0x13, 0x0, 0x20, 0x0, 0x8}, 0x0, 0x3, 0xffffffffffffffff, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x3, 0x3, 0x64, 0x9}, {0x64, 0x1, 0x0, 0x9}, {0x6, 0x6, 0x8, 0x3}]}) syz_clone(0x20000000, &(0x7f0000000000)="e5541334b500a5008741f99eeff2e5fcc5bddec3310ea6e6d9001e83da9f7ce43e2c870d886f8a0361e2c8fe60b4ab60736c3c2e6b18f7f3a96cef7d14017d2e5b0e0208adbcd1b00feb9a3408720bb9388ecdf529b9346e95c13354e551b5a5863f27539acc36f6adafd7f788e6887224d4e16f83e101ca505868347640b4dc3b2d9f55c8daf6a85fee4bd265ca822ca17eec8d5b8fbb8325a573de242bc128da4becfa7bacb38fbbaed8aa11e6cf7d602a9e42532ff64df070d8806c326e2df1f5c4995fae38194eb2e1013e168036a9f63ace31d0fbd20500"/231, 0x10d, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f00000003c0)="cad4e715334ddaf9729aca04218dfb090a55d8dfa473223d424d40ccaf7147790c78d19ecc1bf1a8978fb8bac41dec81f7880682a081d13e9a7374247513d054e7530c4dfae5d6d46c7e6213d9b367530fccd42dadfbc156457d78004ef41aaafda58588297a1e5bdaeae10e9874af40cce162bb9205a4825914f3022c8dfcf87ee44ed43988fc56d414a39a0a11a027bc9865b97d93b0cf81fde83583ee5c734f7f0ee936afa55081809fbd686d1f3a47970b24868b2e725ba5edc32a66fd8596753f9f124d4e622f161fa0840bbbe36b9b324b065f48f1752b5307bd91") sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="602e4d5a9d718ff4dac8f52f395719c3aca0a951e16c43d666f355072e4c8d6add3caed35b80eb685092139e33b2de277870c8d59100fbcd034b11d697fbc88d00c09584c65f18057cd20f01db68f8d825b9c11ce879f091a1736b7075cdae69f839b8530c5230aea803a127ac525144b25381572c9013838d5ebbe2d74c", 0x7e}, {&(0x7f0000000540)="3aa1e92f660ccd505c0343c9f30e561fe8cfccd276f6a45f25c57a7fcd88cfc9baf97f40abe5d143a5d3f467f01da4a25dba8b0f04443e6fa106f52f8b3b803080df412b85e83d8e806728014567272852ccca1d0035fadf513abb1f332b570d6af94e8f2af01cbd2919bd0584aab959c14d2f1bf3189c2d839d89c69818519675b2ece3080cba02886c9c0bc6990acc3a28bff56775b082d6d200851237bd36cfdeeb9e2238f247ad6d627fffea5986cee54563143aaf853d130a2739347fa94aaf6348062571e1d39ff82aa449c272d79402032873f1b9e4261fceb096a6", 0xdf}], 0x2, &(0x7f0000000680)=[{0x28, 0x1, 0x1, "fa56d7e41694933ded61c92357446e090f0ee44956d5"}], 0x28}, 0x40800) 1.484446739s ago: executing program 3 (id=6964): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x89, 0x1, 0x1, 0xae}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509000000000000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) 944.728033ms ago: executing program 1 (id=6965): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}]}, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39, 0xffff, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 919.707905ms ago: executing program 0 (id=6966): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x5}]}, {0x0, [0x5f, 0x2e, 0x0, 0x0, 0x0, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f0000000680)=""/226, 0x2f, 0xe2, 0x1, 0x6}, 0x28) 787.632448ms ago: executing program 1 (id=6967): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x7d}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) unlink(&(0x7f0000000580)='./file0\x00') r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x38}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x1200000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2c, &(0x7f0000000180)=[{}], 0x8, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000480)={r1, r0}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x7fff, '\x00', r4, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) 696.90463ms ago: executing program 2 (id=6968): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x66, 0x0, 0x3}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000027505aa9d0283e"], 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad06b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976ada362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a867152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca4501391358000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c06025406"], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000063018e00000000009500000000000000fc956c2689bfa0ca5bf754a4d8f4d000c580a31647d8271ddeaab3faaea862be74db7a8758f47a8e586ea72abf2f9c1d7fa4f364237c8929df83330ea2c7d35d1d79f358276d9e9fbf964e925200ba7c"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) r6 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x80}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000480)="ec000900062b2c25fe800000f7ffffffdc8b851a238466cc80007a000000ad6e911b51818462b4003a000001828c75416c", 0x31}], 0x1}, 0x48100) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x545b0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x16, 0x0, 0x0) (async) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r8, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f2dcc6d0e5bfb6ecc27477a80d1fcf4b137d054bd61743b079bac97f2141d9f3fc65776a653c4ec621d3c20287f5605901decf24849b329a36c04e4b9ed84e68605ca797889c2552b819a920c3ea749c4760aa70f09c9c56b6a43f7c5b6d22e5b85ad8359b1ca3ce6562fb42785fa4a7fee635efcaa4ba6fab659971224383e4bf1cf7f3e03373a9750690557a2efd747ce8afce6d4cd5"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r10, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000100)=r1, 0x120) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x6, 0x2, &(0x7f00000001c0)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7e}], &(0x7f0000001cc0)='GPL\x00', 0xa7, 0x9c, &(0x7f0000001d00)=""/156, 0x40f00, 0x35, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001fc0)={0x4, 0xf, 0x3, 0xa9}, 0x10, r11, r8, 0x7, &(0x7f0000002000)=[r3, r3, r3, r6, r8, r8, r3], &(0x7f0000002040)=[{0x0, 0x4, 0x10, 0x2}, {0x5, 0x5, 0x2, 0x4}, {0x4, 0x3, 0xa, 0x4}, {0x1, 0x1, 0x9, 0x5}, {0x3, 0x4, 0x7, 0x9}, {0x0, 0x1, 0x5, 0xb}, {0x0, 0x3, 0x6}], 0x10, 0x9}, 0x94) 229.168203ms ago: executing program 3 (id=6969): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000400001b9540000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 120.369436ms ago: executing program 1 (id=6970): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 0s ago: executing program 0 (id=6971): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xb}, {0x0, [0x5f, 0x2e, 0x0, 0x0, 0x0, 0x61, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000680)=""/226, 0x23, 0xe2, 0x1, 0x6}, 0x28) kernel console output (not intermixed with test programs): z.2.5620'. [ 1374.139665][T24986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5620'. [ 1374.638313][T25003] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1374.774784][T25001] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.5627'. [ 1375.535030][T25037] netlink: 'syz.1.5641': attribute type 6 has an invalid length. [ 1375.543753][T25037] netlink: 212824 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1376.238683][T25064] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.5650'. [ 1377.711807][T25094] netlink: 'syz.2.5661': attribute type 4 has an invalid length. [ 1377.746126][T25094] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.5661'. [ 1378.336633][T25107] mac80211_hwsim hwsim45 wlan1: entered allmulticast mode [ 1380.281275][T25119] __nla_validate_parse: 4 callbacks suppressed [ 1380.281293][T25119] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5668'. [ 1380.398709][T25119] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 1380.627679][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1380.637053][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1380.652369][T25130] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5673'. [ 1380.792609][T25139] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1380.849491][T25140] netlink: 'syz.3.5674': attribute type 1 has an invalid length. [ 1380.913800][T25140] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1381.459532][T25151] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.5678'. [ 1383.060104][T25169] netlink: 'syz.0.5686': attribute type 6 has an invalid length. [ 1383.075379][T25169] netlink: 'syz.0.5686': attribute type 3 has an invalid length. [ 1383.095620][T25169] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.5686'. [ 1383.117813][T25171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1383.135730][T25171] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1384.901980][T25180] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode [ 1385.694247][T25214] __nla_validate_parse: 6 callbacks suppressed [ 1385.694286][T25214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5699'. [ 1386.545222][T25227] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.5704'. [ 1387.391733][T25233] netlink: 'syz.2.5706': attribute type 1 has an invalid length. [ 1387.442466][T25233] netlink: 'syz.2.5706': attribute type 2 has an invalid length. [ 1387.475625][T25233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1387.511523][T25233] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5706'. [ 1387.837705][T25245] netlink: 'syz.0.5708': attribute type 10 has an invalid length. [ 1387.865960][T25245] bridge0: port 2(bridge_slave_1) entered disabled state [ 1387.873675][T25245] bridge0: port 1(bridge_slave_0) entered disabled state [ 1387.932259][T25245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1387.939718][T25245] bridge0: port 2(bridge_slave_1) entered listening state [ 1387.947439][T25245] bridge0: port 1(bridge_slave_0) entered blocking state [ 1387.954834][T25245] bridge0: port 1(bridge_slave_0) entered listening state [ 1387.997931][T25245] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1388.191841][T25250] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.5710'. [ 1388.327237][T25258] netlink: 'syz.0.5713': attribute type 29 has an invalid length. [ 1388.352259][T25258] netlink: 'syz.0.5713': attribute type 29 has an invalid length. [ 1388.370166][T25258] netlink: 'syz.0.5713': attribute type 29 has an invalid length. [ 1388.541803][T25270] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.5715'. [ 1391.195568][ T5789] Bluetooth: hci2: ISO packet for unknown connection handle 2 [ 1391.307693][T25290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1391.382782][T25290] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5722'. [ 1392.816358][T25313] netlink: 'syz.0.5728': attribute type 2 has an invalid length. [ 1392.824232][T25313] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.5728'. [ 1393.590548][T25313] syzkaller0: entered promiscuous mode [ 1393.605830][T25313] syzkaller0: entered allmulticast mode [ 1394.450935][T25306] netlink: 'syz.1.5726': attribute type 1 has an invalid length. [ 1394.489281][T25306] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5726'. [ 1394.509965][T25306] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5726'. [ 1399.613410][T25337] sit0: entered allmulticast mode [ 1399.697000][T25340] sit0: entered promiscuous mode [ 1402.224156][T25385] netlink: 'syz.2.5750': attribute type 2 has an invalid length. [ 1402.270787][T25385] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.5750'. [ 1402.411482][T25389] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5751'. [ 1402.441357][T25393] netlink: 'syz.3.5751': attribute type 3 has an invalid length. [ 1402.470436][T25393] netlink: 135800 bytes leftover after parsing attributes in process `syz.3.5751'. [ 1402.723605][T25385] syzkaller0: entered promiscuous mode [ 1402.740980][T25385] syzkaller0: entered allmulticast mode [ 1403.446925][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1403.455481][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1407.730700][T25419] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5757'. [ 1407.765641][T25419] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1408.707247][T25426] hsr0: left allmulticast mode [ 1408.712466][T25426] hsr_slave_0: left allmulticast mode [ 1408.718544][T25426] hsr_slave_1: left allmulticast mode [ 1408.915505][ T5789] Bluetooth: hci3: ISO packet for unknown connection handle 6 [ 1409.831658][T25426] bridge0: port 3(hsr0) entered disabled state [ 1410.110151][T25426] bridge_slave_1: left allmulticast mode [ 1410.117102][T25426] bridge_slave_1: left promiscuous mode [ 1410.126113][T25426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.243324][T25426] bridge_slave_0: left allmulticast mode [ 1410.251930][T25426] bridge_slave_0: left promiscuous mode [ 1410.270180][T25426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.059780][T25427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5760'. [ 1411.189971][T25440] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5763'. [ 1411.200130][T25440] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1414.395681][T25453] netlink: 'syz.3.5765': attribute type 2 has an invalid length. [ 1414.403535][T25453] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.5765'. [ 1414.642015][T25453] syzkaller0: entered promiscuous mode [ 1414.668573][T25453] syzkaller0: entered allmulticast mode [ 1414.792637][T25461] netlink: 'syz.2.5769': attribute type 1 has an invalid length. [ 1414.815755][T25461] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1414.844030][T25461] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1414.881505][T25461] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1415.075933][T25465] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 1415.222176][T25464] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5769'. [ 1418.487407][T25474] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5774'. [ 1418.508982][T25474] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1418.805573][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1418.812893][ C0] bridge0: topology change detected, propagating [ 1418.820130][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1418.827549][ C0] bridge0: topology change detected, propagating [ 1423.309287][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.315885][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.959640][T25503] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 1426.840235][T25514] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5786'. [ 1426.878301][T25514] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1426.891429][T25516] netlink: 'syz.3.5787': attribute type 7 has an invalid length. [ 1427.991299][T25558] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1428.023800][T25558] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1428.234812][T25564] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 1428.294416][T25563] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.5794'. [ 1431.268963][T25568] IPv6: Can't replace route, no match found [ 1431.365656][T25576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5798'. [ 1431.375397][T25576] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1431.402768][T25568] netlink: 'syz.2.5797': attribute type 29 has an invalid length. [ 1431.432134][T25568] netlink: 'syz.2.5797': attribute type 29 has an invalid length. [ 1431.460296][T25577] netlink: 'syz.2.5797': attribute type 29 has an invalid length. [ 1431.479360][T25568] netlink: 'syz.2.5797': attribute type 29 has an invalid length. [ 1433.056757][T25597] netlink: 'syz.1.5805': attribute type 10 has an invalid length. [ 1433.269635][T25608] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5809'. [ 1433.603817][T25622] netlink: 'syz.0.5813': attribute type 2 has an invalid length. [ 1433.623682][T25622] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.5813'. [ 1434.215758][T25622] syzkaller0: entered promiscuous mode [ 1434.245506][T25622] syzkaller0: entered allmulticast mode [ 1434.734958][T25627] netlink: 'syz.3.5810': attribute type 10 has an invalid length. [ 1434.765800][T25627] hsr0: entered promiscuous mode [ 1434.781743][T25627] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1435.270271][T25633] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1435.300639][T25633] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1444.552350][T25659] netlink: 'syz.0.5830': attribute type 21 has an invalid length. [ 1444.857148][T25666] netlink: 'syz.0.5824': attribute type 10 has an invalid length. [ 1444.894806][T25666] hsr0: entered promiscuous mode [ 1444.904231][T25666] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1447.204783][T25675] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5827'. [ 1447.316933][T25682] netlink: 'syz.3.5831': attribute type 2 has an invalid length. [ 1447.325091][T25682] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.5831'. [ 1447.469192][T25682] syzkaller0: entered promiscuous mode [ 1447.475057][T25682] syzkaller0: entered allmulticast mode [ 1453.407047][T25715] netlink: 'syz.0.5840': attribute type 10 has an invalid length. [ 1453.419818][T25715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5840'. [ 1453.438342][T25715] team0: entered promiscuous mode [ 1453.451545][T25715] team_slave_0: entered promiscuous mode [ 1453.468071][T25715] team_slave_1: entered promiscuous mode [ 1453.495925][T25715] team0: entered allmulticast mode [ 1453.522025][T25715] team_slave_0: entered allmulticast mode [ 1453.545791][T25715] team_slave_1: entered allmulticast mode [ 1453.583711][T25715] bridge0: port 3(team0) entered blocking state [ 1453.613176][T25715] bridge0: port 3(team0) entered disabled state [ 1453.626036][T25715] bridge0: port 3(team0) entered blocking state [ 1453.632584][T25715] bridge0: port 3(team0) entered listening state [ 1453.640991][T25717] netlink: 'syz.2.5838': attribute type 10 has an invalid length. [ 1453.649698][T25717] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1453.730339][T25719] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5851'. [ 1453.785373][T25719] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1453.864152][T25721] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5843'. [ 1454.812014][T25733] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5846'. [ 1454.945610][ T5789] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1455.814745][T25773] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5860'. [ 1455.897057][T25775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5861'. [ 1456.038815][ T5789] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 1456.971706][T20533] Bluetooth: hci0: command 0x0406 tx timeout [ 1457.035636][T25808] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5875'. [ 1458.085520][T20533] Bluetooth: hci2: command 0x0406 tx timeout [ 1458.803942][ T5789] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1458.892321][T25823] netlink: 'syz.2.5879': attribute type 29 has an invalid length. [ 1458.913765][T25823] netlink: 'syz.2.5879': attribute type 29 has an invalid length. [ 1458.930038][T25823] netlink: 'syz.2.5879': attribute type 29 has an invalid length. [ 1459.182958][T25823] netlink: 'syz.2.5879': attribute type 21 has an invalid length. [ 1459.191901][T25833] warn_alloc: 1 callbacks suppressed [ 1459.192004][T25833] syz.0.5883: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1459.234449][T25823] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5879'. [ 1459.272403][T25833] CPU: 0 PID: 25833 Comm: syz.0.5883 Not tainted syzkaller #0 [ 1459.279981][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1459.290114][T25833] Call Trace: [ 1459.293570][T25833] [ 1459.296572][T25833] dump_stack_lvl+0x18c/0x250 [ 1459.301375][T25833] ? show_regs_print_info+0x20/0x20 [ 1459.306691][T25833] ? load_image+0x420/0x420 [ 1459.311300][T25833] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1459.317825][T25833] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1459.324459][T25833] warn_alloc+0x246/0x340 [ 1459.328892][T25833] ? stack_trace_save+0xaa/0x100 [ 1459.333945][T25833] ? zone_watermark_ok_safe+0x230/0x230 [ 1459.339663][T25833] ? kasan_set_track+0x5f/0x70 [ 1459.344777][T25833] ? kasan_set_track+0x4e/0x70 [ 1459.349635][T25833] ? __kasan_kmalloc+0x8f/0xa0 [ 1459.354524][T25833] ? xsk_init_queue+0xad/0x100 [ 1459.359410][T25833] ? xsk_setsockopt+0x4e5/0x760 [ 1459.364339][T25833] ? do_sock_setsockopt+0x175/0x1a0 [ 1459.369664][T25833] ? __x64_sys_setsockopt+0x182/0x200 [ 1459.375226][T25833] __vmalloc_node_range+0x126/0x1330 [ 1459.380726][T25833] ? free_vm_area+0x50/0x50 [ 1459.385397][T25833] vmalloc_user+0x74/0x80 [ 1459.389823][T25833] ? xskq_create+0xbf/0x170 [ 1459.394420][T25833] xskq_create+0xbf/0x170 [ 1459.398871][T25833] xsk_init_queue+0xad/0x100 [ 1459.403553][T25833] xsk_setsockopt+0x4e5/0x760 [ 1459.408326][T25833] ? xsk_poll+0x680/0x680 [ 1459.412787][T25833] ? __fget_files+0x28/0x4b0 [ 1459.417461][T25833] ? __fget_files+0x28/0x4b0 [ 1459.422149][T25833] ? aa_sock_opt_perm+0x74/0x100 [ 1459.427232][T25833] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1459.432862][T25833] ? security_socket_setsockopt+0x7e/0xa0 [ 1459.438673][T25833] ? xsk_poll+0x680/0x680 [ 1459.443122][T25833] do_sock_setsockopt+0x175/0x1a0 [ 1459.448234][T25833] ? __fdget+0x180/0x210 [ 1459.452579][T25833] __x64_sys_setsockopt+0x182/0x200 [ 1459.457919][T25833] do_syscall_64+0x55/0xb0 [ 1459.462427][T25833] ? clear_bhb_loop+0x40/0x90 [ 1459.467204][T25833] ? clear_bhb_loop+0x40/0x90 [ 1459.471993][T25833] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1459.478001][T25833] RIP: 0033:0x7fc85c19ce59 [ 1459.482591][T25833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1459.502311][T25833] RSP: 002b:00007fc85d085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1459.510831][T25833] RAX: ffffffffffffffda RBX: 00007fc85c415fa0 RCX: 00007fc85c19ce59 [ 1459.518912][T25833] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 1459.526962][T25833] RBP: 00007fc85c232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1459.535036][T25833] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1459.543115][T25833] R13: 00007fc85c416038 R14: 00007fc85c415fa0 R15: 00007ffe133bf528 [ 1459.551229][T25833] [ 1459.665778][T25833] Mem-Info: [ 1459.669437][T25833] active_anon:24303 inactive_anon:0 isolated_anon:0 [ 1459.669437][T25833] active_file:19384 inactive_file:40482 isolated_file:0 [ 1459.669437][T25833] unevictable:768 dirty:63 writeback:0 [ 1459.669437][T25833] slab_reclaimable:10368 slab_unreclaimable:95745 [ 1459.669437][T25833] mapped:24902 shmem:1361 pagetables:585 [ 1459.669437][T25833] sec_pagetables:0 bounce:0 [ 1459.669437][T25833] kernel_misc_reclaimable:0 [ 1459.669437][T25833] free:1325189 free_pcp:6783 free_cma:0 [ 1459.788357][T25833] Node 0 active_anon:97312kB inactive_anon:0kB active_file:77536kB inactive_file:161728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99708kB dirty:252kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11268kB pagetables:2340kB sec_pagetables:0kB all_unreclaimable? no [ 1459.868946][T25833] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1459.915676][T25833] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1459.964724][T25833] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1459.973764][T25833] Node 0 DMA32 free:1389264kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:96876kB inactive_anon:0kB active_file:77536kB inactive_file:160904kB unevictable:1536kB writepending:252kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:13732kB local_pcp:9988kB free_cma:0kB [ 1460.037610][T25833] lowmem_reserve[]: 0 0 0 0 0 [ 1460.042582][T25833] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1460.119633][T25833] lowmem_reserve[]: 0 0 0 0 0 [ 1460.124468][T25833] Node 1 Normal free:3895880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17520kB local_pcp:8980kB free_cma:0kB [ 1460.175536][T25833] lowmem_reserve[]: 0 0 0 0 0 [ 1460.180361][T25833] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1460.235767][T25833] Node 0 DMA32: 18*4kB (M) 211*8kB (UME) 145*16kB (UME) 1139*32kB (UME) 733*64kB (UME) 664*128kB (UME) 130*256kB (UME) 64*512kB (UME) 30*1024kB (UME) 19*2048kB (UME) 264*4096kB (UM) = 1389456kB [ 1460.270329][T25833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1460.288586][T25833] Node 1 Normal: 84*4kB (UM) 43*8kB (UME) 38*16kB (UME) 54*32kB (UME) 14*64kB (UE) 6*128kB (UM) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3895880kB [ 1460.337087][T25833] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1460.350404][T25833] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1460.360246][T25833] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1460.370877][T25833] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1460.405781][T25833] 61227 total pagecache pages [ 1460.425302][T25833] 0 pages in swap cache [ 1460.429540][T25833] Free swap = 124996kB [ 1460.433726][T25833] Total swap = 124996kB [ 1460.455088][T25833] 2097051 pages RAM [ 1460.459372][T25833] 0 pages HighMem/MovableOnly [ 1460.464093][T25833] 416933 pages reserved [ 1460.487558][T25833] 0 pages cma reserved [ 1460.753861][T25861] netlink: 'syz.0.5891': attribute type 2 has an invalid length. [ 1460.767246][T25861] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5891'. [ 1460.806086][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 1462.730658][T25887] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1462.740771][T25887] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1462.816484][T25884] sctp: [Deprecated]: syz.1.5897 (pid 25884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1462.816484][T25884] Use struct sctp_sack_info instead [ 1462.853321][T25894] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5898'. [ 1462.870337][T25896] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1462.886697][T25896] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1462.921885][T25896] netlink: 'syz.3.5900': attribute type 29 has an invalid length. [ 1463.858542][T25936] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.5911'. [ 1464.093202][T25950] netlink: 'syz.3.5916': attribute type 10 has an invalid length. [ 1464.101569][T25950] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5916'. [ 1464.112408][T25950] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1464.916915][T25968] netlink: 'syz.2.5923': attribute type 2 has an invalid length. [ 1464.924690][T25968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5923'. [ 1466.702832][T25978] netlink: 'syz.1.5927': attribute type 3 has an invalid length. [ 1466.727361][T25978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5927'. [ 1468.725410][ C0] bridge0: port 3(team0) entered learning state [ 1469.864047][T26035] netlink: 'syz.0.5941': attribute type 4 has an invalid length. [ 1469.895661][T26035] netlink: 'syz.0.5941': attribute type 1 has an invalid length. [ 1470.345694][T26047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5950'. [ 1470.663395][ T5086] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1472.978078][T26083] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1478.080499][T26105] netlink: 'syz.2.5970': attribute type 15 has an invalid length. [ 1478.117194][T26105] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5970'. [ 1478.432402][T26108] mac80211_hwsim hwsim43 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1480.801273][T26144] sctp: [Deprecated]: syz.2.5984 (pid 26144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1480.801273][T26144] Use struct sctp_sack_info instead [ 1480.871771][T26146] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5985'. [ 1480.935826][T26146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1481.127890][T25545] wlan1: Trigger new scan to find an IBSS to join [ 1481.341319][T26159] netlink: 'syz.1.5987': attribute type 3 has an invalid length. [ 1481.355687][T26159] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5987'. [ 1483.341500][T26177] netlink: 'syz.0.5994': attribute type 3 has an invalid length. [ 1483.375125][T26177] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.5994'. [ 1483.423387][T26177] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5994'. [ 1483.789695][T26196] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.6003'. [ 1483.848033][T26196] netlink: del zone limit has 8 unknown bytes [ 1483.933448][T26202] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6005'. [ 1483.975670][T26202] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1484.087652][ C0] bridge0: port 3(team0) entered forwarding state [ 1484.094763][ C0] bridge0: topology change detected, propagating [ 1484.732485][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.739000][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.894313][T26217] syzkaller0: entered promiscuous mode [ 1485.900208][T26217] syzkaller0: entered allmulticast mode [ 1485.921668][T26217] syzkaller0: left promiscuous mode [ 1485.947886][T26217] netlink: 'syz.0.6010': attribute type 7 has an invalid length. [ 1486.219253][T26224] netlink: 'syz.2.6012': attribute type 10 has an invalid length. [ 1486.275642][T26224] netlink: 195860 bytes leftover after parsing attributes in process `syz.2.6012'. [ 1486.305832][T26224] openvswitch: netlink: Flow key attr not present in new flow. [ 1486.420456][T26222] netlink: 'syz.3.6011': attribute type 12 has an invalid length. [ 1486.428800][T26222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6011'. [ 1487.056363][T25536] wlan1: Trigger new scan to find an IBSS to join [ 1489.099690][T25536] wlan1: Creating new IBSS network, BSSID f6:13:56:de:9d:01 [ 1491.864901][T26275] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6028'. [ 1492.800528][T26279] netlink: 'syz.2.6029': attribute type 10 has an invalid length. [ 1493.017435][T26279] team0: Device hsr_slave_0 failed to register rx_handler [ 1496.056822][T26327] netlink: 'syz.3.6044': attribute type 2 has an invalid length. [ 1496.425945][T26329] netlink: 'syz.1.6045': attribute type 10 has an invalid length. [ 1496.529754][T26327] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6044'. [ 1496.542643][T26329] team0: Port device hsr_slave_0 added [ 1496.608201][T26334] netlink: 'syz.0.6046': attribute type 9 has an invalid length. [ 1496.625476][T26334] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6046'. [ 1496.645853][T26332] netlink: 'syz.0.6046': attribute type 9 has an invalid length. [ 1496.654336][T26332] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6046'. [ 1498.782667][T26357] syz.2.6054[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1498.782956][T26357] syz.2.6054[26357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1499.266402][T26369] netlink: 'syz.3.6057': attribute type 10 has an invalid length. [ 1501.284350][T26369] team0: Device hsr_slave_0 failed to register rx_handler [ 1501.436307][T26385] netlink: 'syz.2.6064': attribute type 13 has an invalid length. [ 1501.444470][T26385] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.6064'. [ 1501.689303][T26397] netlink: 'syz.0.6067': attribute type 9 has an invalid length. [ 1501.707656][T26397] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6067'. [ 1502.164705][T26404] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6071'. [ 1502.505914][T26422] netlink: 'syz.2.6077': attribute type 21 has an invalid length. [ 1502.513866][T26422] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6077'. [ 1502.901779][T26437] netlink: 'syz.3.6083': attribute type 9 has an invalid length. [ 1502.915538][T26437] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1503.971535][T26451] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1509.139884][T26495] netlink: 'syz.3.6100': attribute type 11 has an invalid length. [ 1509.190490][T26495] netlink: 'syz.3.6100': attribute type 2 has an invalid length. [ 1509.227554][T26495] netlink: 198100 bytes leftover after parsing attributes in process `syz.3.6100'. [ 1511.870624][T26511] syzkaller0: entered promiscuous mode [ 1511.881828][T26511] syzkaller0: entered allmulticast mode [ 1512.128756][T26517] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6107'. [ 1512.158611][T26517] openvswitch: netlink: Key type 4112 is out of range max 32 [ 1517.392184][T26557] syzkaller0: entered promiscuous mode [ 1517.399131][T26557] syzkaller0: entered allmulticast mode [ 1517.821523][T26578] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6125'. [ 1519.117047][T25548] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1519.502297][T26565] netlink: 'syz.0.6124': attribute type 3 has an invalid length. [ 1519.510666][T26565] netlink: 16062 bytes leftover after parsing attributes in process `syz.0.6124'. [ 1519.523934][T26576] netlink: 'syz.2.6126': attribute type 10 has an invalid length. [ 1519.609465][T26576] team0 (unregistering): Port device team_slave_0 removed [ 1519.641134][T26576] team0 (unregistering): Port device team_slave_1 removed [ 1520.268195][T26600] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.6136'. [ 1520.295371][T26600] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.6136'. [ 1520.471470][T26608] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6138'. [ 1521.565983][T26640] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6150'. [ 1523.100624][T26682] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1523.315848][T26695] netlink: 'syz.0.6169': attribute type 29 has an invalid length. [ 1523.349049][T26695] netlink: 'syz.0.6169': attribute type 3 has an invalid length. [ 1523.403151][T26695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1523.413608][T26693] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1524.169864][T26706] netlink: 22 bytes leftover after parsing attributes in process `syz.0.6174'. [ 1524.435630][T26721] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1524.523350][T26720] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6180'. [ 1524.549894][T26720] sysfs: cannot create duplicate filename '/class/ieee80211/ô!ô' [ 1524.560336][T26720] CPU: 0 PID: 26720 Comm: syz.2.6180 Not tainted syzkaller #0 [ 1524.567867][T26720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1524.578043][T26720] Call Trace: [ 1524.581338][T26720] [ 1524.584295][T26720] dump_stack_lvl+0x18c/0x250 [ 1524.588999][T26720] ? show_regs_print_info+0x20/0x20 [ 1524.594279][T26720] ? load_image+0x420/0x420 [ 1524.598821][T26720] sysfs_warn_dup+0x8e/0xa0 [ 1524.603358][T26720] sysfs_do_create_link_sd+0xc0/0x110 [ 1524.608764][T26720] device_add_class_symlinks+0x1cf/0x240 [ 1524.614508][T26720] device_add+0x507/0xc50 [ 1524.618901][T26720] wiphy_register+0x1dad/0x2ae0 [ 1524.623944][T26720] ? cfg80211_event_work+0x40/0x40 [ 1524.629103][T26720] ? minstrel_ht_alloc+0x88a/0x990 [ 1524.634313][T26720] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1524.640435][T26720] ieee80211_register_hw+0x3464/0x4250 [ 1524.645957][T26720] ? ieee80211_tasklet_handler+0x20/0x20 [ 1524.651616][T26720] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1524.657573][T26720] ? __debug_object_init+0xec/0x450 [ 1524.662822][T26720] ? __asan_memset+0x22/0x40 [ 1524.667435][T26720] ? __hrtimer_init+0x186/0x270 [ 1524.672323][T26720] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1524.678168][T26720] ? mac80211_hwsim_free+0x220/0x220 [ 1524.683513][T26720] ? rcu_is_watching+0x15/0xb0 [ 1524.688334][T26720] ? kstrndup+0xbd/0x140 [ 1524.692650][T26720] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1524.697822][T26720] ? __nla_validate+0x50/0x50 [ 1524.702568][T26720] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1524.708969][T26720] ? __nla_parse+0x40/0x50 [ 1524.713448][T26720] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1524.719842][T26720] genl_family_rcv_msg_doit+0x211/0x310 [ 1524.725447][T26720] ? end_current_label_crit_section+0x170/0x170 [ 1524.731753][T26720] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1524.737713][T26720] ? bpf_lsm_capable+0x9/0x10 [ 1524.742451][T26720] ? security_capable+0x89/0xb0 [ 1524.747364][T26720] genl_rcv_msg+0x619/0x7a0 [ 1524.751934][T26720] ? genl_bind+0x360/0x360 [ 1524.756404][T26720] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1524.762793][T26720] ? perf_trace_lock+0xfc/0x3b0 [ 1524.767804][T26720] netlink_rcv_skb+0x241/0x4d0 [ 1524.772622][T26720] ? genl_bind+0x360/0x360 [ 1524.777088][T26720] ? netlink_ack+0x1180/0x1180 [ 1524.781916][T26720] ? __lock_acquire+0x7d40/0x7d40 [ 1524.787002][T26720] ? down_read+0x1ac/0x2e0 [ 1524.791485][T26720] genl_rcv+0x28/0x40 [ 1524.795520][T26720] netlink_unicast+0x751/0x8d0 [ 1524.800341][T26720] netlink_sendmsg+0x8d0/0xbf0 [ 1524.805167][T26720] ? netlink_getsockopt+0x590/0x590 [ 1524.810424][T26720] ? aa_sock_msg_perm+0x94/0x150 [ 1524.815422][T26720] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1524.820762][T26720] ? security_socket_sendmsg+0x80/0xa0 [ 1524.826273][T26720] ? netlink_getsockopt+0x590/0x590 [ 1524.831615][T26720] ____sys_sendmsg+0x5ba/0x960 [ 1524.836447][T26720] ? __asan_memset+0x22/0x40 [ 1524.841088][T26720] ? __sys_sendmsg_sock+0x30/0x30 [ 1524.846161][T26720] ? __import_iovec+0x5f2/0x850 [ 1524.851071][T26720] ? import_iovec+0x73/0xa0 [ 1524.855624][T26720] ___sys_sendmsg+0x2a6/0x360 [ 1524.860366][T26720] ? __sys_sendmsg+0x2a0/0x2a0 [ 1524.865210][T26720] ? debug_mutex_init+0x38/0x70 [ 1524.870143][T26720] __se_sys_sendmsg+0x1c2/0x2b0 [ 1524.875060][T26720] ? __x64_sys_sendmsg+0x80/0x80 [ 1524.880080][T26720] ? lockdep_hardirqs_on+0x98/0x150 [ 1524.885344][T26720] do_syscall_64+0x55/0xb0 [ 1524.889809][T26720] ? clear_bhb_loop+0x40/0x90 [ 1524.894539][T26720] ? clear_bhb_loop+0x40/0x90 [ 1524.899268][T26720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1524.905219][T26720] RIP: 0033:0x7f250c99ce59 [ 1524.909675][T26720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1524.929333][T26720] RSP: 002b:00007f250d91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1524.937812][T26720] RAX: ffffffffffffffda RBX: 00007f250cc15fa0 RCX: 00007f250c99ce59 [ 1524.945831][T26720] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1524.953849][T26720] RBP: 00007f250ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1524.961874][T26720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1524.969890][T26720] R13: 00007f250cc16038 R14: 00007f250cc15fa0 R15: 00007fffa9653938 [ 1524.977947][T26720] [ 1525.011362][T26718] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1525.540602][T26748] tap0: tun_chr_ioctl cmd 1074025677 [ 1525.555145][T26748] tap0: linktype set to 805 [ 1525.715098][T26744] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6187'. [ 1526.100583][T26766] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6192'. [ 1527.369222][T26796] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6205'. [ 1528.046993][T26819] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1528.570277][T26831] __nla_validate_parse: 1 callbacks suppressed [ 1528.570338][T26831] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1530.354580][T26863] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.6229'. [ 1530.538575][T26874] netlink: 'syz.2.6234': attribute type 3 has an invalid length. [ 1530.555425][T26874] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.6234'. [ 1530.601219][T26876] veth1_to_bond: entered allmulticast mode [ 1531.335071][T26900] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1532.613184][T26937] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6255'. [ 1533.252937][T26970] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6265'. [ 1534.445639][T26991] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6272'. [ 1535.270887][T27006] -1: renamed from syzkaller0 [ 1535.347193][T27017] netlink: 'syz.0.6281': attribute type 3 has an invalid length. [ 1535.358773][T27017] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.6281'. [ 1535.689381][T27024] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6283'. [ 1536.790197][T27046] netlink: 22 bytes leftover after parsing attributes in process `syz.2.6291'. [ 1537.180809][T27057] netlink: 'syz.0.6296': attribute type 10 has an invalid length. [ 1537.252515][T27057] geneve1: entered promiscuous mode [ 1537.268579][T27057] geneve1: entered allmulticast mode [ 1537.274824][T27057] team0: Port device geneve1 added [ 1537.406712][T27053] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.6294'. [ 1538.621012][T27100] netlink: 'syz.3.6310': attribute type 5 has an invalid length. [ 1538.638998][T27097] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6308'. [ 1538.906474][T27110] netlink: 'syz.2.6314': attribute type 2 has an invalid length. [ 1538.928339][T27110] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.6314'. [ 1539.180799][T27110] syzkaller0: entered promiscuous mode [ 1539.215321][T27110] syzkaller0: entered allmulticast mode [ 1543.574948][T27124] netlink: 'syz.1.6318': attribute type 10 has an invalid length. [ 1543.583023][T27124] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1543.605304][T27127] netlink: 'syz.1.6318': attribute type 2 has an invalid length. [ 1543.619342][T27129] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6318'. [ 1543.635025][T27144] netlink: 'syz.0.6325': attribute type 10 has an invalid length. [ 1543.645497][T27144] netlink: 56771 bytes leftover after parsing attributes in process `syz.0.6325'. [ 1543.654950][T27143] netlink: 'syz.0.6325': attribute type 10 has an invalid length. [ 1543.679896][T27143] netlink: 56771 bytes leftover after parsing attributes in process `syz.0.6325'. [ 1544.015729][T27160] netlink: 'syz.0.6329': attribute type 17 has an invalid length. [ 1544.023625][T27160] netlink: 'syz.0.6329': attribute type 16 has an invalid length. [ 1544.050578][T27160] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6329'. [ 1544.408523][T27179] netlink: 'syz.1.6336': attribute type 2 has an invalid length. [ 1544.445365][T27179] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1544.859795][T27179] syzkaller0: entered promiscuous mode [ 1544.895522][T27179] syzkaller0: entered allmulticast mode [ 1546.180995][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.194351][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1549.640302][ T5086] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1550.144131][T25545] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1552.107605][T27234] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1552.161920][T27234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6353'. [ 1552.224113][T27239] netlink: 'syz.3.6355': attribute type 4 has an invalid length. [ 1552.233478][T27239] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.6355'. [ 1552.460879][T27252] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6359'. [ 1552.471552][T27252] netlink: 'syz.0.6359': attribute type 10 has an invalid length. [ 1552.517605][T27252] veth0_macvtap: left promiscuous mode [ 1552.606079][T27256] netlink: 'syz.3.6361': attribute type 2 has an invalid length. [ 1552.614219][T27256] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.6361'. [ 1553.102086][T27256] syzkaller0: entered promiscuous mode [ 1553.143738][T27256] syzkaller0: entered allmulticast mode [ 1557.179921][T27290] netlink: 'syz.1.6373': attribute type 29 has an invalid length. [ 1557.189490][T27289] netlink: 'syz.1.6373': attribute type 29 has an invalid length. [ 1560.281763][ T5086] Bluetooth: hci1: ISO packet for unknown connection handle 2097 [ 1560.718880][T27290] netlink: 'syz.1.6373': attribute type 29 has an invalid length. [ 1562.462193][T27349] netlink: 'syz.0.6394': attribute type 2 has an invalid length. [ 1562.495317][T27349] netlink: 1045 bytes leftover after parsing attributes in process `syz.0.6394'. [ 1562.787721][T27349] syzkaller0: entered promiscuous mode [ 1562.793302][T27349] syzkaller0: entered allmulticast mode [ 1564.555607][T27376] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.6405'. [ 1564.583542][T27375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1564.640744][T27375] netlink: 'syz.2.6405': attribute type 8 has an invalid length. [ 1564.649223][T27375] netlink: 'syz.2.6405': attribute type 3 has an invalid length. [ 1564.667109][T27375] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6405'. [ 1565.941720][ T5086] Bluetooth: hci2: ISO packet for unknown connection handle 10 [ 1568.505654][T27422] netlink: 'syz.3.6421': attribute type 2 has an invalid length. [ 1568.547794][T27422] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.6421'. [ 1568.736852][T27419] netlink: 'syz.2.6419': attribute type 29 has an invalid length. [ 1568.780682][T27416] netlink: 'syz.2.6419': attribute type 29 has an invalid length. [ 1568.807501][T27422] syzkaller0: entered promiscuous mode [ 1568.844999][T27422] syzkaller0: entered allmulticast mode [ 1568.867815][T27419] netlink: 'syz.2.6419': attribute type 29 has an invalid length. [ 1568.896264][T27426] netlink: 'syz.2.6419': attribute type 21 has an invalid length. [ 1568.904195][T27426] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6419'. [ 1572.488325][T27458] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6431'. [ 1575.836774][T27461] netlink: 'syz.2.6433': attribute type 33 has an invalid length. [ 1575.855307][T27461] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1576.188969][T27466] netlink: 'syz.0.6434': attribute type 29 has an invalid length. [ 1576.222504][T27466] netlink: 'syz.0.6434': attribute type 29 has an invalid length. [ 1576.364194][T27466] netlink: 'syz.0.6434': attribute type 29 has an invalid length. [ 1576.624856][T27466] netlink: 'syz.0.6434': attribute type 21 has an invalid length. [ 1576.656089][T27466] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6434'. [ 1577.108065][T27489] netlink: 'syz.2.6440': attribute type 29 has an invalid length. [ 1577.135724][T27489] netlink: 'syz.2.6440': attribute type 29 has an invalid length. [ 1577.199829][T27488] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6441'. [ 1577.848314][T27522] mac80211_hwsim hwsim57 ..ãc¤±: renamed from wlan1 [ 1578.167216][T27525] netlink: 'syz.1.6451': attribute type 29 has an invalid length. [ 1578.185570][T27525] netlink: 'syz.1.6451': attribute type 29 has an invalid length. [ 1578.202287][T27520] netlink: 'syz.1.6451': attribute type 29 has an invalid length. [ 1578.344366][T27531] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6451'. [ 1578.399370][T27530] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6454'. [ 1581.178077][T25545] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1581.493230][T27555] validate_nla: 1 callbacks suppressed [ 1581.493249][T27555] netlink: 'syz.0.6460': attribute type 2 has an invalid length. [ 1581.550781][T27555] netlink: 'syz.0.6460': attribute type 8 has an invalid length. [ 1581.566759][T27555] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6460'. [ 1582.247726][T27575] FAULT_INJECTION: forcing a failure. [ 1582.247726][T27575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.288338][T27575] CPU: 0 PID: 27575 Comm: syz.2.6468 Not tainted syzkaller #0 [ 1582.295889][T27575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1582.305987][T27575] Call Trace: [ 1582.309396][T27575] [ 1582.312366][T27575] dump_stack_lvl+0x18c/0x250 [ 1582.317103][T27575] ? show_regs_print_info+0x20/0x20 [ 1582.322357][T27575] ? load_image+0x420/0x420 [ 1582.326923][T27575] ? __might_fault+0xaa/0x120 [ 1582.331647][T27575] ? __lock_acquire+0x7d40/0x7d40 [ 1582.336726][T27575] should_fail_ex+0x39d/0x4d0 [ 1582.341468][T27575] _copy_from_user+0x2f/0xe0 [ 1582.346115][T27575] ___sys_sendmsg+0x1c7/0x360 [ 1582.350861][T27575] ? __sys_sendmsg+0x2a0/0x2a0 [ 1582.355730][T27575] __se_sys_sendmsg+0x1c2/0x2b0 [ 1582.360642][T27575] ? __x64_sys_sendmsg+0x80/0x80 [ 1582.365651][T27575] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1582.371604][T27575] do_syscall_64+0x55/0xb0 [ 1582.376069][T27575] ? clear_bhb_loop+0x40/0x90 [ 1582.380789][T27575] ? clear_bhb_loop+0x40/0x90 [ 1582.385515][T27575] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1582.391472][T27575] RIP: 0033:0x7f250c99ce59 [ 1582.395926][T27575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1582.415576][T27575] RSP: 002b:00007f250d91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1582.424041][T27575] RAX: ffffffffffffffda RBX: 00007f250cc15fa0 RCX: 00007f250c99ce59 [ 1582.432066][T27575] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1582.440075][T27575] RBP: 00007f250d91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.448093][T27575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.456101][T27575] R13: 00007f250cc16038 R14: 00007f250cc15fa0 R15: 00007fffa9653938 [ 1582.464130][T27575] [ 1582.539300][T27567] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6465'. [ 1582.627630][T27579] veth1_to_bond: entered allmulticast mode [ 1582.948776][T27582] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.6470'. [ 1583.154346][T27591] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1583.302047][ T5086] Bluetooth: hci0: ISO packet for unknown connection handle 2610 [ 1584.371486][T27609] netlink: 'syz.3.6480': attribute type 27 has an invalid length. [ 1584.385467][T27609] netlink: 'syz.3.6480': attribute type 4 has an invalid length. [ 1584.393461][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6480'. [ 1584.488434][T27611] FAULT_INJECTION: forcing a failure. [ 1584.488434][T27611] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.515421][T27611] CPU: 1 PID: 27611 Comm: syz.2.6481 Not tainted syzkaller #0 [ 1584.522957][T27611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1584.533054][T27611] Call Trace: [ 1584.536386][T27611] [ 1584.539351][T27611] dump_stack_lvl+0x18c/0x250 [ 1584.544085][T27611] ? show_regs_print_info+0x20/0x20 [ 1584.549367][T27611] ? load_image+0x420/0x420 [ 1584.553948][T27611] ? __might_sleep+0xe0/0xe0 [ 1584.558596][T27611] ? __lock_acquire+0x7d40/0x7d40 [ 1584.563671][T27611] should_fail_ex+0x39d/0x4d0 [ 1584.568411][T27611] should_failslab+0x9/0x20 [ 1584.572973][T27611] slab_pre_alloc_hook+0x59/0x310 [ 1584.578046][T27611] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1584.584243][T27611] ? __get_vm_area_node+0x125/0x370 [ 1584.589475][T27611] __kmem_cache_alloc_node+0x53/0x250 [ 1584.594880][T27611] ? __get_vm_area_node+0x125/0x370 [ 1584.600111][T27611] kmalloc_node_trace+0x26/0xe0 [ 1584.604994][T27611] __get_vm_area_node+0x125/0x370 [ 1584.610052][T27611] __vmalloc_node_range+0x36e/0x1330 [ 1584.615375][T27611] ? netlink_sendmsg+0x602/0xbf0 [ 1584.620373][T27611] ? netlink_insert+0x109f/0x13a0 [ 1584.625445][T27611] ? netlink_data_ready+0x10/0x10 [ 1584.630496][T27611] ? free_vm_area+0x50/0x50 [ 1584.635032][T27611] ? netlink_sendmsg+0x602/0xbf0 [ 1584.639997][T27611] vmalloc+0x79/0x90 [ 1584.643924][T27611] ? netlink_sendmsg+0x602/0xbf0 [ 1584.648890][T27611] netlink_sendmsg+0x602/0xbf0 [ 1584.653687][T27611] ? lockdep_hardirqs_on+0x98/0x150 [ 1584.658918][T27611] ? netlink_getsockopt+0x590/0x590 [ 1584.664148][T27611] ? netlink_getsockopt+0x590/0x590 [ 1584.669370][T27611] ____sys_sendmsg+0x5ba/0x960 [ 1584.674168][T27611] ? __asan_memset+0x22/0x40 [ 1584.678814][T27611] ? __sys_sendmsg_sock+0x30/0x30 [ 1584.683862][T27611] ? __import_iovec+0x5f2/0x850 [ 1584.688740][T27611] ? import_iovec+0x73/0xa0 [ 1584.693271][T27611] ___sys_sendmsg+0x2a6/0x360 [ 1584.697977][T27611] ? __sys_sendmsg+0x2a0/0x2a0 [ 1584.702807][T27611] __se_sys_sendmsg+0x1c2/0x2b0 [ 1584.707683][T27611] ? __x64_sys_sendmsg+0x80/0x80 [ 1584.712667][T27611] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1584.718597][T27611] do_syscall_64+0x55/0xb0 [ 1584.723039][T27611] ? clear_bhb_loop+0x40/0x90 [ 1584.727742][T27611] ? clear_bhb_loop+0x40/0x90 [ 1584.732441][T27611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.738362][T27611] RIP: 0033:0x7f250c99ce59 [ 1584.742798][T27611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.762431][T27611] RSP: 002b:00007f250d91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.770868][T27611] RAX: ffffffffffffffda RBX: 00007f250cc15fa0 RCX: 00007f250c99ce59 [ 1584.778860][T27611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1584.786851][T27611] RBP: 00007f250d91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.794845][T27611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1584.802834][T27611] R13: 00007f250cc16038 R14: 00007f250cc15fa0 R15: 00007fffa9653938 [ 1584.810840][T27611] [ 1584.858783][T27611] syz.2.6481: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 1584.875914][T27611] CPU: 1 PID: 27611 Comm: syz.2.6481 Not tainted syzkaller #0 [ 1584.883440][T27611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1584.893540][T27611] Call Trace: [ 1584.896860][T27611] [ 1584.899833][T27611] dump_stack_lvl+0x18c/0x250 [ 1584.904608][T27611] ? show_regs_print_info+0x20/0x20 [ 1584.909873][T27611] ? load_image+0x420/0x420 [ 1584.914433][T27611] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1584.921007][T27611] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1584.927567][T27611] warn_alloc+0x246/0x340 [ 1584.931945][T27611] ? __get_vm_area_node+0x125/0x370 [ 1584.937195][T27611] ? zone_watermark_ok_safe+0x230/0x230 [ 1584.942794][T27611] ? rcu_is_watching+0x15/0xb0 [ 1584.947619][T27611] ? __get_vm_area_node+0x356/0x370 [ 1584.952864][T27611] __vmalloc_node_range+0x393/0x1330 [ 1584.958187][T27611] ? netlink_insert+0x109f/0x13a0 [ 1584.963262][T27611] ? netlink_data_ready+0x10/0x10 [ 1584.968325][T27611] ? free_vm_area+0x50/0x50 [ 1584.972885][T27611] ? netlink_sendmsg+0x602/0xbf0 [ 1584.977853][T27611] vmalloc+0x79/0x90 [ 1584.981784][T27611] ? netlink_sendmsg+0x602/0xbf0 [ 1584.986751][T27611] netlink_sendmsg+0x602/0xbf0 [ 1584.991563][T27611] ? lockdep_hardirqs_on+0x98/0x150 [ 1584.996827][T27611] ? netlink_getsockopt+0x590/0x590 [ 1585.002061][T27611] ? netlink_getsockopt+0x590/0x590 [ 1585.007291][T27611] ____sys_sendmsg+0x5ba/0x960 [ 1585.012091][T27611] ? __asan_memset+0x22/0x40 [ 1585.016709][T27611] ? __sys_sendmsg_sock+0x30/0x30 [ 1585.021765][T27611] ? __import_iovec+0x5f2/0x850 [ 1585.026650][T27611] ? import_iovec+0x73/0xa0 [ 1585.031175][T27611] ___sys_sendmsg+0x2a6/0x360 [ 1585.035885][T27611] ? __sys_sendmsg+0x2a0/0x2a0 [ 1585.040728][T27611] __se_sys_sendmsg+0x1c2/0x2b0 [ 1585.045610][T27611] ? __x64_sys_sendmsg+0x80/0x80 [ 1585.050589][T27611] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1585.056524][T27611] do_syscall_64+0x55/0xb0 [ 1585.060986][T27611] ? clear_bhb_loop+0x40/0x90 [ 1585.065777][T27611] ? clear_bhb_loop+0x40/0x90 [ 1585.070476][T27611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1585.076406][T27611] RIP: 0033:0x7f250c99ce59 [ 1585.080934][T27611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.100571][T27611] RSP: 002b:00007f250d91d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1585.109012][T27611] RAX: ffffffffffffffda RBX: 00007f250cc15fa0 RCX: 00007f250c99ce59 [ 1585.117022][T27611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 1585.125014][T27611] RBP: 00007f250d91d090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.133009][T27611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.140999][T27611] R13: 00007f250cc16038 R14: 00007f250cc15fa0 R15: 00007fffa9653938 [ 1585.149007][T27611] [ 1585.173072][T27618] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6483'. [ 1585.190381][T27611] Mem-Info: [ 1585.194223][T27611] active_anon:24049 inactive_anon:0 isolated_anon:0 [ 1585.194223][T27611] active_file:19505 inactive_file:40528 isolated_file:0 [ 1585.194223][T27611] unevictable:768 dirty:236 writeback:0 [ 1585.194223][T27611] slab_reclaimable:10638 slab_unreclaimable:95938 [ 1585.194223][T27611] mapped:24991 shmem:1361 pagetables:536 [ 1585.194223][T27611] sec_pagetables:0 bounce:0 [ 1585.194223][T27611] kernel_misc_reclaimable:0 [ 1585.194223][T27611] free:1322672 free_pcp:9568 free_cma:0 [ 1585.257870][T27611] Node 0 active_anon:96136kB inactive_anon:0kB active_file:78020kB inactive_file:161912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99956kB dirty:948kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10936kB pagetables:2152kB sec_pagetables:0kB all_unreclaimable? no [ 1585.324237][T27611] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1585.403726][T27611] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1585.433852][T27611] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1585.446104][T27611] Node 0 DMA32 free:1379456kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:96300kB inactive_anon:0kB active_file:78020kB inactive_file:161088kB unevictable:1536kB writepending:1048kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:21036kB local_pcp:14408kB free_cma:0kB [ 1585.508460][T27611] lowmem_reserve[]: 0 0 0 0 0 [ 1585.517858][T27611] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1585.547315][T27611] lowmem_reserve[]: 0 0 0 0 0 [ 1585.552225][T27611] Node 1 Normal free:3895880kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17520kB local_pcp:8784kB free_cma:0kB [ 1585.588340][T27611] lowmem_reserve[]: 0 0 0 0 0 [ 1585.655793][T27611] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1585.735391][T27611] Node 0 DMA32: 2530*4kB (UM) 1517*8kB (UM) 1479*16kB (UME) 191*32kB (UME) 487*64kB (UME) 697*128kB (UME) 181*256kB (UM) 97*512kB (UME) 47*1024kB (UME) 25*2048kB (UME) 247*4096kB (M) = 1379456kB [ 1585.762799][T27611] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1585.783255][T27611] Node 1 Normal: 84*4kB (UM) 43*8kB (UME) 38*16kB (UME) 54*32kB (UME) 14*64kB (UE) 6*128kB (UM) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3895880kB [ 1585.807453][T27611] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.819727][T27611] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1585.830809][T27611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1585.843298][T27611] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1585.854344][T27611] 61394 total pagecache pages [ 1585.871555][T27611] 0 pages in swap cache [ 1585.896400][T27611] Free swap = 124996kB [ 1585.900617][T27611] Total swap = 124996kB [ 1585.904807][T27611] 2097051 pages RAM [ 1585.921932][T27611] 0 pages HighMem/MovableOnly [ 1585.927328][T27611] 416933 pages reserved [ 1585.933029][T27611] 0 pages cma reserved [ 1586.097929][T27643] netlink: 'syz.0.6491': attribute type 21 has an invalid length. [ 1586.110191][T27643] netlink: 'syz.0.6491': attribute type 6 has an invalid length. [ 1586.595345][T27650] netlink: 'syz.0.6492': attribute type 29 has an invalid length. [ 1586.792102][T27650] netlink: 'syz.0.6492': attribute type 29 has an invalid length. [ 1587.480701][T27657] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6496'. [ 1587.615790][T27668] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1587.648274][T27668] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1587.663208][T27668] openvswitch: netlink: Key 0 has unexpected len 12 expected 0 [ 1587.777317][T27670] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6502'. [ 1588.059791][T27688] @ÿ: renamed from bond_slave_0 (while UP) [ 1589.886402][T27711] vcan0: entered allmulticast mode [ 1589.961625][T27711] netlink: 'syz.0.6516': attribute type 10 has an invalid length. [ 1590.023240][T27715] netlink: 'syz.2.6512': attribute type 3 has an invalid length. [ 1590.043106][T27715] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6512'. [ 1590.399245][T27724] netlink: 'syz.1.6518': attribute type 39 has an invalid length. [ 1590.962532][T27734] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.6520'. [ 1595.255734][T27752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1595.582708][T27763] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6529'. [ 1596.388212][T27790] netlink: 'syz.2.6542': attribute type 29 has an invalid length. [ 1596.455504][T27790] netlink: 'syz.2.6542': attribute type 29 has an invalid length. [ 1596.517679][T27793] netlink: 'syz.2.6542': attribute type 29 has an invalid length. [ 1596.571318][T27790] netlink: 'syz.2.6542': attribute type 29 has an invalid length. [ 1596.620605][T27796] netlink: 'syz.2.6542': attribute type 29 has an invalid length. [ 1598.152135][T27826] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6553'. [ 1598.887319][T27839] netlink: 'syz.1.6556': attribute type 10 has an invalid length. [ 1598.913257][T27839] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6556'. [ 1600.351142][T27859] netlink: 'syz.2.6562': attribute type 2 has an invalid length. [ 1600.375380][T27859] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.6562'. [ 1600.616341][T27859] syzkaller0: entered promiscuous mode [ 1600.629796][T27859] syzkaller0: entered allmulticast mode [ 1601.043497][T27870] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6566'. [ 1603.518361][T27866] netlink: 'syz.1.6565': attribute type 2 has an invalid length. [ 1603.526860][T27866] netlink: 'syz.1.6565': attribute type 8 has an invalid length. [ 1603.534733][T27866] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6565'. [ 1604.762043][T27896] netlink: 'syz.1.6575': attribute type 3 has an invalid length. [ 1604.785311][T27896] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6575'. [ 1605.278771][T27906] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1605.307675][T27907] netlink: 'syz.3.6579': attribute type 28 has an invalid length. [ 1605.322494][T27906] netlink: 'syz.3.6579': attribute type 28 has an invalid length. [ 1605.330841][T27907] netlink: 'syz.3.6579': attribute type 29 has an invalid length. [ 1605.343339][T27906] netlink: 'syz.3.6579': attribute type 29 has an invalid length. [ 1605.364419][T27907] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1605.385541][T27906] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1605.440237][T27916] netlink: 'syz.1.6581': attribute type 29 has an invalid length. [ 1605.457908][T27916] netlink: 'syz.1.6581': attribute type 29 has an invalid length. [ 1605.477980][T27911] netlink: 'syz.1.6581': attribute type 29 has an invalid length. [ 1605.550730][T27920] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.6584'. [ 1606.741913][T27935] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6587'. [ 1606.843820][T27940] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.6589'. [ 1607.623364][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.630419][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.748394][T27949] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6593'. [ 1607.844932][T27949] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1608.180475][T27964] bridge_slave_1: left allmulticast mode [ 1608.233345][T27964] bridge_slave_1: left promiscuous mode [ 1608.278994][T27964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.313764][T27964] bridge_slave_0: left allmulticast mode [ 1608.333105][T27964] bridge_slave_0: left promiscuous mode [ 1608.358472][T27964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.370851][T27971] netlink: 26 bytes leftover after parsing attributes in process `syz.2.6598'. [ 1608.953244][T27982] veth1_macvtap: left promiscuous mode [ 1608.993770][T27982] validate_nla: 1 callbacks suppressed [ 1608.993790][T27982] netlink: 'syz.1.6602': attribute type 3 has an invalid length. [ 1609.031650][T27982] netlink: 'syz.1.6602': attribute type 4 has an invalid length. [ 1609.042425][T27982] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.6602'. [ 1611.536188][T28072] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.6616'. [ 1612.024770][T28084] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1612.051497][T28085] Dead loop on virtual device ip6_vti0, fix it urgently! [ 1612.105653][T28087] netlink: 'syz.0.6620': attribute type 10 has an invalid length. [ 1612.113552][T28087] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6620'. [ 1612.156746][T28087] batman_adv: batadv0: Adding interface: veth0_vlan [ 1612.206307][T28087] batman_adv: batadv0: Interface activated: veth0_vlan [ 1612.742462][T28094] netlink: 144308 bytes leftover after parsing attributes in process `syz.2.6624'. [ 1613.501581][T28120] netlink: 'syz.3.6632': attribute type 3 has an invalid length. [ 1613.577217][T28120] netlink: 'syz.3.6632': attribute type 1 has an invalid length. [ 1613.615472][T28120] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1613.899186][T28130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1613.906804][T28130] IPv6: NLM_F_CREATE should be set when creating new route [ 1613.914294][T28130] IPv6: NLM_F_CREATE should be set when creating new route [ 1613.921668][T28130] IPv6: NLM_F_CREATE should be set when creating new route [ 1614.951463][T28152] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6645'. [ 1614.985956][T28152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1615.393328][T28165] netlink: 'syz.0.6648': attribute type 21 has an invalid length. [ 1615.651147][T28167] netlink: 'syz.0.6648': attribute type 13 has an invalid length. [ 1615.683248][T28167] netlink: 24643 bytes leftover after parsing attributes in process `syz.0.6648'. [ 1617.677327][T28218] netlink: 'syz.0.6660': attribute type 10 has an invalid length. [ 1617.966764][T28218] mac80211_hwsim hwsim47 .3ãc¤±: entered promiscuous mode [ 1617.974156][T28218] mac80211_hwsim hwsim47 .3ãc¤±: entered allmulticast mode [ 1618.084782][T28218] team0: Port device .3ãc¤± added [ 1619.217124][T28247] netlink: 52711 bytes leftover after parsing attributes in process `syz.0.6670'. [ 1621.620245][T28307] netlink: 'syz.2.6691': attribute type 21 has an invalid length. [ 1621.679310][T28307] netlink: 'syz.2.6691': attribute type 11 has an invalid length. [ 1622.562032][T28319] netlink: 'syz.1.6694': attribute type 10 has an invalid length. [ 1622.747202][T28319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1622.819380][T28319] bond0: (slave team0): Enslaving as an active interface with an up link [ 1623.491854][T28331] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6700'. [ 1623.535812][T28331] netlink: 'syz.3.6700': attribute type 21 has an invalid length. [ 1623.555403][T28331] netlink: 'syz.3.6700': attribute type 30 has an invalid length. [ 1623.568637][T28331] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6700'. [ 1623.629858][T28331] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1623.674035][T28331] CPU: 0 PID: 28331 Comm: syz.3.6700 Not tainted syzkaller #0 [ 1623.681575][T28331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1623.691711][T28331] Call Trace: [ 1623.695037][T28331] [ 1623.698017][T28331] dump_stack_lvl+0x18c/0x250 [ 1623.702757][T28331] ? show_regs_print_info+0x20/0x20 [ 1623.708008][T28331] ? load_image+0x420/0x420 [ 1623.712568][T28331] sysfs_warn_dup+0x8e/0xa0 [ 1623.717123][T28331] sysfs_do_create_link_sd+0xc0/0x110 [ 1623.722556][T28331] device_add_class_symlinks+0x1cf/0x240 [ 1623.728258][T28331] device_add+0x507/0xc50 [ 1623.732653][T28331] wiphy_register+0x1dad/0x2ae0 [ 1623.737589][T28331] ? cfg80211_event_work+0x40/0x40 [ 1623.742759][T28331] ? minstrel_ht_alloc+0x88a/0x990 [ 1623.747927][T28331] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1623.754056][T28331] ieee80211_register_hw+0x3464/0x4250 [ 1623.759597][T28331] ? ieee80211_tasklet_handler+0x20/0x20 [ 1623.765287][T28331] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1623.771244][T28331] ? __debug_object_init+0xec/0x450 [ 1623.776492][T28331] ? __asan_memset+0x22/0x40 [ 1623.781121][T28331] ? __hrtimer_init+0x186/0x270 [ 1623.786002][T28331] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1623.791774][T28331] ? mac80211_hwsim_free+0x220/0x220 [ 1623.797110][T28331] ? rcu_is_watching+0x15/0xb0 [ 1623.801908][T28331] ? kstrndup+0xbd/0x140 [ 1623.806200][T28331] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1623.811349][T28331] ? __nla_validate+0x50/0x50 [ 1623.816078][T28331] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1623.822463][T28331] ? __nla_parse+0x40/0x50 [ 1623.826922][T28331] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1623.833296][T28331] genl_family_rcv_msg_doit+0x211/0x310 [ 1623.838878][T28331] ? end_current_label_crit_section+0x170/0x170 [ 1623.845162][T28331] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1623.851096][T28331] ? bpf_lsm_capable+0x9/0x10 [ 1623.855805][T28331] ? security_capable+0x89/0xb0 [ 1623.860693][T28331] genl_rcv_msg+0x619/0x7a0 [ 1623.865241][T28331] ? genl_bind+0x360/0x360 [ 1623.869696][T28331] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1623.876065][T28331] ? ref_tracker_free+0x690/0x840 [ 1623.881127][T28331] netlink_rcv_skb+0x241/0x4d0 [ 1623.885918][T28331] ? genl_bind+0x360/0x360 [ 1623.890364][T28331] ? netlink_ack+0x1180/0x1180 [ 1623.895169][T28331] ? __lock_acquire+0x7d40/0x7d40 [ 1623.900229][T28331] ? down_read+0x1ac/0x2e0 [ 1623.904700][T28331] genl_rcv+0x28/0x40 [ 1623.908724][T28331] netlink_unicast+0x751/0x8d0 [ 1623.913532][T28331] netlink_sendmsg+0x8d0/0xbf0 [ 1623.918335][T28331] ? netlink_getsockopt+0x590/0x590 [ 1623.923570][T28331] ? aa_sock_msg_perm+0x94/0x150 [ 1623.928541][T28331] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1623.933862][T28331] ? security_socket_sendmsg+0x80/0xa0 [ 1623.939351][T28331] ? netlink_getsockopt+0x590/0x590 [ 1623.944585][T28331] ____sys_sendmsg+0x5ba/0x960 [ 1623.949392][T28331] ? __asan_memset+0x22/0x40 [ 1623.954019][T28331] ? __sys_sendmsg_sock+0x30/0x30 [ 1623.959073][T28331] ? __import_iovec+0x5f2/0x850 [ 1623.963955][T28331] ? import_iovec+0x73/0xa0 [ 1623.968493][T28331] ___sys_sendmsg+0x2a6/0x360 [ 1623.973217][T28331] ? __sys_sendmsg+0x2a0/0x2a0 [ 1623.978056][T28331] __se_sys_sendmsg+0x1c2/0x2b0 [ 1623.982941][T28331] ? __x64_sys_sendmsg+0x80/0x80 [ 1623.987919][T28331] ? lockdep_hardirqs_on+0x98/0x150 [ 1623.993176][T28331] do_syscall_64+0x55/0xb0 [ 1623.997622][T28331] ? clear_bhb_loop+0x40/0x90 [ 1624.002321][T28331] ? clear_bhb_loop+0x40/0x90 [ 1624.007026][T28331] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1624.012955][T28331] RIP: 0033:0x7f6558d9ce59 [ 1624.017399][T28331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.037037][T28331] RSP: 002b:00007f6559c5f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1624.045484][T28331] RAX: ffffffffffffffda RBX: 00007f6559015fa0 RCX: 00007f6558d9ce59 [ 1624.053484][T28331] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1624.061504][T28331] RBP: 00007f6558e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1624.069504][T28331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1624.077500][T28331] R13: 00007f6559016038 R14: 00007f6559015fa0 R15: 00007ffd5d177858 [ 1624.085518][T28331] [ 1628.029201][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1628.039466][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1628.052830][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1628.070514][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1628.086059][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1628.095602][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1628.837956][T28393] netlink: 'syz.1.6715': attribute type 153 has an invalid length. [ 1628.857039][T28393] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.6715'. [ 1629.100677][T28375] chnl_net:caif_netlink_parms(): no params data found [ 1629.168678][T28405] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 1629.174553][T28405] pim6reg1: linktype set to 776 [ 1629.236127][T25533] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.411451][T25533] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.464081][T28419] netlink: 22 bytes leftover after parsing attributes in process `syz.3.6721'. [ 1629.485489][T28375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.492694][T28375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.521718][T28375] bridge_slave_0: entered allmulticast mode [ 1629.552155][T28375] bridge_slave_0: entered promiscuous mode [ 1629.572094][T28375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.590293][T28375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.607346][T28375] bridge_slave_1: entered allmulticast mode [ 1629.624765][T28375] bridge_slave_1: entered promiscuous mode [ 1629.713093][T25533] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1629.978753][T25533] bond0: (slave netdevsim0): Releasing backup interface [ 1630.128653][T28375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.142546][T28375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.173906][ T5086] Bluetooth: hci4: command tx timeout [ 1630.219640][T25547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1630.259970][T28375] team0: Port device team_slave_0 added [ 1630.280792][T28375] team0: Port device team_slave_1 added [ 1630.484489][T28375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.522411][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.553566][T28375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.615872][T28375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.622879][T28375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.676000][T28375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.759588][T28440] netlink: 'syz.3.6729': attribute type 11 has an invalid length. [ 1630.803396][T28440] netlink: 212788 bytes leftover after parsing attributes in process `syz.3.6729'. [ 1630.845041][T28443] cgroup: fork rejected by pids controller in /syz1 [ 1630.872800][T28446] netlink: 'syz.0.6731': attribute type 1 has an invalid length. [ 1630.895329][T28446] netlink: 'syz.0.6731': attribute type 2 has an invalid length. [ 1630.903151][T28446] netlink: 'syz.0.6731': attribute type 2 has an invalid length. [ 1630.932330][T28375] hsr_slave_0: entered promiscuous mode [ 1630.963587][T28375] hsr_slave_1: entered promiscuous mode [ 1630.970053][T28446] netlink: 'syz.0.6731': attribute type 3 has an invalid length. [ 1630.979471][T28446] netlink: 'syz.0.6731': attribute type 4 has an invalid length. [ 1631.003889][T28446] netlink: 'syz.0.6731': attribute type 5 has an invalid length. [ 1631.018052][T28375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1631.036713][T28446] netlink: 'syz.0.6731': attribute type 6 has an invalid length. [ 1631.044593][T28375] Cannot create hsr debugfs directory [ 1631.055317][T28446] netlink: 'syz.0.6731': attribute type 7 has an invalid length. [ 1631.075254][T28446] netlink: 'syz.0.6731': attribute type 9 has an invalid length. [ 1631.086654][T28446] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.6731'. [ 1632.245980][ T5086] Bluetooth: hci4: command tx timeout [ 1633.321618][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1633.335976][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1633.343836][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1633.354356][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1633.374705][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1633.383583][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1633.462565][T28375] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1633.482506][T28375] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1633.546118][T28375] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1633.582286][T28375] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1633.767107][T25533] hsr_slave_0: left promiscuous mode [ 1633.777889][T25533] hsr_slave_1: left promiscuous mode [ 1633.824829][T25533] veth1_macvtap: left allmulticast mode [ 1633.839626][T25533] veth1_macvtap: left promiscuous mode [ 1633.853864][T25533] veth0_macvtap: left promiscuous mode [ 1633.861363][T25533] veth1_vlan: left promiscuous mode [ 1633.872017][T25533] veth0_vlan: left promiscuous mode [ 1634.233213][T28520] netlink: 144300 bytes leftover after parsing attributes in process `syz.3.6744'. [ 1634.332319][ T5789] Bluetooth: hci4: command tx timeout [ 1635.206747][T25533] bond0 (unregistering): (slave 4@0Ù): Releasing backup interface [ 1635.254914][T25533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1635.445706][ T5789] Bluetooth: hci0: command tx timeout [ 1635.579677][T25533] bond0 (unregistering): Released all slaves [ 1635.990734][T28375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.018639][T28375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1636.059581][T25547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1636.066802][T25547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1636.163295][T25547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1636.170576][T25547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1636.259754][T28375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1636.270806][T28375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1636.318370][T28535] validate_nla: 3 callbacks suppressed [ 1636.318411][T28535] netlink: 'syz.0.6749': attribute type 39 has an invalid length. [ 1636.409657][ T5789] Bluetooth: hci4: command tx timeout [ 1636.753337][T28501] chnl_net:caif_netlink_parms(): no params data found [ 1636.851222][T25533] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.040140][T25533] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.099157][T28556] FAULT_INJECTION: forcing a failure. [ 1637.099157][T28556] name failslab, interval 1, probability 0, space 0, times 0 [ 1637.127779][T28556] CPU: 1 PID: 28556 Comm: syz.0.6753 Not tainted syzkaller #0 [ 1637.135368][T28556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1637.145487][T28556] Call Trace: [ 1637.148821][T28556] [ 1637.151787][T28556] dump_stack_lvl+0x18c/0x250 [ 1637.156523][T28556] ? show_regs_print_info+0x20/0x20 [ 1637.161758][T28556] ? load_image+0x420/0x420 [ 1637.166304][T28556] ? __might_sleep+0xe0/0xe0 [ 1637.170937][T28556] ? __lock_acquire+0x7d40/0x7d40 [ 1637.176021][T28556] should_fail_ex+0x39d/0x4d0 [ 1637.180758][T28556] should_failslab+0x9/0x20 [ 1637.185320][T28556] slab_pre_alloc_hook+0x59/0x310 [ 1637.190405][T28556] kmem_cache_alloc_node+0x60/0x320 [ 1637.195644][T28556] ? __alloc_skb+0x103/0x2c0 [ 1637.200307][T28556] __alloc_skb+0x103/0x2c0 [ 1637.204774][T28556] alloc_skb_with_frags+0xca/0x7b0 [ 1637.209942][T28556] ? mark_lock+0x94/0x320 [ 1637.214343][T28556] sock_alloc_send_pskb+0x883/0x9a0 [ 1637.219730][T28556] ? sock_kzfree_s+0x50/0x50 [ 1637.224397][T28556] tun_get_user+0x82c/0x3ca0 [ 1637.229088][T28556] ? aa_file_perm+0x11b/0xee0 [ 1637.233822][T28556] ? rcu_read_unlock+0xa0/0xa0 [ 1637.238659][T28556] ? tun_get+0x1c/0x2e0 [ 1637.242875][T28556] ? __lock_acquire+0x7d40/0x7d40 [ 1637.248045][T28556] ? tun_get+0x1c/0x2e0 [ 1637.252262][T28556] tun_chr_write_iter+0x119/0x200 [ 1637.257435][T28556] vfs_write+0x46c/0x990 [ 1637.261741][T28556] ? file_end_write+0x250/0x250 [ 1637.266657][T28556] ? __fget_files+0x43d/0x4b0 [ 1637.271396][T28556] ? __fdget_pos+0x1d8/0x330 [ 1637.276032][T28556] ? ksys_write+0x75/0x260 [ 1637.280505][T28556] ksys_write+0x150/0x260 [ 1637.284903][T28556] ? __ia32_sys_read+0x90/0x90 [ 1637.289711][T28556] ? __x64_sys_write+0x1d/0x90 [ 1637.294525][T28556] ? __x64_sys_write+0x21/0x90 [ 1637.299349][T28556] do_syscall_64+0x55/0xb0 [ 1637.303807][T28556] ? clear_bhb_loop+0x40/0x90 [ 1637.308524][T28556] ? clear_bhb_loop+0x40/0x90 [ 1637.313236][T28556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1637.319177][T28556] RIP: 0033:0x7fc85c19ce59 [ 1637.323629][T28556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1637.343267][T28556] RSP: 002b:00007fc85d085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1637.351717][T28556] RAX: ffffffffffffffda RBX: 00007fc85c415fa0 RCX: 00007fc85c19ce59 [ 1637.359727][T28556] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1637.367730][T28556] RBP: 00007fc85d085090 R08: 0000000000000000 R09: 0000000000000000 [ 1637.375742][T28556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1637.383761][T28556] R13: 00007fc85c416038 R14: 00007fc85c415fa0 R15: 00007ffe133bf528 [ 1637.391822][T28556] [ 1637.453619][T25533] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.526891][ T5789] Bluetooth: hci0: command tx timeout [ 1637.604507][T28501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.646932][T28501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1637.654226][T28501] bridge_slave_0: entered allmulticast mode [ 1637.671316][T28501] bridge_slave_0: entered promiscuous mode [ 1637.743586][T25533] bond0: (slave ÿÿÿÿÿÿ): Releasing backup interface [ 1637.783757][T25533] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.831606][T28501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.854911][T28501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1637.878311][T28501] bridge_slave_1: entered allmulticast mode [ 1637.892023][T28501] bridge_slave_1: entered promiscuous mode [ 1637.971640][T28375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1638.025546][T28501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1638.073420][T28501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1638.289060][T28501] team0: Port device team_slave_0 added [ 1638.331786][T28501] team0: Port device team_slave_1 added [ 1638.380044][T28582] netlink: 'syz.3.6758': attribute type 10 has an invalid length. [ 1638.410178][T28582] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.6758'. [ 1638.606145][T28501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1638.613476][T28501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.681703][T28501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1638.704438][T28501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1638.713111][T28501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1638.764818][T28501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.873748][T28591] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.6759'. [ 1638.891910][T28591] netlink: zone id is out of range [ 1638.903939][T28591] netlink: zone id is out of range [ 1638.918705][T28591] netlink: zone id is out of range [ 1638.949112][T28591] netlink: zone id is out of range [ 1638.954576][T28591] netlink: zone id is out of range [ 1638.972049][T28591] netlink: zone id is out of range [ 1638.978092][T28591] netlink: zone id is out of range [ 1638.983978][T28591] netlink: zone id is out of range [ 1638.990079][T28591] netlink: zone id is out of range [ 1638.996378][T28591] netlink: zone id is out of range [ 1639.160910][T28375] veth0_vlan: entered promiscuous mode [ 1639.483008][T28501] hsr_slave_0: entered promiscuous mode [ 1639.503126][T28501] hsr_slave_1: entered promiscuous mode [ 1639.535742][T28602] netlink: 'syz.3.6760': attribute type 39 has an invalid length. [ 1639.605810][ T5789] Bluetooth: hci0: command tx timeout [ 1640.260061][T28375] veth1_vlan: entered promiscuous mode [ 1640.986605][T28375] veth0_macvtap: entered promiscuous mode [ 1641.146648][T28375] veth1_macvtap: entered promiscuous mode [ 1641.274325][T28375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.292984][T28375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.305650][T28375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1641.318300][T28375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.336717][T28375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1641.363706][T28375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.379288][T28375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.389469][T28375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.401815][T28375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.412734][T28375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1641.429908][T28375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1641.441916][T28375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1641.516678][T28375] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.534463][T28375] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.543408][T28375] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.552367][T28375] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1641.685890][ T5789] Bluetooth: hci0: command tx timeout [ 1641.946345][T25532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.954241][T25532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.016170][T28501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1642.044966][T28501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1642.072546][T28501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1642.181571][T25526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1642.193865][T25526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1642.226451][T28501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1642.318888][T25533] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1642.342183][T25533] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1642.363160][T28649] netlink: 'syz.3.6766': attribute type 3 has an invalid length. [ 1642.372616][T25533] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1642.395364][T25533] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1642.397165][T28649] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1642.422513][T25533] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1642.465347][T25533] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1642.479752][T25533] bridge_slave_1: left allmulticast mode [ 1642.495237][T25533] bridge_slave_1: left promiscuous mode [ 1642.602475][T25533] bridge0: port 2(bridge_slave_1) entered disabled state [ 1643.582583][T25533] bridge_slave_0: left allmulticast mode [ 1643.590026][T25533] bridge_slave_0: left promiscuous mode [ 1643.595905][T25533] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.684913][T25533] veth0_macvtap: left promiscuous mode [ 1644.370955][T25533] team0 (unregistering): Port device hsr_slave_0 removed [ 1644.630630][T25533] team0 (unregistering): Port device team_slave_1 removed [ 1644.731118][T25533] team0 (unregistering): Port device team_slave_0 removed [ 1644.794901][T25533] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1644.863270][T25533] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1645.254960][T25533] bond0 (unregistering): (slave team0): Releasing backup interface [ 1645.302347][T25533] bond0 (unregistering): Released all slaves [ 1645.492130][T28668] netlink: 'syz.2.6770': attribute type 39 has an invalid length. [ 1645.794784][T28501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1645.849634][T28501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1645.897565][T25537] bridge0: port 1(bridge_slave_0) entered blocking state [ 1645.904820][T25537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1645.996916][T25547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1646.004162][T25547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1646.280563][T28678] netlink: 'syz.0.6773': attribute type 29 has an invalid length. [ 1646.455592][T28678] netlink: 'syz.0.6773': attribute type 29 has an invalid length. [ 1646.703926][T28678] netlink: 'syz.0.6773': attribute type 29 has an invalid length. [ 1646.731012][T28680] netlink: 'syz.0.6773': attribute type 29 has an invalid length. [ 1646.767132][T28501] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1646.800319][T28501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1647.046675][T28688] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.6776'. [ 1647.524075][T28501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1647.711305][T28501] veth0_vlan: entered promiscuous mode [ 1647.773259][T28501] veth1_vlan: entered promiscuous mode [ 1647.869647][T28501] veth0_macvtap: entered promiscuous mode [ 1647.879775][T28501] veth1_macvtap: entered promiscuous mode [ 1647.915086][T28501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.931385][T28501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.945681][T28501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1647.956488][T28501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1647.969745][T28501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1648.016183][T28708] netlink: 'syz.0.6781': attribute type 12 has an invalid length. [ 1648.024257][T28708] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6781'. [ 1648.043698][T28501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.075286][T28501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.087135][T28501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.097833][T28501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.108572][T28501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1648.119274][T28501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1648.131437][T28501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1648.160768][T28501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.170130][T28501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.180317][T28501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.189180][T28501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1648.470202][ T9306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.503066][ T9306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.652520][T25526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1648.692320][T25526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1651.572156][T28745] FAULT_INJECTION: forcing a failure. [ 1651.572156][T28745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1651.591613][T28745] CPU: 1 PID: 28745 Comm: syz.2.6792 Not tainted syzkaller #0 [ 1651.599157][T28745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1651.609257][T28745] Call Trace: [ 1651.612579][T28745] [ 1651.615565][T28745] dump_stack_lvl+0x18c/0x250 [ 1651.620305][T28745] ? show_regs_print_info+0x20/0x20 [ 1651.625566][T28745] ? load_image+0x420/0x420 [ 1651.630112][T28745] ? __lock_acquire+0x7d40/0x7d40 [ 1651.635195][T28745] should_fail_ex+0x39d/0x4d0 [ 1651.639940][T28745] prepare_alloc_pages+0x1e2/0x5f0 [ 1651.645104][T28745] __alloc_pages+0x134/0x460 [ 1651.649731][T28745] ? rcu_is_watching+0x15/0xb0 [ 1651.654554][T28745] ? zone_statistics+0x170/0x170 [ 1651.659547][T28745] ? __build_skb_around+0x255/0x3d0 [ 1651.664806][T28745] alloc_skb_with_frags+0x23c/0x7b0 [ 1651.670079][T28745] sock_alloc_send_pskb+0x883/0x9a0 [ 1651.675335][T28745] ? sock_kzfree_s+0x50/0x50 [ 1651.679989][T28745] tun_get_user+0x82c/0x3ca0 [ 1651.684661][T28745] ? aa_file_perm+0x11b/0xee0 [ 1651.689394][T28745] ? rcu_read_unlock+0xa0/0xa0 [ 1651.694224][T28745] ? tun_get+0x1c/0x2e0 [ 1651.698435][T28745] ? __lock_acquire+0x7d40/0x7d40 [ 1651.703512][T28745] ? tun_get+0x1c/0x2e0 [ 1651.707735][T28745] tun_chr_write_iter+0x119/0x200 [ 1651.712822][T28745] vfs_write+0x46c/0x990 [ 1651.717126][T28745] ? file_end_write+0x250/0x250 [ 1651.722036][T28745] ? __fget_files+0x43d/0x4b0 [ 1651.726782][T28745] ? __fdget_pos+0x1d8/0x330 [ 1651.731422][T28745] ? ksys_write+0x75/0x260 [ 1651.735891][T28745] ksys_write+0x150/0x260 [ 1651.740270][T28745] ? __ia32_sys_read+0x90/0x90 [ 1651.745089][T28745] ? lockdep_hardirqs_on+0x98/0x150 [ 1651.750345][T28745] do_syscall_64+0x55/0xb0 [ 1651.754804][T28745] ? clear_bhb_loop+0x40/0x90 [ 1651.759519][T28745] ? clear_bhb_loop+0x40/0x90 [ 1651.764246][T28745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1651.770213][T28745] RIP: 0033:0x7f69a1d9ce59 [ 1651.774671][T28745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1651.794321][T28745] RSP: 002b:00007f69a2c7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1651.802790][T28745] RAX: ffffffffffffffda RBX: 00007f69a2016090 RCX: 00007f69a1d9ce59 [ 1651.810814][T28745] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1651.818831][T28745] RBP: 00007f69a2c7a090 R08: 0000000000000000 R09: 0000000000000000 [ 1651.826849][T28745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1651.834857][T28745] R13: 00007f69a2016128 R14: 00007f69a2016090 R15: 00007fff4ca0faf8 [ 1651.842888][T28745] [ 1652.563650][T28757] netlink: 'syz.0.6796': attribute type 3 has an invalid length. [ 1652.611063][T28757] netlink: 'syz.0.6796': attribute type 6 has an invalid length. [ 1652.655908][T28757] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.6796'. [ 1652.998629][T28741] syzkaller0: entered promiscuous mode [ 1653.004972][T28741] syzkaller0: entered allmulticast mode [ 1655.361148][T28783] netlink: 4079 bytes leftover after parsing attributes in process `syz.0.6804'. [ 1655.406911][T28785] FAULT_INJECTION: forcing a failure. [ 1655.406911][T28785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1655.440881][T28785] CPU: 0 PID: 28785 Comm: syz.1.6803 Not tainted syzkaller #0 [ 1655.448436][T28785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1655.458547][T28785] Call Trace: [ 1655.461871][T28785] [ 1655.464854][T28785] dump_stack_lvl+0x18c/0x250 [ 1655.469591][T28785] ? show_regs_print_info+0x20/0x20 [ 1655.474847][T28785] ? load_image+0x420/0x420 [ 1655.479403][T28785] ? __might_fault+0xaa/0x120 [ 1655.484144][T28785] ? __lock_acquire+0x7d40/0x7d40 [ 1655.489236][T28785] should_fail_ex+0x39d/0x4d0 [ 1655.493984][T28785] _copy_from_iter+0x1d9/0x12e0 [ 1655.498903][T28785] ? __virt_addr_valid+0x18c/0x540 [ 1655.504076][T28785] ? __lock_acquire+0x7d40/0x7d40 [ 1655.509153][T28785] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1655.514590][T28785] ? copyout_mc+0x70/0x70 [ 1655.518977][T28785] ? __virt_addr_valid+0x18c/0x540 [ 1655.524151][T28785] ? __virt_addr_valid+0x18c/0x540 [ 1655.529336][T28785] ? __virt_addr_valid+0x469/0x540 [ 1655.534511][T28785] ? __check_object_size+0x506/0xa20 [ 1655.539865][T28785] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1655.545645][T28785] ? skb_put+0x11b/0x210 [ 1655.549946][T28785] tun_get_user+0x15db/0x3ca0 [ 1655.554695][T28785] ? aa_file_perm+0x11b/0xee0 [ 1655.559434][T28785] ? rcu_read_unlock+0xa0/0xa0 [ 1655.564265][T28785] ? tun_get+0x1c/0x2e0 [ 1655.568479][T28785] ? __lock_acquire+0x7d40/0x7d40 [ 1655.573572][T28785] ? tun_get+0x1c/0x2e0 [ 1655.577785][T28785] tun_chr_write_iter+0x119/0x200 [ 1655.582865][T28785] vfs_write+0x46c/0x990 [ 1655.587168][T28785] ? file_end_write+0x250/0x250 [ 1655.592086][T28785] ? __fget_files+0x43d/0x4b0 [ 1655.596842][T28785] ? __fdget_pos+0x1d8/0x330 [ 1655.601478][T28785] ? ksys_write+0x75/0x260 [ 1655.605954][T28785] ksys_write+0x150/0x260 [ 1655.610345][T28785] ? __ia32_sys_read+0x90/0x90 [ 1655.615164][T28785] ? lockdep_hardirqs_on+0x98/0x150 [ 1655.620435][T28785] do_syscall_64+0x55/0xb0 [ 1655.624899][T28785] ? clear_bhb_loop+0x40/0x90 [ 1655.629616][T28785] ? clear_bhb_loop+0x40/0x90 [ 1655.634343][T28785] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1655.640305][T28785] RIP: 0033:0x7f699459ce59 [ 1655.644764][T28785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1655.664399][T28785] RSP: 002b:00007f69953cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1655.672846][T28785] RAX: ffffffffffffffda RBX: 00007f6994815fa0 RCX: 00007f699459ce59 [ 1655.680847][T28785] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1655.688947][T28785] RBP: 00007f69953cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1655.696945][T28785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1655.704941][T28785] R13: 00007f6994816038 R14: 00007f6994815fa0 R15: 00007ffedd6da5f8 [ 1655.712959][T28785] [ 1656.002298][T28800] netlink: 763 bytes leftover after parsing attributes in process `syz.1.6811'. [ 1656.049078][T28802] mac80211_hwsim hwsim68 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1656.912367][T28813] netlink: 'syz.2.6815': attribute type 9 has an invalid length. [ 1656.930732][T28813] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6815'. [ 1656.982619][T28813] netlink: 'syz.2.6815': attribute type 10 has an invalid length. [ 1657.124760][T28813] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1657.265530][T28824] FAULT_INJECTION: forcing a failure. [ 1657.265530][T28824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.297284][T28824] CPU: 1 PID: 28824 Comm: syz.1.6818 Not tainted syzkaller #0 [ 1657.304870][T28824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1657.314996][T28824] Call Trace: [ 1657.318341][T28824] [ 1657.321337][T28824] dump_stack_lvl+0x18c/0x250 [ 1657.326095][T28824] ? show_regs_print_info+0x20/0x20 [ 1657.331385][T28824] ? load_image+0x420/0x420 [ 1657.335969][T28824] ? __might_fault+0xaa/0x120 [ 1657.340726][T28824] ? __lock_acquire+0x7d40/0x7d40 [ 1657.345871][T28824] should_fail_ex+0x39d/0x4d0 [ 1657.350645][T28824] _copy_from_iter+0x1d9/0x12e0 [ 1657.355584][T28824] ? rep_movs_alternative+0x4a/0x90 [ 1657.360866][T28824] ? _copy_from_iter+0x24e/0x12e0 [ 1657.365968][T28824] ? __virt_addr_valid+0x18c/0x540 [ 1657.371184][T28824] ? __lock_acquire+0x7d40/0x7d40 [ 1657.376285][T28824] ? copyout_mc+0x70/0x70 [ 1657.380698][T28824] ? copyout_mc+0x70/0x70 [ 1657.385108][T28824] ? __virt_addr_valid+0x18c/0x540 [ 1657.390301][T28824] ? page_copy_sane+0x16a/0x270 [ 1657.395233][T28824] copy_page_from_iter+0x7b/0x100 [ 1657.400328][T28824] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1657.406222][T28824] tun_get_user+0x15db/0x3ca0 [ 1657.411101][T28824] ? aa_file_perm+0x11b/0xee0 [ 1657.415866][T28824] ? rcu_read_unlock+0xa0/0xa0 [ 1657.420731][T28824] ? tun_get+0x1c/0x2e0 [ 1657.424962][T28824] ? __lock_acquire+0x7d40/0x7d40 [ 1657.430077][T28824] ? tun_get+0x1c/0x2e0 [ 1657.434321][T28824] tun_chr_write_iter+0x119/0x200 [ 1657.439427][T28824] vfs_write+0x46c/0x990 [ 1657.443755][T28824] ? file_end_write+0x250/0x250 [ 1657.448693][T28824] ? __fget_files+0x43d/0x4b0 [ 1657.453463][T28824] ? __fdget_pos+0x1d8/0x330 [ 1657.458124][T28824] ? ksys_write+0x75/0x260 [ 1657.462634][T28824] ksys_write+0x150/0x260 [ 1657.467045][T28824] ? __ia32_sys_read+0x90/0x90 [ 1657.471900][T28824] ? lockdep_hardirqs_on+0x98/0x150 [ 1657.477181][T28824] do_syscall_64+0x55/0xb0 [ 1657.481673][T28824] ? clear_bhb_loop+0x40/0x90 [ 1657.486410][T28824] ? clear_bhb_loop+0x40/0x90 [ 1657.491154][T28824] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1657.497116][T28824] RIP: 0033:0x7f699459ce59 [ 1657.501592][T28824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.521269][T28824] RSP: 002b:00007f69953cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1657.529757][T28824] RAX: ffffffffffffffda RBX: 00007f6994815fa0 RCX: 00007f699459ce59 [ 1657.537789][T28824] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1657.545822][T28824] RBP: 00007f69953cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.553858][T28824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.561899][T28824] R13: 00007f6994816038 R14: 00007f6994815fa0 R15: 00007ffedd6da5f8 [ 1657.569974][T28824] [ 1657.617595][T28818] syzkaller0: entered promiscuous mode [ 1657.623176][T28818] syzkaller0: entered allmulticast mode [ 1657.719894][T28829] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6819'. [ 1659.781778][T28827] netlink: 'syz.2.6819': attribute type 10 has an invalid length. [ 1659.791126][T28827] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6819'. [ 1659.824017][T28836] netlink: 'syz.1.6822': attribute type 21 has an invalid length. [ 1659.832201][T28836] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6822'. [ 1660.062387][T28854] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6825'. [ 1661.109336][T28873] syzkaller0: entered promiscuous mode [ 1661.114895][T28873] syzkaller0: entered allmulticast mode [ 1661.401391][T28887] netlink: 144308 bytes leftover after parsing attributes in process `syz.3.6837'. [ 1661.471576][T28890] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6838'. [ 1662.240799][T28895] FAULT_INJECTION: forcing a failure. [ 1662.240799][T28895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1662.254620][T28895] CPU: 1 PID: 28895 Comm: syz.2.6840 Not tainted syzkaller #0 [ 1662.262144][T28895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1662.272247][T28895] Call Trace: [ 1662.275576][T28895] [ 1662.278529][T28895] dump_stack_lvl+0x18c/0x250 [ 1662.283240][T28895] ? show_regs_print_info+0x20/0x20 [ 1662.288668][T28895] ? load_image+0x420/0x420 [ 1662.293309][T28895] ? __might_fault+0xaa/0x120 [ 1662.298011][T28895] ? __lock_acquire+0x7d40/0x7d40 [ 1662.303069][T28895] should_fail_ex+0x39d/0x4d0 [ 1662.307784][T28895] _copy_from_iter+0x1d9/0x12e0 [ 1662.312661][T28895] ? rep_movs_alternative+0x4a/0x90 [ 1662.317974][T28895] ? _copy_from_iter+0x24e/0x12e0 [ 1662.323022][T28895] ? __virt_addr_valid+0x18c/0x540 [ 1662.328165][T28895] ? __lock_acquire+0x7d40/0x7d40 [ 1662.333215][T28895] ? copyout_mc+0x70/0x70 [ 1662.337717][T28895] ? copyout_mc+0x70/0x70 [ 1662.342182][T28895] ? __virt_addr_valid+0x18c/0x540 [ 1662.347356][T28895] ? page_copy_sane+0x16a/0x270 [ 1662.352259][T28895] copy_page_from_iter+0x7b/0x100 [ 1662.357327][T28895] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1662.363186][T28895] tun_get_user+0x15db/0x3ca0 [ 1662.367921][T28895] ? aa_file_perm+0x11b/0xee0 [ 1662.372654][T28895] ? rcu_read_unlock+0xa0/0xa0 [ 1662.377510][T28895] ? tun_get+0x1c/0x2e0 [ 1662.381747][T28895] ? __lock_acquire+0x7d40/0x7d40 [ 1662.386822][T28895] ? tun_get+0x1c/0x2e0 [ 1662.391032][T28895] tun_chr_write_iter+0x119/0x200 [ 1662.396104][T28895] vfs_write+0x46c/0x990 [ 1662.400395][T28895] ? file_end_write+0x250/0x250 [ 1662.405322][T28895] ? __fget_files+0x43d/0x4b0 [ 1662.410088][T28895] ? __fdget_pos+0x1d8/0x330 [ 1662.414714][T28895] ? ksys_write+0x75/0x260 [ 1662.419183][T28895] ksys_write+0x150/0x260 [ 1662.423568][T28895] ? __ia32_sys_read+0x90/0x90 [ 1662.428392][T28895] ? lockdep_hardirqs_on+0x98/0x150 [ 1662.433641][T28895] do_syscall_64+0x55/0xb0 [ 1662.438096][T28895] ? clear_bhb_loop+0x40/0x90 [ 1662.442806][T28895] ? clear_bhb_loop+0x40/0x90 [ 1662.447516][T28895] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1662.453459][T28895] RIP: 0033:0x7f69a1d9ce59 [ 1662.457915][T28895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.477646][T28895] RSP: 002b:00007f69a2c9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1662.486130][T28895] RAX: ffffffffffffffda RBX: 00007f69a2015fa0 RCX: 00007f69a1d9ce59 [ 1662.494173][T28895] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1662.502182][T28895] RBP: 00007f69a2c9b090 R08: 0000000000000000 R09: 0000000000000000 [ 1662.510274][T28895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1662.518277][T28895] R13: 00007f69a2016038 R14: 00007f69a2015fa0 R15: 00007fff4ca0faf8 [ 1662.526308][T28895] [ 1663.839840][T28904] netlink: 'syz.2.6844': attribute type 29 has an invalid length. [ 1663.852520][T28904] netlink: 'syz.2.6844': attribute type 29 has an invalid length. [ 1664.120575][T28905] netlink: 'syz.3.6843': attribute type 17 has an invalid length. [ 1664.145710][T28905] netlink: 'syz.3.6843': attribute type 16 has an invalid length. [ 1664.153930][T28905] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6843'. [ 1665.330735][T28925] netlink: 144308 bytes leftover after parsing attributes in process `syz.1.6851'. [ 1665.930647][T28933] syzkaller0: entered promiscuous mode [ 1665.965299][T28933] syzkaller0: entered allmulticast mode [ 1666.609360][T28949] FAULT_INJECTION: forcing a failure. [ 1666.609360][T28949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1666.626749][T28949] CPU: 1 PID: 28949 Comm: syz.3.6859 Not tainted syzkaller #0 [ 1666.634285][T28949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1666.644421][T28949] Call Trace: [ 1666.647931][T28949] [ 1666.650912][T28949] dump_stack_lvl+0x18c/0x250 [ 1666.655664][T28949] ? show_regs_print_info+0x20/0x20 [ 1666.660922][T28949] ? load_image+0x420/0x420 [ 1666.665488][T28949] ? __might_fault+0xaa/0x120 [ 1666.670223][T28949] ? __lock_acquire+0x7d40/0x7d40 [ 1666.675318][T28949] should_fail_ex+0x39d/0x4d0 [ 1666.680082][T28949] _copy_from_iter+0x1d9/0x12e0 [ 1666.685002][T28949] ? rep_movs_alternative+0x4a/0x90 [ 1666.690270][T28949] ? _copy_from_iter+0x24e/0x12e0 [ 1666.695360][T28949] ? __virt_addr_valid+0x18c/0x540 [ 1666.700558][T28949] ? __lock_acquire+0x7d40/0x7d40 [ 1666.705655][T28949] ? copyout_mc+0x70/0x70 [ 1666.710065][T28949] ? copyout_mc+0x70/0x70 [ 1666.714453][T28949] ? __virt_addr_valid+0x18c/0x540 [ 1666.719638][T28949] ? page_copy_sane+0x16a/0x270 [ 1666.724573][T28949] copy_page_from_iter+0x7b/0x100 [ 1666.729679][T28949] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1666.735572][T28949] tun_get_user+0x15db/0x3ca0 [ 1666.740336][T28949] ? aa_file_perm+0x11b/0xee0 [ 1666.745097][T28949] ? rcu_read_unlock+0xa0/0xa0 [ 1666.750060][T28949] ? tun_get+0x1c/0x2e0 [ 1666.754288][T28949] ? __lock_acquire+0x7d40/0x7d40 [ 1666.759396][T28949] ? tun_get+0x1c/0x2e0 [ 1666.763624][T28949] tun_chr_write_iter+0x119/0x200 [ 1666.768727][T28949] vfs_write+0x46c/0x990 [ 1666.773044][T28949] ? file_end_write+0x250/0x250 [ 1666.777975][T28949] ? __fget_files+0x43d/0x4b0 [ 1666.782735][T28949] ? __fdget_pos+0x1d8/0x330 [ 1666.787398][T28949] ? ksys_write+0x75/0x260 [ 1666.791879][T28949] ksys_write+0x150/0x260 [ 1666.796275][T28949] ? __ia32_sys_read+0x90/0x90 [ 1666.801104][T28949] ? lockdep_hardirqs_on+0x98/0x150 [ 1666.806380][T28949] do_syscall_64+0x55/0xb0 [ 1666.810854][T28949] ? clear_bhb_loop+0x40/0x90 [ 1666.815578][T28949] ? clear_bhb_loop+0x40/0x90 [ 1666.820304][T28949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1666.826259][T28949] RIP: 0033:0x7f6558d9ce59 [ 1666.830726][T28949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1666.850400][T28949] RSP: 002b:00007f6559c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1666.858884][T28949] RAX: ffffffffffffffda RBX: 00007f6559015fa0 RCX: 00007f6558d9ce59 [ 1666.866917][T28949] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1666.874940][T28949] RBP: 00007f6559c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1666.882970][T28949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1666.890998][T28949] R13: 00007f6559016038 R14: 00007f6559015fa0 R15: 00007ffd5d177858 [ 1666.899058][T28949] [ 1668.894956][T28951] netlink: 'syz.2.6860': attribute type 16 has an invalid length. [ 1668.902994][T28951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6860'. [ 1669.029345][T28966] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6865'. [ 1669.052925][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.061756][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.599657][T28984] FAULT_INJECTION: forcing a failure. [ 1669.599657][T28984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1669.620810][T28984] CPU: 0 PID: 28984 Comm: syz.3.6871 Not tainted syzkaller #0 [ 1669.628349][T28984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1669.638455][T28984] Call Trace: [ 1669.641789][T28984] [ 1669.644762][T28984] dump_stack_lvl+0x18c/0x250 [ 1669.649502][T28984] ? show_regs_print_info+0x20/0x20 [ 1669.654768][T28984] ? load_image+0x420/0x420 [ 1669.659327][T28984] ? __might_fault+0xaa/0x120 [ 1669.664054][T28984] ? __lock_acquire+0x7d40/0x7d40 [ 1669.669137][T28984] should_fail_ex+0x39d/0x4d0 [ 1669.673889][T28984] _copy_from_iter+0x1d9/0x12e0 [ 1669.678807][T28984] ? rep_movs_alternative+0x4a/0x90 [ 1669.684064][T28984] ? _copy_from_iter+0x24e/0x12e0 [ 1669.689150][T28984] ? __virt_addr_valid+0x18c/0x540 [ 1669.694323][T28984] ? __lock_acquire+0x7d40/0x7d40 [ 1669.699402][T28984] ? copyout_mc+0x70/0x70 [ 1669.703804][T28984] ? copyout_mc+0x70/0x70 [ 1669.708191][T28984] ? __virt_addr_valid+0x18c/0x540 [ 1669.713371][T28984] ? page_copy_sane+0x16a/0x270 [ 1669.718301][T28984] copy_page_from_iter+0x7b/0x100 [ 1669.723383][T28984] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1669.729256][T28984] tun_get_user+0x15db/0x3ca0 [ 1669.734004][T28984] ? aa_file_perm+0x11b/0xee0 [ 1669.738751][T28984] ? rcu_read_unlock+0xa0/0xa0 [ 1669.743590][T28984] ? tun_get+0x1c/0x2e0 [ 1669.747812][T28984] ? __lock_acquire+0x7d40/0x7d40 [ 1669.752905][T28984] ? tun_get+0x1c/0x2e0 [ 1669.757132][T28984] tun_chr_write_iter+0x119/0x200 [ 1669.762218][T28984] vfs_write+0x46c/0x990 [ 1669.766530][T28984] ? file_end_write+0x250/0x250 [ 1669.771442][T28984] ? __fget_files+0x43d/0x4b0 [ 1669.776196][T28984] ? __fdget_pos+0x1d8/0x330 [ 1669.780841][T28984] ? ksys_write+0x75/0x260 [ 1669.785326][T28984] ksys_write+0x150/0x260 [ 1669.789718][T28984] ? __ia32_sys_read+0x90/0x90 [ 1669.794544][T28984] ? lockdep_hardirqs_on+0x98/0x150 [ 1669.799838][T28984] do_syscall_64+0x55/0xb0 [ 1669.804308][T28984] ? clear_bhb_loop+0x40/0x90 [ 1669.809030][T28984] ? clear_bhb_loop+0x40/0x90 [ 1669.813754][T28984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1669.819712][T28984] RIP: 0033:0x7f6558d9ce59 [ 1669.824179][T28984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1669.843841][T28984] RSP: 002b:00007f6559c5f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1669.852355][T28984] RAX: ffffffffffffffda RBX: 00007f6559015fa0 RCX: 00007f6558d9ce59 [ 1669.860381][T28984] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1669.868405][T28984] RBP: 00007f6559c5f090 R08: 0000000000000000 R09: 0000000000000000 [ 1669.876432][T28984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1669.884465][T28984] R13: 00007f6559016038 R14: 00007f6559015fa0 R15: 00007ffd5d177858 [ 1669.892512][T28984] [ 1670.322596][T28994] netlink: 'syz.1.6875': attribute type 29 has an invalid length. [ 1670.355072][T28994] netlink: 'syz.1.6875': attribute type 29 has an invalid length. [ 1670.374388][T28997] netlink: 'syz.1.6875': attribute type 29 has an invalid length. [ 1670.764708][T29009] FAULT_INJECTION: forcing a failure. [ 1670.764708][T29009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.785287][T29009] CPU: 1 PID: 29009 Comm: syz.1.6880 Not tainted syzkaller #0 [ 1670.792828][T29009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1670.802937][T29009] Call Trace: [ 1670.806274][T29009] [ 1670.809256][T29009] dump_stack_lvl+0x18c/0x250 [ 1670.814011][T29009] ? show_regs_print_info+0x20/0x20 [ 1670.819274][T29009] ? load_image+0x420/0x420 [ 1670.823845][T29009] ? __might_fault+0xaa/0x120 [ 1670.828581][T29009] ? __lock_acquire+0x7d40/0x7d40 [ 1670.833677][T29009] should_fail_ex+0x39d/0x4d0 [ 1670.838440][T29009] _copy_from_iter+0x1d9/0x12e0 [ 1670.843363][T29009] ? rep_movs_alternative+0x4a/0x90 [ 1670.848644][T29009] ? _copy_from_iter+0x24e/0x12e0 [ 1670.853844][T29009] ? __virt_addr_valid+0x18c/0x540 [ 1670.859025][T29009] ? __lock_acquire+0x7d40/0x7d40 [ 1670.864113][T29009] ? copyout_mc+0x70/0x70 [ 1670.868529][T29009] ? copyout_mc+0x70/0x70 [ 1670.872937][T29009] ? __virt_addr_valid+0x18c/0x540 [ 1670.878146][T29009] ? page_copy_sane+0x16a/0x270 [ 1670.883103][T29009] copy_page_from_iter+0x7b/0x100 [ 1670.888225][T29009] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1670.894147][T29009] tun_get_user+0x15db/0x3ca0 [ 1670.898928][T29009] ? aa_file_perm+0x11b/0xee0 [ 1670.903680][T29009] ? rcu_read_unlock+0xa0/0xa0 [ 1670.908535][T29009] ? tun_get+0x1c/0x2e0 [ 1670.912765][T29009] ? __lock_acquire+0x7d40/0x7d40 [ 1670.917920][T29009] ? tun_get+0x1c/0x2e0 [ 1670.922164][T29009] tun_chr_write_iter+0x119/0x200 [ 1670.927259][T29009] vfs_write+0x46c/0x990 [ 1670.931578][T29009] ? file_end_write+0x250/0x250 [ 1670.936517][T29009] ? __fget_files+0x43d/0x4b0 [ 1670.941285][T29009] ? __fdget_pos+0x1d8/0x330 [ 1670.945931][T29009] ? ksys_write+0x75/0x260 [ 1670.950410][T29009] ksys_write+0x150/0x260 [ 1670.954812][T29009] ? __ia32_sys_read+0x90/0x90 [ 1670.959652][T29009] ? lockdep_hardirqs_on+0x98/0x150 [ 1670.964917][T29009] do_syscall_64+0x55/0xb0 [ 1670.969390][T29009] ? clear_bhb_loop+0x40/0x90 [ 1670.974113][T29009] ? clear_bhb_loop+0x40/0x90 [ 1670.978847][T29009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1670.984821][T29009] RIP: 0033:0x7f699459ce59 [ 1670.989286][T29009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.008958][T29009] RSP: 002b:00007f69953cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1671.017430][T29009] RAX: ffffffffffffffda RBX: 00007f6994815fa0 RCX: 00007f699459ce59 [ 1671.025450][T29009] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1671.033478][T29009] RBP: 00007f69953cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.041495][T29009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.049518][T29009] R13: 00007f6994816038 R14: 00007f6994815fa0 R15: 00007ffedd6da5f8 [ 1671.057586][T29009] [ 1671.230875][T29013] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1671.281387][T29013] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6881'. [ 1671.316987][T29013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1671.326334][T29013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1671.336770][T29013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1671.344376][T29013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1671.637735][T29019] FAULT_INJECTION: forcing a failure. [ 1671.637735][T29019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1671.673582][T29019] CPU: 1 PID: 29019 Comm: syz.0.6891 Not tainted syzkaller #0 [ 1671.681151][T29019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1671.691275][T29019] Call Trace: [ 1671.694614][T29019] [ 1671.697609][T29019] dump_stack_lvl+0x18c/0x250 [ 1671.702376][T29019] ? show_regs_print_info+0x20/0x20 [ 1671.707644][T29019] ? load_image+0x420/0x420 [ 1671.712218][T29019] ? __might_fault+0xaa/0x120 [ 1671.716963][T29019] ? __lock_acquire+0x7d40/0x7d40 [ 1671.722070][T29019] should_fail_ex+0x39d/0x4d0 [ 1671.726841][T29019] _copy_from_iter+0x1d9/0x12e0 [ 1671.731768][T29019] ? rep_movs_alternative+0x4a/0x90 [ 1671.737044][T29019] ? _copy_from_iter+0x24e/0x12e0 [ 1671.742141][T29019] ? __virt_addr_valid+0x18c/0x540 [ 1671.747345][T29019] ? __lock_acquire+0x7d40/0x7d40 [ 1671.752441][T29019] ? copyout_mc+0x70/0x70 [ 1671.756850][T29019] ? copyout_mc+0x70/0x70 [ 1671.761252][T29019] ? __virt_addr_valid+0x18c/0x540 [ 1671.766449][T29019] ? page_copy_sane+0x16a/0x270 [ 1671.771377][T29019] copy_page_from_iter+0x7b/0x100 [ 1671.776472][T29019] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1671.782370][T29019] tun_get_user+0x15db/0x3ca0 [ 1671.787141][T29019] ? aa_file_perm+0x11b/0xee0 [ 1671.791901][T29019] ? rcu_read_unlock+0xa0/0xa0 [ 1671.796766][T29019] ? tun_get+0x1c/0x2e0 [ 1671.800992][T29019] ? __lock_acquire+0x7d40/0x7d40 [ 1671.806096][T29019] ? tun_get+0x1c/0x2e0 [ 1671.810348][T29019] tun_chr_write_iter+0x119/0x200 [ 1671.815453][T29019] vfs_write+0x46c/0x990 [ 1671.819776][T29019] ? file_end_write+0x250/0x250 [ 1671.824730][T29019] ? __fget_files+0x43d/0x4b0 [ 1671.829501][T29019] ? __fdget_pos+0x1d8/0x330 [ 1671.834162][T29019] ? ksys_write+0x75/0x260 [ 1671.838659][T29019] ksys_write+0x150/0x260 [ 1671.843062][T29019] ? __ia32_sys_read+0x90/0x90 [ 1671.847908][T29019] ? lockdep_hardirqs_on+0x98/0x150 [ 1671.853190][T29019] do_syscall_64+0x55/0xb0 [ 1671.857672][T29019] ? clear_bhb_loop+0x40/0x90 [ 1671.862407][T29019] ? clear_bhb_loop+0x40/0x90 [ 1671.867149][T29019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1671.873116][T29019] RIP: 0033:0x7fc85c19ce59 [ 1671.877589][T29019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1671.897260][T29019] RSP: 002b:00007fc85d085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1671.905849][T29019] RAX: ffffffffffffffda RBX: 00007fc85c415fa0 RCX: 00007fc85c19ce59 [ 1671.913883][T29019] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1671.921914][T29019] RBP: 00007fc85d085090 R08: 0000000000000000 R09: 0000000000000000 [ 1671.929943][T29019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1671.937974][T29019] R13: 00007fc85c416038 R14: 00007fc85c415fa0 R15: 00007ffe133bf528 [ 1671.946042][T29019] [ 1672.218625][T29023] netlink: 763 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1673.192988][T29039] netlink: 'syz.0.6893': attribute type 17 has an invalid length. [ 1673.206872][T29039] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6893'. [ 1673.224607][T29039] net_ratelimit: 9 callbacks suppressed [ 1673.224733][T29039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1673.399414][T29044] syzkaller0: entered promiscuous mode [ 1673.405112][T29044] syzkaller0: entered allmulticast mode [ 1676.628520][T29070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1676.660687][T29072] netlink: 180 bytes leftover after parsing attributes in process `syz.3.6902'. [ 1676.708804][T29070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6901'. [ 1676.889696][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.915976][T29070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1676.947571][T29076] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1676.975754][T29070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1676.999995][T29070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1677.024050][T29070] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1677.037632][T29070] batman_adv: batadv0: Removing interface: veth0_vlan [ 1677.246654][T29076] netlink: 'syz.3.6904': attribute type 1 has an invalid length. [ 1677.262425][T29076] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1677.474927][T29082] syzkaller0: entered promiscuous mode [ 1677.480904][T29082] syzkaller0: entered allmulticast mode [ 1677.557352][T29088] syzkaller0: entered promiscuous mode [ 1677.563124][T29088] syzkaller0: entered allmulticast mode [ 1682.467430][T29117] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1682.477387][T29119] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1682.487591][T29122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1682.495054][T29122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1682.504426][T29122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1682.518948][T29122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1683.232827][T29159] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6930'. [ 1684.027970][T29176] syzkaller0: entered promiscuous mode [ 1684.033713][T29176] syzkaller0: entered allmulticast mode [ 1687.783721][T29201] syzkaller0: entered promiscuous mode [ 1687.790668][T29201] syzkaller0: entered allmulticast mode [ 1690.630898][T29230] netlink: 'syz.1.6956': attribute type 10 has an invalid length. [ 1690.699066][T29230] netlink: 2 bytes leftover after parsing attributes in process `syz.1.6956'. [ 1690.750273][T29230] hsr0: entered promiscuous mode [ 1690.809310][T29230] bridge0: port 3(hsr0) entered blocking state [ 1690.851074][T29230] bridge0: port 3(hsr0) entered disabled state [ 1690.887473][T29230] hsr0: entered allmulticast mode [ 1690.915362][T29230] hsr_slave_0: entered allmulticast mode [ 1690.945520][T29230] hsr_slave_1: entered allmulticast mode [ 1691.042422][T29230] bridge0: port 3(hsr0) entered blocking state [ 1691.050616][T29230] bridge0: port 3(hsr0) entered forwarding state [ 1691.268783][T29244] FAULT_INJECTION: forcing a failure. [ 1691.268783][T29244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1691.309107][T29244] CPU: 1 PID: 29244 Comm: syz.1.6962 Not tainted syzkaller #0 [ 1691.316651][T29244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1691.326737][T29244] Call Trace: [ 1691.330052][T29244] [ 1691.333020][T29244] dump_stack_lvl+0x18c/0x250 [ 1691.337745][T29244] ? show_regs_print_info+0x20/0x20 [ 1691.342997][T29244] ? load_image+0x420/0x420 [ 1691.347543][T29244] ? __might_fault+0xaa/0x120 [ 1691.352263][T29244] ? __lock_acquire+0x7d40/0x7d40 [ 1691.357462][T29244] should_fail_ex+0x39d/0x4d0 [ 1691.362200][T29244] _copy_from_iter+0x1d9/0x12e0 [ 1691.367094][T29244] ? rep_movs_alternative+0x4a/0x90 [ 1691.372343][T29244] ? _copy_from_iter+0x24e/0x12e0 [ 1691.377416][T29244] ? __virt_addr_valid+0x18c/0x540 [ 1691.382572][T29244] ? __lock_acquire+0x7d40/0x7d40 [ 1691.387637][T29244] ? copyout_mc+0x70/0x70 [ 1691.392038][T29244] ? copyout_mc+0x70/0x70 [ 1691.396428][T29244] ? __virt_addr_valid+0x18c/0x540 [ 1691.401593][T29244] ? page_copy_sane+0x4e/0x270 [ 1691.406406][T29244] copy_page_from_iter+0x7b/0x100 [ 1691.411475][T29244] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1691.417345][T29244] tun_get_user+0x15db/0x3ca0 [ 1691.422096][T29244] ? aa_file_perm+0x11b/0xee0 [ 1691.426831][T29244] ? rcu_read_unlock+0xa0/0xa0 [ 1691.431658][T29244] ? tun_get+0x1c/0x2e0 [ 1691.435864][T29244] ? __lock_acquire+0x7d40/0x7d40 [ 1691.440938][T29244] ? tun_get+0x1c/0x2e0 [ 1691.445165][T29244] tun_chr_write_iter+0x119/0x200 [ 1691.450255][T29244] vfs_write+0x46c/0x990 [ 1691.454563][T29244] ? file_end_write+0x250/0x250 [ 1691.459465][T29244] ? __fget_files+0x43d/0x4b0 [ 1691.464216][T29244] ? __fdget_pos+0x1d8/0x330 [ 1691.468863][T29244] ? ksys_write+0x75/0x260 [ 1691.473355][T29244] ksys_write+0x150/0x260 [ 1691.477764][T29244] ? __ia32_sys_read+0x90/0x90 [ 1691.482599][T29244] ? lockdep_hardirqs_on+0x98/0x150 [ 1691.487880][T29244] do_syscall_64+0x55/0xb0 [ 1691.492347][T29244] ? clear_bhb_loop+0x40/0x90 [ 1691.497061][T29244] ? clear_bhb_loop+0x40/0x90 [ 1691.501783][T29244] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1691.507723][T29244] RIP: 0033:0x7f699459ce59 [ 1691.512183][T29244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1691.531836][T29244] RSP: 002b:00007f69953cc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1691.540295][T29244] RAX: ffffffffffffffda RBX: 00007f6994815fa0 RCX: 00007f699459ce59 [ 1691.548304][T29244] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1691.556316][T29244] RBP: 00007f69953cc090 R08: 0000000000000000 R09: 0000000000000000 [ 1691.564320][T29244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1691.572321][T29244] R13: 00007f6994816038 R14: 00007f6994815fa0 R15: 00007ffedd6da5f8 [ 1691.580358][T29244] [ 1758.170094][ T5789] Bluetooth: hci0: command 0x0406 tx timeout [ 1797.155115][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 1797.161914][ C1] rcu: 1-....: (1 GPs behind) idle=47ec/1/0x4000000000000000 softirq=110528/110529 fqs=4102 [ 1797.173440][ C1] rcu: hardirqs softirqs csw/system [ 1797.179916][ C1] rcu: number: 1466020 0 0 [ 1797.186354][ C1] rcu: cputime: 17028 35440 65 ==> 52470(ms) [ 1797.194191][ C1] rcu: (t=10500 jiffies g=153069 q=658 ncpus=2) [ 1797.200556][ C1] CPU: 1 PID: 29260 Comm: syz.2.6968 Not tainted syzkaller #0 [ 1797.208045][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1797.218151][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1797.224013][ C1] Code: 00 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 0a ac d6 f6 48 89 df e8 c2 80 d7 f6 e8 bd 98 fb f6 fb bf 01 00 00 00 a2 87 ca f6 65 8b 05 33 b0 71 75 85 c0 74 02 5b c3 e8 30 97 6e [ 1797.243749][ C1] RSP: 0018:ffffc900001f0cb0 EFLAGS: 00000282 [ 1797.249859][ C1] RAX: 6f6f43721fde6000 RBX: ffff8880b8f295c0 RCX: 6f6f43721fde6000 [ 1797.257863][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 1797.265866][ C1] RBP: ffffc900001f0e10 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 1797.273877][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff8880b8f295c0 [ 1797.281878][ C1] R13: 1ffff110171e52c0 R14: ffff88807d0c9700 R15: ffffc900001f0d60 [ 1797.289878][ C1] FS: 00007f69a2c7a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1797.298830][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1797.305542][ C1] CR2: 000000110c2cd9d0 CR3: 000000005ef1a000 CR4: 00000000003506e0 [ 1797.313553][ C1] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000200000000300 [ 1797.321569][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1797.329568][ C1] Call Trace: [ 1797.332879][ C1] [ 1797.335758][ C1] ? addrconf_disable_policy_idev+0x480/0x480 [ 1797.341937][ C1] __run_timers+0x533/0x800 [ 1797.346477][ C1] ? detach_timer+0x2b0/0x2b0 [ 1797.351192][ C1] run_timer_softirq+0x67/0xf0 [ 1797.355982][ C1] handle_softirqs+0x280/0x820 [ 1797.360779][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1797.365583][ C1] ? do_softirq+0x1a0/0x1a0 [ 1797.370214][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1797.375447][ C1] __irq_exit_rcu+0xd3/0x190 [ 1797.380071][ C1] ? irq_exit_rcu+0x20/0x20 [ 1797.384612][ C1] irq_exit_rcu+0x9/0x20 [ 1797.388887][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1797.394562][ C1] [ 1797.397520][ C1] [ 1797.400469][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.406484][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 1797.412316][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 e0 94 34 09 e8 1b 2f 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 1797.431951][ C1] RSP: 0018:ffffc90003437758 EFLAGS: 00000282 [ 1797.438047][ C1] RAX: 6f6f43721fde6000 RBX: 0000000000000000 RCX: 6f6f43721fde6000 [ 1797.446043][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20 [ 1797.454039][ C1] RBP: ffffc900034377b0 R08: ffffffff911cd5ff R09: 1ffffffff2239abf [ 1797.462035][ C1] R10: dffffc0000000000 R11: fffffbfff2239ac0 R12: ffff88806a311e00 [ 1797.470033][ C1] R13: dffffc0000000000 R14: ffff888024c60000 R15: ffff8880b8f3cb48 [ 1797.478062][ C1] ? finish_task_switch+0x265/0x8f0 [ 1797.483297][ C1] __schedule+0x155b/0x45a0 [ 1797.487858][ C1] ? mark_lock+0x94/0x320 [ 1797.492242][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1797.498270][ C1] ? lock_chain_count+0x20/0x20 [ 1797.503149][ C1] ? asan.module_dtor+0x20/0x20 [ 1797.508030][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.514232][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.519481][ C1] ? preempt_schedule+0xc0/0xd0 [ 1797.524364][ C1] preempt_schedule_common+0x82/0xc0 [ 1797.529693][ C1] preempt_schedule+0xc0/0xd0 [ 1797.534406][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 1797.540078][ C1] ? event_function+0x300/0x300 [ 1797.544962][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 1797.550714][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1797.555981][ C1] ? smp_call_function_single+0x488/0x5a0 [ 1797.561731][ C1] smp_call_function_single+0x48d/0x5a0 [ 1797.567307][ C1] ? event_function+0x300/0x300 [ 1797.572189][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 1797.578369][ C1] ? event_function+0x300/0x300 [ 1797.583266][ C1] perf_install_in_context+0x5be/0x920 [ 1797.588764][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 1797.594767][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1797.599994][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 1797.605229][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1797.611432][ C1] ? __se_sys_perf_event_open+0x1123/0x1c50 [ 1797.617366][ C1] ? perf_event__header_size+0x165/0x220 [ 1797.623041][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 1797.628813][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 1797.634509][ C1] ? syscall_enter_from_user_mode+0x2e/0x80 [ 1797.640461][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 1797.646130][ C1] do_syscall_64+0x55/0xb0 [ 1797.650577][ C1] ? clear_bhb_loop+0x40/0x90 [ 1797.655281][ C1] ? clear_bhb_loop+0x40/0x90 [ 1797.659982][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1797.665912][ C1] RIP: 0033:0x7f69a1d9ce59 [ 1797.670361][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.690014][ C1] RSP: 002b:00007f69a2c7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 1797.698467][ C1] RAX: ffffffffffffffda RBX: 00007f69a2016090 RCX: 00007f69a1d9ce59 [ 1797.706468][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 1797.714469][ C1] RBP: 00007f69a1e32d6f R08: 0000000000000002 R09: 0000000000000000 [ 1797.722490][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1797.730513][ C1] R13: 00007f69a2016128 R14: 00007f69a2016090 R15: 00007fff4ca0faf8 [ 1797.738539][ C1]