last executing test programs: 34.450100193s ago: executing program 0 (id=2388): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x41, &(0x7f0000000100)=r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e6"], 0x0, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b00000000000000"], 0x50) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) r4 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$sock(r4, 0x0, 0x20000000) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r7 = socket$kcm(0x2, 0x200000000000006, 0x0) recvmsg$kcm(r7, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x40010140) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, 0x0, 0x408e0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x26e1, 0x0) close(r9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'wg2\x00', @multicast}) 32.219956902s ago: executing program 0 (id=2404): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea63464160af3653c001ac004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200", 0x57}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 31.611747387s ago: executing program 0 (id=2406): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0x3}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)='i', 0x1}], 0x1, 0x0, 0x0, 0x4a0f0012}, 0x20040080) 23.114906287s ago: executing program 2 (id=2436): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x800a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030010000b05d25a806c8c6f94f90324fc601000010020000000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) r2 = socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x5, [@enum64={0x7, 0xa, 0x0, 0x13, 0x0, 0x1, [{0x7, 0x0, 0x400}, {0x5, 0x2, 0x8}, {0xe, 0x7, 0x10000}, {0x5, 0x2, 0x3}, {0x10, 0xfffffff8, 0x81}, {0xa, 0x300, 0x6}, {0x9, 0x9, 0x328}, {0xf, 0x9, 0x444de1a2}, {0x2, 0x3, 0x3}, {0xf, 0xfff, 0x6a6}]}, @const={0xb}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0xe}, {0x4}, {0x10, 0xfe47}, {0xc, 0xf9f}, {0x2}]}, @struct={0xf, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x5, 0x8}, {0x3, 0x3, 0x3}, {0xf, 0x4, 0x1}, {0x7, 0x1, 0x3}]}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000100)=""/61, 0x141, 0x3d, 0x1, 0x58b3, 0x10000}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r7, &(0x7f0000000b00)="3b5bfdc5dbfa286c2ba29005ea17db7c3b49486e76e1b7e8307cf6f8bb06baedddb6ac4193a7d22f81d23c78d85fa00b9e708f06f3db63fbd485d2c2322f829e4d504945cce21529a6141496bcb3c44c24f91a9b1a7d6966ab4f4580a5f4798fbf6fe0b09a0f6215a09b1dacad39236a0a5336f1fbaceb1c1ca8780e6bd5206ca26c54ef846ca1748f6f209ddf4516db92189124c79a0bce82b30226ee748dd0d2b91c1fb67fe6c1827b019700dd618b0db1d19a707eaa0331c2d86be4c517a9bc22fc334248dc7857aeb497d36582169260a07b2c8014785f6f5bc740251ab4bb058226595c0d8519470f0664c28c738a21ff006cca50f3e66382a3c03c85964edf16916ee65629601e589b1c11d5421d1119f7030a6132dea8acc542e4584645d028b3bf138749f50a9a0ed380c6a48b6a8b614242fc3072faa59ba849ca15cd8809d879ef07c6e1985c0f6bd7e7730a6ea273fe8e7ad0939da2b307b311ff2a443d2af0173dfe3eb69097eef25ef34210de35f04b0bb77de14af8560a46b7af0896aef5b31218b776f46effe3f1af76f449b424cc66e51efe16d5d5c47fad74ea8179feabc73749edb3152fae070dcaa0e0e354c55be5aee143f648909efe23752bcd53cf863de07d29680882c9643981c65824c5b441e546b248747c5f920a1bfef5b07b76cc454186cd1233b92c6bcf5b49dccd3aa60e1237d09547d75fdf06b5d787dfc8886c2ecb60e2b39d08a5774ab5809f2f691cefe17e631b70b3dae9e626f49713878977c3c9851a75e9c19f15a7220f121f4581e93788fb2b9177db0bac9228c80e6981ade7a23368a4665c8c64d956c13f8d8b0dd6ec708123cf07337d6e27fba57324a38ccae2304c4873b3b40ca7006e7b34ae4c9ea8df3ba9ef5272ddc27a8d89b9592358f715e4283f0e898959aee69d8a39269e81813e00bf3915963af60cfa3395d2899911a3a78e869cf7671272878e6e5809a93ec67dab517bf3b7dbfb81cc8df12f6bfba9525966267a3feca2e5598b953e29ef6bd18e714ac5c53a44b106e4918e8b58f2ab9b40c58fbc4af980476875419f038be688ee11c9c38fbc210faa38adf6d2e510b0a1265632e3fa4a4499b025fa5c592ba1ab8dfd5d178718d187b4e3e63203147b6513a7081073f7e43f03efa0ce31ee43c66e032f952c6654884efa156fb6b377dc7776e21baf71eb246e2428c9b7847deefa4a2f7f215ee62729e7c2b29f34e9ff3787cf59d94e1fe9e5712329751d702772c893f0f679154282cc644c6ba6345094b5d9f3ec872e54016d220de36d31178879911f8f7ff999a4fe85f58caca23338a4100b8aaa9ce79d869a993be8e4b976b33566502817265c4a689c80d65ce142c6ff6e58dccbc5e4fb7623aab1e8075cda8c58a419dac78b782fd865601a4296172bab5943c8dbba550d38cddc2c153f7156f394e6335d982349adce2cc76b43d724a83e9e6505f3c94cf5f55a3c7ef5f6dc6fc47774ada233ee5f96dbf1facf52b29efdceca19fb3143783c1f1271158f1dd555b57db25136a8cc3900498da33c3ed5a33e9e251d95d2744fbc684f63563e6a87dd3d4b0721c1306f2ece326f997a999c113f648a4558768d891b0ff3cf9b56e35112e96effe70cea1432174982dab23677634dcb7df8f6c447b1e1e2bc7de85d6e3516f735d5c77340f995f1de3ad1ad1b8ccf86147fa8c494e020a1609fb67eae4d29b17fb6e6e1af9b99c51db4a3e185d663c4052aa4466f29cebe05418cf81136ef1ddc115b4be9c07291b58873f52e5201650dfa6ed9259930d9d00d38a68cd99b645466b1df5c62c80ca683c97b23548c6741620f2a797d425ffab220290b2c56355ec4f5484fc063f835e27e551d030aebcb225a30254c3cbf958df75003b35ba7868a3523d760d701d1d917569d1ef3f4f03a33b3c2ee5b5666ccfaf7b2e8d6d31468b785ff5e8fa5953a38b5cb77ed71027e1b5c10da5b2fccb102b16d98f34870785c8a08ee2eb6fcdf0e4dc89015d80ece18fa2edba11b781706198affb148e0edaea93c232857c5d72d5a4893a43a1fff8c4bf02ef4e0215e5c2f9342b6b748c71fdcad9318a871b978059e98339ad5a92c0452d60e61590eaa1df7c859302952954a7bbfbd8397f82d142766375c3fe9f4c87c0149eb22d418f3efc8f7ffea02871b7b58d2d4eadc98e342747621feeda299c415d87c410dd4f19249b1d7cfdee2e6865ac0095e680afdf5d01152ab826fa730571c3d848d86982fe48f831ba487ba4a67e254eb40e73a18df6db0b5bf57124fed9f4958c56dfd8afab6173d9d08607a2e32327b0e0b985cb8db9f1f0a5e11c17e53858105feb029791a20606115f64e0ba9aee26baed07b8793258be8b57c9c7a04bdd4d235c4cb7ae14c81db081844bb7ede5a4eba45b7b01d471a553c6b118b867f962f5f0a97949ac6fc506ebb1a229d8e5bbbfb6d6ef8ccfc0fbe54a8f7bd87e743c79cc91787073382e19341376a1f903b0b4422804493d7281f17dcfb5ca2790180569c4a3d5d6d32065c34c212f32826f3813480bf4f0c7e93c71bfb9cfa3273a05a46306c25f5d8e5ce51355ddbf630e5ef59c8f60db6017324510f5419c54aea611c33e4eded6306cd5968a3e8d2c5f883b5ea30499d7d897dad547a40b36223e67413b343c117669fb37418f946cc214091521662f7794dc882debc8d2ce49b3716c5b2ed3a641552add224768867005a1cb43364e643bb923a428bca3e3cd9bbb283d72f1aafc10c8ddc747bd697eb28d2e2bf6fd286b58eca079f11e4ab54466d2d8e8332b0d1da3cc9a0311cbacfe52b8285069d4417ac7f957552693f5d6c690562403d746c495d97267384c75215655a2d6016019adbc21cd98698a74224ce22328c74c4d7c853ff24b367512eda9f2fee787c6cbe524d63b6f3148783231576367698d39e7075af14446bececa6f8de6407fa9f05ea212743be3404db02e6212127370896bd9f11cdd8b1bd78ff88826b412dd658cf4a5ab28f0ba6deeb727ee12f349f05a4f905274f2b8ffa0629e889d542afb90063c94d943a53a112d3da03ed31d55c344edd9ec5eb95ef992ce6d60599bdd3bd8305ef61fb16ee988a0043b6808acb75dda225dfb57f2413d491f188e5da06d35b7a7bbdd39b05e9b2cd98d7ad708e1508f839d18cf2b6eda226092ea33d0ee29bba1c26b322b9800fa49ca567ff5a0dfa8a3f2434d4ee2ee8f09988cc2629e8e5d79be44856fc16e1df3b79e1f109b2207d9ab7e0e76287dc7f3f7aa6c90142dadf86a44997b0397233cab474ccdb7a6c7000444fcf82f0920d433386572747683237fc873389b6bd7fe59789dc3246218b47d4fa4048fd832bb5f84f561f72b9fbb346d931131449c6e0d87334338d915d4ddab5ff28126b31cdedaec76720a095ff59c3cce94137960e7fad287e0b36c1a444c51f42fadacae8b9eea5faad44a3f66310d6f60bcc11d4c368a08a2c2627edc127f399a383ba4ae034090878ca58e3d842d965982787d5b39f4b79ba487473c28af4dc963bc92f9051fb3810f3c58566b6282accb255144492b98fbcb4bf31a58db37dd534420982e82291945085557d610d90a0b2c020b4378d32b6c45a52717c347fcff9a14f0eff9680d3babf8f7f62352dd0b56a02712a77a33d0b7b10a25f197cdcbbf73a67f98c795b0fe2c26a84ac3cebf6f54e80a8f2a084de8ea6bbc3da49ee10ebe0fc9823b8f463fa11df7b3c65171fb5b82abc261e7372deaf1a98070bb344373e5c45328680f04750626139223e89a2a766c14c38dcd0b4d96b46af72e21f9b9d091eb2129f327a80d948a022291cfcf11fc2856399bf117ba72188d57f8d38530199c16fd587d8b6f86806de0b2265ea7f8039ad017df1a70e683cdf8f81b15d1762594cdd849508ae152b06b0713eb66166ad2f87ee918b71fba5c157b2895aae01657613c2a3212cbb7b4c07d578f9890db3986f3675650afd85216431a348058e3e618e314018250d811d329c9278fc7e8eac89cbf3911c721923cff7bf98a6ae395a3ff828a1c3c418998b81589ca167539a74e64e06f73f72db25dc907d1aa7d2da855b7a73ef12c0f12bce4c64c1eda1d6d872feb2f2c6dec441975f2f5ff3be69f852f883f9b249417de60eebb32921acf3f1f18b9f32e42ab44cccd52dbde894a00e07b1619ecf663062053327e551f9332a794e7a19919da554d2f44175e2f81c95725855d8359d1f456e11c636cd4e0032d5b26cf891184a3cf0539847e85a4d977d4b6ada527d17258f310a3fe064839e28d9cdcd5826e17a59f8a506605b742be4f49b48f2b08e68864cc34e8c929c3aaf65481f541fd0c220592e92152c62c7194ea7e4621e49ec0757e85107f9a902a403a21aea1859fbcc22c9f7b79e9f4e515947449ce5d5250b032b5f3ef60fff29cd2e7741edcdce8adb85c3f9e7eafa3bcc6705d0128de5fd44b5a8d9899fe0aeecef23928feacc1d5a63586e759197017d1527f4ae79ac99d05ad797fc7473639ae2122e25fd752176e53fa37cbcd5b45b104c6fd020a99a4d7d205d6c722eb5c3753ce7bd761b4201cb4b9d465d2e3c59cab77ea9bd5a0dfcb16893556afb458df15de4e8e15683ca57f9bd4e3e47823714a51acfa2ece45614e57fc42a0271e9911a4c349db3c39950bd517f97fd1e02226df08243dd6c79ba2a69fa1a86a68b15231d713ec6bb88e684bd611974f1a8cd4efe604235ac9fda684017a9546f28b6e4c4f29ffa491eb9419ee57d3f0a5218ce209a8a98b12d8976273e8c31d9c355ed06f3985f7fb90590d652b8b3205689aac449c245c814e8395b681e605f46c9ed273444312e03d3f40967badff8d4f97141c42c7c4519d9f205f74184281def2e4ac3a53844407f9431d7f49c15275ffaabb9a65512c2de38d917630bdcab9b822795adb127b5f44ffae3c8eda2a4d5352d138cc37f04ef6d2276b85be02f20a87bc0401c8a6cf06fd18ca8627e3e3f3a9e62cff04237f478a5b03f30d3226af9cfcf1b6ec11213fc791fd332b4d38761807d96a3e6ea7fa1b785aa104b991bb40b95d615d2adee9c2286908ddffc644ac03cb6acd782beb3d2bd93ee275da05e67489d328944e7c2c38eae279fda020861db182f2b545e9aa62183a619d82071f50215e3905634ead29c697126750b479e955c1fab42089123738d68186876ddca950be39ff6a6fd65be2f38ae072a2c0b70214b881654dbedb2695ee39beee48a9abff99f0f119091a44593de70628c1320e8b13c709fbe8a40d61e6a449fa1e7788831309786d720c4119ed844b16b94b57aaaf6dc5dcdd899c377d991c767c517dfa91de35d5de3b30dbad8f5561457f56cdaede543886b45000bfd60506e609bd8f067277697f56285f38be36edac9f079b6bc3f327169ec4e89f5290f6f1ff798d9a5b2351de714b3e76916509a5ec8f0e312831682f28d82d51bd0594933a29339772e7c7b02110516263c03bb2e093581889d296686ee91201131f44f3dff8fdbc87b11b01a3d1fa2a83b4610f338df825c4b819de4ec2310fd3b9928b8dd5b18a792c7c5f23ce77e10e6b7753d0ccab782795fe7150f129f6164ebee1faa6a6a6a4258f3c06af274b1fb690f7f14327126288638ce1ed61f56345e697fab7f686b4101761143f3f674f3ee63eba9be504519d1e23f3f2471e4a131d8a0d9e6a9adc9d067359279bb4bd302092cf19325c3f6d56254243836d8c823a1d7fd2eb11b6d79745f60e215", &(0x7f0000000780)=""/90}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000001000000086000000000000e0414000070000001812000004f3df487725b17d2e98979aa989418aed12a6b277e1915da053107a0f2227019a7ffa475ca6aa17473f7234cf8c8ebe82", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000092de0200050000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x8, 0x2}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8daa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x0, 0x0, 0x6, 0x2, 0x2, 0xfffffffffffffff4, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}], &(0x7f00000000c0)='syzkaller\x00', 0x70, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x2, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r6], &(0x7f00000004c0)=[{0x1, 0x5, 0x10, 0x1}, {0x5, 0x2, 0x6, 0x7}, {0x0, 0x4, 0xb, 0x6}], 0x10, 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)}], 0x1}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) write$cgroup_subtree(r9, &(0x7f00000008c0)={[{0x2b, 'pids'}, {0x2b, 'cpuset'}, {0x2b, 'memory'}, {0x2b, 'devices'}, {0x2b, 'memory'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}]}, 0x39) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 22.945748347s ago: executing program 3 (id=2437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0xa}, 0x28) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x3, @perf_config_ext={0x0, 0x3fff7ffc}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x400c0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800ddff2700000002000000000000000200000d02000000fcffffff0200000000000000000000000000001600000004fcffffff0000"], 0x0, 0x42, 0x0, 0x1}, 0x28) socket$kcm(0x2b, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0xfffffcf2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x6, 0x4d, &(0x7f0000000040)="0ddba6834caa", &(0x7f0000000100)=""/77, 0x0, 0x0, 0x12, 0xde, &(0x7f0000000180)="8c057e40cde60f4caae2cecf77a8b911c874", &(0x7f0000000600)="3813ced9f206ea1de740e4cfd9c92d86e42bf95bb15ca37bdd465c02a2ae57949d099a2f8558f9303e65da04326763720dc2d838d2077e21b61b79dba84079f03e338e07ac07f4867363cff3c89b3084adf841e5a01641f838f031e37b6ab0453983edc9a8966d0d689ceb258b1a7c630ccb0e58d7e9dfb8f32eb496abdbc093579d3cf7bf198267a9f037544715e3ac1564d33839ec1b64fec8b74c9503fbefc7fdf7fc4788c39bde345657d9f652b6400c0cb6e4aa5bd318da6d69328cbdd2f5a418d9235f10c5cf2fc9966008ba3e2e78c0db51869172bdd443acf845", 0x2, 0x0, 0x4}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000003c0)={0x4, 0x80, 0xff, 0x2, 0x3, 0x1, 0x0, 0x8, 0xc3007, 0x10, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x84, 0x7}, 0xa, 0x40, 0x35, 0x0, 0x0, 0x1, 0x8, 0x0, 0x7f, 0x0, 0x2}) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000340)) 21.891417937s ago: executing program 2 (id=2440): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="5c00000013006bec9e3be35c6e17aa31076b87511d0000007ea63464160af3653c001ac004000202080003000300000007002100eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 21.782145104s ago: executing program 1 (id=2441): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x18000000000002a0, 0x31, 0x0, &(0x7f0000000240)="86dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00ff8d00"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800020007000200060001c003", 0x31}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r8 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf57, 0x34}, 0x114995, 0x4, 0x0, 0x3, 0x0, 0x10, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) r10 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) sendmsg$inet(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x40000c1) recvmsg$unix(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) 21.771435014s ago: executing program 2 (id=2442): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000680)=""/4096, 0x6, 0x0, 0x0, 0xae, 0x0, &(0x7f0000001680)="e01b20124e874aa6b60879e40d28511fc74e7ca215424c97793fcef77fe7fc59fe55f1c7c0f9db55d3132b4a4f2c52daaa8607d0a8f8aa2b25fd3c03238008c3310290f9dcf52c0e6bb61f388f7bca369f263d1f5eebd92407a0faedf3e41b52475ef854d0ecfb3933b51b26a4adb8c0e40d522d091366d568885e3b1b83fbaaec47cd672b64cb0ef94902ed3ed259872af7c50fd8876221ef203b0c058c95b9ddd555f3a7f045894f33ff643e34", 0x4, 0x0, 0x80000001}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'wg2\x00', @multicast}) 20.217183974s ago: executing program 2 (id=2443): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x400, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x10000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000007c0)}], 0x1}, 0x0) 20.160136937s ago: executing program 1 (id=2444): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./cgroup/../file0\x00', r0}, 0x18) socket$kcm(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x25, 0x100000005, 0x20, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) socket$kcm(0xa, 0x2, 0x0) 20.159645987s ago: executing program 3 (id=2445): socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=@base={0x19, 0x2, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) socket$kcm(0xa, 0x2, 0x73) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xa, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x3c, &(0x7f0000000040), 0xcf) 19.737368062s ago: executing program 3 (id=2446): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0141ab6aa1471c7e9d00240000008e46000002000000000000000300000d000000060d0004000200004503000000030000000becff00220000000000"], 0x0, 0x3e, 0x0, 0x9}, 0x28) r0 = syz_clone(0x80080800, &(0x7f0000000780)="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", 0x1000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="c561149da4b0695c3b8dc17b718ba57f8000fa0609a94d9d7b11f97a2247f97f3172ff") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3efd7ab4c41335d9, @perf_config_ext={0xfffffffffffffffd}}, r0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX, @ANYRES32, @ANYRES32], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 19.654026407s ago: executing program 1 (id=2447): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="611570000000000061136c0000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf070000000000002605070000feffff6706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x3, 0x5, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)=@qipcrtr, 0x80, 0x0}, 0x160) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xfd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x783c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800c4, 0xfffffffffffffffd}, 0x0, 0x5, 0x0, 0x4, 0x4, 0xffff0000, 0x0, 0x0, 0x1bf, 0x0, 0xfffffffffffffffc}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x11, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r5, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x50080, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'veth0\x00', 0x400}) 18.854643062s ago: executing program 3 (id=2448): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xffffffffffffffff, 0x800a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff99, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f030010000b05d25a806c8c6f94f90324fc601000010020000000053582fb8f51c18fffd99b8e8bc137153e37", 0x33fe0}], 0x1}, 0x40040) r2 = socket$kcm(0x10, 0x7, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)="0400000098d1db1ba91d3305a782", 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x37) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x124, 0x124, 0x5, [@enum64={0x7, 0xa, 0x0, 0x13, 0x0, 0x1, [{0x7, 0x0, 0x400}, {0x5, 0x2, 0x8}, {0xe, 0x7, 0x10000}, {0x5, 0x2, 0x3}, {0x10, 0xfffffff8, 0x81}, {0xa, 0x300, 0x6}, {0x9, 0x9, 0x328}, {0xf, 0x9, 0x444de1a2}, {0x2, 0x3, 0x3}, {0xf, 0xfff, 0x6a6}]}, @const={0xb}, @typedef={0x8, 0x0, 0x0, 0x8, 0x1}, @volatile={0xc, 0x0, 0x0, 0x9, 0x2}, @typedef={0xa, 0x0, 0x0, 0x8, 0x1}, @enum={0x2, 0x5, 0x0, 0x6, 0x4, [{0xe}, {0x4}, {0x10, 0xfe47}, {0xc, 0xf9f}, {0x2}]}, @struct={0xf, 0x4, 0x0, 0x4, 0x1, 0x9, [{0xa, 0x5, 0x8}, {0x3, 0x3, 0x3}, {0xf, 0x4, 0x1}, {0x7, 0x1, 0x3}]}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f0000000100)=""/61, 0x141, 0x3d, 0x1, 0x58b3, 0x10000}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r7, &(0x7f0000000b00)="3b5bfdc5dbfa286c2ba29005ea17db7c3b49486e76e1b7e8307cf6f8bb06baedddb6ac4193a7d22f81d23c78d85fa00b9e708f06f3db63fbd485d2c2322f829e4d504945cce21529a6141496bcb3c44c24f91a9b1a7d6966ab4f4580a5f4798fbf6fe0b09a0f6215a09b1dacad39236a0a5336f1fbaceb1c1ca8780e6bd5206ca26c54ef846ca1748f6f209ddf4516db92189124c79a0bce82b30226ee748dd0d2b91c1fb67fe6c1827b019700dd618b0db1d19a707eaa0331c2d86be4c517a9bc22fc334248dc7857aeb497d36582169260a07b2c8014785f6f5bc740251ab4bb058226595c0d8519470f0664c28c738a21ff006cca50f3e66382a3c03c85964edf16916ee65629601e589b1c11d5421d1119f7030a6132dea8acc542e4584645d028b3bf138749f50a9a0ed380c6a48b6a8b614242fc3072faa59ba849ca15cd8809d879ef07c6e1985c0f6bd7e7730a6ea273fe8e7ad0939da2b307b311ff2a443d2af0173dfe3eb69097eef25ef34210de35f04b0bb77de14af8560a46b7af0896aef5b31218b776f46effe3f1af76f449b424cc66e51efe16d5d5c47fad74ea8179feabc73749edb3152fae070dcaa0e0e354c55be5aee143f648909efe23752bcd53cf863de07d29680882c9643981c65824c5b441e546b248747c5f920a1bfef5b07b76cc454186cd1233b92c6bcf5b49dccd3aa60e1237d09547d75fdf06b5d787dfc8886c2ecb60e2b39d08a5774ab5809f2f691cefe17e631b70b3dae9e626f49713878977c3c9851a75e9c19f15a7220f121f4581e93788fb2b9177db0bac9228c80e6981ade7a23368a4665c8c64d956c13f8d8b0dd6ec708123cf07337d6e27fba57324a38ccae2304c4873b3b40ca7006e7b34ae4c9ea8df3ba9ef5272ddc27a8d89b9592358f715e4283f0e898959aee69d8a39269e81813e00bf3915963af60cfa3395d2899911a3a78e869cf7671272878e6e5809a93ec67dab517bf3b7dbfb81cc8df12f6bfba9525966267a3feca2e5598b953e29ef6bd18e714ac5c53a44b106e4918e8b58f2ab9b40c58fbc4af980476875419f038be688ee11c9c38fbc210faa38adf6d2e510b0a1265632e3fa4a4499b025fa5c592ba1ab8dfd5d178718d187b4e3e63203147b6513a7081073f7e43f03efa0ce31ee43c66e032f952c6654884efa156fb6b377dc7776e21baf71eb246e2428c9b7847deefa4a2f7f215ee62729e7c2b29f34e9ff3787cf59d94e1fe9e5712329751d702772c893f0f679154282cc644c6ba6345094b5d9f3ec872e54016d220de36d31178879911f8f7ff999a4fe85f58caca23338a4100b8aaa9ce79d869a993be8e4b976b33566502817265c4a689c80d65ce142c6ff6e58dccbc5e4fb7623aab1e8075cda8c58a419dac78b782fd865601a4296172bab5943c8dbba550d38cddc2c153f7156f394e6335d982349adce2cc76b43d724a83e9e6505f3c94cf5f55a3c7ef5f6dc6fc47774ada233ee5f96dbf1facf52b29efdceca19fb3143783c1f1271158f1dd555b57db25136a8cc3900498da33c3ed5a33e9e251d95d2744fbc684f63563e6a87dd3d4b0721c1306f2ece326f997a999c113f648a4558768d891b0ff3cf9b56e35112e96effe70cea1432174982dab23677634dcb7df8f6c447b1e1e2bc7de85d6e3516f735d5c77340f995f1de3ad1ad1b8ccf86147fa8c494e020a1609fb67eae4d29b17fb6e6e1af9b99c51db4a3e185d663c4052aa4466f29cebe05418cf81136ef1ddc115b4be9c07291b58873f52e5201650dfa6ed9259930d9d00d38a68cd99b645466b1df5c62c80ca683c97b23548c6741620f2a797d425ffab220290b2c56355ec4f5484fc063f835e27e551d030aebcb225a30254c3cbf958df75003b35ba7868a3523d760d701d1d917569d1ef3f4f03a33b3c2ee5b5666ccfaf7b2e8d6d31468b785ff5e8fa5953a38b5cb77ed71027e1b5c10da5b2fccb102b16d98f34870785c8a08ee2eb6fcdf0e4dc89015d80ece18fa2edba11b781706198affb148e0edaea93c232857c5d72d5a4893a43a1fff8c4bf02ef4e0215e5c2f9342b6b748c71fdcad9318a871b978059e98339ad5a92c0452d60e61590eaa1df7c859302952954a7bbfbd8397f82d142766375c3fe9f4c87c0149eb22d418f3efc8f7ffea02871b7b58d2d4eadc98e342747621feeda299c415d87c410dd4f19249b1d7cfdee2e6865ac0095e680afdf5d01152ab826fa730571c3d848d86982fe48f831ba487ba4a67e254eb40e73a18df6db0b5bf57124fed9f4958c56dfd8afab6173d9d08607a2e32327b0e0b985cb8db9f1f0a5e11c17e53858105feb029791a20606115f64e0ba9aee26baed07b8793258be8b57c9c7a04bdd4d235c4cb7ae14c81db081844bb7ede5a4eba45b7b01d471a553c6b118b867f962f5f0a97949ac6fc506ebb1a229d8e5bbbfb6d6ef8ccfc0fbe54a8f7bd87e743c79cc91787073382e19341376a1f903b0b4422804493d7281f17dcfb5ca2790180569c4a3d5d6d32065c34c212f32826f3813480bf4f0c7e93c71bfb9cfa3273a05a46306c25f5d8e5ce51355ddbf630e5ef59c8f60db6017324510f5419c54aea611c33e4eded6306cd5968a3e8d2c5f883b5ea30499d7d897dad547a40b36223e67413b343c117669fb37418f946cc214091521662f7794dc882debc8d2ce49b3716c5b2ed3a641552add224768867005a1cb43364e643bb923a428bca3e3cd9bbb283d72f1aafc10c8ddc747bd697eb28d2e2bf6fd286b58eca079f11e4ab54466d2d8e8332b0d1da3cc9a0311cbacfe52b8285069d4417ac7f957552693f5d6c690562403d746c495d97267384c75215655a2d6016019adbc21cd98698a74224ce22328c74c4d7c853ff24b367512eda9f2fee787c6cbe524d63b6f3148783231576367698d39e7075af14446bececa6f8de6407fa9f05ea212743be3404db02e6212127370896bd9f11cdd8b1bd78ff88826b412dd658cf4a5ab28f0ba6deeb727ee12f349f05a4f905274f2b8ffa0629e889d542afb90063c94d943a53a112d3da03ed31d55c344edd9ec5eb95ef992ce6d60599bdd3bd8305ef61fb16ee988a0043b6808acb75dda225dfb57f2413d491f188e5da06d35b7a7bbdd39b05e9b2cd98d7ad708e1508f839d18cf2b6eda226092ea33d0ee29bba1c26b322b9800fa49ca567ff5a0dfa8a3f2434d4ee2ee8f09988cc2629e8e5d79be44856fc16e1df3b79e1f109b2207d9ab7e0e76287dc7f3f7aa6c90142dadf86a44997b0397233cab474ccdb7a6c7000444fcf82f0920d433386572747683237fc873389b6bd7fe59789dc3246218b47d4fa4048fd832bb5f84f561f72b9fbb346d931131449c6e0d87334338d915d4ddab5ff28126b31cdedaec76720a095ff59c3cce94137960e7fad287e0b36c1a444c51f42fadacae8b9eea5faad44a3f66310d6f60bcc11d4c368a08a2c2627edc127f399a383ba4ae034090878ca58e3d842d965982787d5b39f4b79ba487473c28af4dc963bc92f9051fb3810f3c58566b6282accb255144492b98fbcb4bf31a58db37dd534420982e82291945085557d610d90a0b2c020b4378d32b6c45a52717c347fcff9a14f0eff9680d3babf8f7f62352dd0b56a02712a77a33d0b7b10a25f197cdcbbf73a67f98c795b0fe2c26a84ac3cebf6f54e80a8f2a084de8ea6bbc3da49ee10ebe0fc9823b8f463fa11df7b3c65171fb5b82abc261e7372deaf1a98070bb344373e5c45328680f04750626139223e89a2a766c14c38dcd0b4d96b46af72e21f9b9d091eb2129f327a80d948a022291cfcf11fc2856399bf117ba72188d57f8d38530199c16fd587d8b6f86806de0b2265ea7f8039ad017df1a70e683cdf8f81b15d1762594cdd849508ae152b06b0713eb66166ad2f87ee918b71fba5c157b2895aae01657613c2a3212cbb7b4c07d578f9890db3986f3675650afd85216431a348058e3e618e314018250d811d329c9278fc7e8eac89cbf3911c721923cff7bf98a6ae395a3ff828a1c3c418998b81589ca167539a74e64e06f73f72db25dc907d1aa7d2da855b7a73ef12c0f12bce4c64c1eda1d6d872feb2f2c6dec441975f2f5ff3be69f852f883f9b249417de60eebb32921acf3f1f18b9f32e42ab44cccd52dbde894a00e07b1619ecf663062053327e551f9332a794e7a19919da554d2f44175e2f81c95725855d8359d1f456e11c636cd4e0032d5b26cf891184a3cf0539847e85a4d977d4b6ada527d17258f310a3fe064839e28d9cdcd5826e17a59f8a506605b742be4f49b48f2b08e68864cc34e8c929c3aaf65481f541fd0c220592e92152c62c7194ea7e4621e49ec0757e85107f9a902a403a21aea1859fbcc22c9f7b79e9f4e515947449ce5d5250b032b5f3ef60fff29cd2e7741edcdce8adb85c3f9e7eafa3bcc6705d0128de5fd44b5a8d9899fe0aeecef23928feacc1d5a63586e759197017d1527f4ae79ac99d05ad797fc7473639ae2122e25fd752176e53fa37cbcd5b45b104c6fd020a99a4d7d205d6c722eb5c3753ce7bd761b4201cb4b9d465d2e3c59cab77ea9bd5a0dfcb16893556afb458df15de4e8e15683ca57f9bd4e3e47823714a51acfa2ece45614e57fc42a0271e9911a4c349db3c39950bd517f97fd1e02226df08243dd6c79ba2a69fa1a86a68b15231d713ec6bb88e684bd611974f1a8cd4efe604235ac9fda684017a9546f28b6e4c4f29ffa491eb9419ee57d3f0a5218ce209a8a98b12d8976273e8c31d9c355ed06f3985f7fb90590d652b8b3205689aac449c245c814e8395b681e605f46c9ed273444312e03d3f40967badff8d4f97141c42c7c4519d9f205f74184281def2e4ac3a53844407f9431d7f49c15275ffaabb9a65512c2de38d917630bdcab9b822795adb127b5f44ffae3c8eda2a4d5352d138cc37f04ef6d2276b85be02f20a87bc0401c8a6cf06fd18ca8627e3e3f3a9e62cff04237f478a5b03f30d3226af9cfcf1b6ec11213fc791fd332b4d38761807d96a3e6ea7fa1b785aa104b991bb40b95d615d2adee9c2286908ddffc644ac03cb6acd782beb3d2bd93ee275da05e67489d328944e7c2c38eae279fda020861db182f2b545e9aa62183a619d82071f50215e3905634ead29c697126750b479e955c1fab42089123738d68186876ddca950be39ff6a6fd65be2f38ae072a2c0b70214b881654dbedb2695ee39beee48a9abff99f0f119091a44593de70628c1320e8b13c709fbe8a40d61e6a449fa1e7788831309786d720c4119ed844b16b94b57aaaf6dc5dcdd899c377d991c767c517dfa91de35d5de3b30dbad8f5561457f56cdaede543886b45000bfd60506e609bd8f067277697f56285f38be36edac9f079b6bc3f327169ec4e89f5290f6f1ff798d9a5b2351de714b3e76916509a5ec8f0e312831682f28d82d51bd0594933a29339772e7c7b02110516263c03bb2e093581889d296686ee91201131f44f3dff8fdbc87b11b01a3d1fa2a83b4610f338df825c4b819de4ec2310fd3b9928b8dd5b18a792c7c5f23ce77e10e6b7753d0ccab782795fe7150f129f6164ebee1faa6a6a6a4258f3c06af274b1fb690f7f14327126288638ce1ed61f56345e697fab7f686b4101761143f3f674f3ee63eba9be504519d1e23f3f2471e4a131d8a0d9e6a9adc9d067359279bb4bd302092cf19325c3f6d56254243836d8c823a1d7fd2eb11b6d79745f60e215", &(0x7f0000000780)=""/90}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000001000000086000000000000e0414000070000001812000004f3df487725b17d2e98979aa989418aed12a6b277e1915da053107a0f2227019a7ffa475ca6aa17473f7234cf8c8ebe82", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000092de0200050000", @ANYRES32=r6, @ANYBLOB], &(0x7f0000000380)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f00000005c0)=[{0x1, 0x1, 0x8, 0x2}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8daa}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x22}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @ldst={0x0, 0x0, 0x6, 0x2, 0x2, 0xfffffffffffffff4, 0x8}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}], &(0x7f00000000c0)='syzkaller\x00', 0x70, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0x2, 0x5, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000480)=[r6], &(0x7f00000004c0)=[{0x1, 0x5, 0x10, 0x1}, {0x5, 0x2, 0x6, 0x7}, {0x0, 0x4, 0xb, 0x6}], 0x10, 0x4}, 0x94) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5", 0x6c}], 0x1}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_procs(r10, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r11, &(0x7f0000000c40), 0x12) write$cgroup_subtree(r9, &(0x7f00000008c0)={[{0x2b, 'pids'}, {0x2b, 'cpuset'}, {0x2b, 'memory'}, {0x2b, 'devices'}, {0x2b, 'memory'}, {0x2d, 'freezer'}, {0x2b, 'cpuacct'}]}, 0x39) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) 18.568207579s ago: executing program 2 (id=2449): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0141ab6aa1471c7e9d00240000008e46000002000000000000000300000d000000060d0004000200004503000000030000000becff00220000000000"], 0x0, 0x3e, 0x0, 0x9}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRESHEX, @ANYRES32, @ANYRES32], 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) 18.563986159s ago: executing program 1 (id=2450): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x98040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000680)=""/4096, 0x6, 0x0, 0x0, 0xae, 0x0, &(0x7f0000001680)="e01b20124e874aa6b60879e40d28511fc74e7ca215424c97793fcef77fe7fc59fe55f1c7c0f9db55d3132b4a4f2c52daaa8607d0a8f8aa2b25fd3c03238008c3310290f9dcf52c0e6bb61f388f7bca369f263d1f5eebd92407a0faedf3e41b52475ef854d0ecfb3933b51b26a4adb8c0e40d522d091366d568885e3b1b83fbaaec47cd672b64cb0ef94902ed3ed259872af7c50fd8876221ef203b0c058c95b9ddd555f3a7f045894f33ff643e34", 0x4, 0x0, 0x80000001}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000002c0)={'wg2\x00', @multicast}) 18.308818144s ago: executing program 3 (id=2451): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000011c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x28, 0x1, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x280400d0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x401, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x1000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r4}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r5, &(0x7f0000000300)={&(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)="da4344f5ed5f14c27799378f839685dd2c", 0x11}, {&(0x7f00000001c0)="bc500263b6f43709883dac594c0ae024fd5d0e9dd69fa33938da2b2e32cea985eb3ec9ddec60baf2cfc5", 0x2a}], 0x2, &(0x7f0000000740)}, 0x48001) 18.184845551s ago: executing program 2 (id=2452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x44000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)}, {0x0}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000b0800000032490000c200000001000000", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYBLOB="1776fc"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x2000000}, 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18.157478833s ago: executing program 1 (id=2453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1}, 0x48) bpf$BPF_GET_PROG_INFO(0x3, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 18.02800895s ago: executing program 3 (id=2454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./cgroup/../file0\x00', r0}, 0x18) socket$kcm(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x25, 0x100000005, 0x20, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) socket$kcm(0xa, 0x2, 0x0) 15.238540031s ago: executing program 1 (id=2455): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x50) 2.157571486s ago: executing program 32 (id=2452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x44000004, 0xa121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)}, {0x0}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000b0800000032490000c200000001000000", @ANYRES32=0x1, @ANYRES64=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000006c0), 0xca, r3}, 0x38) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000180)=0x5) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYRES8=r7, @ANYBLOB="1776fc"], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000}, 0x10, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="b7050000000000006110480000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e0001000042a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5769e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491ede3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0f200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac11508842f8bb381344b994c19642a10eb30005a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c47c1cd6c2342a73bc4886c05cb61406787e2caf4bbbd1281f2d0b1dd197c8bd0ca11ae3af08366b38ea23124766a77c4daf0d68c65da876cfb42f31675b7f03fe01da55174daaae332dab64dc4a02c39aaac676ccd09ea42c0526df6b149a83aa29c3ae737f9a05e72dab2beeb79e"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, r8, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x2000000}, 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.058011732s ago: executing program 33 (id=2454): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x7ffffd, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x541b, &(0x7f0000000080)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a", 0x35}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={&(0x7f00000000c0)='./cgroup/../file0\x00', r0}, 0x18) socket$kcm(0x2a, 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000080)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000040)={'full', 0x25, 0x100000005, 0x20, 0x1}, 0xe) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) socket$kcm(0xa, 0x2, 0x0) 0s ago: executing program 34 (id=2455): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0xe000000}, 0x50) kernel console output (not intermixed with test programs): x80 [ 398.578729][T10520] ? lockdep_hardirqs_on+0x98/0x150 [ 398.583940][T10520] do_syscall_64+0x55/0xa0 [ 398.588543][T10520] ? clear_bhb_loop+0x40/0x90 [ 398.593233][T10520] ? clear_bhb_loop+0x40/0x90 [ 398.597924][T10520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.603823][T10520] RIP: 0033:0x7fadb739bf79 [ 398.608341][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.628258][T10520] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.636965][T10520] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 398.644946][T10520] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 398.653085][T10520] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 398.661069][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.669166][T10520] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 398.677271][T10520] [ 399.303082][T10529] FAULT_INJECTION: forcing a failure. [ 399.303082][T10529] name failslab, interval 1, probability 0, space 0, times 0 [ 399.317650][T10529] CPU: 1 PID: 10529 Comm: syz.3.1486 Not tainted syzkaller #0 [ 399.325174][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 399.335273][T10529] Call Trace: [ 399.338590][T10529] [ 399.341590][T10529] dump_stack_lvl+0x18c/0x250 [ 399.346347][T10529] ? show_regs_print_info+0x20/0x20 [ 399.351599][T10529] ? load_image+0x400/0x400 [ 399.356222][T10529] ? mark_lock+0x94/0x320 [ 399.360671][T10529] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 399.366687][T10529] should_fail_ex+0x39d/0x4d0 [ 399.371491][T10529] should_failslab+0x9/0x20 [ 399.376171][T10529] slab_pre_alloc_hook+0x59/0x310 [ 399.381323][T10529] ? sctp_add_bind_addr+0x8c/0x360 [ 399.386467][T10529] __kmem_cache_alloc_node+0x53/0x250 [ 399.391876][T10529] ? sctp_add_bind_addr+0x8c/0x360 [ 399.397025][T10529] kmalloc_trace+0x2a/0xe0 [ 399.401483][T10529] sctp_add_bind_addr+0x8c/0x360 [ 399.406469][T10529] sctp_copy_local_addr_list+0x315/0x4f0 [ 399.412169][T10529] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 399.418010][T10529] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 399.424143][T10529] ? sctp_v4_is_any+0x35/0x60 [ 399.428932][T10529] ? sctp_copy_one_addr+0x8c/0x350 [ 399.434348][T10529] sctp_bind_addr_copy+0xb3/0x3c0 [ 399.439555][T10529] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 399.446185][T10529] sctp_connect_new_asoc+0x2f9/0x6a0 [ 399.451593][T10529] ? __sctp_connect+0xd80/0xd80 [ 399.456474][T10529] ? sctp_sendmsg+0x1555/0x28c0 [ 399.461532][T10529] sctp_sendmsg+0x1575/0x28c0 [ 399.466258][T10529] ? sctp_getsockopt+0xb60/0xb60 [ 399.471232][T10529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.477508][T10529] ? lockdep_hardirqs_on+0x98/0x150 [ 399.482745][T10529] ? sock_rps_record_flow+0x19/0x3f0 [ 399.488074][T10529] ? inet_sendmsg+0x7c/0x2f0 [ 399.492698][T10529] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 399.498020][T10529] ? security_socket_sendmsg+0x80/0xa0 [ 399.503509][T10529] ? inet_send_prepare+0x260/0x260 [ 399.508767][T10529] ____sys_sendmsg+0x5ba/0x960 [ 399.513562][T10529] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 399.519845][T10529] ? __asan_memset+0x22/0x40 [ 399.524652][T10529] ? __sys_sendmsg_sock+0x30/0x30 [ 399.529877][T10529] ? __import_iovec+0x5f2/0x850 [ 399.534773][T10529] ? import_iovec+0x73/0xa0 [ 399.539326][T10529] ___sys_sendmsg+0x2a6/0x360 [ 399.544131][T10529] ? __sys_sendmsg+0x2a0/0x2a0 [ 399.549154][T10529] __se_sys_sendmsg+0x1c2/0x2b0 [ 399.554118][T10529] ? __x64_sys_sendmsg+0x80/0x80 [ 399.559199][T10529] ? syscall_enter_from_user_mode+0x2e/0x80 [ 399.565128][T10529] do_syscall_64+0x55/0xa0 [ 399.569764][T10529] ? clear_bhb_loop+0x40/0x90 [ 399.574469][T10529] ? clear_bhb_loop+0x40/0x90 [ 399.579178][T10529] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 399.585281][T10529] RIP: 0033:0x7f1b4d99bf79 [ 399.589829][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.609464][T10529] RSP: 002b:00007f1b4e8fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.618171][T10529] RAX: ffffffffffffffda RBX: 00007f1b4dc15fa0 RCX: 00007f1b4d99bf79 [ 399.626259][T10529] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000006 [ 399.634342][T10529] RBP: 00007f1b4e8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 399.642337][T10529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 399.650337][T10529] R13: 00007f1b4dc16038 R14: 00007f1b4dc15fa0 R15: 00007ffd26ddb148 [ 399.658359][T10529] [ 399.668999][T10534] netlink: 'syz.2.1487': attribute type 25 has an invalid length. [ 399.677517][T10534] netlink: 'syz.2.1487': attribute type 29 has an invalid length. [ 399.882433][T10539] netlink: 'syz.1.1491': attribute type 1 has an invalid length. [ 399.901456][T10539] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1491'. [ 400.060312][T10536] netlink: 'syz.0.1488': attribute type 10 has an invalid length. [ 400.076954][T10536] bond0: (slave bond_slave_0): Releasing backup interface [ 400.241263][T10549] FAULT_INJECTION: forcing a failure. [ 400.241263][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 400.254592][T10549] CPU: 1 PID: 10549 Comm: syz.2.1494 Not tainted syzkaller #0 [ 400.262352][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.272422][T10549] Call Trace: [ 400.275802][T10549] [ 400.278745][T10549] dump_stack_lvl+0x18c/0x250 [ 400.283449][T10549] ? show_regs_print_info+0x20/0x20 [ 400.288762][T10549] ? load_image+0x400/0x400 [ 400.293370][T10549] ? __might_sleep+0xe0/0xe0 [ 400.297979][T10549] ? __lock_acquire+0x7d40/0x7d40 [ 400.303106][T10549] ? prepend_path+0x4b/0x960 [ 400.307718][T10549] should_fail_ex+0x39d/0x4d0 [ 400.312442][T10549] should_failslab+0x9/0x20 [ 400.317144][T10549] slab_pre_alloc_hook+0x59/0x310 [ 400.322207][T10549] ? __asan_memcpy+0x40/0x70 [ 400.326840][T10549] ? tomoyo_encode+0x28b/0x540 [ 400.331668][T10549] ? tomoyo_encode+0x28b/0x540 [ 400.336441][T10549] __kmem_cache_alloc_node+0x53/0x250 [ 400.341834][T10549] ? prepend_path+0x4b/0x960 [ 400.346448][T10549] ? tomoyo_encode+0x28b/0x540 [ 400.351228][T10549] __kmalloc+0xa4/0x230 [ 400.355586][T10549] tomoyo_encode+0x28b/0x540 [ 400.360389][T10549] tomoyo_realpath_from_path+0x592/0x5d0 [ 400.366138][T10549] tomoyo_path_number_perm+0x248/0x620 [ 400.371616][T10549] ? tomoyo_path_number_perm+0x217/0x620 [ 400.377531][T10549] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 400.383094][T10549] ? ksys_write+0x1c4/0x260 [ 400.387941][T10549] ? __fget_files+0x28/0x4b0 [ 400.392573][T10549] ? __fget_files+0x28/0x4b0 [ 400.397201][T10549] security_file_ioctl+0x70/0xa0 [ 400.402340][T10549] __se_sys_ioctl+0x48/0x170 [ 400.406953][T10549] do_syscall_64+0x55/0xa0 [ 400.411392][T10549] ? clear_bhb_loop+0x40/0x90 [ 400.416092][T10549] ? clear_bhb_loop+0x40/0x90 [ 400.420871][T10549] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.426777][T10549] RIP: 0033:0x7f737439bf79 [ 400.431204][T10549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.450910][T10549] RSP: 002b:00007f737525d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.459434][T10549] RAX: ffffffffffffffda RBX: 00007f7374615fa0 RCX: 00007f737439bf79 [ 400.467786][T10549] RDX: 0000000000000000 RSI: 0000000040047452 RDI: 0000000000000003 [ 400.475776][T10549] RBP: 00007f737525d090 R08: 0000000000000000 R09: 0000000000000000 [ 400.483794][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.491789][T10549] R13: 00007f7374616038 R14: 00007f7374615fa0 R15: 00007ffcd9b761d8 [ 400.499796][T10549] [ 400.510290][T10549] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.104580][T10558] Dead loop on virtual device ip6_vti0, fix it urgently! [ 401.499398][T10572] netlink: 'syz.3.1501': attribute type 1 has an invalid length. [ 401.526944][T10572] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1501'. [ 402.007555][T10581] netlink: 'syz.1.1504': attribute type 10 has an invalid length. [ 402.704903][T10596] FAULT_INJECTION: forcing a failure. [ 402.704903][T10596] name failslab, interval 1, probability 0, space 0, times 0 [ 402.746283][T10596] CPU: 1 PID: 10596 Comm: syz.2.1510 Not tainted syzkaller #0 [ 402.754038][T10596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.764402][T10596] Call Trace: [ 402.767797][T10596] [ 402.770753][T10596] dump_stack_lvl+0x18c/0x250 [ 402.775473][T10596] ? show_regs_print_info+0x20/0x20 [ 402.780799][T10596] ? load_image+0x400/0x400 [ 402.785338][T10596] ? __might_sleep+0xe0/0xe0 [ 402.790015][T10596] ? __lock_acquire+0x7d40/0x7d40 [ 402.795164][T10596] should_fail_ex+0x39d/0x4d0 [ 402.799904][T10596] should_failslab+0x9/0x20 [ 402.804533][T10596] slab_pre_alloc_hook+0x59/0x310 [ 402.809610][T10596] kmem_cache_alloc_node+0x60/0x320 [ 402.815019][T10596] ? __alloc_skb+0x103/0x2c0 [ 402.819744][T10596] __alloc_skb+0x103/0x2c0 [ 402.824314][T10596] alloc_skb_with_frags+0xca/0x7b0 [ 402.829748][T10596] ? mark_lock+0x94/0x320 [ 402.834233][T10596] sock_alloc_send_pskb+0x883/0x9a0 [ 402.839585][T10596] ? sock_kzfree_s+0x50/0x50 [ 402.844403][T10596] tun_get_user+0x82c/0x3ca0 [ 402.849031][T10596] ? aa_file_perm+0x11b/0xee0 [ 402.853920][T10596] ? rcu_read_unlock+0xa0/0xa0 [ 402.858729][T10596] ? tun_get+0x1c/0x2e0 [ 402.862919][T10596] ? __lock_acquire+0x7d40/0x7d40 [ 402.868166][T10596] ? tun_get+0x1c/0x2e0 [ 402.872357][T10596] tun_chr_write_iter+0x119/0x200 [ 402.877414][T10596] vfs_write+0x46c/0x990 [ 402.881870][T10596] ? file_end_write+0x250/0x250 [ 402.886760][T10596] ? __fget_files+0x43d/0x4b0 [ 402.891475][T10596] ? __fdget_pos+0x1d8/0x330 [ 402.896097][T10596] ? ksys_write+0x75/0x260 [ 402.900575][T10596] ksys_write+0x150/0x260 [ 402.905084][T10596] ? __ia32_sys_read+0x90/0x90 [ 402.910225][T10596] ? lockdep_hardirqs_on+0x98/0x150 [ 402.915647][T10596] do_syscall_64+0x55/0xa0 [ 402.920187][T10596] ? clear_bhb_loop+0x40/0x90 [ 402.925155][T10596] ? clear_bhb_loop+0x40/0x90 [ 402.929953][T10596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.936142][T10596] RIP: 0033:0x7f737439bf79 [ 402.940587][T10596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.960829][T10596] RSP: 002b:00007f737525d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.969457][T10596] RAX: ffffffffffffffda RBX: 00007f7374615fa0 RCX: 00007f737439bf79 [ 402.977541][T10596] RDX: 000000000000fdef RSI: 0000200000000640 RDI: 00000000000000c8 [ 402.985647][T10596] RBP: 00007f737525d090 R08: 0000000000000000 R09: 0000000000000000 [ 402.994122][T10596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.002218][T10596] R13: 00007f7374616038 R14: 00007f7374615fa0 R15: 00007ffcd9b761d8 [ 403.010324][T10596] [ 403.219470][T10602] netlink: 'syz.2.1512': attribute type 25 has an invalid length. [ 403.237650][T10602] netlink: 'syz.2.1512': attribute type 29 has an invalid length. [ 403.664151][T10605] netlink: 'syz.1.1513': attribute type 25 has an invalid length. [ 403.714161][T10605] netlink: 'syz.1.1513': attribute type 29 has an invalid length. [ 403.847913][T10608] netlink: 'syz.2.1522': attribute type 25 has an invalid length. [ 403.871249][T10608] netlink: 'syz.2.1522': attribute type 29 has an invalid length. [ 404.603237][T10615] netlink: 'syz.1.1515': attribute type 9 has an invalid length. [ 404.657407][T10615] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1515'. [ 405.511727][T10619] netlink: 'syz.2.1517': attribute type 10 has an invalid length. [ 405.964260][T10624] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1519'. [ 406.321035][T10625] Dead loop on virtual device ip6_vti0, fix it urgently! [ 407.176525][T10642] netlink: 'syz.2.1526': attribute type 25 has an invalid length. [ 407.187787][T10642] netlink: 'syz.2.1526': attribute type 29 has an invalid length. [ 407.834141][T10648] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1527'. [ 407.870331][T10653] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 407.886181][T10653] pim6reg1: linktype set to 774 [ 408.164719][T10657] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1532'. [ 409.085958][T10673] syzkaller0: entered promiscuous mode [ 409.097323][T10673] syzkaller0: entered allmulticast mode [ 410.354051][T10680] validate_nla: 2 callbacks suppressed [ 410.354087][T10680] netlink: 'syz.2.1540': attribute type 9 has an invalid length. [ 410.372446][T10680] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1540'. [ 412.122453][T10682] netlink: 'syz.1.1539': attribute type 25 has an invalid length. [ 412.130819][T10682] netlink: 'syz.1.1539': attribute type 29 has an invalid length. [ 412.140234][T10688] netlink: 'syz.2.1542': attribute type 25 has an invalid length. [ 412.159841][T10688] netlink: 'syz.2.1542': attribute type 29 has an invalid length. [ 412.412191][T10698] netlink: 'syz.2.1545': attribute type 1 has an invalid length. [ 412.428876][T10698] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1545'. [ 413.729286][T10715] netlink: 'syz.1.1551': attribute type 25 has an invalid length. [ 413.758289][T10715] netlink: 'syz.1.1551': attribute type 29 has an invalid length. [ 413.902324][T10718] netlink: 'syz.0.1550': attribute type 9 has an invalid length. [ 413.911322][T10718] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1550'. [ 415.028570][T10739] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 415.051310][T10739] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1556'. [ 415.513353][T10752] netlink: 'syz.0.1563': attribute type 25 has an invalid length. [ 415.542096][T10752] netlink: 'syz.0.1563': attribute type 29 has an invalid length. [ 415.752918][T10758] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1566'. [ 416.053389][T10758] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1566'. [ 416.072513][T10758] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1566'. [ 416.324797][T10769] netlink: 539 bytes leftover after parsing attributes in process `syz.1.1568'. [ 416.551330][T10764] netlink: 'syz.3.1566': attribute type 29 has an invalid length. [ 416.642464][T10772] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 416.650730][T10772] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1570'. [ 416.679619][T10764] netlink: 'syz.3.1566': attribute type 29 has an invalid length. [ 416.766440][T10758] netlink: 'syz.3.1566': attribute type 29 has an invalid length. [ 416.795041][T10768] netlink: 'syz.3.1566': attribute type 29 has an invalid length. [ 416.801220][T10776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1571'. [ 416.834788][T10776] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1571'. [ 416.925621][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1571'. [ 417.168221][T10785] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 417.174070][T10785] dvmrp1: linktype set to 825 [ 417.399348][T10790] netlink: 'syz.0.1577': attribute type 25 has an invalid length. [ 417.412376][T10790] netlink: 'syz.0.1577': attribute type 29 has an invalid length. [ 417.953461][T10802] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 417.961473][T10802] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1582'. [ 418.189751][T10807] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1580'. [ 420.798551][T10850] __nla_validate_parse: 4 callbacks suppressed [ 420.798570][T10850] netlink: 539 bytes leftover after parsing attributes in process `syz.0.1596'. [ 421.428217][T10864] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1599'. [ 422.033436][T10869] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1599'. [ 423.327891][T10869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.407848][T10869] bond0 (unregistering): Released all slaves [ 424.768758][T10891] validate_nla: 7 callbacks suppressed [ 424.768780][T10891] netlink: 'syz.3.1607': attribute type 9 has an invalid length. [ 424.808104][T10891] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1607'. [ 424.967703][T10897] FAULT_INJECTION: forcing a failure. [ 424.967703][T10897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.005045][T10897] CPU: 0 PID: 10897 Comm: syz.0.1609 Not tainted syzkaller #0 [ 425.012587][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.022760][T10897] Call Trace: [ 425.026072][T10897] [ 425.029030][T10897] dump_stack_lvl+0x18c/0x250 [ 425.033753][T10897] ? show_regs_print_info+0x20/0x20 [ 425.039027][T10897] ? load_image+0x400/0x400 [ 425.043568][T10897] ? __might_fault+0xaa/0x120 [ 425.048454][T10897] ? __lock_acquire+0x7d40/0x7d40 [ 425.053651][T10897] ? unix_ioctl+0x261/0x670 [ 425.058381][T10897] should_fail_ex+0x39d/0x4d0 [ 425.063102][T10897] _copy_from_user+0x2f/0xe0 [ 425.067850][T10897] sock_do_ioctl+0x190/0x310 [ 425.072568][T10897] ? sock_show_fdinfo+0xb0/0xb0 [ 425.077560][T10897] sock_ioctl+0x5ba/0x7e0 [ 425.082096][T10897] ? sock_poll+0x3e0/0x3e0 [ 425.086650][T10897] ? bpf_lsm_file_ioctl+0x9/0x10 [ 425.091713][T10897] ? security_file_ioctl+0x80/0xa0 [ 425.097046][T10897] ? sock_poll+0x3e0/0x3e0 [ 425.101675][T10897] __se_sys_ioctl+0xfd/0x170 [ 425.106490][T10897] do_syscall_64+0x55/0xa0 [ 425.111037][T10897] ? clear_bhb_loop+0x40/0x90 [ 425.116021][T10897] ? clear_bhb_loop+0x40/0x90 [ 425.120741][T10897] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.126661][T10897] RIP: 0033:0x7f5e7b59bf79 [ 425.131211][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.151645][T10897] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.160102][T10897] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 425.168201][T10897] RDX: 0000200000000400 RSI: 0000000000008946 RDI: 0000000000000006 [ 425.176304][T10897] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 425.184329][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.192453][T10897] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 425.200493][T10897] [ 425.740372][T10911] netlink: 'syz.2.1613': attribute type 1 has an invalid length. [ 425.815438][T10911] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1613'. [ 426.382194][T10924] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1617'. [ 428.293352][T10934] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 428.682995][T10928] netlink: 'syz.2.1619': attribute type 25 has an invalid length. [ 428.694568][T10928] netlink: 'syz.2.1619': attribute type 29 has an invalid length. [ 430.899537][T10951] netlink: 'syz.3.1625': attribute type 1 has an invalid length. [ 430.907709][T10951] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1625'. [ 431.569264][T10961] netlink: 'syz.3.1628': attribute type 1 has an invalid length. [ 431.585998][T10961] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1628'. [ 433.484072][T10982] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 433.529789][T10982] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1635'. [ 433.908436][T10988] netlink: 'syz.0.1636': attribute type 25 has an invalid length. [ 433.941827][T10988] netlink: 'syz.0.1636': attribute type 29 has an invalid length. [ 434.173801][T10994] netlink: 'syz.0.1639': attribute type 1 has an invalid length. [ 434.196654][T10994] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1639'. [ 434.555160][T11003] netlink: 'syz.2.1641': attribute type 11 has an invalid length. [ 434.565504][T11003] netlink: 126332 bytes leftover after parsing attributes in process `syz.2.1641'. [ 435.770134][T11024] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1644'. [ 436.435626][T11035] netlink: 'syz.2.1648': attribute type 25 has an invalid length. [ 436.455642][T11035] netlink: 'syz.2.1648': attribute type 29 has an invalid length. [ 436.673164][T11044] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1649'. [ 436.766473][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1649'. [ 436.788385][T11045] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1649'. [ 436.817657][T11044] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1649'. [ 437.357192][T11058] netlink: 'syz.0.1654': attribute type 1 has an invalid length. [ 437.365098][T11058] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1654'. [ 437.400774][T11062] netlink: 'syz.3.1655': attribute type 3 has an invalid length. [ 437.462175][T11062] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1655'. [ 438.228778][T11076] FAULT_INJECTION: forcing a failure. [ 438.228778][T11076] name failslab, interval 1, probability 0, space 0, times 0 [ 438.262817][T11076] CPU: 0 PID: 11076 Comm: syz.0.1658 Not tainted syzkaller #0 [ 438.270396][T11076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.280770][T11076] Call Trace: [ 438.284101][T11076] [ 438.287181][T11076] dump_stack_lvl+0x18c/0x250 [ 438.292023][T11076] ? show_regs_print_info+0x20/0x20 [ 438.297288][T11076] ? load_image+0x400/0x400 [ 438.301861][T11076] ? verify_lock_unused+0x140/0x140 [ 438.307121][T11076] ? perf_trace_lock_acquire+0x34f/0x410 [ 438.313022][T11076] should_fail_ex+0x39d/0x4d0 [ 438.317955][T11076] should_failslab+0x9/0x20 [ 438.322499][T11076] slab_pre_alloc_hook+0x59/0x310 [ 438.327729][T11076] ? tipc_group_create+0xa1/0x500 [ 438.332787][T11076] __kmem_cache_alloc_node+0x53/0x250 [ 438.338297][T11076] ? tipc_group_create+0xa1/0x500 [ 438.343369][T11076] kmalloc_trace+0x2a/0xe0 [ 438.347825][T11076] tipc_group_create+0xa1/0x500 [ 438.352725][T11076] tipc_sk_join+0x253/0x6a0 [ 438.357251][T11076] ? lockdep_hardirqs_on+0x98/0x150 [ 438.362651][T11076] ? __local_bh_enable_ip+0x13a/0x1c0 [ 438.368143][T11076] ? __tipc_sendstream+0x1270/0x1270 [ 438.373556][T11076] tipc_setsockopt+0x73f/0x990 [ 438.378439][T11076] ? tipc_shutdown+0x4d0/0x4d0 [ 438.383225][T11076] ? __fget_files+0x28/0x4b0 [ 438.387926][T11076] ? __fget_files+0x28/0x4b0 [ 438.392634][T11076] ? aa_sock_opt_perm+0x74/0x100 [ 438.397602][T11076] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 438.403366][T11076] ? security_socket_setsockopt+0x7e/0xa0 [ 438.409104][T11076] ? tipc_shutdown+0x4d0/0x4d0 [ 438.413896][T11076] do_sock_setsockopt+0x175/0x1a0 [ 438.419044][T11076] ? __fdget+0x180/0x210 [ 438.423316][T11076] __x64_sys_setsockopt+0x182/0x200 [ 438.428551][T11076] do_syscall_64+0x55/0xa0 [ 438.433002][T11076] ? clear_bhb_loop+0x40/0x90 [ 438.437700][T11076] ? clear_bhb_loop+0x40/0x90 [ 438.442572][T11076] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 438.448483][T11076] RIP: 0033:0x7f5e7b59bf79 [ 438.453097][T11076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.472746][T11076] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 438.481196][T11076] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 438.489325][T11076] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000004 [ 438.497412][T11076] RBP: 00007f5e7c41d090 R08: 000000000000017e R09: 0000000000000000 [ 438.505684][T11076] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 438.513967][T11076] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 438.522555][T11076] [ 439.264328][T11082] netlink: 'syz.2.1660': attribute type 25 has an invalid length. [ 439.279463][T11082] netlink: 'syz.2.1660': attribute type 29 has an invalid length. [ 439.343625][T11089] FAULT_INJECTION: forcing a failure. [ 439.343625][T11089] name failslab, interval 1, probability 0, space 0, times 0 [ 439.375630][T11089] CPU: 1 PID: 11089 Comm: syz.0.1663 Not tainted syzkaller #0 [ 439.383695][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 439.393968][T11089] Call Trace: [ 439.397429][T11089] [ 439.400391][T11089] dump_stack_lvl+0x18c/0x250 [ 439.405117][T11089] ? show_regs_print_info+0x20/0x20 [ 439.410459][T11089] ? load_image+0x400/0x400 [ 439.415006][T11089] ? __might_sleep+0xe0/0xe0 [ 439.419644][T11089] ? __lock_acquire+0x7d40/0x7d40 [ 439.424727][T11089] ? perf_trace_preemptirq_template+0xac/0x330 [ 439.430949][T11089] should_fail_ex+0x39d/0x4d0 [ 439.435685][T11089] should_failslab+0x9/0x20 [ 439.440409][T11089] slab_pre_alloc_hook+0x59/0x310 [ 439.445480][T11089] ? apparmor_sk_alloc_security+0x77/0x100 [ 439.451413][T11089] __kmem_cache_alloc_node+0x53/0x250 [ 439.456999][T11089] ? lockdep_hardirqs_on+0x98/0x150 [ 439.462244][T11089] ? apparmor_sk_alloc_security+0x77/0x100 [ 439.468110][T11089] kmalloc_trace+0x2a/0xe0 [ 439.472667][T11089] apparmor_sk_alloc_security+0x77/0x100 [ 439.478465][T11089] security_sk_alloc+0x6e/0xa0 [ 439.483273][T11089] sk_prot_alloc+0x101/0x210 [ 439.487910][T11089] ? sk_alloc+0x24/0x360 [ 439.492285][T11089] sk_alloc+0x3a/0x360 [ 439.496521][T11089] ? bpf_ctx_init+0x163/0x1a0 [ 439.501844][T11089] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 439.507421][T11089] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 439.513077][T11089] ? lockdep_hardirqs_on+0x98/0x150 [ 439.518557][T11089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.524730][T11089] ? cpu_online+0x60/0x60 [ 439.529443][T11089] bpf_prog_test_run+0x321/0x390 [ 439.534399][T11089] __sys_bpf+0x49d/0x890 [ 439.538657][T11089] ? bpf_link_show_fdinfo+0x390/0x390 [ 439.544227][T11089] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 439.550403][T11089] __x64_sys_bpf+0x7c/0x90 [ 439.554829][T11089] do_syscall_64+0x55/0xa0 [ 439.559261][T11089] ? clear_bhb_loop+0x40/0x90 [ 439.564129][T11089] ? clear_bhb_loop+0x40/0x90 [ 439.568842][T11089] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 439.574922][T11089] RIP: 0033:0x7f5e7b59bf79 [ 439.579442][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.599148][T11089] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.607665][T11089] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 439.615667][T11089] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 439.623737][T11089] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 439.632067][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.640149][T11089] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 439.648234][T11089] [ 439.995112][T11099] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.1664'. [ 440.490129][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.496742][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.165920][T11118] tun0: tun_chr_ioctl cmd 1074025694 [ 442.125737][T11134] netlink: 'syz.2.1675': attribute type 25 has an invalid length. [ 442.156038][T11134] netlink: 'syz.2.1675': attribute type 29 has an invalid length. [ 443.032156][T11155] netlink: 'syz.0.1681': attribute type 25 has an invalid length. [ 443.141256][T11155] netlink: 'syz.0.1681': attribute type 29 has an invalid length. [ 444.529425][T11170] Ÿë: port 1(ip6gretap0) entered blocking state [ 444.536467][T11170] Ÿë: port 1(ip6gretap0) entered disabled state [ 444.543093][T11170] ip6gretap0: entered allmulticast mode [ 444.551017][T11170] ip6gretap0: entered promiscuous mode [ 445.873292][T11195] FAULT_INJECTION: forcing a failure. [ 445.873292][T11195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.886873][T11195] CPU: 1 PID: 11195 Comm: syz.1.1696 Not tainted syzkaller #0 [ 445.894540][T11195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.904972][T11195] Call Trace: [ 445.908376][T11195] [ 445.911346][T11195] dump_stack_lvl+0x18c/0x250 [ 445.916237][T11195] ? show_regs_print_info+0x20/0x20 [ 445.921482][T11195] ? load_image+0x400/0x400 [ 445.926601][T11195] should_fail_ex+0x39d/0x4d0 [ 445.931467][T11195] strncpy_from_user+0x36/0x2d0 [ 445.936376][T11195] strncpy_from_user_nofault+0x71/0x140 [ 445.942279][T11195] bpf_probe_read_user_str+0x2a/0x70 [ 445.947636][T11195] bpf_prog_45e11498e05701bd+0x42/0x44 [ 445.953268][T11195] bpf_test_run+0x2df/0x870 [ 445.957833][T11195] ? bpf_test_run+0x174/0x870 [ 445.962544][T11195] ? convert___skb_to_skb+0x590/0x590 [ 445.967949][T11195] ? eth_get_headlen+0x210/0x210 [ 445.973364][T11195] ? slab_build_skb+0x25f/0x3f0 [ 445.978350][T11195] ? convert___skb_to_skb+0x3d/0x590 [ 445.983843][T11195] bpf_prog_test_run_skb+0xad2/0x12b0 [ 445.989268][T11195] ? cpu_online+0x60/0x60 [ 445.993658][T11195] bpf_prog_test_run+0x321/0x390 [ 445.998749][T11195] __sys_bpf+0x49d/0x890 [ 446.003140][T11195] ? bpf_link_show_fdinfo+0x390/0x390 [ 446.008589][T11195] ? lock_chain_count+0x20/0x20 [ 446.013505][T11195] __x64_sys_bpf+0x7c/0x90 [ 446.018061][T11195] do_syscall_64+0x55/0xa0 [ 446.022523][T11195] ? clear_bhb_loop+0x40/0x90 [ 446.027243][T11195] ? clear_bhb_loop+0x40/0x90 [ 446.032019][T11195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.037943][T11195] RIP: 0033:0x7fadb739bf79 [ 446.042476][T11195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.062994][T11195] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.071618][T11195] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 446.079795][T11195] RDX: 0000000000000050 RSI: 0000200000000a40 RDI: 000000000000000a [ 446.088076][T11195] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 446.096263][T11195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.104359][T11195] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 446.112468][T11195] [ 446.715052][T11184] netlink: 'syz.0.1693': attribute type 8 has an invalid length. [ 446.754497][T11184] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1693'. [ 447.560435][T11226] netlink: 'syz.2.1704': attribute type 25 has an invalid length. [ 447.568838][T11226] netlink: 'syz.2.1704': attribute type 29 has an invalid length. [ 448.120422][T11230] netlink: 'syz.2.1706': attribute type 10 has an invalid length. [ 448.237983][T11243] netlink: 'syz.3.1709': attribute type 1 has an invalid length. [ 448.259333][T11238] netlink: 'syz.2.1706': attribute type 3 has an invalid length. [ 448.305392][T11243] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1709'. [ 448.305616][T11230] team0: Device veth1_macvtap failed to register rx_handler [ 448.354195][T11238] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1706'. [ 449.701909][T11273] netlink: 'syz.2.1720': attribute type 1 has an invalid length. [ 449.710025][T11273] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1720'. [ 450.019021][T11280] netlink: 'syz.2.1730': attribute type 1 has an invalid length. [ 450.027280][T11280] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1730'. [ 450.221200][T11284] netlink: 'syz.3.1722': attribute type 10 has an invalid length. [ 450.306381][T11284] team0: Device veth1_macvtap failed to register rx_handler [ 450.484013][T11284] netlink: 'syz.3.1722': attribute type 3 has an invalid length. [ 450.565624][T11284] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1722'. [ 450.845591][T11294] Ÿë: port 1(ip6gretap0) entered blocking state [ 450.852470][T11294] Ÿë: port 1(ip6gretap0) entered disabled state [ 450.876023][T11294] ip6gretap0: entered allmulticast mode [ 450.903771][T11294] ip6gretap0: entered promiscuous mode [ 451.194446][T11299] netlink: 'syz.0.1728': attribute type 25 has an invalid length. [ 451.877036][T11315] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1734'. [ 452.320617][T11327] netlink: 63763 bytes leftover after parsing attributes in process `syz.0.1736'. [ 452.685131][T11335] validate_nla: 2 callbacks suppressed [ 452.685158][T11335] netlink: 'syz.0.1739': attribute type 21 has an invalid length. [ 452.885966][T11344] netlink: 'syz.1.1743': attribute type 10 has an invalid length. [ 452.923436][T11344] team0: Device veth1_macvtap failed to register rx_handler [ 452.995674][T11348] netlink: 'syz.0.1745': attribute type 1 has an invalid length. [ 453.004089][T11348] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1745'. [ 453.183859][T11343] netlink: 'syz.1.1743': attribute type 3 has an invalid length. [ 453.194018][T11343] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1743'. [ 453.288267][T11351] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 453.305521][T11351] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1747'. [ 453.484533][T11357] netlink: 'syz.1.1748': attribute type 1 has an invalid length. [ 453.546120][T11357] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1748'. [ 453.628377][T11361] netlink: 'syz.0.1749': attribute type 25 has an invalid length. [ 453.637584][T11361] netlink: 'syz.0.1749': attribute type 29 has an invalid length. [ 454.226707][T11376] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1757'. [ 454.652650][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1758'. [ 454.723107][T11389] netlink: 'syz.2.1760': attribute type 25 has an invalid length. [ 454.754921][T11389] netlink: 'syz.2.1760': attribute type 29 has an invalid length. [ 456.233272][T11425] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1772'. [ 456.243597][T11418] FAULT_INJECTION: forcing a failure. [ 456.243597][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.396857][T11418] CPU: 1 PID: 11418 Comm: syz.0.1769 Not tainted syzkaller #0 [ 456.404418][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.415050][T11418] Call Trace: [ 456.418684][T11418] [ 456.421655][T11418] dump_stack_lvl+0x18c/0x250 [ 456.426472][T11418] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.432687][T11418] ? show_regs_print_info+0x20/0x20 [ 456.437962][T11418] ? load_image+0x400/0x400 [ 456.442616][T11418] should_fail_ex+0x39d/0x4d0 [ 456.447371][T11418] _copy_to_user+0x2f/0xa0 [ 456.451834][T11418] bpf_test_finish+0x25a/0x650 [ 456.456654][T11418] ? convert___skb_to_skb+0x590/0x590 [ 456.462169][T11418] ? convert_skb_to___skb+0x420/0x420 [ 456.467602][T11418] ? slab_build_skb+0x25f/0x3f0 [ 456.472515][T11418] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 456.477972][T11418] ? cpu_online+0x60/0x60 [ 456.482350][T11418] bpf_prog_test_run+0x321/0x390 [ 456.487424][T11418] __sys_bpf+0x49d/0x890 [ 456.491888][T11418] ? bpf_link_show_fdinfo+0x390/0x390 [ 456.497491][T11418] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 456.503781][T11418] __x64_sys_bpf+0x7c/0x90 [ 456.508309][T11418] do_syscall_64+0x55/0xa0 [ 456.512780][T11418] ? clear_bhb_loop+0x40/0x90 [ 456.517471][T11418] ? clear_bhb_loop+0x40/0x90 [ 456.522248][T11418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 456.528244][T11418] RIP: 0033:0x7f5e7b59bf79 [ 456.532782][T11418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.552819][T11418] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.561255][T11418] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 456.569502][T11418] RDX: 0000000000000048 RSI: 00002000000002c0 RDI: 000000000000000a [ 456.577927][T11418] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 456.586545][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.595325][T11418] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 456.604753][T11418] [ 456.792357][T11430] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1773'. [ 456.947376][T11436] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1775'. [ 457.198979][T11439] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1775'. [ 458.321311][T11457] validate_nla: 9 callbacks suppressed [ 458.321332][T11457] netlink: 'syz.3.1781': attribute type 1 has an invalid length. [ 458.350807][T11457] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1781'. [ 459.161431][T11469] syzkaller0: entered promiscuous mode [ 459.178367][T11469] syzkaller0: entered allmulticast mode [ 459.297507][T11469] syzkaller0: mtu less than device minimum [ 460.079322][T11487] netlink: 'syz.3.1791': attribute type 1 has an invalid length. [ 460.385616][T11487] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1791'. [ 460.694555][T11491] netlink: 'syz.0.1790': attribute type 25 has an invalid length. [ 460.874911][T11491] netlink: 'syz.0.1790': attribute type 29 has an invalid length. [ 461.602414][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1793'. [ 461.612275][T11499] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1794'. [ 464.124508][T11525] netlink: 'syz.1.1801': attribute type 10 has an invalid length. [ 465.422366][T11542] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1806'. [ 465.442717][T11542] netlink: zone id is out of range [ 465.552709][T11543] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1806'. [ 465.878994][T11552] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1808'. [ 467.288626][T11567] netlink: 'syz.3.1813': attribute type 10 has an invalid length. [ 467.349601][T11571] syzkaller0: entered promiscuous mode [ 467.384357][T11571] syzkaller0: entered allmulticast mode [ 467.451027][T11571] syzkaller0: mtu less than device minimum [ 467.572700][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 467.590132][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 467.601232][T11576] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1818'. [ 467.835945][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1821'. [ 467.848196][T11580] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1821'. [ 467.915901][T11582] netlink: 'syz.0.1820': attribute type 1 has an invalid length. [ 467.924050][T11582] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1820'. [ 468.491346][T11586] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1822'. [ 468.897395][T11596] FAULT_INJECTION: forcing a failure. [ 468.897395][T11596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.938760][T11596] CPU: 1 PID: 11596 Comm: syz.3.1825 Not tainted syzkaller #0 [ 468.946480][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 468.956747][T11596] Call Trace: [ 468.960078][T11596] [ 468.963126][T11596] dump_stack_lvl+0x18c/0x250 [ 468.967950][T11596] ? show_regs_print_info+0x20/0x20 [ 468.973477][T11596] ? load_image+0x400/0x400 [ 468.978141][T11596] ? __lock_acquire+0x7d40/0x7d40 [ 468.983388][T11596] ? snprintf+0xe9/0x140 [ 468.987746][T11596] should_fail_ex+0x39d/0x4d0 [ 468.992473][T11596] _copy_to_user+0x2f/0xa0 [ 468.997110][T11596] simple_read_from_buffer+0xe7/0x150 [ 469.002545][T11596] proc_fail_nth_read+0x1e8/0x260 [ 469.007615][T11596] ? proc_fault_inject_write+0x360/0x360 [ 469.013390][T11596] ? fsnotify_perm+0x271/0x5e0 [ 469.018372][T11596] ? proc_fault_inject_write+0x360/0x360 [ 469.024304][T11596] vfs_read+0x28b/0x970 [ 469.028518][T11596] ? kernel_read+0x1e0/0x1e0 [ 469.033276][T11596] ? __fget_files+0x28/0x4b0 [ 469.038017][T11596] ? __fget_files+0x28/0x4b0 [ 469.042655][T11596] ? __fget_files+0x43d/0x4b0 [ 469.047480][T11596] ? __fdget_pos+0x2a3/0x330 [ 469.052204][T11596] ? ksys_read+0x75/0x260 [ 469.056776][T11596] ksys_read+0x150/0x260 [ 469.061171][T11596] ? vfs_write+0x990/0x990 [ 469.065815][T11596] ? lockdep_hardirqs_on+0x98/0x150 [ 469.071331][T11596] do_syscall_64+0x55/0xa0 [ 469.075888][T11596] ? clear_bhb_loop+0x40/0x90 [ 469.080872][T11596] ? clear_bhb_loop+0x40/0x90 [ 469.086040][T11596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.092039][T11596] RIP: 0033:0x7f1b4d95c84e [ 469.096672][T11596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 469.116765][T11596] RSP: 002b:00007f1b4e8fcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.125417][T11596] RAX: ffffffffffffffda RBX: 00007f1b4e8fd6c0 RCX: 00007f1b4d95c84e [ 469.133806][T11596] RDX: 000000000000000f RSI: 00007f1b4e8fd0a0 RDI: 0000000000000004 [ 469.141938][T11596] RBP: 00007f1b4e8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 469.150307][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.158312][T11596] R13: 00007f1b4dc16038 R14: 00007f1b4dc15fa0 R15: 00007ffd26ddb148 [ 469.166333][T11596] [ 469.455509][T11602] netlink: 'syz.1.1827': attribute type 25 has an invalid length. [ 469.463419][T11602] netlink: 'syz.1.1827': attribute type 29 has an invalid length. [ 469.489734][T11601] netlink: 'syz.2.1826': attribute type 10 has an invalid length. [ 469.826404][T11611] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 470.207980][T11618] netlink: 'syz.1.1833': attribute type 29 has an invalid length. [ 470.230150][T11618] netlink: 'syz.1.1833': attribute type 29 has an invalid length. [ 470.248459][T11619] netlink: 'syz.1.1833': attribute type 29 has an invalid length. [ 470.654199][T11630] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 471.026311][T11635] netlink: 'syz.2.1839': attribute type 1 has an invalid length. [ 471.036982][T11635] __nla_validate_parse: 1 callbacks suppressed [ 471.037002][T11635] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1839'. [ 471.478385][T11644] netlink: 'syz.3.1841': attribute type 27 has an invalid length. [ 471.550397][T11644] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1841'. [ 471.853116][T11651] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1843'. [ 473.963800][T11711] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1860'. [ 475.135998][T11724] validate_nla: 7 callbacks suppressed [ 475.136019][T11724] netlink: 'syz.1.1866': attribute type 25 has an invalid length. [ 475.158640][T11724] netlink: 'syz.1.1866': attribute type 29 has an invalid length. [ 476.426939][T11741] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1872'. [ 477.065639][T11760] netlink: 'syz.0.1877': attribute type 25 has an invalid length. [ 477.078611][T11760] netlink: 'syz.0.1877': attribute type 29 has an invalid length. [ 477.136955][T11762] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1878'. [ 477.281686][T11768] netlink: 'syz.0.1880': attribute type 10 has an invalid length. [ 477.297035][T11768] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1880'. [ 477.678488][T11779] netlink: 'syz.0.1884': attribute type 25 has an invalid length. [ 477.683254][T11782] FAULT_INJECTION: forcing a failure. [ 477.683254][T11782] name failslab, interval 1, probability 0, space 0, times 0 [ 477.696125][T11779] netlink: 'syz.0.1884': attribute type 28 has an invalid length. [ 477.699616][T11782] CPU: 0 PID: 11782 Comm: syz.1.1885 Not tainted syzkaller #0 [ 477.714837][T11782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.724986][T11782] Call Trace: [ 477.728389][T11782] [ 477.731382][T11782] dump_stack_lvl+0x18c/0x250 [ 477.736422][T11782] ? show_regs_print_info+0x20/0x20 [ 477.742161][T11782] ? load_image+0x400/0x400 [ 477.746841][T11782] ? __might_sleep+0xe0/0xe0 [ 477.751656][T11782] ? __lock_acquire+0x7d40/0x7d40 [ 477.756888][T11782] ? tomoyo_write_log2+0x250/0x910 [ 477.762045][T11782] ? tomoyo_domain_quota_is_ok+0x97/0x570 [ 477.767845][T11782] should_fail_ex+0x39d/0x4d0 [ 477.772748][T11782] should_failslab+0x9/0x20 [ 477.777388][T11782] slab_pre_alloc_hook+0x59/0x310 [ 477.782556][T11782] ? ip_options_get+0x52/0x4a0 [ 477.787537][T11782] ? ip_options_get+0x52/0x4a0 [ 477.792343][T11782] __kmem_cache_alloc_node+0x53/0x250 [ 477.798013][T11782] ? tomoyo_profile+0x50/0x50 [ 477.802831][T11782] ? ip_options_get+0x52/0x4a0 [ 477.807630][T11782] __kmalloc+0xa4/0x230 [ 477.811869][T11782] ip_options_get+0x52/0x4a0 [ 477.816605][T11782] ? tomoyo_check_inet_address+0x287/0x930 [ 477.822831][T11782] ip_cmsg_send+0x591/0xa70 [ 477.827409][T11782] raw_sendmsg+0x55f/0x1c00 [ 477.831997][T11782] ? __might_sleep+0xe0/0xe0 [ 477.836746][T11782] ? compat_raw_ioctl+0x70/0x70 [ 477.842013][T11782] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 477.848586][T11782] ? sock_rps_record_flow+0x19/0x3f0 [ 477.854095][T11782] ? inet_sendmsg+0x7c/0x2f0 [ 477.859152][T11782] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 477.864555][T11782] ? security_socket_sendmsg+0x80/0xa0 [ 477.870046][T11782] ? inet_send_prepare+0x260/0x260 [ 477.875309][T11782] ____sys_sendmsg+0x5ba/0x960 [ 477.880325][T11782] ? __lock_acquire+0x7d40/0x7d40 [ 477.885444][T11782] ? __sys_sendmsg_sock+0x30/0x30 [ 477.890684][T11782] ? __import_iovec+0x3fa/0x850 [ 477.896043][T11782] ? import_iovec+0x73/0xa0 [ 477.900790][T11782] ___sys_sendmsg+0x2a6/0x360 [ 477.905673][T11782] ? get_pid_task+0x20/0x1e0 [ 477.910401][T11782] ? __sys_sendmsg+0x2a0/0x2a0 [ 477.915344][T11782] ? __lock_acquire+0x7d40/0x7d40 [ 477.920776][T11782] __se_sys_sendmsg+0x1c2/0x2b0 [ 477.925749][T11782] ? __x64_sys_sendmsg+0x80/0x80 [ 477.931157][T11782] ? lockdep_hardirqs_on+0x98/0x150 [ 477.936531][T11782] do_syscall_64+0x55/0xa0 [ 477.941211][T11782] ? clear_bhb_loop+0x40/0x90 [ 477.946107][T11782] ? clear_bhb_loop+0x40/0x90 [ 477.950923][T11782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 477.956850][T11782] RIP: 0033:0x7fadb739bf79 [ 477.961309][T11782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.981386][T11782] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.990016][T11782] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 477.998138][T11782] RDX: 0000000000004010 RSI: 0000200000001940 RDI: 0000000000000003 [ 478.006159][T11782] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 478.014356][T11782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.022359][T11782] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 478.030593][T11782] [ 478.101725][ T1130] tipc: Subscription rejected, illegal request [ 478.927568][T11793] netlink: 'syz.2.1888': attribute type 25 has an invalid length. [ 478.953571][T11793] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 479.293580][T11802] syz.3.1892[11802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 479.293844][T11802] syz.3.1892[11802] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 480.490046][T11835] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1900'. [ 480.517053][T11835] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 480.558524][T11835] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 483.335788][T11878] netlink: 'syz.0.1913': attribute type 3 has an invalid length. [ 483.344749][T11878] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1913'. [ 483.770487][ T7056] tipc: Subscription rejected, illegal request [ 484.065728][T11887] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1915'. [ 484.105546][T11887] tc_dump_action: action bad kind [ 484.113921][T11895] bridge0: port 3(team0) entered blocking state [ 484.125897][T11895] bridge0: port 3(team0) entered disabled state [ 484.149640][T11895] bridge0: port 3(team0) entered blocking state [ 484.156712][T11895] bridge0: port 3(team0) entered forwarding state [ 484.251084][T11897] netlink: 'syz.3.1919': attribute type 21 has an invalid length. [ 484.744402][T11911] FAULT_INJECTION: forcing a failure. [ 484.744402][T11911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.773541][T11911] CPU: 1 PID: 11911 Comm: syz.1.1924 Not tainted syzkaller #0 [ 484.781174][T11911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 484.791605][T11911] Call Trace: [ 484.795025][T11911] [ 484.798170][T11911] dump_stack_lvl+0x18c/0x250 [ 484.802997][T11911] ? show_regs_print_info+0x20/0x20 [ 484.808430][T11911] ? load_image+0x400/0x400 [ 484.813062][T11911] ? __lock_acquire+0x7d40/0x7d40 [ 484.818143][T11911] ? snprintf+0xe9/0x140 [ 484.822440][T11911] should_fail_ex+0x39d/0x4d0 [ 484.827347][T11911] _copy_to_user+0x2f/0xa0 [ 484.831810][T11911] simple_read_from_buffer+0xe7/0x150 [ 484.837485][T11911] proc_fail_nth_read+0x1e8/0x260 [ 484.842841][T11911] ? proc_fault_inject_write+0x360/0x360 [ 484.848698][T11911] ? fsnotify_perm+0x271/0x5e0 [ 484.853787][T11911] ? proc_fault_inject_write+0x360/0x360 [ 484.859816][T11911] vfs_read+0x28b/0x970 [ 484.864058][T11911] ? kernel_read+0x1e0/0x1e0 [ 484.868657][T11911] ? __fget_files+0x28/0x4b0 [ 484.873264][T11911] ? __fget_files+0x28/0x4b0 [ 484.877867][T11911] ? __fget_files+0x43d/0x4b0 [ 484.882651][T11911] ? __fdget_pos+0x2a3/0x330 [ 484.887532][T11911] ? ksys_read+0x75/0x260 [ 484.892004][T11911] ksys_read+0x150/0x260 [ 484.896436][T11911] ? vfs_write+0x990/0x990 [ 484.900952][T11911] ? lockdep_hardirqs_on+0x98/0x150 [ 484.906880][T11911] do_syscall_64+0x55/0xa0 [ 484.911580][T11911] ? clear_bhb_loop+0x40/0x90 [ 484.916364][T11911] ? clear_bhb_loop+0x40/0x90 [ 484.921155][T11911] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 484.927056][T11911] RIP: 0033:0x7fadb735c84e [ 484.931740][T11911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 484.952145][T11911] RSP: 002b:00007fadb8265fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.960688][T11911] RAX: ffffffffffffffda RBX: 00007fadb82666c0 RCX: 00007fadb735c84e [ 484.968816][T11911] RDX: 000000000000000f RSI: 00007fadb82660a0 RDI: 0000000000000006 [ 484.977006][T11911] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 484.985372][T11911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.993540][T11911] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 485.001623][T11911] [ 485.616571][T11930] FAULT_INJECTION: forcing a failure. [ 485.616571][T11930] name failslab, interval 1, probability 0, space 0, times 0 [ 485.654608][T11930] CPU: 0 PID: 11930 Comm: syz.0.1930 Not tainted syzkaller #0 [ 485.662606][T11930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 485.672889][T11930] Call Trace: [ 485.676238][T11930] [ 485.679572][T11930] dump_stack_lvl+0x18c/0x250 [ 485.684569][T11930] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 485.689921][T11930] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.696050][T11930] ? show_regs_print_info+0x20/0x20 [ 485.701393][T11930] ? load_image+0x400/0x400 [ 485.706374][T11930] should_fail_ex+0x39d/0x4d0 [ 485.711117][T11930] should_failslab+0x9/0x20 [ 485.711836][T11932] netlink: 'syz.2.1931': attribute type 1 has an invalid length. [ 485.715794][T11930] slab_pre_alloc_hook+0x59/0x310 [ 485.715890][T11930] ? nf_ct_ext_add+0x1ab/0x440 [ 485.715916][T11930] ? nf_ct_ext_add+0x1ab/0x440 [ 485.715938][T11930] __kmem_cache_alloc_node+0x53/0x250 [ 485.715978][T11930] ? nf_ct_ext_add+0x1ab/0x440 [ 485.716002][T11930] __kmalloc_node_track_caller+0xa2/0x230 [ 485.716035][T11930] krealloc+0x86/0x120 [ 485.716062][T11930] nf_ct_ext_add+0x1ab/0x440 [ 485.716093][T11930] init_conntrack+0x69c/0xf10 [ 485.724186][T11932] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.1931'. [ 485.728965][T11930] ? early_drop+0x7f0/0x7f0 [ 485.729000][T11930] ? nf_conntrack_find_get+0x650/0x650 [ 485.729028][T11930] ? __siphash_unaligned+0x22e/0x3a0 [ 485.729057][T11930] nf_conntrack_in+0xc06/0x15c0 [ 485.799378][T11930] ? nf_ct_pernet+0x270/0x270 [ 485.804317][T11930] ? ip6t_do_table+0x1d9/0x1510 [ 485.809395][T11930] ? ip6t_alloc_initial_table+0x640/0x640 [ 485.815343][T11930] ? __lock_acquire+0x1273/0x7d40 [ 485.820503][T11930] ? ipv6_defrag+0x2d6/0x3a0 [ 485.825389][T11930] ? ipv6_conntrack_in+0x20/0x20 [ 485.830450][T11930] nf_hook_slow+0xbd/0x200 [ 485.835021][T11930] ? rcu_read_unlock+0xa0/0xa0 [ 485.840192][T11930] nf_hook+0x228/0x390 [ 485.844297][T11930] ? ip6_mtu+0x7d/0x3f0 [ 485.848682][T11930] ? nf_hook+0xa2/0x390 [ 485.852973][T11930] ? ip6_make_skb+0x520/0x520 [ 485.857923][T11930] ? rcu_read_unlock+0xa0/0xa0 [ 485.863087][T11930] ? ip6_mtu+0x7d/0x3f0 [ 485.867276][T11930] ? ip6_mtu+0x7d/0x3f0 [ 485.871464][T11930] ip6_xmit+0x1000/0x1890 [ 485.875997][T11930] ? rcu_read_unlock+0xa0/0xa0 [ 485.880788][T11930] ? kasan_set_track+0x5f/0x70 [ 485.885864][T11930] ? ip6_autoflowlabel+0xe0/0xe0 [ 485.890862][T11930] ? read_lock_is_recursive+0x20/0x20 [ 485.896290][T11930] sctp_v6_xmit+0x9a4/0x1200 [ 485.900918][T11930] ? sctp_v6_xmit+0x61d/0x1200 [ 485.905821][T11930] ? __sctp_v6_cmp_addr+0x510/0x510 [ 485.911222][T11930] ? sctp_compute_cksum+0xe0/0xe0 [ 485.916485][T11930] ? __skb_checksum+0x752/0x800 [ 485.921402][T11930] sctp_packet_transmit+0x247d/0x2a30 [ 485.927451][T11930] sctp_packet_singleton+0x235/0x340 [ 485.932899][T11930] ? sctp_outq_select_transport+0x570/0x570 [ 485.939112][T11930] ? sctp_outq_select_transport+0x45d/0x570 [ 485.945283][T11930] ? sctp_transport_burst_limited+0x197/0x280 [ 485.951473][T11930] sctp_outq_flush+0x50e/0x3120 [ 485.956359][T11930] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 485.962307][T11930] ? _raw_spin_unlock+0x40/0x40 [ 485.967356][T11930] ? rcu_is_watching+0x15/0xb0 [ 485.972150][T11930] ? enqueue_timer+0x23d/0x550 [ 485.976949][T11930] ? sctp_outq_tail+0x8a0/0x8a0 [ 485.982195][T11930] ? sctp_outq_tail+0x604/0x8a0 [ 485.987082][T11930] ? sctp_outq_uncork+0x4d/0xa0 [ 485.991978][T11930] sctp_do_sm+0x533b/0x5a60 [ 485.996537][T11930] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 486.002809][T11930] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 486.007906][T11930] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 486.013858][T11930] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 486.019363][T11930] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 486.024941][T11930] ? __asan_memcpy+0x40/0x70 [ 486.029661][T11930] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 486.035176][T11930] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 486.041103][T11930] ? __sctp_connect+0xd80/0xd80 [ 486.046084][T11930] ? __local_bh_enable_ip+0x13a/0x1c0 [ 486.051577][T11930] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 486.057179][T11930] ? security_sctp_bind_connect+0x89/0xb0 [ 486.063049][T11930] sctp_sendmsg+0x1b83/0x28c0 [ 486.067865][T11930] ? sctp_getsockopt+0xb60/0xb60 [ 486.072828][T11930] ? aa_sk_perm+0x83c/0x970 [ 486.077381][T11930] ? aa_af_perm+0x330/0x330 [ 486.081915][T11930] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 486.088572][T11930] ? sock_rps_record_flow+0x19/0x3f0 [ 486.093899][T11930] ? inet_sendmsg+0xe9/0x2f0 [ 486.098532][T11930] ? inet_send_prepare+0x260/0x260 [ 486.103682][T11930] ____sys_sendmsg+0x5ba/0x960 [ 486.108494][T11930] ? __lock_acquire+0x7d40/0x7d40 [ 486.113814][T11930] ? __asan_memset+0x22/0x40 [ 486.118615][T11930] ? __sys_sendmsg_sock+0x30/0x30 [ 486.123890][T11930] ? __import_iovec+0x5f2/0x850 [ 486.129060][T11930] ? import_iovec+0x73/0xa0 [ 486.133602][T11930] ___sys_sendmsg+0x2a6/0x360 [ 486.138314][T11930] ? get_pid_task+0x20/0x1e0 [ 486.143034][T11930] ? __sys_sendmsg+0x2a0/0x2a0 [ 486.147892][T11930] ? __lock_acquire+0x7d40/0x7d40 [ 486.152977][T11930] __se_sys_sendmsg+0x1c2/0x2b0 [ 486.158297][T11930] ? __x64_sys_sendmsg+0x80/0x80 [ 486.163278][T11930] ? lockdep_hardirqs_on+0x98/0x150 [ 486.168686][T11930] do_syscall_64+0x55/0xa0 [ 486.173270][T11930] ? clear_bhb_loop+0x40/0x90 [ 486.178072][T11930] ? clear_bhb_loop+0x40/0x90 [ 486.182897][T11930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.188946][T11930] RIP: 0033:0x7f5e7b59bf79 [ 486.193658][T11930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.213825][T11930] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.222445][T11930] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 486.230561][T11930] RDX: 0000000000040844 RSI: 00002000000000c0 RDI: 0000000000000004 [ 486.238660][T11930] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 486.246831][T11930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.254932][T11930] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 486.263213][T11930] [ 486.565092][ T1130] tipc: Subscription rejected, illegal request [ 486.616851][T11941] netlink: 'syz.1.1935': attribute type 6 has an invalid length. [ 486.626155][T11941] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1935'. [ 486.729250][T11937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1932'. [ 486.800982][T11937] tc_dump_action: action bad kind [ 486.867621][T11945] netlink: 'syz.2.1936': attribute type 25 has an invalid length. [ 486.898695][T11945] netlink: 'syz.2.1936': attribute type 29 has an invalid length. [ 487.565095][T11957] netlink: 'syz.0.1941': attribute type 1 has an invalid length. [ 487.573457][T11957] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1941'. [ 488.219434][T11968] netlink: 'syz.1.1945': attribute type 1 has an invalid length. [ 488.232094][T11968] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1945'. [ 488.739531][T11983] FAULT_INJECTION: forcing a failure. [ 488.739531][T11983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.752862][T11983] CPU: 0 PID: 11983 Comm: syz.1.1949 Not tainted syzkaller #0 [ 488.760547][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.770832][T11983] Call Trace: [ 488.774151][T11983] [ 488.777117][T11983] dump_stack_lvl+0x18c/0x250 [ 488.781957][T11983] ? show_regs_print_info+0x20/0x20 [ 488.787312][T11983] ? load_image+0x400/0x400 [ 488.791983][T11983] ? __lock_acquire+0x7d40/0x7d40 [ 488.797159][T11983] ? snprintf+0xe9/0x140 [ 488.801457][T11983] should_fail_ex+0x39d/0x4d0 [ 488.806281][T11983] _copy_to_user+0x2f/0xa0 [ 488.810780][T11983] simple_read_from_buffer+0xe7/0x150 [ 488.816247][T11983] proc_fail_nth_read+0x1e8/0x260 [ 488.821340][T11983] ? proc_fault_inject_write+0x360/0x360 [ 488.827214][T11983] ? fsnotify_perm+0x271/0x5e0 [ 488.832573][T11983] ? proc_fault_inject_write+0x360/0x360 [ 488.838535][T11983] vfs_read+0x28b/0x970 [ 488.842760][T11983] ? kernel_read+0x1e0/0x1e0 [ 488.847404][T11983] ? __fget_files+0x28/0x4b0 [ 488.852482][T11983] ? __fget_files+0x28/0x4b0 [ 488.857121][T11983] ? __fget_files+0x43d/0x4b0 [ 488.862036][T11983] ? __fdget_pos+0x2a3/0x330 [ 488.866837][T11983] ? ksys_read+0x75/0x260 [ 488.871227][T11983] ksys_read+0x150/0x260 [ 488.875802][T11983] ? vfs_write+0x990/0x990 [ 488.880287][T11983] ? lockdep_hardirqs_on+0x98/0x150 [ 488.885744][T11983] do_syscall_64+0x55/0xa0 [ 488.890414][T11983] ? clear_bhb_loop+0x40/0x90 [ 488.895335][T11983] ? clear_bhb_loop+0x40/0x90 [ 488.900153][T11983] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.906097][T11983] RIP: 0033:0x7fadb735c84e [ 488.910862][T11983] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 488.931677][T11983] RSP: 002b:00007fadb8265fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 488.942143][T11983] RAX: ffffffffffffffda RBX: 00007fadb82666c0 RCX: 00007fadb735c84e [ 488.950368][T11983] RDX: 000000000000000f RSI: 00007fadb82660a0 RDI: 0000000000000004 [ 488.958754][T11983] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 488.967202][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.975821][T11983] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 488.976817][T11987] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1950'. [ 488.984200][T11983] [ 490.038376][T12010] netlink: 202920 bytes leftover after parsing attributes in process `syz.1.1956'. [ 490.056954][T12014] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 490.065228][T12014] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.1955'. [ 491.902748][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1972'. [ 491.915472][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1972'. [ 491.940602][T12062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1972'. [ 491.998787][T12064] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 492.139816][T12068] netlink: 'syz.0.1975': attribute type 1 has an invalid length. [ 492.148259][T12068] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1975'. [ 492.475639][T12075] netlink: 'syz.1.1976': attribute type 25 has an invalid length. [ 492.483944][T12075] netlink: 'syz.1.1976': attribute type 29 has an invalid length. [ 492.967744][T12083] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1979'. [ 494.232037][T12108] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 494.256196][T12108] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.1987'. [ 494.860381][T12118] netlink: 'syz.0.1988': attribute type 25 has an invalid length. [ 495.007413][T12118] netlink: 'syz.0.1988': attribute type 29 has an invalid length. [ 495.162575][T12121] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1990'. [ 495.213857][T12121] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 495.288476][T12123] netlink: 'syz.2.1990': attribute type 10 has an invalid length. [ 495.312254][T12123] hsr0: entered promiscuous mode [ 497.030470][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2000'. [ 497.046126][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2000'. [ 497.825453][T12161] netlink: 'syz.0.2001': attribute type 25 has an invalid length. [ 497.861806][T12161] netlink: 'syz.0.2001': attribute type 29 has an invalid length. [ 498.055161][T12168] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 500.004278][T12199] syzkaller0: entered promiscuous mode [ 500.020370][T12199] syzkaller0: entered allmulticast mode [ 501.944444][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.952153][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.670977][T12238] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2023'. [ 503.729697][T12237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2023'. [ 504.358476][T12247] delete_channel: no stack [ 504.855937][T12263] netlink: 'syz.1.2032': attribute type 10 has an invalid length. [ 505.263815][T12276] netlink: 'syz.0.2037': attribute type 1 has an invalid length. [ 505.276946][T12276] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2037'. [ 505.480016][T12279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2036'. [ 505.521495][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2036'. [ 505.930788][T12286] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2040'. [ 506.279753][T12300] netlink: 'syz.2.2045': attribute type 10 has an invalid length. [ 506.420438][T12306] netlink: 'syz.1.2048': attribute type 1 has an invalid length. [ 506.429074][T12306] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2048'. [ 506.630180][T12311] FAULT_INJECTION: forcing a failure. [ 506.630180][T12311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 506.648300][T12311] CPU: 1 PID: 12311 Comm: syz.3.2049 Not tainted syzkaller #0 [ 506.655936][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 506.666207][T12311] Call Trace: [ 506.669781][T12311] [ 506.672752][T12311] dump_stack_lvl+0x18c/0x250 [ 506.677676][T12311] ? show_regs_print_info+0x20/0x20 [ 506.682972][T12311] ? load_image+0x400/0x400 [ 506.687611][T12311] ? __lock_acquire+0x7d40/0x7d40 [ 506.692851][T12311] should_fail_ex+0x39d/0x4d0 [ 506.698254][T12311] prepare_alloc_pages+0x1e2/0x5f0 [ 506.703424][T12311] __alloc_pages+0x134/0x460 [ 506.708073][T12311] ? zone_statistics+0x170/0x170 [ 506.713157][T12311] ? alloc_pages+0x4dc/0x740 [ 506.717780][T12311] ? do_raw_spin_unlock+0x121/0x230 [ 506.723024][T12311] __get_free_pages+0xc/0x30 [ 506.727643][T12311] kasan_populate_vmalloc_pte+0x35/0x100 [ 506.733323][T12311] __apply_to_page_range+0x860/0xdd0 [ 506.738675][T12311] ? kasan_populate_vmalloc+0x70/0x70 [ 506.744085][T12311] ? apply_to_page_range+0x50/0x50 [ 506.749246][T12311] ? do_raw_spin_unlock+0x121/0x230 [ 506.754589][T12311] alloc_vmap_area+0x1d0c/0x1e30 [ 506.759601][T12311] ? vm_map_ram+0xcb0/0xcb0 [ 506.764155][T12311] ? rcu_is_watching+0x15/0xb0 [ 506.768977][T12311] __get_vm_area_node+0x162/0x370 [ 506.774164][T12311] __vmalloc_node_range+0x36e/0x1330 [ 506.779615][T12311] ? sock_hash_alloc+0x261/0x4d0 [ 506.784742][T12311] ? free_vm_area+0x50/0x50 [ 506.789280][T12311] ? bpf_map_area_alloc+0x5e/0x110 [ 506.794455][T12311] ? rcu_is_watching+0x15/0xb0 [ 506.799264][T12311] ? bpf_map_area_alloc+0x5e/0x110 [ 506.804412][T12311] bpf_map_area_alloc+0xf1/0x110 [ 506.809414][T12311] ? sock_hash_alloc+0x261/0x4d0 [ 506.814766][T12311] sock_hash_alloc+0x261/0x4d0 [ 506.820020][T12311] map_create+0x877/0x12f0 [ 506.824482][T12311] ? bpf_lsm_bpf+0x9/0x10 [ 506.828927][T12311] __sys_bpf+0x651/0x890 [ 506.833286][T12311] ? bpf_link_show_fdinfo+0x390/0x390 [ 506.838792][T12311] ? lock_chain_count+0x20/0x20 [ 506.843680][T12311] __x64_sys_bpf+0x7c/0x90 [ 506.848378][T12311] do_syscall_64+0x55/0xa0 [ 506.852939][T12311] ? clear_bhb_loop+0x40/0x90 [ 506.857942][T12311] ? clear_bhb_loop+0x40/0x90 [ 506.862726][T12311] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.868748][T12311] RIP: 0033:0x7f1b4d99bf79 [ 506.873355][T12311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.894836][T12311] RSP: 002b:00007f1b4e8fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.904285][T12311] RAX: ffffffffffffffda RBX: 00007f1b4dc15fa0 RCX: 00007f1b4d99bf79 [ 506.912462][T12311] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 506.920913][T12311] RBP: 00007f1b4e8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 506.929490][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.937742][T12311] R13: 00007f1b4dc16038 R14: 00007f1b4dc15fa0 R15: 00007ffd26ddb148 [ 506.946190][T12311] [ 507.272557][T12322] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2050'. [ 507.433529][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2050'. [ 507.552406][T12329] netlink: 'syz.0.2054': attribute type 10 has an invalid length. [ 508.332448][T12347] netlink: 'syz.1.2060': attribute type 1 has an invalid length. [ 508.352838][T12347] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2060'. [ 509.044709][T12361] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2065'. [ 510.142199][T12382] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 510.156424][T12382] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2072'. [ 514.254456][T12415] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 514.400594][T12419] FAULT_INJECTION: forcing a failure. [ 514.400594][T12419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.415644][T12420] FAULT_INJECTION: forcing a failure. [ 514.415644][T12420] name failslab, interval 1, probability 0, space 0, times 0 [ 514.429119][T12420] CPU: 0 PID: 12420 Comm: syz.0.2084 Not tainted syzkaller #0 [ 514.436792][T12420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.447306][T12420] Call Trace: [ 514.450772][T12420] [ 514.453914][T12420] dump_stack_lvl+0x18c/0x250 [ 514.458625][T12420] ? lock_chain_count+0x20/0x20 [ 514.463584][T12420] ? show_regs_print_info+0x20/0x20 [ 514.468814][T12420] ? load_image+0x400/0x400 [ 514.473633][T12420] should_fail_ex+0x39d/0x4d0 [ 514.478437][T12420] should_failslab+0x9/0x20 [ 514.483051][T12420] slab_pre_alloc_hook+0x59/0x310 [ 514.488857][T12420] kmem_cache_alloc+0x5a/0x2d0 [ 514.493959][T12420] ? __inet_hash_connect+0x836/0x1870 [ 514.500024][T12420] __inet_hash_connect+0x836/0x1870 [ 514.505833][T12420] ? inet6_hash_connect+0xe0/0xe0 [ 514.511075][T12420] ? inet_bhash2_reset_saddr+0x80/0x80 [ 514.516807][T12420] ? sk_setup_caps+0x7dc/0xa10 [ 514.521779][T12420] ? inet6_hash_connect+0x7b/0xe0 [ 514.527354][T12420] tcp_v6_connect+0xf5f/0x18d0 [ 514.532423][T12420] ? tcp_v6_pre_connect+0xf0/0xf0 [ 514.537634][T12420] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 514.542843][T12420] ? do_syscall_64+0x55/0xa0 [ 514.547730][T12420] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.554415][T12420] __inet_stream_connect+0x254/0xdc0 [ 514.559859][T12420] ? inet_dgram_connect+0x360/0x360 [ 514.565293][T12420] tcp_sendmsg_fastopen+0x3a7/0x5d0 [ 514.570714][T12420] tcp_sendmsg_locked+0x4610/0x4ba0 [ 514.575931][T12420] ? verify_lock_unused+0x140/0x140 [ 514.581329][T12420] ? verify_lock_unused+0x140/0x140 [ 514.586744][T12420] ? __might_sleep+0xe0/0xe0 [ 514.591478][T12420] ? mark_lock+0x94/0x320 [ 514.595969][T12420] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 514.602122][T12420] ? lock_chain_count+0x20/0x20 [ 514.607261][T12420] ? tcp_set_state+0x680/0x680 [ 514.612065][T12420] tcp_sendmsg+0x2f/0x50 [ 514.616620][T12420] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 514.621833][T12420] ____sys_sendmsg+0x5ba/0x960 [ 514.626723][T12420] ? __lock_acquire+0x7d40/0x7d40 [ 514.631858][T12420] ? __asan_memset+0x22/0x40 [ 514.636559][T12420] ? __sys_sendmsg_sock+0x30/0x30 [ 514.641679][T12420] ? __import_iovec+0x3fa/0x850 [ 514.646654][T12420] ? import_iovec+0x73/0xa0 [ 514.651274][T12420] ___sys_sendmsg+0x2a6/0x360 [ 514.656184][T12420] ? get_pid_task+0x20/0x1e0 [ 514.660996][T12420] ? __sys_sendmsg+0x2a0/0x2a0 [ 514.665961][T12420] ? __lock_acquire+0x7d40/0x7d40 [ 514.671131][T12420] __se_sys_sendmsg+0x1c2/0x2b0 [ 514.676088][T12420] ? __x64_sys_sendmsg+0x80/0x80 [ 514.681222][T12420] ? lockdep_hardirqs_on+0x98/0x150 [ 514.686646][T12420] do_syscall_64+0x55/0xa0 [ 514.691180][T12420] ? clear_bhb_loop+0x40/0x90 [ 514.695878][T12420] ? clear_bhb_loop+0x40/0x90 [ 514.700667][T12420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.706671][T12420] RIP: 0033:0x7f5e7b59bf79 [ 514.711379][T12420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.731296][T12420] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 514.739738][T12420] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 514.747906][T12420] RDX: 00000000240440d1 RSI: 0000200000000000 RDI: 0000000000000003 [ 514.755915][T12420] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 514.764082][T12420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.772418][T12420] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 514.780712][T12420] [ 514.785114][T12419] CPU: 0 PID: 12419 Comm: syz.2.2085 Not tainted syzkaller #0 [ 514.792869][T12419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.803230][T12419] Call Trace: [ 514.806567][T12419] [ 514.809621][T12419] dump_stack_lvl+0x18c/0x250 [ 514.814369][T12419] ? show_regs_print_info+0x20/0x20 [ 514.819705][T12419] ? load_image+0x400/0x400 [ 514.824262][T12419] ? __might_fault+0xaa/0x120 [ 514.829254][T12419] ? __lock_acquire+0x7d40/0x7d40 [ 514.834634][T12419] should_fail_ex+0x39d/0x4d0 [ 514.839637][T12419] _copy_to_user+0x2f/0xa0 [ 514.844139][T12419] bpf_test_finish+0x25a/0x650 [ 514.849220][T12419] ? convert___skb_to_skb+0x590/0x590 [ 514.854728][T12419] ? convert_skb_to___skb+0x420/0x420 [ 514.860247][T12419] ? slab_build_skb+0x25f/0x3f0 [ 514.862717][T12423] netlink: 'syz.0.2086': attribute type 1 has an invalid length. [ 514.865321][T12419] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 514.865370][T12419] ? cpu_online+0x60/0x60 [ 514.865390][T12419] bpf_prog_test_run+0x321/0x390 [ 514.865432][T12419] __sys_bpf+0x49d/0x890 [ 514.865455][T12419] ? bpf_link_show_fdinfo+0x390/0x390 [ 514.865491][T12419] ? lock_chain_count+0x20/0x20 [ 514.873670][T12423] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2086'. [ 514.878865][T12419] __x64_sys_bpf+0x7c/0x90 [ 514.878905][T12419] do_syscall_64+0x55/0xa0 [ 514.878930][T12419] ? clear_bhb_loop+0x40/0x90 [ 514.878950][T12419] ? clear_bhb_loop+0x40/0x90 [ 514.878971][T12419] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 514.878991][T12419] RIP: 0033:0x7f737439bf79 [ 514.879011][T12419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.879028][T12419] RSP: 002b:00007f737525d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.879051][T12419] RAX: ffffffffffffffda RBX: 00007f7374615fa0 RCX: 00007f737439bf79 [ 514.979598][T12419] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 514.988046][T12419] RBP: 00007f737525d090 R08: 0000000000000000 R09: 0000000000000000 [ 514.996484][T12419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.004737][T12419] R13: 00007f7374616038 R14: 00007f7374615fa0 R15: 00007ffcd9b761d8 [ 515.012919][T12419] [ 515.434698][T12438] netlink: 'syz.2.2091': attribute type 10 has an invalid length. [ 515.444019][T12438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2091'. [ 515.471518][T12438] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.492974][T12438] bridge0: port 3(team0) entered blocking state [ 515.515961][T12438] bridge0: port 3(team0) entered disabled state [ 516.145353][T12450] netlink: 'syz.1.2095': attribute type 27 has an invalid length. [ 516.186355][T12450] netlink: 'syz.1.2095': attribute type 3 has an invalid length. [ 516.194522][T12450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2095'. [ 516.490690][T12460] netlink: 'syz.1.2100': attribute type 1 has an invalid length. [ 516.500329][T12460] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2100'. [ 516.949939][T12472] FAULT_INJECTION: forcing a failure. [ 516.949939][T12472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.046254][T12472] CPU: 1 PID: 12472 Comm: syz.3.2104 Not tainted syzkaller #0 [ 517.054169][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 517.064342][T12472] Call Trace: [ 517.067747][T12472] [ 517.071081][T12472] dump_stack_lvl+0x18c/0x250 [ 517.076122][T12472] ? show_regs_print_info+0x20/0x20 [ 517.081560][T12472] ? load_image+0x400/0x400 [ 517.086588][T12472] ? __might_fault+0xaa/0x120 [ 517.091627][T12472] ? __lock_acquire+0x7d40/0x7d40 [ 517.097242][T12472] should_fail_ex+0x39d/0x4d0 [ 517.102350][T12472] _copy_to_iter+0x1ce/0x1120 [ 517.107352][T12472] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 517.113829][T12472] ? lock_chain_count+0x20/0x20 [ 517.118892][T12472] ? iov_iter_init+0x1e0/0x1e0 [ 517.124203][T12472] ? __local_bh_enable_ip+0x13a/0x1c0 [ 517.129887][T12472] ? lockdep_hardirqs_on+0x98/0x150 [ 517.135408][T12472] ? page_copy_sane+0x16a/0x270 [ 517.140672][T12472] copy_page_to_iter+0xa7/0x150 [ 517.146003][T12472] sk_msg_recvmsg+0x28c/0xc20 [ 517.150843][T12472] unix_bpf_recvmsg+0x5b2/0xde0 [ 517.155741][T12472] ? unix_stream_bpf_update_proto+0x2f0/0x2f0 [ 517.162030][T12472] ? wait_woken+0x180/0x180 [ 517.166571][T12472] ? aa_sk_perm+0x83c/0x970 [ 517.171292][T12472] unix_stream_recvmsg+0x150/0x1c0 [ 517.176433][T12472] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 517.181822][T12472] ? __lock_acquire+0x1273/0x7d40 [ 517.186950][T12472] ? __unix_stream_recvmsg+0x150/0x150 [ 517.192605][T12472] ? verify_lock_unused+0x140/0x140 [ 517.197916][T12472] ? aa_sock_msg_perm+0x94/0x150 [ 517.202871][T12472] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 517.208579][T12472] ? security_socket_recvmsg+0x89/0xb0 [ 517.214143][T12472] ? unix_stream_sendmsg+0xbf0/0xbf0 [ 517.219536][T12472] ____sys_recvmsg+0x2ce/0x5e0 [ 517.224515][T12472] ? __sys_recvmsg_sock+0x50/0x50 [ 517.229564][T12472] ? import_iovec+0x73/0xa0 [ 517.234210][T12472] ___sys_recvmsg+0x216/0x590 [ 517.239132][T12472] ? __sys_recvmsg+0x2a0/0x2a0 [ 517.244283][T12472] ? ksys_write+0x1c4/0x260 [ 517.248949][T12472] ? __fget_files+0x43d/0x4b0 [ 517.253655][T12472] __x64_sys_recvmsg+0x20c/0x2e0 [ 517.258803][T12472] ? ___sys_recvmsg+0x590/0x590 [ 517.264267][T12472] ? lockdep_hardirqs_on+0x98/0x150 [ 517.269863][T12472] do_syscall_64+0x55/0xa0 [ 517.274324][T12472] ? clear_bhb_loop+0x40/0x90 [ 517.279189][T12472] ? clear_bhb_loop+0x40/0x90 [ 517.284750][T12472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 517.291438][T12472] RIP: 0033:0x7f1b4d99bf79 [ 517.296389][T12472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.316558][T12472] RSP: 002b:00007f1b4e8fd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 517.325473][T12472] RAX: ffffffffffffffda RBX: 00007f1b4dc15fa0 RCX: 00007f1b4d99bf79 [ 517.333730][T12472] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000003 [ 517.341931][T12472] RBP: 00007f1b4e8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 517.350095][T12472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.358339][T12472] R13: 00007f1b4dc16038 R14: 00007f1b4dc15fa0 R15: 00007ffd26ddb148 [ 517.366864][T12472] [ 517.399927][T12477] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2105'. [ 519.136736][T12505] wg2: entered allmulticast mode [ 519.208499][T12506] wg2: entered promiscuous mode [ 520.583918][T12524] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2120'. [ 522.152633][T12528] netlink: 'syz.0.2122': attribute type 25 has an invalid length. [ 522.161729][T12528] netlink: 'syz.0.2122': attribute type 29 has an invalid length. [ 523.570124][T12551] netlink: 'syz.0.2127': attribute type 9 has an invalid length. [ 523.597619][T12551] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2127'. [ 524.382065][T12564] netlink: 'syz.1.2133': attribute type 25 has an invalid length. [ 524.404838][T12564] netlink: 'syz.1.2133': attribute type 29 has an invalid length. [ 524.980997][T12570] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2134'. [ 525.178445][T12575] netlink: 'syz.1.2136': attribute type 25 has an invalid length. [ 525.210144][T12575] netlink: 'syz.1.2136': attribute type 29 has an invalid length. [ 526.329752][T12588] netlink: 'syz.1.2139': attribute type 1 has an invalid length. [ 526.348138][T12588] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2139'. [ 527.597304][T12609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'. [ 528.692226][T12628] netlink: 'syz.0.2151': attribute type 1 has an invalid length. [ 528.700665][T12628] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2151'. [ 528.901500][T12631] wg2: entered allmulticast mode [ 528.948742][T12636] netlink: 'syz.1.2153': attribute type 25 has an invalid length. [ 528.972579][T12636] netlink: 'syz.1.2153': attribute type 29 has an invalid length. [ 529.010640][T12631] wg2: entered promiscuous mode [ 529.059598][T12641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 529.515356][T12644] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.570812][T12644] bridge0: entered allmulticast mode [ 529.844569][T12653] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2159'. [ 529.858115][T12653] bridge_slave_1: default FDB implementation only supports local addresses [ 529.981531][T12663] netlink: 'syz.0.2163': attribute type 1 has an invalid length. [ 529.991445][T12663] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2163'. [ 530.307685][T12671] wg2: left promiscuous mode [ 530.463337][T12673] wg2: entered promiscuous mode [ 530.478788][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 530.501650][T12679] netlink: 'syz.0.2174': attribute type 1 has an invalid length. [ 530.549183][T12679] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2174'. [ 530.666110][T12686] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2169'. [ 531.155987][T12694] macsec0: entered promiscuous mode [ 531.836899][T12711] wg2: entered allmulticast mode [ 531.991310][T12710] wg2: left promiscuous mode [ 532.227675][T12721] netlink: 'syz.1.2180': attribute type 25 has an invalid length. [ 532.239082][T12721] netlink: 'syz.1.2180': attribute type 29 has an invalid length. [ 532.252326][T12719] netlink: 'syz.0.2181': attribute type 1 has an invalid length. [ 532.261355][T12719] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2181'. [ 532.274360][T12716] wg2: entered promiscuous mode [ 532.666031][T12727] netlink: 'syz.2.2183': attribute type 10 has an invalid length. [ 532.800690][T12728] netlink: 'syz.2.2183': attribute type 10 has an invalid length. [ 532.821673][T12728] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2183'. [ 532.943637][T12738] FAULT_INJECTION: forcing a failure. [ 532.943637][T12738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.962449][T12738] CPU: 0 PID: 12738 Comm: syz.1.2187 Not tainted syzkaller #0 [ 532.970408][T12738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 532.980676][T12738] Call Trace: [ 532.984343][T12738] [ 532.987566][T12738] dump_stack_lvl+0x18c/0x250 [ 532.992290][T12738] ? show_regs_print_info+0x20/0x20 [ 532.997533][T12738] ? load_image+0x400/0x400 [ 533.002087][T12738] ? __might_fault+0xaa/0x120 [ 533.006887][T12738] ? __lock_acquire+0x7d40/0x7d40 [ 533.011954][T12738] should_fail_ex+0x39d/0x4d0 [ 533.016765][T12738] _copy_from_user+0x2f/0xe0 [ 533.021515][T12738] generic_map_update_batch+0x54b/0x810 [ 533.027128][T12738] ? rcu_read_unlock+0xa0/0xa0 [ 533.031936][T12738] ? __fdget+0x180/0x210 [ 533.036246][T12738] ? rcu_read_unlock+0xa0/0xa0 [ 533.041120][T12738] bpf_map_do_batch+0x3d7/0x610 [ 533.046008][T12738] __sys_bpf+0x381/0x890 [ 533.050291][T12738] ? bpf_link_show_fdinfo+0x390/0x390 [ 533.056264][T12738] ? lock_chain_count+0x20/0x20 [ 533.061248][T12738] __x64_sys_bpf+0x7c/0x90 [ 533.065712][T12738] do_syscall_64+0x55/0xa0 [ 533.070168][T12738] ? clear_bhb_loop+0x40/0x90 [ 533.074887][T12738] ? clear_bhb_loop+0x40/0x90 [ 533.079688][T12738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 533.085884][T12738] RIP: 0033:0x7fadb739bf79 [ 533.090441][T12738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.110431][T12738] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 533.118963][T12738] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 533.127053][T12738] RDX: 0000000000000038 RSI: 0000200000000900 RDI: 000000000000001a [ 533.135061][T12738] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 533.143243][T12738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.151588][T12738] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 533.159609][T12738] [ 533.944580][T12752] wg2: left promiscuous mode [ 534.144787][T12755] validate_nla: 4 callbacks suppressed [ 534.144804][T12755] netlink: 'syz.2.2193': attribute type 1 has an invalid length. [ 534.215619][T12755] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2193'. [ 534.759886][T12759] wg2: entered promiscuous mode [ 534.962722][T12768] IPv6: Can't replace route, no match found [ 535.298959][T12770] FAULT_INJECTION: forcing a failure. [ 535.298959][T12770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.448909][T12770] CPU: 0 PID: 12770 Comm: syz.0.2198 Not tainted syzkaller #0 [ 535.456449][T12770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.466714][T12770] Call Trace: [ 535.470107][T12770] [ 535.473148][T12770] dump_stack_lvl+0x18c/0x250 [ 535.477958][T12770] ? show_regs_print_info+0x20/0x20 [ 535.483291][T12770] ? load_image+0x400/0x400 [ 535.487923][T12770] ? __might_fault+0xaa/0x120 [ 535.492637][T12770] ? __lock_acquire+0x7d40/0x7d40 [ 535.497789][T12770] should_fail_ex+0x39d/0x4d0 [ 535.502611][T12770] _copy_from_iter+0x1d9/0x12e0 [ 535.507595][T12770] ? __might_fault+0xaa/0x120 [ 535.512389][T12770] ? _copy_from_iter+0x24e/0x12e0 [ 535.517499][T12770] ? __virt_addr_valid+0x18c/0x540 [ 535.522769][T12770] ? __lock_acquire+0x7d40/0x7d40 [ 535.528098][T12770] ? copyout_mc+0x70/0x70 [ 535.532751][T12770] ? copyout_mc+0x70/0x70 [ 535.537210][T12770] ? __virt_addr_valid+0x18c/0x540 [ 535.542358][T12770] ? page_copy_sane+0x16a/0x270 [ 535.547352][T12770] copy_page_from_iter+0x7b/0x100 [ 535.552675][T12770] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 535.558621][T12770] tun_get_user+0x15db/0x3ca0 [ 535.563519][T12770] ? aa_file_perm+0x11b/0xee0 [ 535.568464][T12770] ? rcu_read_unlock+0xa0/0xa0 [ 535.573628][T12770] ? tun_get+0x1c/0x2e0 [ 535.577826][T12770] ? __lock_acquire+0x7d40/0x7d40 [ 535.583073][T12770] ? tun_get+0x1c/0x2e0 [ 535.587496][T12770] tun_chr_write_iter+0x119/0x200 [ 535.592588][T12770] vfs_write+0x46c/0x990 [ 535.596941][T12770] ? file_end_write+0x250/0x250 [ 535.601945][T12770] ? __fget_files+0x43d/0x4b0 [ 535.606771][T12770] ? __fdget_pos+0x1d8/0x330 [ 535.611401][T12770] ? ksys_write+0x75/0x260 [ 535.615944][T12770] ksys_write+0x150/0x260 [ 535.620357][T12770] ? __ia32_sys_read+0x90/0x90 [ 535.625251][T12770] ? lockdep_hardirqs_on+0x98/0x150 [ 535.630782][T12770] do_syscall_64+0x55/0xa0 [ 535.635243][T12770] ? clear_bhb_loop+0x40/0x90 [ 535.639954][T12770] ? clear_bhb_loop+0x40/0x90 [ 535.645269][T12770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.651211][T12770] RIP: 0033:0x7f5e7b59bf79 [ 535.655657][T12770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.676198][T12770] RSP: 002b:00007f5e7c41d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 535.684841][T12770] RAX: ffffffffffffffda RBX: 00007f5e7b815fa0 RCX: 00007f5e7b59bf79 [ 535.693037][T12770] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 00000000000000c8 [ 535.701129][T12770] RBP: 00007f5e7c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 535.709313][T12770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.717476][T12770] R13: 00007f5e7b816038 R14: 00007f5e7b815fa0 R15: 00007ffdeffd5f58 [ 535.725773][T12770] [ 538.779765][T12815] wg2: left promiscuous mode [ 539.042203][T12820] netlink: 'syz.1.2214': attribute type 25 has an invalid length. [ 539.066886][T12820] netlink: 'syz.1.2214': attribute type 29 has an invalid length. [ 539.921643][T12838] wg2: left promiscuous mode [ 540.152422][T12843] wg2: entered promiscuous mode [ 540.549000][T12857] wg2: left promiscuous mode [ 540.701336][T12857] wg2: entered promiscuous mode [ 541.194233][T12866] wg2: left promiscuous mode [ 542.130415][T12886] netlink: 'syz.1.2241': attribute type 25 has an invalid length. [ 542.144825][T12886] netlink: 'syz.1.2241': attribute type 29 has an invalid length. [ 542.885082][T12909] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2239'. [ 544.765067][T12930] netlink: 'syz.1.2246': attribute type 25 has an invalid length. [ 545.093058][T12930] netlink: 'syz.1.2246': attribute type 29 has an invalid length. [ 545.207199][T12931] wg2: entered promiscuous mode [ 546.037793][T12949] FAULT_INJECTION: forcing a failure. [ 546.037793][T12949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.156283][T12949] CPU: 0 PID: 12949 Comm: syz.3.2254 Not tainted syzkaller #0 [ 546.163917][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 546.174168][T12949] Call Trace: [ 546.177467][T12949] [ 546.180434][T12949] dump_stack_lvl+0x18c/0x250 [ 546.185695][T12949] ? show_regs_print_info+0x20/0x20 [ 546.191031][T12949] ? load_image+0x400/0x400 [ 546.195657][T12949] ? __might_fault+0xaa/0x120 [ 546.200458][T12949] ? __lock_acquire+0x7d40/0x7d40 [ 546.205629][T12949] should_fail_ex+0x39d/0x4d0 [ 546.210391][T12949] _copy_from_iter+0x1d9/0x12e0 [ 546.215473][T12949] ? __virt_addr_valid+0x18c/0x540 [ 546.220888][T12949] ? __lock_acquire+0x7d40/0x7d40 [ 546.226121][T12949] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 546.231721][T12949] ? copyout_mc+0x70/0x70 [ 546.236094][T12949] ? __virt_addr_valid+0x18c/0x540 [ 546.241327][T12949] ? __virt_addr_valid+0x18c/0x540 [ 546.246820][T12949] ? __virt_addr_valid+0x469/0x540 [ 546.252165][T12949] ? __check_object_size+0x506/0xa20 [ 546.257805][T12949] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 546.264203][T12949] ? skb_put+0x11b/0x210 [ 546.269189][T12949] tun_get_user+0x15db/0x3ca0 [ 546.274003][T12949] ? aa_file_perm+0x11b/0xee0 [ 546.278808][T12949] ? rcu_read_unlock+0xa0/0xa0 [ 546.283629][T12949] ? tun_get+0x1c/0x2e0 [ 546.287817][T12949] ? __lock_acquire+0x7d40/0x7d40 [ 546.292882][T12949] ? tun_get+0x1c/0x2e0 [ 546.297091][T12949] tun_chr_write_iter+0x119/0x200 [ 546.302260][T12949] vfs_write+0x46c/0x990 [ 546.306657][T12949] ? file_end_write+0x250/0x250 [ 546.311568][T12949] ? __fget_files+0x43d/0x4b0 [ 546.316306][T12949] ? __fdget_pos+0x1d8/0x330 [ 546.321110][T12949] ? ksys_write+0x75/0x260 [ 546.325566][T12949] ksys_write+0x150/0x260 [ 546.330107][T12949] ? __ia32_sys_read+0x90/0x90 [ 546.335092][T12949] ? lockdep_hardirqs_on+0x98/0x150 [ 546.340475][T12949] do_syscall_64+0x55/0xa0 [ 546.345044][T12949] ? clear_bhb_loop+0x40/0x90 [ 546.349773][T12949] ? clear_bhb_loop+0x40/0x90 [ 546.354501][T12949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 546.360439][T12949] RIP: 0033:0x7f1b4d99bf79 [ 546.365373][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.385900][T12949] RSP: 002b:00007f1b4e8fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 546.394441][T12949] RAX: ffffffffffffffda RBX: 00007f1b4dc15fa0 RCX: 00007f1b4d99bf79 [ 546.402625][T12949] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 546.410733][T12949] RBP: 00007f1b4e8fd090 R08: 0000000000000000 R09: 0000000000000000 [ 546.418972][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.427266][T12949] R13: 00007f1b4dc16038 R14: 00007f1b4dc15fa0 R15: 00007ffd26ddb148 [ 546.435627][T12949] [ 546.458739][T12944] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2252'. [ 546.471045][T12952] netlink: 'syz.0.2255': attribute type 29 has an invalid length. [ 546.498879][T12952] netlink: 'syz.0.2255': attribute type 29 has an invalid length. [ 546.519278][T12952] netlink: 'syz.0.2255': attribute type 29 has an invalid length. [ 550.011348][T12993] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2267'. [ 552.309976][T13030] netlink: 'syz.3.2277': attribute type 3 has an invalid length. [ 552.318928][T13030] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2277'. [ 552.347380][T13034] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2279'. [ 552.651680][T13038] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2280'. [ 553.023659][T13042] wg2: entered promiscuous mode [ 554.606559][T13071] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 556.846646][T13082] netlink: 'syz.3.2299': attribute type 29 has an invalid length. [ 556.855131][T13082] netlink: 'syz.3.2299': attribute type 29 has an invalid length. [ 556.876591][T13082] netlink: 'syz.3.2299': attribute type 29 has an invalid length. [ 557.187585][T13089] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 557.196898][T13089] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2301'. [ 557.343416][T13095] FAULT_INJECTION: forcing a failure. [ 557.343416][T13095] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.357655][T13095] CPU: 0 PID: 13095 Comm: syz.1.2303 Not tainted syzkaller #0 [ 557.365309][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 557.375559][T13095] Call Trace: [ 557.378876][T13095] [ 557.381848][T13095] dump_stack_lvl+0x18c/0x250 [ 557.386617][T13095] ? show_regs_print_info+0x20/0x20 [ 557.392065][T13095] ? load_image+0x400/0x400 [ 557.396723][T13095] ? __might_fault+0xaa/0x120 [ 557.401538][T13095] ? __lock_acquire+0x7d40/0x7d40 [ 557.406634][T13095] should_fail_ex+0x39d/0x4d0 [ 557.411382][T13095] _copy_from_user+0x2f/0xe0 [ 557.416115][T13095] generic_map_update_batch+0x54b/0x810 [ 557.421711][T13095] ? rcu_read_unlock+0xa0/0xa0 [ 557.426884][T13095] ? __fdget+0x180/0x210 [ 557.431263][T13095] ? rcu_read_unlock+0xa0/0xa0 [ 557.436228][T13095] bpf_map_do_batch+0x3d7/0x610 [ 557.441563][T13095] __sys_bpf+0x381/0x890 [ 557.445922][T13095] ? bpf_link_show_fdinfo+0x390/0x390 [ 557.451436][T13095] ? lock_chain_count+0x20/0x20 [ 557.456430][T13095] __x64_sys_bpf+0x7c/0x90 [ 557.460868][T13095] do_syscall_64+0x55/0xa0 [ 557.465322][T13095] ? clear_bhb_loop+0x40/0x90 [ 557.470031][T13095] ? clear_bhb_loop+0x40/0x90 [ 557.474992][T13095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 557.480902][T13095] RIP: 0033:0x7fadb739bf79 [ 557.485344][T13095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.505275][T13095] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 557.513727][T13095] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 557.521725][T13095] RDX: 0000000000000038 RSI: 00002000000000c0 RDI: 000000000000001a [ 557.529717][T13095] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 557.537795][T13095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 557.545782][T13095] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 557.553893][T13095] [ 558.118704][T13109] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2307'. [ 558.363439][T13114] FAULT_INJECTION: forcing a failure. [ 558.363439][T13114] name failslab, interval 1, probability 0, space 0, times 0 [ 558.380785][T13114] CPU: 1 PID: 13114 Comm: syz.1.2309 Not tainted syzkaller #0 [ 558.388651][T13114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 558.398838][T13114] Call Trace: [ 558.402148][T13114] [ 558.405138][T13114] dump_stack_lvl+0x18c/0x250 [ 558.410126][T13114] ? show_regs_print_info+0x20/0x20 [ 558.415607][T13114] ? load_image+0x400/0x400 [ 558.420227][T13114] ? __might_sleep+0xe0/0xe0 [ 558.424924][T13114] ? __lock_acquire+0x7d40/0x7d40 [ 558.429984][T13114] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 558.435147][T13114] should_fail_ex+0x39d/0x4d0 [ 558.439938][T13114] should_failslab+0x9/0x20 [ 558.444544][T13114] slab_pre_alloc_hook+0x59/0x310 [ 558.449765][T13114] ? sctp_datamsg_from_user+0x88/0xee0 [ 558.455327][T13114] __kmem_cache_alloc_node+0x53/0x250 [ 558.460720][T13114] ? sctp_datamsg_from_user+0x88/0xee0 [ 558.466196][T13114] kmalloc_trace+0x2a/0xe0 [ 558.470639][T13114] sctp_datamsg_from_user+0x88/0xee0 [ 558.475935][T13114] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 558.481851][T13114] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 558.487416][T13114] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 558.492991][T13114] ? __asan_memcpy+0x40/0x70 [ 558.497646][T13114] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 558.503147][T13114] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 558.509429][T13114] ? __sctp_connect+0xd80/0xd80 [ 558.514461][T13114] ? __local_bh_enable_ip+0x13a/0x1c0 [ 558.520072][T13114] ? _local_bh_enable+0xa0/0xa0 [ 558.525120][T13114] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 558.531163][T13114] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 558.537247][T13114] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 558.542819][T13114] ? security_sctp_bind_connect+0x89/0xb0 [ 558.548652][T13114] sctp_sendmsg+0x1b83/0x28c0 [ 558.553560][T13114] ? sctp_getsockopt+0xb60/0xb60 [ 558.558595][T13114] ? aa_sk_perm+0x83c/0x970 [ 558.563131][T13114] ? aa_af_perm+0x330/0x330 [ 558.567664][T13114] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 558.574182][T13114] ? sock_rps_record_flow+0x19/0x3f0 [ 558.579527][T13114] ? inet_sendmsg+0x7c/0x2f0 [ 558.584127][T13114] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 558.589531][T13114] ? security_socket_sendmsg+0x80/0xa0 [ 558.595007][T13114] ? inet_send_prepare+0x260/0x260 [ 558.600220][T13114] ____sys_sendmsg+0x5ba/0x960 [ 558.604992][T13114] ? __lock_acquire+0x7d40/0x7d40 [ 558.610222][T13114] ? __asan_memset+0x22/0x40 [ 558.614836][T13114] ? __sys_sendmsg_sock+0x30/0x30 [ 558.619959][T13114] ? __import_iovec+0x5f2/0x850 [ 558.625009][T13114] ? import_iovec+0x73/0xa0 [ 558.630146][T13114] ___sys_sendmsg+0x2a6/0x360 [ 558.634920][T13114] ? get_pid_task+0x20/0x1e0 [ 558.639794][T13114] ? __sys_sendmsg+0x2a0/0x2a0 [ 558.644679][T13114] ? __lock_acquire+0x7d40/0x7d40 [ 558.649831][T13114] __se_sys_sendmsg+0x1c2/0x2b0 [ 558.654701][T13114] ? __x64_sys_sendmsg+0x80/0x80 [ 558.660478][T13114] ? lockdep_hardirqs_on+0x98/0x150 [ 558.665905][T13114] do_syscall_64+0x55/0xa0 [ 558.670458][T13114] ? clear_bhb_loop+0x40/0x90 [ 558.675269][T13114] ? clear_bhb_loop+0x40/0x90 [ 558.680064][T13114] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 558.685975][T13114] RIP: 0033:0x7fadb739bf79 [ 558.690581][T13114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 558.710638][T13114] RSP: 002b:00007fadb8266028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.719346][T13114] RAX: ffffffffffffffda RBX: 00007fadb7615fa0 RCX: 00007fadb739bf79 [ 558.727620][T13114] RDX: 000000002000c854 RSI: 0000200000000140 RDI: 0000000000000003 [ 558.735913][T13114] RBP: 00007fadb8266090 R08: 0000000000000000 R09: 0000000000000000 [ 558.743986][T13114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.751971][T13114] R13: 00007fadb7616038 R14: 00007fadb7615fa0 R15: 00007ffdac9f9308 [ 558.760079][T13114] [ 558.828068][T13106] wg2: left promiscuous mode [ 558.952121][T13111] wg2: entered promiscuous mode [ 559.280563][T13125] netlink: 'syz.2.2313': attribute type 1 has an invalid length. [ 559.288985][T13125] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2313'. [ 559.379828][T13128] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2318'. [ 559.455602][T13128] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 559.467722][T13128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 560.600493][T13130] delete_channel: no stack [ 560.627796][T13130] delete_channel: no stack [ 561.371203][T13151] wg2: left promiscuous mode [ 561.495717][T13154] wg2: entered promiscuous mode [ 561.848380][T13164] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 561.858283][T13164] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.2325'. [ 561.965456][T13169] netlink: 'syz.1.2327': attribute type 12 has an invalid length. [ 561.973838][T13169] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2327'. [ 562.598954][T13176] wg2: entered promiscuous mode [ 563.133438][T13185] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2332'. [ 563.373901][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.383936][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.476671][ T5088] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 563.496714][ T5088] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 563.509047][ T5088] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 563.535406][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 563.556630][ T5088] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 563.565030][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 563.860314][T13195] wg2: left promiscuous mode [ 564.116521][T13199] wg2: entered promiscuous mode [ 564.352666][ T3559] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.512661][T13209] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2340'. [ 564.644449][ T3559] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.861098][ T3559] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.894394][T13218] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2343'. [ 564.953029][ T3559] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.006443][T13189] chnl_net:caif_netlink_parms(): no params data found [ 565.087305][T13189] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.094569][T13189] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.102034][T13189] bridge_slave_0: entered allmulticast mode [ 565.109039][T13189] bridge_slave_0: entered promiscuous mode [ 565.132582][T13189] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.140896][T13189] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.148693][T13189] bridge_slave_1: entered allmulticast mode [ 565.156062][T13189] bridge_slave_1: entered promiscuous mode [ 565.238736][T13189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.263508][T13189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.317401][T13189] team0: Port device team_slave_0 added [ 565.327737][T13189] team0: Port device team_slave_1 added [ 565.409058][ T3559] ip6gretap0 (unregistering): left allmulticast mode [ 565.416416][ T3559] ip6gretap0 (unregistering): left promiscuous mode [ 565.424495][ T3559] Ÿë: port 1(ip6gretap0) entered disabled state [ 565.492607][T13189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.499944][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.527311][T13189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.541235][T13189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.550366][T13189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 565.576971][T13189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.605378][ T5788] Bluetooth: hci4: command tx timeout [ 565.690340][T13189] hsr_slave_0: entered promiscuous mode [ 565.698131][T13189] hsr_slave_1: entered promiscuous mode [ 565.704622][T13189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 565.712496][T13189] Cannot create hsr debugfs directory [ 566.573363][T13189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 566.592194][T13189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 566.616110][T13189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 566.649737][T13189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 566.714282][ T3559] vlan0: left allmulticast mode [ 566.722858][ T3559] veth0_vlan: left allmulticast mode [ 566.729252][ T3559] vlan0: left promiscuous mode [ 566.735416][ T3559] À: port 1(vlan0) entered disabled state [ 566.755971][ T3559] hsr_slave_0: left promiscuous mode [ 566.762354][ T3559] hsr_slave_1: left promiscuous mode [ 566.769798][ T3559] bridge0: port 3(team0) entered disabled state [ 566.780115][ T3559] bridge_slave_1: left allmulticast mode [ 566.787334][ T3559] bridge_slave_1: left promiscuous mode [ 566.793135][ T3559] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.803409][ T3559] bridge_slave_0: left allmulticast mode [ 566.809656][ T3559] bridge_slave_0: left promiscuous mode [ 566.817109][ T3559] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.836959][ T3559] veth0_macvtap: left promiscuous mode [ 566.842776][ T3559] veth1_vlan: left allmulticast mode [ 566.848633][ T3559] veth1_vlan: left promiscuous mode [ 566.854965][ T3559] veth0_vlan: left promiscuous mode [ 567.219625][ T3559] macvlan0 (unregistering): left promiscuous mode [ 567.229508][ T3559] team0 (unregistering): Port device macvlan0 removed [ 567.570040][ T3559] team_slave_1 (unregistering): left promiscuous mode [ 567.577524][ T3559] team_slave_1 (unregistering): left allmulticast mode [ 567.590179][ T3559] team0 (unregistering): Port device team_slave_1 removed [ 567.639055][ T3559] team_slave_0 (unregistering): left promiscuous mode [ 567.647726][ T3559] team_slave_0 (unregistering): left allmulticast mode [ 567.657299][ T3559] team0 (unregistering): Port device team_slave_0 removed [ 567.685872][ T5788] Bluetooth: hci4: command tx timeout [ 568.222963][T13189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.282944][T13189] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.331752][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.339176][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.392114][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.399573][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.789984][T13189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.859820][T13189] veth0_vlan: entered promiscuous mode [ 568.880197][T13189] veth1_vlan: entered promiscuous mode [ 568.931276][T13189] veth0_macvtap: entered promiscuous mode [ 568.943900][T13189] veth1_macvtap: entered promiscuous mode [ 568.974249][T13189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.993257][T13189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.007406][T13189] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.021313][T13189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.030826][T13189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.042008][T13189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.144419][ T1070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.163322][ T1070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.194614][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.204575][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.655679][T13297] netlink: 'syz.2.2326': attribute type 10 has an invalid length. [ 569.769693][ T5788] Bluetooth: hci4: command tx timeout [ 571.845396][ T5088] Bluetooth: hci4: command tx timeout [ 572.382855][T13297] veth0_vlan: left promiscuous mode [ 572.396523][T13297] veth0_vlan: entered promiscuous mode [ 572.412027][T13297] team0: Device veth0_vlan failed to register rx_handler [ 572.992353][T13315] netlink: 'syz.1.2345': attribute type 25 has an invalid length. [ 573.004191][T13315] netlink: 'syz.1.2345': attribute type 29 has an invalid length. [ 573.086483][T13309] netlink: 'syz.3.2356': attribute type 10 has an invalid length. [ 573.167897][T13309] veth0_vlan: left promiscuous mode [ 573.191786][T13309] veth0_vlan: entered promiscuous mode [ 573.223492][T13309] team0: Device veth0_vlan failed to register rx_handler [ 573.291405][T13311] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2344'. [ 573.890359][T13322] wg2: left promiscuous mode [ 574.040764][T13324] wg2: entered promiscuous mode [ 574.062341][T13336] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2350'. [ 574.145931][T13334] netlink: 'syz.1.2349': attribute type 25 has an invalid length. [ 574.154014][T13334] netlink: 'syz.1.2349': attribute type 29 has an invalid length. [ 574.730311][T13344] netlink: 'syz.1.2358': attribute type 25 has an invalid length. [ 574.751644][T13344] netlink: 'syz.1.2358': attribute type 29 has an invalid length. [ 576.288323][T13354] netlink: 'syz.0.2359': attribute type 25 has an invalid length. [ 576.311642][T13354] netlink: 'syz.0.2359': attribute type 29 has an invalid length. [ 577.409775][T13357] netlink: 'syz.0.2362': attribute type 10 has an invalid length. [ 577.617776][T13357] veth0_vlan: left promiscuous mode [ 577.660068][T13357] veth0_vlan: entered promiscuous mode [ 577.689838][T13357] team0: Device veth0_vlan failed to register rx_handler [ 578.293474][T13374] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2368'. [ 579.083410][T13385] wg2: entered allmulticast mode [ 579.282809][T13390] netlink: 'syz.1.2375': attribute type 29 has an invalid length. [ 579.309435][T13388] wg2: entered promiscuous mode [ 579.334886][T13390] netlink: 'syz.1.2375': attribute type 29 has an invalid length. [ 579.358667][T13390] netlink: 'syz.1.2375': attribute type 29 has an invalid length. [ 579.595000][T13401] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.2380'. [ 580.602868][T13411] wg2: left promiscuous mode [ 580.994555][T13412] wg2: entered promiscuous mode [ 581.615016][T13432] netlink: 'syz.2.2389': attribute type 10 has an invalid length. [ 581.625727][T13432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2389'. [ 581.704669][T13437] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2390'. [ 582.020149][T13443] netlink: 'syz.2.2393': attribute type 1 has an invalid length. [ 582.035344][T13443] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2393'. [ 582.353575][T13448] wg2: left promiscuous mode [ 582.818108][T13451] wg2: entered promiscuous mode [ 583.000279][T13450] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.2402'. [ 583.349685][T13461] wg2: left promiscuous mode [ 583.391868][T13465] wg2: entered promiscuous mode [ 583.507617][T13467] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2401'. [ 584.056011][T13478] netlink: 'syz.1.2405': attribute type 1 has an invalid length. [ 584.074131][T13478] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2405'. [ 586.033973][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.064005][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.073442][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.082725][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.095010][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 586.104981][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.516227][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.864956][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.950012][T13512] netlink: 'syz.2.2416': attribute type 1 has an invalid length. [ 587.035647][T13512] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2416'. [ 587.284079][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.614777][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.730692][T13518] wg2: left promiscuous mode [ 587.918441][T13519] wg2: entered promiscuous mode [ 588.186494][ T5088] Bluetooth: hci1: command tx timeout [ 588.705590][T13501] chnl_net:caif_netlink_parms(): no params data found [ 589.148322][ T59] ip6gretap0 (unregistering): left allmulticast mode [ 589.155147][ T59] ip6gretap0 (unregistering): left promiscuous mode [ 589.207842][ T59] Ÿë: port 1(ip6gretap0) entered disabled state [ 589.303429][T13535] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 589.346431][T13535] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.356128][T13535] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.509109][T13535] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.516901][T13535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 589.526028][T13535] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.533436][T13535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 589.627085][T13535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 590.226166][T13501] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.246632][ T5088] Bluetooth: hci1: command tx timeout [ 590.253065][T13501] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.275758][T13501] bridge_slave_0: entered allmulticast mode [ 590.284744][T13501] bridge_slave_0: entered promiscuous mode [ 590.332519][T13501] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.366970][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.396542][T13501] bridge_slave_1: entered allmulticast mode [ 590.418002][T13501] bridge_slave_1: entered promiscuous mode [ 590.583946][T13501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.734880][T13501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.747738][T13561] netlink: 'syz.1.2426': attribute type 1 has an invalid length. [ 590.767560][T13561] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.2426'. [ 590.877698][T13501] team0: Port device team_slave_0 added [ 590.898883][T13501] team0: Port device team_slave_1 added [ 591.085874][T13501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.093358][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.154503][T13501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.170666][T13501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.244820][T13501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.278730][T13501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 591.955009][T13501] hsr_slave_0: entered promiscuous mode [ 591.978258][T13501] hsr_slave_1: entered promiscuous mode [ 592.055741][T13501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 592.063439][T13501] Cannot create hsr debugfs directory [ 592.326488][ T5088] Bluetooth: hci1: command tx timeout [ 592.800996][T13595] netlink: 'syz.1.2435': attribute type 10 has an invalid length. [ 592.830832][T13595] bridge0: port 3(team0) entered disabled state [ 592.837938][T13595] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.846586][T13595] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.094407][T13600] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 593.326624][T13600] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2436'. [ 593.814894][ T59] hsr_slave_0: left promiscuous mode [ 593.838207][ T59] hsr_slave_1: left promiscuous mode [ 593.886223][ T59] bridge_slave_1: left allmulticast mode [ 593.891941][ T59] bridge_slave_1: left promiscuous mode [ 593.915963][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.933732][ T59] bridge_slave_0: left allmulticast mode [ 593.942691][ T59] bridge_slave_0: left promiscuous mode [ 593.949227][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.984961][ T59] veth1_macvtap: left allmulticast mode [ 593.995048][ T59] veth1_macvtap: left promiscuous mode [ 594.001688][ T59] veth0_macvtap: left promiscuous mode [ 594.007642][ T59] veth1_vlan: left allmulticast mode [ 594.013458][ T59] veth1_vlan: left promiscuous mode [ 594.202997][T13623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2441'. [ 594.415518][ T5088] Bluetooth: hci1: command tx timeout [ 594.458968][ T59] macvlan0 (unregistering): left promiscuous mode [ 594.471522][ T59] team0 (unregistering): Port device macvlan0 removed [ 594.929352][ T59] team_slave_1 (unregistering): left promiscuous mode [ 594.937604][ T59] team_slave_1 (unregistering): left allmulticast mode [ 594.947814][ T59] team0 (unregistering): Port device team_slave_1 removed [ 595.000584][ T59] team_slave_0 (unregistering): left promiscuous mode [ 595.008024][ T59] team_slave_0 (unregistering): left allmulticast mode [ 595.020561][ T59] team0 (unregistering): Port device team_slave_0 removed [ 595.496907][T13619] wg2: left promiscuous mode [ 595.508669][T13622] wg2: entered promiscuous mode [ 596.721516][T13644] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.2446'. [ 597.144618][T13655] netlink: 'syz.3.2448': attribute type 1 has an invalid length. [ 597.199759][T13655] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.2448'. [ 597.384725][T13662] wg2: left promiscuous mode [ 597.495637][T13660] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2449'. [ 597.522022][T13501] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 597.584784][T13664] wg2: entered promiscuous mode [ 597.604923][T13501] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 597.636319][T13501] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 597.666104][T13501] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 597.922116][T13501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.968389][T13501] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.027739][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.034940][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.067125][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.074480][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 599.048568][T13501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.145396][T13501] veth0_vlan: entered promiscuous mode [ 599.167698][T13501] veth1_vlan: entered promiscuous mode [ 614.531359][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 614.544797][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 614.553693][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 614.580249][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 614.588617][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 614.599678][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 614.678087][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.695372][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.704136][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.716851][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.724798][ T5088] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 614.737547][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 616.274493][ T5788] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 616.284765][ T5788] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 616.300254][ T5788] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 616.311234][ T5788] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 616.321965][ T5788] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 616.334801][ T5788] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.645551][ T5088] Bluetooth: hci2: command tx timeout [ 616.805762][ T5088] Bluetooth: hci5: command tx timeout [ 618.407595][ T5088] Bluetooth: hci6: command tx timeout [ 618.725770][ T5088] Bluetooth: hci2: command tx timeout [ 618.885574][ T5088] Bluetooth: hci5: command tx timeout [ 620.509911][ T5088] Bluetooth: hci6: command tx timeout [ 620.805513][ T5088] Bluetooth: hci2: command tx timeout [ 620.965997][ T5088] Bluetooth: hci5: command tx timeout [ 622.565472][ T5088] Bluetooth: hci6: command tx timeout [ 622.885794][ T5088] Bluetooth: hci2: command tx timeout [ 623.045825][ T5088] Bluetooth: hci5: command tx timeout [ 624.645661][ T5088] Bluetooth: hci6: command tx timeout [ 624.813510][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.820187][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 653.497251][ T5788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 653.510268][ T5788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 653.526785][ T5788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 653.535076][ T5788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 653.543039][ T5788] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 653.550584][ T5788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 655.605484][ T5088] Bluetooth: hci7: command tx timeout [ 657.695384][ T5088] Bluetooth: hci7: command tx timeout [ 659.765451][ T5088] Bluetooth: hci7: command tx timeout [ 661.845326][ T5088] Bluetooth: hci7: command tx timeout [ 674.767152][ T5788] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 674.783608][ T5788] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 674.793027][ T5788] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 674.803237][ T5788] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 674.811404][ T5788] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 674.819290][ T5788] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 675.297198][ T5088] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 675.310229][ T5088] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 675.318818][ T5088] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 675.330456][ T5088] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 675.338822][ T5088] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 675.354534][ T5088] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 676.895673][ T5088] Bluetooth: hci8: command tx timeout [ 677.296543][ T5788] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 677.310664][ T5788] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 677.319385][ T5788] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 677.332173][ T5788] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 677.340165][ T5788] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 677.350933][ T5788] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 677.455477][ T5088] Bluetooth: hci9: command tx timeout [ 678.965390][ T5088] Bluetooth: hci8: command tx timeout [ 679.458256][ T5088] Bluetooth: hci10: command tx timeout [ 679.535401][ T5088] Bluetooth: hci9: command tx timeout [ 681.047116][ T5088] Bluetooth: hci8: command tx timeout [ 681.525402][ T5088] Bluetooth: hci10: command tx timeout [ 681.605402][ T5088] Bluetooth: hci9: command tx timeout [ 683.132242][ T5088] Bluetooth: hci8: command tx timeout [ 683.605465][ T5088] Bluetooth: hci10: command tx timeout [ 683.685520][ T5088] Bluetooth: hci9: command tx timeout [ 685.685393][ T5088] Bluetooth: hci10: command tx timeout [ 688.329510][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 731.715172][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 731.722113][ C0] rcu: 0-....: (1 GPs behind) idle=20b4/1/0x4000000000000000 softirq=48851/48854 fqs=2884 [ 731.733351][ C0] rcu: hardirqs softirqs csw/system [ 731.739760][ C0] rcu: number: 1413266 0 0 [ 731.746190][ C0] rcu: cputime: 18173 34316 47 ==> 52490(ms) [ 731.754199][ C0] rcu: (t=10500 jiffies g=66301 q=4410 ncpus=2) [ 731.760700][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 967 jiffies! g66301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 731.773076][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=38520 [ 731.781089][ C0] rcu: rcu_preempt kthread starved for 973 jiffies! g66301 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 731.792896][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 731.802948][ C0] rcu: RCU grace-period kthread stack dump: [ 731.809016][ C0] task:rcu_preempt state:I stack:26824 pid:17 ppid:2 flags:0x00004000 [ 731.818333][ C0] Call Trace: [ 731.821635][ C0] [ 731.824567][ C0] __schedule+0x1553/0x45a0 [ 731.829105][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 731.835013][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 731.841087][ C0] ? asan.module_dtor+0x20/0x20 [ 731.845948][ C0] ? enqueue_timer+0x23d/0x550 [ 731.850740][ C0] ? __mod_timer+0x984/0xdb0 [ 731.855359][ C0] schedule+0xbd/0x170 [ 731.859537][ C0] schedule_timeout+0x188/0x2d0 [ 731.864382][ C0] ? console_conditional_schedule+0x40/0x40 [ 731.870377][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 731.876268][ C0] ? update_process_times+0x1b0/0x1b0 [ 731.881643][ C0] ? prepare_to_swait_event+0x339/0x360 [ 731.887198][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 731.892063][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 731.898229][ C0] ? rcu_gp_init+0x1560/0x1560 [ 731.902992][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 731.907841][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 731.913121][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 731.918334][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 731.923013][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 731.928384][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 731.933331][ C0] ? __kthread_parkme+0x162/0x1c0 [ 731.938437][ C0] kthread+0x2fa/0x390 [ 731.942588][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 731.947814][ C0] ? kthread_blkcg+0xd0/0xd0 [ 731.952605][ C0] ret_from_fork+0x48/0x80 [ 731.957116][ C0] ? kthread_blkcg+0xd0/0xd0 [ 731.961733][ C0] ret_from_fork_asm+0x11/0x20 [ 731.966531][ C0] [ 731.969679][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 731.976103][ C0] Sending NMI from CPU 0 to CPUs 1: [ 731.981355][ C1] NMI backtrace for cpu 1 [ 731.981366][ C1] CPU: 1 PID: 5762 Comm: syz-executor Not tainted syzkaller #0 [ 731.981381][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 731.981389][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 731.981412][ C1] Code: d7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 731.981426][ C1] RSP: 0018:ffffc9000458f6d8 EFLAGS: 000002d3 [ 731.981440][ C1] RAX: ffffffff813aa578 RBX: 0000000000000003 RCX: ffff888077873c00 [ 731.981452][ C1] RDX: 0000000000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 731.981462][ C1] RBP: ffffc9000458f7b0 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 731.981472][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: dffffc0000000000 [ 731.981482][ C1] R13: 0000000000000200 R14: 0000000000000003 R15: 1ffff920008b1ee0 [ 731.981493][ C1] FS: 0000555557a3e500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 731.981506][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 731.981517][ C1] CR2: 00007fb448d09000 CR3: 0000000026b39000 CR4: 00000000003506e0 [ 731.981532][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 731.981541][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 731.981551][ C1] Call Trace: [ 731.981558][ C1] [ 731.981563][ C1] kvm_wait+0x23d/0x2a0 [ 731.981584][ C1] ? verify_lock_unused+0x140/0x140 [ 731.981603][ C1] ? kvm_arch_para_hints+0x50/0x50 [ 731.981620][ C1] ? mark_lock+0x94/0x320 [ 731.981649][ C1] ? pv_hash+0x81/0x140 [ 731.981667][ C1] __pv_queued_spin_lock_slowpath+0x61a/0x9d0 [ 731.981691][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 731.981715][ C1] do_raw_spin_lock+0x23e/0x2c0 [ 731.981736][ C1] ? __rwlock_init+0x150/0x150 [ 731.981757][ C1] ? lock_sock_nested+0x6a/0x100 [ 731.981779][ C1] lock_sock_nested+0x6a/0x100 [ 731.981799][ C1] tcp_recvmsg+0x214/0x860 [ 731.981825][ C1] ? tcp_recv_timestamp+0x720/0x720 [ 731.981846][ C1] ? aa_sk_perm+0x83c/0x970 [ 731.981869][ C1] ? sock_rps_record_flow+0x19/0x3f0 [ 731.981887][ C1] inet_recvmsg+0x140/0x1f0 [ 731.981906][ C1] ? inet_splice_eof+0x2e0/0x2e0 [ 731.981925][ C1] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 731.981941][ C1] ? security_socket_recvmsg+0x89/0xb0 [ 731.981961][ C1] sock_read_iter+0x2d9/0x3e0 [ 731.981978][ C1] ? kernel_sock_ip_overhead+0x5a0/0x5a0 [ 731.981992][ C1] ? __might_fault+0xaa/0x120 [ 731.982014][ C1] ? common_file_perm+0x198/0x1f0 [ 731.982036][ C1] vfs_read+0x46a/0x970 [ 731.982059][ C1] ? kernel_read+0x1e0/0x1e0 [ 731.982079][ C1] ? sigprocmask+0x190/0x190 [ 731.982101][ C1] ? __fdget_pos+0x1d8/0x330 [ 731.982122][ C1] ksys_read+0x150/0x260 [ 731.982142][ C1] ? vfs_write+0x990/0x990 [ 731.982163][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 731.982180][ C1] do_syscall_64+0x55/0xa0 [ 731.982198][ C1] ? clear_bhb_loop+0x40/0x90 [ 731.982214][ C1] ? clear_bhb_loop+0x40/0x90 [ 731.982231][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 731.982247][ C1] RIP: 0033:0x7f9b25957197 [ 731.982260][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 731.982272][ C1] RSP: 002b:00007fff682b0f30 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 731.982287][ C1] RAX: ffffffffffffffda RBX: 0000555557a3e500 RCX: 00007f9b25957197 [ 731.982297][ C1] RDX: 0000000000000004 RSI: 00007fff682b0f8c RDI: 0000000000000003 [ 731.982306][ C1] RBP: 00007fff682b1430 R08: 0000000000000000 R09: 0000000000000000 [ 731.982315][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004 [ 731.982324][ C1] R13: 00007fff682b0f8c R14: 00007fff682b1020 R15: 0000000000000000 [ 731.982344][ C1] [ 731.983384][ C0] CPU: 0 PID: 13677 Comm: syz.2.2452 Not tainted syzkaller #0 [ 732.374625][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.385115][ C0] RIP: 0010:kasan_quarantine_put+0x88/0x220 [ 732.391039][ C0] Code: e8 8d 3b ae ff 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 83 00 00 00 41 f7 c7 00 02 00 00 74 01 fb 31 c0 <48> 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f c3 48 8d 80 c0 7a 03 00 45 [ 732.410920][ C0] RSP: 0018:ffffc90000006280 EFLAGS: 00000206 [ 732.417074][ C0] RAX: 79ac7a78209e1a01 RBX: ffff88805ddcb0c0 RCX: 79ac7a78209e1a00 [ 732.425081][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 732.433259][ C0] RBP: ffff88805ddcb0c0 R08: ffffffff911bf5c7 R09: 1ffffffff2237eb8 [ 732.441321][ C0] R10: dffffc0000000000 R11: fffffbfff2237eb9 R12: 0000000000000000 [ 732.449293][ C0] R13: ffffc90000006318 R14: 00000000000fd480 R15: 0000000000000286 [ 732.457465][ C0] FS: 00007fe15256f6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 732.466403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.472995][ C0] CR2: 00007f9b236246b3 CR3: 00000000272fd000 CR4: 00000000003506f0 [ 732.481070][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 732.489039][ C0] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 732.497011][ C0] Call Trace: [ 732.500390][ C0] [ 732.503268][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 732.508819][ C0] ? skb_release_data+0x60a/0x800 [ 732.513839][ C0] kmem_cache_free+0xf8/0x270 [ 732.518522][ C0] skb_release_data+0x60a/0x800 [ 732.523380][ C0] kfree_skb_reason+0x10e/0x170 [ 732.528235][ C0] dev_kfree_skb_any_reason+0x120/0x130 [ 732.533779][ C0] ? refcount_dec_and_test+0x70/0x70 [ 732.539180][ C0] free_old_xmit_skbs+0x11a/0x3d0 [ 732.544226][ C0] ? packet_rcv+0x16b/0x13d0 [ 732.548914][ C0] ? virtqueue_napi_schedule+0x40/0x40 [ 732.554376][ C0] start_xmit+0x161/0x1410 [ 732.558793][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 732.563814][ C0] ? dev_queue_xmit_nit+0xa80/0xbb0 [ 732.569016][ C0] dev_hard_start_xmit+0x246/0x740 [ 732.574134][ C0] sch_direct_xmit+0x25e/0x4c0 [ 732.578899][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 732.584967][ C0] __dev_queue_xmit+0x179c/0x36b0 [ 732.589993][ C0] ? lapic_next_event+0x11/0x20 [ 732.594939][ C0] ? clockevents_program_event+0x230/0x310 [ 732.600742][ C0] ? __dev_queue_xmit+0x26b/0x36b0 [ 732.605868][ C0] ? mark_lock+0x94/0x320 [ 732.610465][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 732.616462][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 732.621753][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.627904][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 732.633102][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.639525][ C0] ? ip_finish_output2+0xb04/0x11e0 [ 732.644920][ C0] ? ip_finish_output2+0x457/0x11e0 [ 732.650129][ C0] ip_finish_output2+0xcec/0x11e0 [ 732.655344][ C0] ? ip_finish_output2+0x457/0x11e0 [ 732.660655][ C0] ? ip_fragment+0x210/0x210 [ 732.665363][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 732.670248][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 732.675468][ C0] ip_output+0x2a1/0x3b0 [ 732.679740][ C0] ? ip_output+0x60/0x3b0 [ 732.684071][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 732.689119][ C0] __ip_queue_xmit+0x1049/0x1950 [ 732.694250][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 732.699206][ C0] __tcp_transmit_skb+0x1cbd/0x32f0 [ 732.704515][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 732.709478][ C0] ? __tcp_send_ack+0x176/0x5a0 [ 732.714456][ C0] tcp_rcv_established+0xb06/0x1d20 [ 732.719764][ C0] ? rt_is_expired+0x1c/0x2d0 [ 732.724460][ C0] ? tcp_check_space+0xad0/0xad0 [ 732.729496][ C0] ? rt_is_expired+0x1c/0x2d0 [ 732.734347][ C0] ? rt_is_expired+0x250/0x2d0 [ 732.739150][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 732.743771][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 732.748285][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 732.753493][ C0] ? tcp_v4_rcv+0x1071/0x2af0 [ 732.758218][ C0] ? tcp_filter+0x90/0x90 [ 732.762559][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 732.768024][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 732.773741][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 732.779257][ C0] NF_HOOK+0x32d/0x3b0 [ 732.783426][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 732.788784][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 732.793130][ C0] ? NF_HOOK+0x9f/0x3b0 [ 732.797309][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 732.802425][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 732.806781][ C0] ? ip_local_deliver+0x122/0x1b0 [ 732.811899][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 732.816938][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 732.822344][ C0] ? ip_list_rcv+0x440/0x440 [ 732.826963][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 732.831597][ C0] ip_list_rcv+0x3f2/0x440 [ 732.836127][ C0] ? ip_rcv_finish+0x250/0x250 [ 732.840905][ C0] ? __list_add_valid_or_report+0x61/0xf0 [ 732.846894][ C0] ? ip_rcv_finish+0x250/0x250 [ 732.851660][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 732.857705][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 732.862310][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 732.868556][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 732.874895][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 732.880009][ C0] ? netif_receive_skb_core+0x230/0x230 [ 732.885636][ C0] napi_gro_receive+0x565/0xb00 [ 732.890676][ C0] receive_buf+0x2203/0x3820 [ 732.895288][ C0] ? virtnet_poll_tx+0x530/0x530 [ 732.900244][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 732.906080][ C0] virtnet_poll+0x5dd/0x1280 [ 732.910771][ C0] ? refill_work+0x220/0x220 [ 732.915891][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.922064][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 732.927357][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 732.933515][ C0] __napi_poll+0xc0/0x460 [ 732.937939][ C0] net_rx_action+0x616/0xc40 [ 732.942683][ C0] ? net_tx_action+0x980/0x980 [ 732.947443][ C0] ? detach_timer+0x2b0/0x2b0 [ 732.952109][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 732.958087][ C0] ? lock_chain_count+0x20/0x20 [ 732.962937][ C0] handle_softirqs+0x280/0x820 [ 732.967808][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 732.972613][ C0] ? do_softirq+0x1a0/0x1a0 [ 732.977392][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 732.982683][ C0] __irq_exit_rcu+0xd3/0x190 [ 732.987291][ C0] ? irq_exit_rcu+0x20/0x20 [ 732.991883][ C0] irq_exit_rcu+0x9/0x20 [ 732.996124][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 733.001951][ C0] [ 733.004880][ C0] [ 733.007906][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.013890][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 733.019700][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 f0 a3 30 09 e8 8b 22 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 733.039491][ C0] RSP: 0018:ffffc900045df918 EFLAGS: 00000286 [ 733.045657][ C0] RAX: 79ac7a78209e1a00 RBX: 0000000000000000 RCX: 79ac7a78209e1a00 [ 733.054519][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: ffffffff8b1c81e0 [ 733.062766][ C0] RBP: ffffc900045df970 R08: ffffffff911bf5ff R09: 1ffffffff2237ebf [ 733.070909][ C0] R10: dffffc0000000000 R11: fffffbfff2237ec0 R12: ffff88806c220000 [ 733.078886][ C0] R13: dffffc0000000000 R14: ffff88805e781e00 R15: ffff8880b8e3cac8 [ 733.086874][ C0] ? finish_task_switch+0x265/0x8f0 [ 733.092256][ C0] __schedule+0x155b/0x45a0 [ 733.096847][ C0] ? trace_irq_enable+0xbb/0xe0 [ 733.101827][ C0] ? percpu_counter_add_batch+0x1f1/0x2a0 [ 733.107699][ C0] ? asan.module_dtor+0x20/0x20 [ 733.112658][ C0] ? mark_lock+0x94/0x320 [ 733.117079][ C0] ? lock_chain_count+0x20/0x20 [ 733.121931][ C0] ? preempt_schedule+0xc0/0xd0 [ 733.126880][ C0] preempt_schedule_common+0x82/0xc0 [ 733.132264][ C0] preempt_schedule+0xc0/0xd0 [ 733.137120][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 733.143201][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 733.149728][ C0] preempt_schedule_thunk+0x1a/0x30 [ 733.155048][ C0] _raw_spin_unlock_irqrestore+0x111/0x120 [ 733.161026][ C0] ? _raw_spin_unlock+0x40/0x40 [ 733.165991][ C0] __se_sys_perf_event_open+0x183e/0x1c50 [ 733.171904][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 733.177685][ C0] ? lock_chain_count+0x20/0x20 [ 733.182577][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 733.188032][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 733.193665][ C0] do_syscall_64+0x55/0xa0 [ 733.198178][ C0] ? clear_bhb_loop+0x40/0x90 [ 733.203030][ C0] ? clear_bhb_loop+0x40/0x90 [ 733.207813][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 733.213715][ C0] RIP: 0033:0x7fe15179bf79 [ 733.218309][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.238214][ C0] RSP: 002b:00007fe15256f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 733.246903][ C0] RAX: ffffffffffffffda RBX: 00007fe151a15fa0 RCX: 00007fe15179bf79 [ 733.255024][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 733.263031][ C0] RBP: 00007fe1518327e0 R08: 0000000000000000 R09: 0000000000000000 [ 733.271098][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 733.279070][ C0] R13: 00007fe151a16038 R14: 00007fe151a15fa0 R15: 00007fff2f6d31f8 [ 733.287141][ C0] SYZFAIL: failed to recv rpc [ 740.989804][T13744] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 741.105273][T13744] CPU: 1 PID: 13744 Comm: syz-executor Not tainted syzkaller #0 [ 741.113262][T13744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.123361][T13744] Call Trace: [ 741.126666][T13744] [ 741.129634][T13744] dump_stack_lvl+0x18c/0x250 [ 741.134709][T13744] ? show_regs_print_info+0x20/0x20 [ 741.139961][T13744] ? load_image+0x400/0x400 [ 741.144686][T13744] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 741.151240][T13744] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 741.157863][T13744] warn_alloc+0x246/0x340 [ 741.162342][T13744] ? zone_watermark_ok_safe+0x230/0x230 [ 741.167946][T13744] ? _raw_spin_unlock+0x28/0x40 [ 741.172940][T13744] __vmalloc_node_range+0x662/0x1330 [ 741.178265][T13744] ? __asan_memset+0x22/0x40 [ 741.182922][T13744] ? free_vm_area+0x50/0x50 [ 741.187491][T13744] ? perf_trace_preemptirq_template+0xac/0x330 [ 741.193891][T13744] ? kcov_remote_reset+0xc0/0xc0 [ 741.199000][T13744] vmalloc_user+0x74/0x80 [ 741.203504][T13744] ? kcov_ioctl+0x58/0x620 [ 741.208241][T13744] kcov_ioctl+0x58/0x620 [ 741.212531][T13744] ? bpf_lsm_file_ioctl+0x9/0x10 [ 741.217498][T13744] ? security_file_ioctl+0x80/0xa0 [ 741.222869][T13744] ? kcov_remote_reset+0xc0/0xc0 [ 741.228034][T13744] __se_sys_ioctl+0xfd/0x170 [ 741.232840][T13744] do_syscall_64+0x55/0xa0 [ 741.237565][T13744] ? clear_bhb_loop+0x40/0x90 [ 741.242368][T13744] ? clear_bhb_loop+0x40/0x90 [ 741.247166][T13744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 741.253270][T13744] RIP: 0033:0x7f65d1b9bc0b [ 741.257899][T13744] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 741.277667][T13744] RSP: 002b:00007ffc11425b20 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 741.286305][T13744] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007f65d1b9bc0b [ 741.294399][T13744] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000d8 [ 741.302421][T13744] RBP: 00007f65d1e16038 R08: 0000000000000000 R09: 0000000000000000 [ 741.310508][T13744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.318607][T13744] R13: 0000000000000003 R14: 00007ffc11425dd8 R15: 0000000000000000 [ 741.326801][T13744]