last executing test programs: 23.004433232s ago: executing program 0 (id=433): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x40000120) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071108f000000000018650000060000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff0000ebbf13d900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0xc148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1ec580e164af930234d6160000000100008008000000c87b54d4e8db935237964db973de2b183152fb434e6382ba105932430900000000000000a800", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) 22.915185924s ago: executing program 2 (id=436): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2e, &(0x7f0000000640)=r1, 0x4) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000140)="a27d3c2bd6264d7fead0bf3521fefbc89fdfc595852743905bfc141281283d0ccd25df793dcd31a48810992d200d0ae5b7d80a7abed4d1dedbb979a2ec7afa7def978e91adfa2ecfa4e723f4af0a3b8278a34a6139c73482868f5b11395cbab7590ca8a6954224ac49924a9df43410ccbc713ca8dc97333dc5cf19b6ac043bf7d48f7f288180", 0x86, 0x1}, 0x40000) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xa1, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000100)={r2, r1}) 22.65266253s ago: executing program 2 (id=438): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400cec63a0b930887095bf6f9b9df876e01dab12190db43944ff15510f5683b59b97acdf5b5983100dd2b36f1d7c15cdee56015f383eae7cf0c41c591cd6f0b9e31ee89c476ab97dd4d1cfe84596af9638cae51f540b152d98e3b45689e8d94b77674afb450d5caad03dd074be330f8d9157adbdba13a838d3711aca4345eef1894ae2bba94a7b8031ca5f0421d9b8e162fb93668341a12ab41104929efe9edf08e460f83d8c3b10d25bca88f1c08e51577fc83adc3bd8278c2b5980d45f75340ee11765483"], 0x50) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 22.055742873s ago: executing program 3 (id=441): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x52) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.978669405s ago: executing program 0 (id=443): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000003, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x801000, 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000340)) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0xb, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7b, &(0x7f0000000000)=r7, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x9, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRES64, @ANYBLOB="2ed4296efb1ddb8aa62b58e3e757d11417eb0c8d9528ffe85d60d9bc7b55c2e0406c7b4a6835f6f3bc64"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=r4, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x18, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffeffd, 0x0, 0x0, 0x0, 0x5088}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x7, 0x0, 0x75c8ddafffce90c7, 0x7, 0x4, 0xfffffffffffffef4, 0x1}, @ldst={0x0, 0x3, 0x0, 0x3, 0x9, 0x80, 0xffffffffffffffe4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b705000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x10, 0x4, 0x7733, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000dc0)={r7, 0x20, &(0x7f0000000d80)={&(0x7f0000000ac0)=""/254, 0xfe, 0x0, &(0x7f0000000cc0)=""/156, 0x9c}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000e00)=r12, 0x4) r13 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f00000000c0)}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r9, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0], 0x0, 0x39d4, &(0x7f0000000840)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r16) recvmsg$unix(r15, &(0x7f0000000400)={0x0, 0xfffffdfc, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r17, &(0x7f00000000c0)=ANY=[@ANYRES8=r16, @ANYRESDEC], 0x12) perf_event_open$cgroup(&(0x7f0000000e40)={0x3, 0x80, 0x5, 0x0, 0x40, 0x4, 0x0, 0x60, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xb5, 0x2, @perf_config_ext={0x3, 0x2}, 0x10040, 0x10001, 0x764, 0xb, 0x8, 0x3ff, 0x9, 0x0, 0x4, 0x0, 0x5}, r17, 0x8, r7, 0x2) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a80)={0x9, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r14, @ANYRES32=r7, @ANYBLOB="130005001320000053752768c3d8206fd6e176cb3a64a11582878a366a7f32657d5955156f8e", @ANYRES32=r13, @ANYBLOB, @ANYRES32=r18, @ANYBLOB, @ANYRES64=0x0], 0x20) 21.916409386s ago: executing program 2 (id=444): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_ext={0x1c, 0x6, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000000000100000000000100000025950400f0ffffff181a0000ef2d5cc977ebb36ace9495fe4797742279cb661f0b1f1acd4be05249ed3b46a25bdcf7e2e95556ed725e2f8fa4c66dc5bdc5488694e7a3e6179b44502d506f8d19273a56e57836ce3ad4301fd113ec921725c78d33454b00006edf43cea1148a88ddecc91a5e0beadce73ff000"/150, @ANYRES32=r0, @ANYBLOB="000000000000000085100000ffffffff"], &(0x7f0000000c80)='GPL\x00', 0x7, 0x61, &(0x7f0000000cc0)=""/97, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x2ec93, 0xffffffffffffffff, 0x4, &(0x7f0000000e80)=[r0, r0, r0, r0], &(0x7f0000001080)=[{0x4, 0x4, 0xe, 0x7}, {0x4, 0x4, 0xb, 0x9}, {0x4, 0x3, 0xf, 0x9}, {0x2, 0x5, 0x7, 0xa}], 0x10, 0x3ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x8f, 0x0, &(0x7f00000002c0)="f0205c40707d3cd901c47206f64258d4ae4919a9027bdc1d19467bcca25ed66d51df0922b266b9c777a79655c2826204e011876cded780e186f512b7fd645e4e775faec939fe3cc11c3b1379264ad1332fd9e8880815ead31c21561d03ec629482713754891a9815ee5ccab8b2d1aba5948145d55183bc58c3f7a36ddb712dcc62a44e58335000b77ee5e961f39e98", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4206}, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r3}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc0, 0x7}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x9, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10000, 0x0, 0x0, 0x0, 0x40000, 0x0, 0xffff, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f2, &(0x7f0000000080)) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="23638d0d1b7cc363d38ab3e9cee800000000000000000000000000000000000000000000000000000000fc562e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000000007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x4000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.679994791s ago: executing program 3 (id=445): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x21, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000600258848000c600e41b0000900ac0008032500000016000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1, 0x0, 0x0, 0xac14140d}, 0x0) 21.573934284s ago: executing program 1 (id=446): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xb0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x6d}}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 21.522432145s ago: executing program 3 (id=447): r0 = socket$kcm(0x1e, 0x2, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8905, &(0x7f0000000080)) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000001980)="7d586d16062b1e1b9685b88189e0093982f6994b8df2fe56386ed999f1b34b06f2f69618bf033adc88f5360397a115f7", 0x30}], 0x2}, 0x24000008) (async) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 21.427528477s ago: executing program 2 (id=448): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0xfe33) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4471eebfa23b0d96", 0x8}], 0x1}, 0x20000000) openat$ppp(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000cfe6f10210aa000000000095", @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000070d0900410000000008ea6e0200"], 0x40}, 0x20002800) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x6, &(0x7f0000000040), 0x4) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r1, 0x4000, r10}, 0x18) recvmsg(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x113000, 0x0) 21.427313417s ago: executing program 1 (id=449): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x300, 0x403d87c21de2ff3f, &(0x7f0000000580)="b90103606989068c3c270040f0832f9e52e655c8baa78f6affff8100632f080686dd00017f020001be3ae804ee4236691e2cc693f487f10dd02ef72cf660d2db82ad28efcb575408a55a8be1e337c13ea57a6b38e1d70236eb7145e759c6dd4c6623368c07874a95e34741ff62700dbf2b750aaad4be2dcf44e8333daa3f997dea3e51cc4879a6ade4975084dd0587d0f13f1c4dcc800aa13b577f975715d3fe1268a1924b9074f97113fbf466d43f81d5a177b5ae27e2f217827a2b42e3cdaf914e6cea7791be382eff6b9a8c2cdc254865f688673e565f89796e5a7644021ace8a0d05cf743cb33f39", 0x0, 0x107, 0x6000000000000000, 0x2b, 0xfeb9, &(0x7f0000000680)="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", &(0x7f0000000040)}, 0x28) 21.325764769s ago: executing program 3 (id=450): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)=@llc={0x1a, 0x10f, 0x8, 0x7f, 0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x618df76d57deb82d}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)="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", 0xfb}], 0x1, &(0x7f0000000280)=[{0x28, 0x110, 0x2, "5d784e3affcc2a0e6eff631b751bd7d12091fd7cecd3"}], 0x28}, 0x2000c044) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000080)) 21.166713003s ago: executing program 1 (id=451): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xf0da5c0ece9b696a, 0x0) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000100)={'team0\x00'}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xb701, 0x0) 21.083503635s ago: executing program 3 (id=452): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r1, &(0x7f0000003480)={0x0, 0x0, 0x0}, 0x40000120) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB="6a0ac4ff0000000071108f000000000018650000060000000000000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a0000008500000006000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff0000ebbf13d900000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1ec580e164af930234d6160000000100008008000000c87b54d4e8db935237964db973de2b183152fb434e6382ba105932430900000000000000a800", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000100"/24, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r3, 0x58, &(0x7f0000000300)}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000, 0xff00}, 0x48) 21.027275156s ago: executing program 0 (id=453): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0x1b, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000008000000010003000900000001000000", @ANYRES32, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000400cec63a0b930887095bf6f9b9df876e01dab12190db43944ff15510f5683b59b97acdf5b5983100dd2b36f1d7c15cdee56015f383eae7cf0c41c591cd6f0b9e31ee89c476ab97dd4d1cfe84596af9638cae51f540b152d98e3b45689e8d94b77674afb450d5caad03dd074be330f8d9157adbdba13a838d3711aca4345eef1894ae2bba94a7b8031ca5f0421d9b8e162fb93668341a12ab41104929efe9edf08e460f83d8c3b10d25bca88f1c08e51577fc83adc3bd8278c2b5980d45f75340ee11765483"], 0x50) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) 20.992712007s ago: executing program 1 (id=454): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)}, 0x24000008) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a2000000200000006500000ff"], 0x50) 20.751484802s ago: executing program 1 (id=455): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x8c, 0x1}, 0x48) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 20.718655603s ago: executing program 0 (id=456): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x5c1341, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xca) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r6, 0x0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) r8 = socket$kcm(0x2, 0x3, 0x2) sendmsg$unix(r8, &(0x7f0000000680)={&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x45, 0x1, 0x24}}], 0x10, 0x140440a0}, 0x20008000) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@in={0x2, 0x4e24, @local}, 0x80, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="f7eafb1554d1b2c8765736e770bbc206181c5b15b17b65e68ce425504fcd8d48514287305752fe0abb3b2290578b3b1acefa6c279a1308a5dbea70418009ae15cc00c7396906b59fef0554ccf771", @ANYRES64=r2, @ANYRESHEX=r4, @ANYRES64=r4, @ANYRESOCT=r3, @ANYRESDEC], 0x10b8}, 0x200008c0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 20.314065932s ago: executing program 0 (id=457): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x2004, @dev={0xfe, 0x80, '\x00', 0x40}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x20040000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, &(0x7f0000000000), 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) 19.95709748s ago: executing program 2 (id=458): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b100003fd", 0x33fe0}], 0x1}, 0x0) 19.808204663s ago: executing program 0 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffe7, 0x0, 0x0, 0xfffffffffffffffd}, 0x40000000) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xf7fff038}, {0x6, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000006c811c4e783c00000063112100000000007810000002000000850000000500000095000000001000000000000000000000534643c4b5ad2e7a4c8bd9ca9b52fb92c14d04b5cb4b4142b307451213ef187917f63cc68160862a1de6ecd62be5d4bbb69c15eee075b53597514405fdfcb27bc1dbffaabbd2d955a5568abba5bb9323d222bfd68b86d51161330e2b3178bc2a932cecdebc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 19.807843743s ago: executing program 1 (id=460): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0xb121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x1000000ac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f7, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x6, 0x3, 0x8, 0xc024, 0x1, 0x5b93, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) 19.806589663s ago: executing program 3 (id=467): r0 = socket$kcm(0x2, 0x3, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef80"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"], 0xfe33) sendmsg$unix(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000140)="4471eebfa23b0d96", 0x8}], 0x1}, 0x20000000) openat$ppp(0xffffffffffffff9c, 0x0, 0x801, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000cfe6f10210aa000000000095", @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[], 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7f}, 0x100904, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$inet(r6, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e00000010000000020000000000000000000000007000000070d0900410000000008ea6e0200"], 0x40}, 0x20002800) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r10, 0x1, 0x6, &(0x7f0000000040), 0x4) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000280)='./file0\x00', r1, 0x4000, r10}, 0x18) recvmsg(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x113000, 0x0) 1.840502809s ago: executing program 2 (id=461): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x14}, 0x90a2, 0xca, 0x1, 0x6, 0x7, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc, 0x1, 0x0, 0x0, 0x0, 0x8, 0x221, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x80, 0x0, 0x0, 0x4, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r3, 0x110, 0x5, 0x0, 0x4) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e5, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b10000c00", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1082}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x12, 0x0, &(0x7f00000000c0)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, 0x0, 0xfffffffffffffffe}, 0x20) setsockopt$sock_attach_bpf(r8, 0x6, 0x3, &(0x7f00000000c0), 0x4) socket$kcm(0xa, 0x2, 0x88) 109.6µs ago: executing program 32 (id=459): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x9) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB], &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) close(0x3) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffffe7, 0x0, 0x0, 0xfffffffffffffffd}, 0x40000000) close(r0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x1, 0x0, 0xf7fff038}, {0x6, 0x0, 0x2}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) write$cgroup_type(r5, &(0x7f0000000280), 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000006c811c4e783c00000063112100000000007810000002000000850000000500000095000000001000000000000000000000534643c4b5ad2e7a4c8bd9ca9b52fb92c14d04b5cb4b4142b307451213ef187917f63cc68160862a1de6ecd62be5d4bbb69c15eee075b53597514405fdfcb27bc1dbffaabbd2d955a5568abba5bb9323d222bfd68b86d51161330e2b3178bc2a932cecdebc"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 0s ago: executing program 33 (id=460): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000000, 0xb121, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x1000000ac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f7, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x6, 0x3, 0x8, 0xc024, 0x1, 0x5b93, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20180, 0x0) kernel console output (not intermixed with test programs): f batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.786468][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.799799][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.806786][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.832979][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.909948][ T51] Bluetooth: hci3: command tx timeout [ 89.923643][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.930978][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.957217][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.004685][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.011874][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.038804][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.103777][ T5773] hsr_slave_0: entered promiscuous mode [ 90.110554][ T5773] hsr_slave_1: entered promiscuous mode [ 90.116772][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.124540][ T5773] Cannot create hsr debugfs directory [ 90.259088][ T5784] hsr_slave_0: entered promiscuous mode [ 90.268035][ T5784] hsr_slave_1: entered promiscuous mode [ 90.274638][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.282330][ T5784] Cannot create hsr debugfs directory [ 90.295643][ T5782] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.344227][ T5782] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.359242][ T5782] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.379292][ T5782] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.510383][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.520646][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.537962][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.574333][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.753677][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.768488][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.779320][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.792968][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.875735][ T5784] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.888305][ T5784] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.899652][ T5784] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.911438][ T5784] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.995065][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.045585][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.092313][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.099785][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.128686][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.138841][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.146016][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.206750][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.231130][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.244394][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.251584][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.274048][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.327726][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.334892][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.360234][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.393684][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.400916][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.459275][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.503889][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.511122][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.526865][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.534110][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.554036][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.561240][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.742433][ T51] Bluetooth: hci0: command tx timeout [ 91.747937][ T51] Bluetooth: hci1: command tx timeout [ 91.820031][ T51] Bluetooth: hci2: command tx timeout [ 91.986401][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.993419][ T51] Bluetooth: hci3: command tx timeout [ 92.004567][ T9] cfg80211: failed to load regulatory.db [ 92.074507][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.232415][ T5782] veth0_vlan: entered promiscuous mode [ 92.279131][ T5782] veth1_vlan: entered promiscuous mode [ 92.288171][ T5776] veth0_vlan: entered promiscuous mode [ 92.324027][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.346417][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.358429][ T5776] veth1_vlan: entered promiscuous mode [ 92.415672][ T5782] veth0_macvtap: entered promiscuous mode [ 92.437962][ T5782] veth1_macvtap: entered promiscuous mode [ 92.508927][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.519455][ T5773] veth0_vlan: entered promiscuous mode [ 92.534903][ T5776] veth0_macvtap: entered promiscuous mode [ 92.546750][ T5776] veth1_macvtap: entered promiscuous mode [ 92.559145][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.593992][ T5773] veth1_vlan: entered promiscuous mode [ 92.602889][ T5782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.614949][ T5782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.628347][ T5782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.637209][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.664650][ T5784] veth0_vlan: entered promiscuous mode [ 92.688662][ T5784] veth1_vlan: entered promiscuous mode [ 92.706832][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.718275][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.731439][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.762043][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.773985][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.787321][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.815877][ T5776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.826584][ T5776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.836375][ T5776] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.846243][ T5776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.866475][ T5773] veth0_macvtap: entered promiscuous mode [ 92.882235][ T5773] veth1_macvtap: entered promiscuous mode [ 92.957943][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.972813][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.983136][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.994321][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.006411][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.018319][ T5784] veth0_macvtap: entered promiscuous mode [ 93.053208][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.065470][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.075849][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.087754][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.099306][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.136266][ T5784] veth1_macvtap: entered promiscuous mode [ 93.151640][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.160902][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.169663][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.178546][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.201594][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.209624][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.308803][ T1003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.323903][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.338293][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.345144][ T1003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.359581][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.367544][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.378067][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.388649][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.398618][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.409161][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.421877][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.451515][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.462487][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.472429][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.482961][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.493091][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.504751][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.517653][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.564283][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.578002][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.588536][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.597471][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.626304][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.647055][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.715610][ T2967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.738385][ T2967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.820525][ T51] Bluetooth: hci1: command tx timeout [ 93.822057][ T5084] Bluetooth: hci0: command tx timeout [ 93.864433][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.900023][ T5084] Bluetooth: hci2: command tx timeout [ 93.909222][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.964369][ T5838] -1: renamed from syzkaller0 [ 94.013120][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.031707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.049720][ C0] hrtimer: interrupt took 47933 ns [ 94.060578][ T5084] Bluetooth: hci3: command tx timeout [ 94.135341][ T5840] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1'. [ 94.157109][ T2967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.166229][ T2967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.446645][ T5843] syzkaller0: entered promiscuous mode [ 94.452574][ T5843] syzkaller0: entered allmulticast mode [ 95.904039][ T5084] Bluetooth: hci0: command tx timeout [ 95.904510][ T51] Bluetooth: hci1: command tx timeout [ 95.995225][ T51] Bluetooth: hci2: command tx timeout [ 96.195470][ T51] Bluetooth: hci3: command tx timeout [ 97.594002][ T5874] syzkaller0: entered promiscuous mode [ 97.599541][ T5874] syzkaller0: entered allmulticast mode [ 97.712803][ T5879] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9'. [ 97.793651][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.827969][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.857721][ T5879] bond0 (unregistering): Released all slaves [ 99.366766][ T5882] warning: `syz.3.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.640407][ T5893] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.14'. [ 99.660604][ T5893] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 99.725980][ T5898] Driver unsupported XDP return value 0 on prog (id 10) dev N/A, expect packet loss! [ 99.923104][ T5898] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.14'. [ 99.951569][ T5904] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 99.959197][ T5904] netlink: 'syz.0.16': attribute type 8 has an invalid length. [ 100.051503][ T5904] netlink: 132 bytes leftover after parsing attributes in process `syz.0.16'. [ 100.707052][ T5908] @: renamed from bond_slave_0 (while UP) [ 100.843134][ T5908] netlink: 'syz.3.17': attribute type 33 has an invalid length. [ 100.889347][ T5908] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.17'. [ 101.626510][ T5922] netlink: 'syz.1.21': attribute type 10 has an invalid length. [ 101.641145][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21'. [ 101.655510][ T5922] bridge0: port 3(team0) entered blocking state [ 101.667409][ T5922] bridge0: port 3(team0) entered disabled state [ 101.679393][ T5922] team0: entered allmulticast mode [ 101.686525][ T5922] team_slave_0: entered allmulticast mode [ 101.706224][ T5922] team_slave_1: entered allmulticast mode [ 101.798169][ T5922] team0: entered promiscuous mode [ 101.813467][ T5922] team_slave_0: entered promiscuous mode [ 101.834457][ T5922] team_slave_1: entered promiscuous mode [ 101.856809][ T5922] bridge0: port 3(team0) entered blocking state [ 101.864963][ T5922] bridge0: port 3(team0) entered forwarding state [ 102.135319][ T5922] syz.1.21 (5922) used greatest stack depth: 20584 bytes left [ 102.601003][ T5935] @: renamed from bond_slave_0 (while UP) [ 102.761749][ T5935] netlink: 'syz.0.32': attribute type 33 has an invalid length. [ 102.770008][ T5935] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.32'. [ 102.856538][ T5933] syzkaller0: entered promiscuous mode [ 102.865190][ T5933] syzkaller0: entered allmulticast mode [ 103.146943][ T5944] syzkaller0: entered promiscuous mode [ 103.159101][ T5944] syzkaller0: entered allmulticast mode [ 104.531826][ T5952] syz.0.26 (5952) used greatest stack depth: 20120 bytes left [ 105.390923][ T5961] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.28'. [ 105.400438][ T5961] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 105.532350][ T5964] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.28'. [ 107.548324][ T5958] netlink: 'syz.3.27': attribute type 2 has an invalid length. [ 107.559755][ T5958] netlink: 'syz.3.27': attribute type 8 has an invalid length. [ 107.567352][ T5958] netlink: 132 bytes leftover after parsing attributes in process `syz.3.27'. [ 107.648389][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.868391][ T5979] netlink: 'syz.3.33': attribute type 10 has an invalid length. [ 107.890119][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.33'. [ 107.921210][ T5979] bridge0: port 3(team0) entered blocking state [ 107.950821][ T5979] bridge0: port 3(team0) entered disabled state [ 107.960342][ T5979] team0: entered allmulticast mode [ 108.229475][ T5979] team_slave_0: entered allmulticast mode [ 108.236663][ T5979] team_slave_1: entered allmulticast mode [ 108.401904][ T5979] team0: entered promiscuous mode [ 108.408468][ T5979] team_slave_0: entered promiscuous mode [ 108.422680][ T5979] team_slave_1: entered promiscuous mode [ 108.458780][ T5979] bridge0: port 3(team0) entered blocking state [ 108.470088][ T5979] bridge0: port 3(team0) entered forwarding state [ 109.619419][ T6000] syzkaller0: entered promiscuous mode [ 109.653454][ T6000] syzkaller0: entered allmulticast mode [ 112.434777][ T6023] netlink: 'syz.1.46': attribute type 2 has an invalid length. [ 112.442718][ T6023] netlink: 'syz.1.46': attribute type 8 has an invalid length. [ 112.455683][ T6023] netlink: 132 bytes leftover after parsing attributes in process `syz.1.46'. [ 112.710874][ T6037] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 112.717185][ T6036] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.47'. [ 112.733015][ T6036] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 112.898551][ T6044] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.47'. [ 113.008947][ T6037] netlink: 'syz.0.57': attribute type 3 has an invalid length. [ 113.022171][ T6037] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 113.042161][ T6037] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.57'. [ 113.230608][ T6047] netlink: 14 bytes leftover after parsing attributes in process `syz.3.52'. [ 113.271768][ T6037] syz.0.57 (6037) used greatest stack depth: 20072 bytes left [ 113.358126][ T6047] bond0 (unregistering): (slave 5@): Releasing backup interface [ 113.398707][ T6047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.427724][ T6047] bond0 (unregistering): Released all slaves [ 114.979746][ T6061] netlink: 14 bytes leftover after parsing attributes in process `syz.3.56'. [ 114.993087][ T6057] syz.1.55 (6057) used obsolete PPPIOCDETACH ioctl [ 115.000173][ T6068] netlink: 'syz.0.58': attribute type 10 has an invalid length. [ 115.139429][ T6074] FAULT_INJECTION: forcing a failure. [ 115.139429][ T6074] name failslab, interval 1, probability 0, space 0, times 1 [ 115.161067][ T6074] CPU: 1 PID: 6074 Comm: syz.2.59 Not tainted syzkaller #0 [ 115.168348][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.178479][ T6074] Call Trace: [ 115.181805][ T6074] [ 115.184778][ T6074] dump_stack_lvl+0x18c/0x250 [ 115.189554][ T6074] ? show_regs_print_info+0x20/0x20 [ 115.194824][ T6074] ? load_image+0x420/0x420 [ 115.199386][ T6074] ? __might_sleep+0xe0/0xe0 [ 115.204019][ T6074] ? __lock_acquire+0x7d80/0x7d80 [ 115.209056][ T6074] ? perf_trace_lock+0xfc/0x3b0 [ 115.213992][ T6074] should_fail_ex+0x394/0x4c0 [ 115.218726][ T6074] should_failslab+0x9/0x20 [ 115.223284][ T6074] slab_pre_alloc_hook+0x59/0x300 [ 115.228377][ T6074] ? __get_vm_area_node+0x125/0x370 [ 115.233615][ T6074] __kmem_cache_alloc_node+0x53/0x250 [ 115.239078][ T6074] ? __get_vm_area_node+0x125/0x370 [ 115.244352][ T6074] kmalloc_node_trace+0x26/0xe0 [ 115.249286][ T6074] __get_vm_area_node+0x125/0x370 [ 115.254376][ T6074] __vmalloc_node_range+0x36f/0x1320 [ 115.259723][ T6074] ? netlink_sendmsg+0x602/0xbf0 [ 115.264720][ T6074] ? netlink_insert+0x1094/0x1390 [ 115.269805][ T6074] ? netlink_insert+0x2ba/0x1390 [ 115.274785][ T6074] ? free_vm_area+0x50/0x50 [ 115.279333][ T6074] ? netlink_sendmsg+0x602/0xbf0 [ 115.284303][ T6074] vmalloc+0x79/0x90 [ 115.288228][ T6074] ? netlink_sendmsg+0x602/0xbf0 [ 115.293200][ T6074] netlink_sendmsg+0x602/0xbf0 [ 115.298006][ T6074] ? netlink_getsockopt+0x590/0x590 [ 115.303248][ T6074] ? apparmor_socket_sendmsg+0x8e/0x330 [ 115.308821][ T6074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.314140][ T6074] ? security_socket_sendmsg+0x80/0xa0 [ 115.319630][ T6074] ? netlink_getsockopt+0x590/0x590 [ 115.324859][ T6074] ____sys_sendmsg+0x61b/0x980 [ 115.329661][ T6074] ? __asan_memset+0x22/0x40 [ 115.334299][ T6074] ? __sys_sendmsg_sock+0x30/0x30 [ 115.339453][ T6074] ? __import_iovec+0x5f2/0x850 [ 115.344353][ T6074] ? import_iovec+0x73/0xa0 [ 115.348892][ T6074] ___sys_sendmsg+0x2a6/0x360 [ 115.353632][ T6074] ? __sys_sendmsg+0x2b0/0x2b0 [ 115.358456][ T6074] ? __lock_acquire+0x7d80/0x7d80 [ 115.363532][ T6074] __se_sys_sendmsg+0x1d0/0x2c0 [ 115.368426][ T6074] ? __x64_sys_sendmsg+0x80/0x80 [ 115.373411][ T6074] ? lockdep_hardirqs_on+0x98/0x150 [ 115.378641][ T6074] do_syscall_64+0x55/0xb0 [ 115.383091][ T6074] ? clear_bhb_loop+0x40/0x90 [ 115.387788][ T6074] ? clear_bhb_loop+0x40/0x90 [ 115.392498][ T6074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.398435][ T6074] RIP: 0033:0x7fe276d9de59 [ 115.402880][ T6074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.422507][ T6074] RSP: 002b:00007fe277c0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.430951][ T6074] RAX: ffffffffffffffda RBX: 00007fe277026090 RCX: 00007fe276d9de59 [ 115.438952][ T6074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 115.446951][ T6074] RBP: 00007fe277c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 115.454945][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.462941][ T6074] R13: 00007fe277026128 R14: 00007fe277026090 R15: 00007ffee8e2f5d8 [ 115.470954][ T6074] [ 115.507003][ T6074] syz.2.59: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 115.528027][ T6074] CPU: 1 PID: 6074 Comm: syz.2.59 Not tainted syzkaller #0 [ 115.535298][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 115.545405][ T6074] Call Trace: [ 115.548732][ T6074] [ 115.551705][ T6074] dump_stack_lvl+0x18c/0x250 [ 115.556446][ T6074] ? show_regs_print_info+0x20/0x20 [ 115.561714][ T6074] ? load_image+0x420/0x420 [ 115.566279][ T6074] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 115.572749][ T6074] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 115.579313][ T6074] warn_alloc+0x246/0x340 [ 115.583706][ T6074] ? __get_vm_area_node+0x125/0x370 [ 115.588972][ T6074] ? zone_watermark_ok_safe+0x230/0x230 [ 115.594584][ T6074] ? rcu_is_watching+0x15/0xb0 [ 115.599416][ T6074] ? __get_vm_area_node+0x356/0x370 [ 115.604683][ T6074] __vmalloc_node_range+0x394/0x1320 [ 115.610030][ T6074] ? netlink_insert+0x1094/0x1390 [ 115.615129][ T6074] ? netlink_insert+0x2ba/0x1390 [ 115.620130][ T6074] ? free_vm_area+0x50/0x50 [ 115.624695][ T6074] ? netlink_sendmsg+0x602/0xbf0 [ 115.629690][ T6074] vmalloc+0x79/0x90 [ 115.633646][ T6074] ? netlink_sendmsg+0x602/0xbf0 [ 115.638637][ T6074] netlink_sendmsg+0x602/0xbf0 [ 115.643473][ T6074] ? netlink_getsockopt+0x590/0x590 [ 115.648731][ T6074] ? apparmor_socket_sendmsg+0x8e/0x330 [ 115.654326][ T6074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.659669][ T6074] ? security_socket_sendmsg+0x80/0xa0 [ 115.665209][ T6074] ? netlink_getsockopt+0x590/0x590 [ 115.670473][ T6074] ____sys_sendmsg+0x61b/0x980 [ 115.675310][ T6074] ? __asan_memset+0x22/0x40 [ 115.679955][ T6074] ? __sys_sendmsg_sock+0x30/0x30 [ 115.685054][ T6074] ? __import_iovec+0x5f2/0x850 [ 115.689971][ T6074] ? import_iovec+0x73/0xa0 [ 115.694539][ T6074] ___sys_sendmsg+0x2a6/0x360 [ 115.699286][ T6074] ? __sys_sendmsg+0x2b0/0x2b0 [ 115.704138][ T6074] ? __lock_acquire+0x7d80/0x7d80 [ 115.709242][ T6074] __se_sys_sendmsg+0x1d0/0x2c0 [ 115.714163][ T6074] ? __x64_sys_sendmsg+0x80/0x80 [ 115.719178][ T6074] ? lockdep_hardirqs_on+0x98/0x150 [ 115.724439][ T6074] do_syscall_64+0x55/0xb0 [ 115.728909][ T6074] ? clear_bhb_loop+0x40/0x90 [ 115.733630][ T6074] ? clear_bhb_loop+0x40/0x90 [ 115.738354][ T6074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 115.744308][ T6074] RIP: 0033:0x7fe276d9de59 [ 115.748773][ T6074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.768432][ T6074] RSP: 002b:00007fe277c0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.776902][ T6074] RAX: ffffffffffffffda RBX: 00007fe277026090 RCX: 00007fe276d9de59 [ 115.784927][ T6074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 115.792951][ T6074] RBP: 00007fe277c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 115.800984][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.809018][ T6074] R13: 00007fe277026128 R14: 00007fe277026090 R15: 00007ffee8e2f5d8 [ 115.817151][ T6074] [ 115.866536][ T6074] Mem-Info: [ 115.887514][ T6074] active_anon:6498 inactive_anon:0 isolated_anon:0 [ 115.887514][ T6074] active_file:1275 inactive_file:39959 isolated_file:0 [ 115.887514][ T6074] unevictable:768 dirty:383 writeback:23 [ 115.887514][ T6074] slab_reclaimable:9703 slab_unreclaimable:91366 [ 115.887514][ T6074] mapped:27506 shmem:1361 pagetables:566 [ 115.887514][ T6074] sec_pagetables:0 bounce:0 [ 115.887514][ T6074] kernel_misc_reclaimable:0 [ 115.887514][ T6074] free:1364980 free_pcp:11873 free_cma:0 [ 115.964232][ T6074] Node 0 active_anon:26092kB inactive_anon:0kB active_file:5100kB inactive_file:159636kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114124kB dirty:1532kB writeback:92kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10572kB pagetables:2264kB sec_pagetables:0kB all_unreclaimable? no [ 116.003211][ T6074] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 116.039900][ T6074] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 116.076378][ T6071] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 116.079979][ T6074] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 116.103324][ T6074] Node 0 DMA32 free:1551544kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26024kB inactive_anon:0kB active_file:5128kB inactive_file:158820kB unevictable:1536kB writepending:1496kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:27096kB local_pcp:8352kB free_cma:0kB [ 116.160266][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 116.169219][ T6074] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 116.204701][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 116.212815][ T6074] Node 1 Normal free:3893008kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20036kB local_pcp:10752kB free_cma:0kB [ 116.248029][ T6074] lowmem_reserve[]: 0 0 0 0 0 [ 116.272379][ T6074] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 116.290443][ T6074] Node 0 DMA32: 798*4kB (UM) 904*8kB (UM) 256*16kB (UM) 8*32kB (ME) 4*64kB (UME) 3*128kB (ME) 5*256kB (M) 7*512kB (ME) 3*1024kB (ME) 4*2048kB (UME) 371*4096kB (M) = 1551160kB [ 116.323837][ T6074] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 116.347458][ T6074] Node 1 Normal: 242*4kB (UE) 45*8kB (UE) 36*16kB (UE) 53*32kB (UE) 14*64kB (UM) 7*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 949*4096kB (UME) = 3893008kB [ 116.370942][ T6074] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.384258][ T6074] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.409795][ T6074] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 116.440704][ T6074] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 116.466167][ T6074] 42602 total pagecache pages [ 116.476641][ T6074] 0 pages in swap cache [ 116.483125][ T6074] Free swap = 124996kB [ 116.487811][ T6074] Total swap = 124996kB [ 116.496886][ T6074] 2097051 pages RAM [ 116.500971][ T6074] 0 pages HighMem/MovableOnly [ 116.505686][ T6074] 416953 pages reserved [ 116.519880][ T6074] 0 pages cma reserved [ 116.608579][ T6087] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.62'. [ 116.633649][ T6087] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 116.978707][ T6093] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.62'. [ 121.646698][ T6104] netlink: 'syz.1.74': attribute type 10 has an invalid length. [ 122.224958][ T6117] netlink: 188 bytes leftover after parsing attributes in process `syz.2.67'. [ 122.454662][ T6124] syzkaller0: entered promiscuous mode [ 122.462722][ T6124] syzkaller0: entered allmulticast mode [ 122.762707][ T6128] FAULT_INJECTION: forcing a failure. [ 122.762707][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 122.788190][ T6128] CPU: 0 PID: 6128 Comm: syz.0.73 Not tainted syzkaller #0 [ 122.795465][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 122.805556][ T6128] Call Trace: [ 122.808869][ T6128] [ 122.811863][ T6128] dump_stack_lvl+0x18c/0x250 [ 122.816599][ T6128] ? show_regs_print_info+0x20/0x20 [ 122.821849][ T6128] ? load_image+0x420/0x420 [ 122.826490][ T6128] ? __might_sleep+0xe0/0xe0 [ 122.831129][ T6128] ? __lock_acquire+0x7d80/0x7d80 [ 122.836215][ T6128] should_fail_ex+0x394/0x4c0 [ 122.840948][ T6128] should_failslab+0x9/0x20 [ 122.845574][ T6128] slab_pre_alloc_hook+0x59/0x300 [ 122.850637][ T6128] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 122.855958][ T6128] __kmem_cache_alloc_node+0x53/0x250 [ 122.861375][ T6128] ? __asan_memset+0x22/0x40 [ 122.866006][ T6128] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 122.871351][ T6128] kmalloc_trace+0x2a/0xe0 [ 122.875805][ T6128] __xdp_reg_mem_model+0x1e3/0x5a0 [ 122.880952][ T6128] ? kvmalloc_node+0x70/0x180 [ 122.885668][ T6128] ? kvmalloc_node+0x70/0x180 [ 122.890374][ T6128] ? xdp_reg_mem_model+0x40/0x40 [ 122.895343][ T6128] xdp_reg_mem_model+0x22/0x40 [ 122.900143][ T6128] bpf_test_run_xdp_live+0x262/0x1b30 [ 122.905549][ T6128] ? 0xffffffffa0004740 [ 122.909735][ T6128] ? 0xffffffffa0004740 [ 122.913913][ T6128] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 122.919842][ T6128] ? xdp_convert_md_to_buff+0x330/0x330 [ 122.925445][ T6128] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 122.931722][ T6128] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 122.937122][ T6128] ? __lock_acquire+0x7d80/0x7d80 [ 122.942190][ T6128] ? dev_put+0x80/0x80 [ 122.946290][ T6128] ? dev_put+0x80/0x80 [ 122.950380][ T6128] bpf_prog_test_run+0x31f/0x390 [ 122.955347][ T6128] __sys_bpf+0x49d/0x890 [ 122.959615][ T6128] ? bpf_link_show_fdinfo+0x390/0x390 [ 122.965026][ T6128] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 122.971230][ T6128] __x64_sys_bpf+0x7c/0x90 [ 122.975675][ T6128] do_syscall_64+0x55/0xb0 [ 122.980120][ T6128] ? clear_bhb_loop+0x40/0x90 [ 122.984818][ T6128] ? clear_bhb_loop+0x40/0x90 [ 122.989515][ T6128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 122.995436][ T6128] RIP: 0033:0x7f288879de59 [ 122.999876][ T6128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.019507][ T6128] RSP: 002b:00007f2889663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 123.027947][ T6128] RAX: ffffffffffffffda RBX: 00007f2888a25fa0 RCX: 00007f288879de59 [ 123.035942][ T6128] RDX: 0000000000000050 RSI: 0000200000000440 RDI: 000000000000000a [ 123.043942][ T6128] RBP: 00007f2889663090 R08: 0000000000000000 R09: 0000000000000000 [ 123.051933][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.059927][ T6128] R13: 00007f2888a26038 R14: 00007f2888a25fa0 R15: 00007ffdafe6f238 [ 123.067939][ T6128] [ 125.328545][ T6154] FAULT_INJECTION: forcing a failure. [ 125.328545][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 125.400605][ T6154] CPU: 0 PID: 6154 Comm: syz.0.82 Not tainted syzkaller #0 [ 125.407887][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 125.417983][ T6154] Call Trace: [ 125.421317][ T6154] [ 125.424292][ T6154] dump_stack_lvl+0x18c/0x250 [ 125.429037][ T6154] ? show_regs_print_info+0x20/0x20 [ 125.434291][ T6154] ? load_image+0x420/0x420 [ 125.438857][ T6154] ? __might_sleep+0xe0/0xe0 [ 125.443499][ T6154] ? __lock_acquire+0x7d80/0x7d80 [ 125.448579][ T6154] should_fail_ex+0x394/0x4c0 [ 125.453320][ T6154] should_failslab+0x9/0x20 [ 125.457891][ T6154] slab_pre_alloc_hook+0x59/0x300 [ 125.462975][ T6154] kmem_cache_alloc_node+0x5e/0x310 [ 125.468249][ T6154] ? __alloc_skb+0x103/0x2c0 [ 125.472909][ T6154] __alloc_skb+0x103/0x2c0 [ 125.477391][ T6154] __ip6_append_data+0x2be0/0x3d40 [ 125.482590][ T6154] ? rawv6_send_hdrinc+0x1660/0x1660 [ 125.487935][ T6154] ? ip6_mtu+0x7d/0x3f0 [ 125.492155][ T6154] ? ip6_setup_cork+0xff0/0xff0 [ 125.497070][ T6154] ip6_append_data+0x1b0/0x350 [ 125.501901][ T6154] ? rawv6_send_hdrinc+0x1660/0x1660 [ 125.507244][ T6154] rawv6_sendmsg+0x1229/0x1740 [ 125.512084][ T6154] ? compat_rawv6_ioctl+0x70/0x70 [ 125.517185][ T6154] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 125.523659][ T6154] ? aa_sock_msg_perm+0x94/0x150 [ 125.528650][ T6154] ? inet_sendmsg+0x7e/0x2a0 [ 125.533297][ T6154] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 125.538633][ T6154] ? inet_send_prepare+0x250/0x250 [ 125.543795][ T6154] ____sys_sendmsg+0x61b/0x980 [ 125.548623][ T6154] ? __sys_sendmsg_sock+0x30/0x30 [ 125.553708][ T6154] ? __import_iovec+0x3fa/0x850 [ 125.558617][ T6154] ? import_iovec+0x73/0xa0 [ 125.563169][ T6154] ___sys_sendmsg+0x2a6/0x360 [ 125.567899][ T6154] ? get_pid_task+0x20/0x1e0 [ 125.572547][ T6154] ? __sys_sendmsg+0x2b0/0x2b0 [ 125.577391][ T6154] ? __lock_acquire+0x7d80/0x7d80 [ 125.582493][ T6154] __se_sys_sendmsg+0x1d0/0x2c0 [ 125.587401][ T6154] ? __x64_sys_sendmsg+0x80/0x80 [ 125.592409][ T6154] ? lockdep_hardirqs_on+0x98/0x150 [ 125.597658][ T6154] do_syscall_64+0x55/0xb0 [ 125.602130][ T6154] ? clear_bhb_loop+0x40/0x90 [ 125.606851][ T6154] ? clear_bhb_loop+0x40/0x90 [ 125.611573][ T6154] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.617517][ T6154] RIP: 0033:0x7f288879de59 [ 125.621974][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.641636][ T6154] RSP: 002b:00007f2889663028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.650099][ T6154] RAX: ffffffffffffffda RBX: 00007f2888a25fa0 RCX: 00007f288879de59 [ 125.658114][ T6154] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000003 [ 125.666139][ T6154] RBP: 00007f2889663090 R08: 0000000000000000 R09: 0000000000000000 [ 125.674147][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.682152][ T6154] R13: 00007f2888a26038 R14: 00007f2888a25fa0 R15: 00007ffdafe6f238 [ 125.690181][ T6154] [ 125.870263][ T6162] netlink: 'syz.0.85': attribute type 41 has an invalid length. [ 126.022354][ T6165] syzkaller0: entered promiscuous mode [ 126.028045][ T6165] syzkaller0: entered allmulticast mode [ 127.455924][ T6171] raw_sendmsg: syz.2.89 forgot to set AF_INET. Fix it! [ 127.677179][ T6178] syzkaller0: entered promiscuous mode [ 127.705826][ T6178] syzkaller0: entered allmulticast mode [ 128.667179][ T6193] FAULT_INJECTION: forcing a failure. [ 128.667179][ T6193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.727330][ T6193] CPU: 0 PID: 6193 Comm: syz.1.95 Not tainted syzkaller #0 [ 128.734622][ T6193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.744720][ T6193] Call Trace: [ 128.748038][ T6193] [ 128.751012][ T6193] dump_stack_lvl+0x18c/0x250 [ 128.755751][ T6193] ? show_regs_print_info+0x20/0x20 [ 128.761000][ T6193] ? load_image+0x420/0x420 [ 128.765563][ T6193] ? __might_fault+0xaa/0x120 [ 128.770288][ T6193] ? __lock_acquire+0x7d80/0x7d80 [ 128.775374][ T6193] ? __virt_addr_valid+0x10c/0x380 [ 128.780552][ T6193] should_fail_ex+0x394/0x4c0 [ 128.785296][ T6193] _copy_from_user+0x2f/0xe0 [ 128.789937][ T6193] csum_and_copy_from_iter+0x46e/0x1480 [ 128.795575][ T6193] ? iov_iter_get_pages_alloc2+0xc0/0xc0 [ 128.801276][ T6193] ? __alloc_pages+0x276/0x460 [ 128.806089][ T6193] ? zone_statistics+0x170/0x170 [ 128.811082][ T6193] ? rcu_is_watching+0x15/0xb0 [ 128.815913][ T6193] ip_generic_getfrag+0x163/0x2f0 [ 128.821004][ T6193] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 128.825902][ T6193] ? raw_getfrag+0x11d/0x390 [ 128.830541][ T6193] ? skb_page_frag_refill+0x199/0x310 [ 128.835994][ T6193] __ip_append_data+0x1e6a/0x3bf0 [ 128.841111][ T6193] ? raw_send_hdrinc+0x1150/0x1150 [ 128.846291][ T6193] ? ip_setup_cork+0x840/0x840 [ 128.851107][ T6193] ? ipv4_mtu+0x313/0x430 [ 128.855504][ T6193] ? ip_setup_cork+0x527/0x840 [ 128.860312][ T6193] ? lockdep_hardirqs_on+0x98/0x150 [ 128.865562][ T6193] ip_append_data+0x10d/0x180 [ 128.870296][ T6193] ? raw_send_hdrinc+0x1150/0x1150 [ 128.875464][ T6193] raw_sendmsg+0x155e/0x1ba0 [ 128.880136][ T6193] ? compat_raw_ioctl+0x70/0x70 [ 128.885045][ T6193] ? aa_sk_perm+0x83c/0x970 [ 128.889619][ T6193] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 128.896096][ T6193] ? aa_sock_msg_perm+0x94/0x150 [ 128.901081][ T6193] ? sock_rps_record_flow+0x19/0x3f0 [ 128.906415][ T6193] ? inet_sendmsg+0x7e/0x2a0 [ 128.911061][ T6193] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 128.916397][ T6193] ? inet_send_prepare+0x250/0x250 [ 128.921566][ T6193] ____sys_sendmsg+0x61b/0x980 [ 128.926401][ T6193] ? __asan_memset+0x22/0x40 [ 128.931052][ T6193] ? __sys_sendmsg_sock+0x30/0x30 [ 128.936135][ T6193] ? __import_iovec+0x3fa/0x850 [ 128.941049][ T6193] ? import_iovec+0x73/0xa0 [ 128.945610][ T6193] ___sys_sendmsg+0x2a6/0x360 [ 128.950344][ T6193] ? get_pid_task+0x20/0x1e0 [ 128.954992][ T6193] ? __sys_sendmsg+0x2b0/0x2b0 [ 128.959831][ T6193] ? __lock_acquire+0x7d80/0x7d80 [ 128.964924][ T6193] __se_sys_sendmsg+0x1d0/0x2c0 [ 128.969836][ T6193] ? __x64_sys_sendmsg+0x80/0x80 [ 128.974852][ T6193] ? lockdep_hardirqs_on+0x98/0x150 [ 128.980110][ T6193] do_syscall_64+0x55/0xb0 [ 128.984583][ T6193] ? clear_bhb_loop+0x40/0x90 [ 128.989308][ T6193] ? clear_bhb_loop+0x40/0x90 [ 128.994042][ T6193] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 129.000009][ T6193] RIP: 0033:0x7f643219de59 [ 129.004477][ T6193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.024128][ T6193] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.032594][ T6193] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 129.040612][ T6193] RDX: 0000000000000000 RSI: 00002000000016c0 RDI: 0000000000000003 [ 129.048623][ T6193] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 129.056635][ T6193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.064643][ T6193] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 129.072658][ T6193] [ 129.790480][ T6201] syzkaller0: entered promiscuous mode [ 129.800635][ T6201] syzkaller0: entered allmulticast mode [ 130.631339][ T6221] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.103'. [ 131.603523][ T6221] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.103'. [ 132.954188][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.961561][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.219599][ T6248] syzkaller0: entered promiscuous mode [ 133.227495][ T6248] syzkaller0: entered allmulticast mode [ 133.251686][ T6256] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 133.525497][ T6270] FAULT_INJECTION: forcing a failure. [ 133.525497][ T6270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.569939][ T6270] CPU: 1 PID: 6270 Comm: syz.0.119 Not tainted syzkaller #0 [ 133.577311][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 133.587416][ T6270] Call Trace: [ 133.590738][ T6270] [ 133.593711][ T6270] dump_stack_lvl+0x18c/0x250 [ 133.598485][ T6270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 133.604718][ T6270] ? show_regs_print_info+0x20/0x20 [ 133.610067][ T6270] ? load_image+0x420/0x420 [ 133.614637][ T6270] should_fail_ex+0x394/0x4c0 [ 133.619370][ T6270] _copy_from_user+0x2f/0xe0 [ 133.624015][ T6270] generic_map_update_batch+0x53e/0x800 [ 133.629636][ T6270] ? rcu_read_unlock+0xa0/0xa0 [ 133.634452][ T6270] ? __fdget+0x180/0x210 [ 133.638745][ T6270] ? rcu_read_unlock+0xa0/0xa0 [ 133.643801][ T6270] bpf_map_do_batch+0x3f2/0x600 [ 133.648702][ T6270] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 133.655104][ T6270] __sys_bpf+0x381/0x890 [ 133.659397][ T6270] ? bpf_link_show_fdinfo+0x390/0x390 [ 133.664834][ T6270] ? lock_chain_count+0x20/0x20 [ 133.669741][ T6270] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 133.675778][ T6270] __x64_sys_bpf+0x7c/0x90 [ 133.680266][ T6270] do_syscall_64+0x55/0xb0 [ 133.684737][ T6270] ? clear_bhb_loop+0x40/0x90 [ 133.689451][ T6270] ? clear_bhb_loop+0x40/0x90 [ 133.694174][ T6270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.700117][ T6270] RIP: 0033:0x7f288879de59 [ 133.704559][ T6270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.724201][ T6270] RSP: 002b:00007f2889663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 133.732651][ T6270] RAX: ffffffffffffffda RBX: 00007f2888a25fa0 RCX: 00007f288879de59 [ 133.740657][ T6270] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 133.748652][ T6270] RBP: 00007f2889663090 R08: 0000000000000000 R09: 0000000000000000 [ 133.756642][ T6270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.764636][ T6270] R13: 00007f2888a26038 R14: 00007f2888a25fa0 R15: 00007ffdafe6f238 [ 133.772646][ T6270] [ 133.944033][ T6272] netlink: 'syz.2.120': attribute type 33 has an invalid length. [ 133.952395][ T6272] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.120'. [ 135.727722][ T6299] FAULT_INJECTION: forcing a failure. [ 135.727722][ T6299] name failslab, interval 1, probability 0, space 0, times 0 [ 135.745135][ T6299] CPU: 0 PID: 6299 Comm: syz.1.129 Not tainted syzkaller #0 [ 135.752475][ T6299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 135.762571][ T6299] Call Trace: [ 135.765876][ T6299] [ 135.768813][ T6299] dump_stack_lvl+0x18c/0x250 [ 135.773526][ T6299] ? sctp_sendmsg+0x1519/0x27b0 [ 135.778424][ T6299] ? ___sys_sendmsg+0x2a6/0x360 [ 135.783320][ T6299] ? show_regs_print_info+0x20/0x20 [ 135.788550][ T6299] ? load_image+0x420/0x420 [ 135.793105][ T6299] should_fail_ex+0x394/0x4c0 [ 135.797838][ T6299] should_failslab+0x9/0x20 [ 135.802396][ T6299] slab_pre_alloc_hook+0x59/0x300 [ 135.807463][ T6299] ? sctp_add_bind_addr+0x8c/0x360 [ 135.812614][ T6299] __kmem_cache_alloc_node+0x53/0x250 [ 135.818068][ T6299] ? sctp_add_bind_addr+0x8c/0x360 [ 135.823231][ T6299] kmalloc_trace+0x2a/0xe0 [ 135.827714][ T6299] sctp_add_bind_addr+0x8c/0x360 [ 135.832712][ T6299] sctp_copy_local_addr_list+0x31b/0x4e0 [ 135.838389][ T6299] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 135.844136][ T6299] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 135.850253][ T6299] ? sctp_v4_is_any+0x35/0x60 [ 135.855064][ T6299] ? sctp_copy_one_addr+0x8c/0x350 [ 135.860237][ T6299] sctp_bind_addr_copy+0xb3/0x3c0 [ 135.865317][ T6299] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 135.871705][ T6299] sctp_connect_new_asoc+0x2f9/0x6a0 [ 135.877026][ T6299] ? __sctp_connect+0xd80/0xd80 [ 135.881900][ T6299] ? __local_bh_enable_ip+0x13a/0x1c0 [ 135.887311][ T6299] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 135.892889][ T6299] ? security_sctp_bind_connect+0x89/0xb0 [ 135.898694][ T6299] sctp_sendmsg+0x1519/0x27b0 [ 135.903442][ T6299] ? sctp_getsockopt+0xb60/0xb60 [ 135.908437][ T6299] ? aa_af_perm+0x330/0x330 [ 135.912995][ T6299] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 135.919467][ T6299] ? sock_rps_record_flow+0x19/0x3f0 [ 135.924826][ T6299] ? inet_sendmsg+0xce/0x2a0 [ 135.929473][ T6299] ? inet_send_prepare+0x250/0x250 [ 135.934667][ T6299] ____sys_sendmsg+0x61b/0x980 [ 135.939502][ T6299] ? __asan_memset+0x22/0x40 [ 135.944155][ T6299] ? __sys_sendmsg_sock+0x30/0x30 [ 135.949227][ T6299] ? __import_iovec+0x5f2/0x850 [ 135.954137][ T6299] ? import_iovec+0x73/0xa0 [ 135.958688][ T6299] ___sys_sendmsg+0x2a6/0x360 [ 135.963418][ T6299] ? get_pid_task+0x20/0x1e0 [ 135.968054][ T6299] ? __sys_sendmsg+0x2b0/0x2b0 [ 135.972875][ T6299] ? __lock_acquire+0x7d80/0x7d80 [ 135.977984][ T6299] __se_sys_sendmsg+0x1d0/0x2c0 [ 135.982883][ T6299] ? __x64_sys_sendmsg+0x80/0x80 [ 135.987902][ T6299] ? lockdep_hardirqs_on+0x98/0x150 [ 135.993577][ T6299] do_syscall_64+0x55/0xb0 [ 135.998044][ T6299] ? clear_bhb_loop+0x40/0x90 [ 136.002747][ T6299] ? clear_bhb_loop+0x40/0x90 [ 136.007458][ T6299] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 136.013406][ T6299] RIP: 0033:0x7f643219de59 [ 136.017856][ T6299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.037493][ T6299] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.045935][ T6299] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 136.053953][ T6299] RDX: 0000000004000044 RSI: 00002000000003c0 RDI: 0000000000000003 [ 136.061971][ T6299] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 136.069987][ T6299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.078015][ T6299] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 136.086051][ T6299] [ 136.675354][ T6290] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.125'. [ 137.870299][ T6330] FAULT_INJECTION: forcing a failure. [ 137.870299][ T6330] name failslab, interval 1, probability 0, space 0, times 0 [ 137.883331][ T6330] CPU: 1 PID: 6330 Comm: syz.0.139 Not tainted syzkaller #0 [ 137.890661][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 137.900769][ T6330] Call Trace: [ 137.904091][ T6330] [ 137.907069][ T6330] dump_stack_lvl+0x18c/0x250 [ 137.911808][ T6330] ? show_regs_print_info+0x20/0x20 [ 137.917067][ T6330] ? load_image+0x420/0x420 [ 137.921767][ T6330] ? __might_sleep+0xe0/0xe0 [ 137.926426][ T6330] ? __lock_acquire+0x7d80/0x7d80 [ 137.931500][ T6330] ? perf_trace_preemptirq_template+0xac/0x330 [ 137.937719][ T6330] ? irqentry_enter+0x37/0x50 [ 137.942453][ T6330] should_fail_ex+0x394/0x4c0 [ 137.947183][ T6330] should_failslab+0x9/0x20 [ 137.951735][ T6330] slab_pre_alloc_hook+0x59/0x300 [ 137.956815][ T6330] ? sk_prot_alloc+0xe7/0x210 [ 137.961532][ T6330] ? sk_prot_alloc+0xe7/0x210 [ 137.966256][ T6330] __kmem_cache_alloc_node+0x53/0x250 [ 137.971735][ T6330] ? sk_prot_alloc+0xe7/0x210 [ 137.976465][ T6330] __kmalloc+0xa7/0x240 [ 137.980688][ T6330] sk_prot_alloc+0xe7/0x210 [ 137.985240][ T6330] ? sk_alloc+0x24/0x350 [ 137.989542][ T6330] sk_alloc+0x3a/0x350 [ 137.993659][ T6330] ? bpf_ctx_init+0x154/0x190 [ 137.998398][ T6330] bpf_prog_test_run_skb+0x371/0x18f0 [ 138.003828][ T6330] ? __fget_files+0x28/0x460 [ 138.008471][ T6330] ? __fget_files+0x3fc/0x460 [ 138.013219][ T6330] ? cpu_online+0x60/0x60 [ 138.017607][ T6330] bpf_prog_test_run+0x31f/0x390 [ 138.022595][ T6330] __sys_bpf+0x49d/0x890 [ 138.026886][ T6330] ? bpf_link_show_fdinfo+0x390/0x390 [ 138.032383][ T6330] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 138.038614][ T6330] __x64_sys_bpf+0x7c/0x90 [ 138.043081][ T6330] do_syscall_64+0x55/0xb0 [ 138.047562][ T6330] ? clear_bhb_loop+0x40/0x90 [ 138.052285][ T6330] ? clear_bhb_loop+0x40/0x90 [ 138.057029][ T6330] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.062981][ T6330] RIP: 0033:0x7f288879de59 [ 138.067439][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.087095][ T6330] RSP: 002b:00007f2889663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.095565][ T6330] RAX: ffffffffffffffda RBX: 00007f2888a25fa0 RCX: 00007f288879de59 [ 138.103593][ T6330] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 138.111622][ T6330] RBP: 00007f2889663090 R08: 0000000000000000 R09: 0000000000000000 [ 138.119671][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.127727][ T6330] R13: 00007f2888a26038 R14: 00007f2888a25fa0 R15: 00007ffdafe6f238 [ 138.135757][ T6330] [ 138.245896][ T6335] syzkaller0: entered promiscuous mode [ 138.269766][ T6335] syzkaller0: entered allmulticast mode [ 139.248376][ T6364] FAULT_INJECTION: forcing a failure. [ 139.248376][ T6364] name failslab, interval 1, probability 0, space 0, times 0 [ 139.261528][ T6364] CPU: 1 PID: 6364 Comm: syz.1.150 Not tainted syzkaller #0 [ 139.268862][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 139.278965][ T6364] Call Trace: [ 139.282286][ T6364] [ 139.285259][ T6364] dump_stack_lvl+0x18c/0x250 [ 139.290004][ T6364] ? show_regs_print_info+0x20/0x20 [ 139.295272][ T6364] ? load_image+0x420/0x420 [ 139.299841][ T6364] ? perf_trace_preemptirq_template+0x269/0x330 [ 139.306162][ T6364] should_fail_ex+0x394/0x4c0 [ 139.310907][ T6364] should_failslab+0x9/0x20 [ 139.315474][ T6364] slab_pre_alloc_hook+0x59/0x300 [ 139.320563][ T6364] ? __local_bh_enable_ip+0x13a/0x1c0 [ 139.325989][ T6364] kmem_cache_alloc+0x5a/0x2c0 [ 139.330817][ T6364] ? batadv_tt_local_event+0x57/0x770 [ 139.336265][ T6364] batadv_tt_local_event+0x57/0x770 [ 139.341524][ T6364] ? batadv_hash_add+0x4e7/0x640 [ 139.346517][ T6364] ? batadv_hash_add+0x4e7/0x640 [ 139.351515][ T6364] batadv_tt_local_add+0x344/0x1ad0 [ 139.356781][ T6364] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 139.362562][ T6364] ? batadv_tt_global_entry_put+0x140/0x140 [ 139.368519][ T6364] ? batadv_get_vid+0x163/0x280 [ 139.373434][ T6364] batadv_interface_tx+0x7e7/0x1480 [ 139.378703][ T6364] ? batadv_softif_is_valid+0x70/0x70 [ 139.384137][ T6364] ? dev_hard_start_xmit+0x17d/0x790 [ 139.389480][ T6364] dev_hard_start_xmit+0x269/0x790 [ 139.394654][ T6364] ? __dev_queue_xmit+0x275/0x3630 [ 139.399829][ T6364] __dev_queue_xmit+0x198c/0x3630 [ 139.404912][ T6364] ? __dev_queue_xmit+0x275/0x3630 [ 139.410098][ T6364] ? lock_chain_count+0x20/0x20 [ 139.415003][ T6364] ? netdev_core_pick_tx+0x370/0x370 [ 139.420348][ T6364] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.426555][ T6364] ? lockdep_hardirqs_on+0x98/0x150 [ 139.431809][ T6364] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.438054][ T6364] ? __sanitizer_cov_trace_const_cmp8+0x80/0x80 [ 139.444357][ T6364] ? __bpf_redirect+0x8c2/0xdf0 [ 139.449274][ T6364] __bpf_tx_skb+0x181/0x260 [ 139.453860][ T6364] bpf_clone_redirect+0x315/0x4a0 [ 139.458948][ T6364] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 139.464460][ T6364] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.470489][ T6364] ? __lock_acquire+0x7d80/0x7d80 [ 139.475704][ T6364] ? lock_chain_count+0x20/0x20 [ 139.480610][ T6364] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 139.486902][ T6364] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 139.492237][ T6364] ? ktime_get+0x7f/0x280 [ 139.496617][ T6364] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 139.502912][ T6364] ? ktime_get_real_ts64+0x440/0x440 [ 139.508250][ T6364] ? __x64_sys_bpf+0x7c/0x90 [ 139.512894][ T6364] ? __local_bh_disable_ip+0x108/0x1a0 [ 139.518399][ T6364] ? __cant_sleep+0x220/0x220 [ 139.523135][ T6364] ? read_tsc+0x9/0x20 [ 139.527251][ T6364] ? ktime_get+0x24b/0x280 [ 139.531752][ T6364] ? bpf_test_run+0x174/0x870 [ 139.536486][ T6364] bpf_test_run+0x2df/0x870 [ 139.541057][ T6364] ? bpf_test_run+0x174/0x870 [ 139.545791][ T6364] ? dst_hold+0x70/0x70 [ 139.549994][ T6364] ? eth_get_headlen+0x210/0x210 [ 139.555045][ T6364] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 139.560502][ T6364] ? cpu_online+0x60/0x60 [ 139.564879][ T6364] bpf_prog_test_run+0x31f/0x390 [ 139.569961][ T6364] __sys_bpf+0x49d/0x890 [ 139.574256][ T6364] ? bpf_link_show_fdinfo+0x390/0x390 [ 139.579696][ T6364] ? lock_chain_count+0x20/0x20 [ 139.584593][ T6364] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 139.590637][ T6364] __x64_sys_bpf+0x7c/0x90 [ 139.595110][ T6364] do_syscall_64+0x55/0xb0 [ 139.599618][ T6364] ? clear_bhb_loop+0x40/0x90 [ 139.604355][ T6364] ? clear_bhb_loop+0x40/0x90 [ 139.609083][ T6364] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.615118][ T6364] RIP: 0033:0x7f643219de59 [ 139.619594][ T6364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.639257][ T6364] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 139.647724][ T6364] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 139.655751][ T6364] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 139.663770][ T6364] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 139.671790][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.679818][ T6364] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 139.687851][ T6364] [ 142.220279][ T6380] netlink: 68 bytes leftover after parsing attributes in process `syz.1.155'. [ 142.619167][ T6388] netlink: 'syz.1.157': attribute type 7 has an invalid length. [ 142.696045][ T6388] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 142.749847][ T6388] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.157'. [ 143.643969][ T6403] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.162'. [ 144.032209][ T6410] FAULT_INJECTION: forcing a failure. [ 144.032209][ T6410] name failslab, interval 1, probability 0, space 0, times 0 [ 144.060557][ T6410] CPU: 0 PID: 6410 Comm: syz.3.164 Not tainted syzkaller #0 [ 144.067974][ T6410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 144.078112][ T6410] Call Trace: [ 144.081464][ T6410] [ 144.084473][ T6410] dump_stack_lvl+0x18c/0x250 [ 144.089326][ T6410] ? sctp_sendmsg+0x1519/0x27b0 [ 144.094262][ T6410] ? ___sys_sendmsg+0x2a6/0x360 [ 144.099214][ T6410] ? show_regs_print_info+0x20/0x20 [ 144.104508][ T6410] ? load_image+0x420/0x420 [ 144.109172][ T6410] should_fail_ex+0x394/0x4c0 [ 144.113961][ T6410] should_failslab+0x9/0x20 [ 144.118551][ T6410] slab_pre_alloc_hook+0x59/0x300 [ 144.123659][ T6410] ? sctp_add_bind_addr+0x8c/0x360 [ 144.128825][ T6410] __kmem_cache_alloc_node+0x53/0x250 [ 144.134267][ T6410] ? sctp_add_bind_addr+0x8c/0x360 [ 144.139430][ T6410] kmalloc_trace+0x2a/0xe0 [ 144.143911][ T6410] sctp_add_bind_addr+0x8c/0x360 [ 144.148914][ T6410] sctp_copy_local_addr_list+0x31b/0x4e0 [ 144.154605][ T6410] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 144.160379][ T6410] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 144.166506][ T6410] ? sctp_v4_is_any+0x35/0x60 [ 144.171229][ T6410] ? sctp_copy_one_addr+0x8c/0x350 [ 144.176404][ T6410] sctp_bind_addr_copy+0xb3/0x3c0 [ 144.181486][ T6410] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 144.187876][ T6410] sctp_connect_new_asoc+0x2f9/0x6a0 [ 144.193287][ T6410] ? __sctp_connect+0xd80/0xd80 [ 144.198180][ T6410] ? __local_bh_enable_ip+0x13a/0x1c0 [ 144.203624][ T6410] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 144.209220][ T6410] ? security_sctp_bind_connect+0x89/0xb0 [ 144.215019][ T6410] sctp_sendmsg+0x1519/0x27b0 [ 144.219806][ T6410] ? sctp_getsockopt+0xb60/0xb60 [ 144.224804][ T6410] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 144.230681][ T6410] ? aa_af_perm+0x330/0x330 [ 144.235248][ T6410] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 144.241737][ T6410] ? sock_rps_record_flow+0x19/0x3f0 [ 144.247081][ T6410] ? inet_sendmsg+0xce/0x2a0 [ 144.251723][ T6410] ? inet_send_prepare+0x250/0x250 [ 144.256894][ T6410] ____sys_sendmsg+0x61b/0x980 [ 144.261738][ T6410] ? __asan_memset+0x22/0x40 [ 144.266381][ T6410] ? __sys_sendmsg_sock+0x30/0x30 [ 144.271453][ T6410] ? __import_iovec+0x5f2/0x850 [ 144.276379][ T6410] ? import_iovec+0x73/0xa0 [ 144.280956][ T6410] ___sys_sendmsg+0x2a6/0x360 [ 144.285710][ T6410] ? __sys_sendmsg+0x2b0/0x2b0 [ 144.290590][ T6410] ? __lock_acquire+0x7d80/0x7d80 [ 144.295736][ T6410] __se_sys_sendmsg+0x1d0/0x2c0 [ 144.300647][ T6410] ? __x64_sys_sendmsg+0x80/0x80 [ 144.305679][ T6410] ? lockdep_hardirqs_on+0x98/0x150 [ 144.310933][ T6410] do_syscall_64+0x55/0xb0 [ 144.315435][ T6410] ? clear_bhb_loop+0x40/0x90 [ 144.320166][ T6410] ? clear_bhb_loop+0x40/0x90 [ 144.324903][ T6410] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.330853][ T6410] RIP: 0033:0x7f909bf9de59 [ 144.335322][ T6410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.355143][ T6410] RSP: 002b:00007f909ce5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.363609][ T6410] RAX: ffffffffffffffda RBX: 00007f909c226090 RCX: 00007f909bf9de59 [ 144.371658][ T6410] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 144.379677][ T6410] RBP: 00007f909ce5b090 R08: 0000000000000000 R09: 0000000000000000 [ 144.387702][ T6410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 144.395724][ T6410] R13: 00007f909c226128 R14: 00007f909c226090 R15: 00007ffeac11e5c8 [ 144.403785][ T6410] [ 144.578309][ T6411] netlink: 'syz.0.163': attribute type 3 has an invalid length. [ 144.645891][ T6411] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.163'. [ 145.527226][ T6424] syzkaller0: entered promiscuous mode [ 145.586212][ T6424] syzkaller0: entered allmulticast mode [ 145.626575][ T6428] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 145.659856][ T6428] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.171'. [ 145.669258][ T6428] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 146.163041][ T6431] syzkaller0: entered promiscuous mode [ 146.199983][ T6431] syzkaller0: entered allmulticast mode [ 146.264283][ T6442] netlink: 'syz.3.174': attribute type 3 has an invalid length. [ 146.281499][ T6442] netlink: 'syz.3.174': attribute type 1 has an invalid length. [ 146.310470][ T6442] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.174'. [ 152.258429][ T6481] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.185'. [ 152.284128][ T6481] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.185'. [ 152.313660][ T6484] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.185'. [ 152.408535][ T6481] macsec0: entered promiscuous mode [ 152.436426][ T6481] macsec0: entered allmulticast mode [ 152.452475][ T6481] veth1_macvtap: entered allmulticast mode [ 152.725480][ T6486] netpci0: tun_chr_ioctl cmd 1074812117 [ 153.089155][ T6500] syzkaller0: entered promiscuous mode [ 153.103433][ T6500] syzkaller0: entered allmulticast mode [ 153.504303][ T6519] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.197'. [ 155.291646][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 155.844510][ T6519] netlink: 'syz.1.197': attribute type 10 has an invalid length. [ 155.860937][ T6519] netlink: 40 bytes leftover after parsing attributes in process `syz.1.197'. [ 155.873672][ T6520] netlink: 164 bytes leftover after parsing attributes in process `syz.1.197'. [ 155.950780][ T6546] netlink: 'syz.2.205': attribute type 10 has an invalid length. [ 156.882134][ T6578] syzkaller0: entered promiscuous mode [ 156.888707][ T6578] syzkaller0: entered allmulticast mode [ 157.265062][ T6589] FAULT_INJECTION: forcing a failure. [ 157.265062][ T6589] name failslab, interval 1, probability 0, space 0, times 0 [ 157.288395][ T6589] CPU: 0 PID: 6589 Comm: syz.1.217 Not tainted syzkaller #0 [ 157.295802][ T6589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 157.305955][ T6589] Call Trace: [ 157.309277][ T6589] [ 157.312256][ T6589] dump_stack_lvl+0x18c/0x250 [ 157.316999][ T6589] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 157.323217][ T6589] ? show_regs_print_info+0x20/0x20 [ 157.328475][ T6589] ? load_image+0x420/0x420 [ 157.333058][ T6589] should_fail_ex+0x394/0x4c0 [ 157.337791][ T6589] should_failslab+0x9/0x20 [ 157.342355][ T6589] slab_pre_alloc_hook+0x59/0x300 [ 157.347432][ T6589] ? sctp_add_bind_addr+0x8c/0x360 [ 157.352596][ T6589] __kmem_cache_alloc_node+0x53/0x250 [ 157.358031][ T6589] ? sctp_add_bind_addr+0x8c/0x360 [ 157.363195][ T6589] kmalloc_trace+0x2a/0xe0 [ 157.367673][ T6589] sctp_add_bind_addr+0x8c/0x360 [ 157.372662][ T6589] sctp_copy_local_addr_list+0x31b/0x4e0 [ 157.378357][ T6589] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 157.384130][ T6589] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 157.390263][ T6589] ? sctp_v4_is_any+0x35/0x60 [ 157.394998][ T6589] ? sctp_copy_one_addr+0x8c/0x350 [ 157.400162][ T6589] sctp_bind_addr_copy+0xb3/0x3c0 [ 157.405256][ T6589] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 157.411655][ T6589] sctp_connect_new_asoc+0x2f9/0x6a0 [ 157.417009][ T6589] ? __sctp_connect+0xd80/0xd80 [ 157.421917][ T6589] ? __local_bh_enable_ip+0x13a/0x1c0 [ 157.427436][ T6589] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 157.433038][ T6589] ? security_sctp_bind_connect+0x89/0xb0 [ 157.438828][ T6589] sctp_sendmsg+0x1519/0x27b0 [ 157.443577][ T6589] ? sctp_getsockopt+0xb60/0xb60 [ 157.448578][ T6589] ? aa_af_perm+0x330/0x330 [ 157.453154][ T6589] ? sock_rps_record_flow+0x19/0x3f0 [ 157.458496][ T6589] ? inet_sendmsg+0xce/0x2a0 [ 157.463156][ T6589] ? inet_send_prepare+0x250/0x250 [ 157.468326][ T6589] ____sys_sendmsg+0x61b/0x980 [ 157.473167][ T6589] ? __asan_memset+0x22/0x40 [ 157.477817][ T6589] ? __sys_sendmsg_sock+0x30/0x30 [ 157.482901][ T6589] ? __import_iovec+0x5f2/0x850 [ 157.487823][ T6589] ? import_iovec+0x73/0xa0 [ 157.492383][ T6589] ___sys_sendmsg+0x2a6/0x360 [ 157.497128][ T6589] ? __sys_sendmsg+0x2b0/0x2b0 [ 157.501977][ T6589] ? ktime_get+0x7f/0x280 [ 157.506389][ T6589] __se_sys_sendmsg+0x1d0/0x2c0 [ 157.511387][ T6589] ? __x64_sys_sendmsg+0x80/0x80 [ 157.516408][ T6589] ? lockdep_hardirqs_on+0x98/0x150 [ 157.521670][ T6589] do_syscall_64+0x55/0xb0 [ 157.526158][ T6589] ? clear_bhb_loop+0x40/0x90 [ 157.530879][ T6589] ? clear_bhb_loop+0x40/0x90 [ 157.535611][ T6589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.541561][ T6589] RIP: 0033:0x7f643219de59 [ 157.546029][ T6589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.565858][ T6589] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.574324][ T6589] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 157.582341][ T6589] RDX: 0000000004000040 RSI: 00002000000029c0 RDI: 0000000000000003 [ 157.590360][ T6589] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 157.598376][ T6589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 157.606475][ T6589] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 157.614508][ T6589] [ 158.198555][ T6631] FAULT_INJECTION: forcing a failure. [ 158.198555][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.300215][ T6631] CPU: 0 PID: 6631 Comm: syz.1.218 Not tainted syzkaller #0 [ 158.307579][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.317665][ T6631] Call Trace: [ 158.320976][ T6631] [ 158.323935][ T6631] dump_stack_lvl+0x18c/0x250 [ 158.328655][ T6631] ? show_regs_print_info+0x20/0x20 [ 158.333891][ T6631] ? load_image+0x420/0x420 [ 158.338428][ T6631] ? __might_fault+0xaa/0x120 [ 158.343137][ T6631] ? __lock_acquire+0x7d80/0x7d80 [ 158.348195][ T6631] should_fail_ex+0x394/0x4c0 [ 158.352913][ T6631] _copy_from_user+0x2f/0xe0 [ 158.357537][ T6631] ____sys_sendmsg+0x329/0x980 [ 158.362346][ T6631] ? __sys_sendmsg_sock+0x30/0x30 [ 158.367410][ T6631] ? __import_iovec+0x3fa/0x850 [ 158.372298][ T6631] ? import_iovec+0x73/0xa0 [ 158.376832][ T6631] ___sys_sendmsg+0x2a6/0x360 [ 158.381544][ T6631] ? get_pid_task+0x20/0x1e0 [ 158.386260][ T6631] ? __sys_sendmsg+0x2b0/0x2b0 [ 158.391077][ T6631] ? __lock_acquire+0x7d80/0x7d80 [ 158.396156][ T6631] __se_sys_sendmsg+0x1d0/0x2c0 [ 158.401045][ T6631] ? __x64_sys_sendmsg+0x80/0x80 [ 158.406039][ T6631] ? lockdep_hardirqs_on+0x98/0x150 [ 158.411271][ T6631] do_syscall_64+0x55/0xb0 [ 158.415718][ T6631] ? clear_bhb_loop+0x40/0x90 [ 158.420418][ T6631] ? clear_bhb_loop+0x40/0x90 [ 158.425119][ T6631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.431049][ T6631] RIP: 0033:0x7f643219de59 [ 158.435489][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.455121][ T6631] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.463567][ T6631] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 158.471564][ T6631] RDX: 0000000000000000 RSI: 0000200000001640 RDI: 0000000000000006 [ 158.479590][ T6631] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 158.487764][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.495759][ T6631] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 158.503774][ T6631] [ 158.730022][ T6640] FAULT_INJECTION: forcing a failure. [ 158.730022][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 158.743457][ T6640] CPU: 1 PID: 6640 Comm: syz.1.223 Not tainted syzkaller #0 [ 158.750795][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.760888][ T6640] Call Trace: [ 158.764199][ T6640] [ 158.767248][ T6640] dump_stack_lvl+0x18c/0x250 [ 158.771969][ T6640] ? show_regs_print_info+0x20/0x20 [ 158.777206][ T6640] ? load_image+0x420/0x420 [ 158.781759][ T6640] ? skb_network_protocol+0x533/0x790 [ 158.787174][ T6640] should_fail_ex+0x394/0x4c0 [ 158.791889][ T6640] should_failslab+0x9/0x20 [ 158.796426][ T6640] slab_pre_alloc_hook+0x59/0x300 [ 158.801516][ T6640] kmem_cache_alloc+0x5a/0x2c0 [ 158.806336][ T6640] ? skb_clone+0x1eb/0x370 [ 158.810808][ T6640] skb_clone+0x1eb/0x370 [ 158.815097][ T6640] ? dev_queue_xmit_nit+0x204/0xba0 [ 158.820390][ T6640] dev_queue_xmit_nit+0x23f/0xba0 [ 158.825468][ T6640] ? dev_queue_xmit_nit+0x2d/0xba0 [ 158.830635][ T6640] dev_hard_start_xmit+0x150/0x790 [ 158.835813][ T6640] ? __dev_queue_xmit+0x275/0x3630 [ 158.840974][ T6640] __dev_queue_xmit+0x198c/0x3630 [ 158.846054][ T6640] ? __dev_queue_xmit+0x275/0x3630 [ 158.851224][ T6640] ? netdev_core_pick_tx+0x370/0x370 [ 158.856558][ T6640] ? pskb_expand_head+0x17a/0x1150 [ 158.861798][ T6640] ? pskb_expand_head+0x17a/0x1150 [ 158.866955][ T6640] ? skb_release_data+0x1de/0x7f0 [ 158.872038][ T6640] ? __bpf_redirect+0x4d1/0xdf0 [ 158.876944][ T6640] __bpf_tx_skb+0x181/0x260 [ 158.881496][ T6640] bpf_clone_redirect+0x315/0x4a0 [ 158.886572][ T6640] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 158.892080][ T6640] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.898106][ T6640] ? preempt_schedule+0xc0/0xd0 [ 158.903033][ T6640] ? bpf_test_run+0x174/0x870 [ 158.907754][ T6640] ? preempt_schedule_common+0x82/0xc0 [ 158.913257][ T6640] ? schedule_preempt_disabled+0x20/0x20 [ 158.918922][ T6640] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 158.924944][ T6640] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 158.930275][ T6640] ? lock_chain_count+0x20/0x20 [ 158.935177][ T6640] ? preempt_schedule_thunk+0x1a/0x30 [ 158.940599][ T6640] ? __local_bh_disable_ip+0x108/0x1a0 [ 158.946097][ T6640] ? __cant_sleep+0x220/0x220 [ 158.950819][ T6640] ? __local_bh_enable_ip+0x14b/0x1c0 [ 158.956238][ T6640] ? _local_bh_enable+0xa0/0xa0 [ 158.961143][ T6640] ? bpf_test_timer_continue+0x135/0x380 [ 158.966818][ T6640] ? bpf_test_run+0x174/0x870 [ 158.971532][ T6640] bpf_test_run+0x2df/0x870 [ 158.976091][ T6640] ? bpf_test_run+0x174/0x870 [ 158.980811][ T6640] ? dst_hold+0x70/0x70 [ 158.985016][ T6640] ? eth_get_headlen+0x210/0x210 [ 158.990010][ T6640] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 158.995437][ T6640] ? cpu_online+0x60/0x60 [ 158.999810][ T6640] bpf_prog_test_run+0x31f/0x390 [ 159.004792][ T6640] __sys_bpf+0x49d/0x890 [ 159.009080][ T6640] ? bpf_link_show_fdinfo+0x390/0x390 [ 159.014506][ T6640] ? lock_chain_count+0x20/0x20 [ 159.019404][ T6640] __x64_sys_bpf+0x7c/0x90 [ 159.023862][ T6640] do_syscall_64+0x55/0xb0 [ 159.028322][ T6640] ? clear_bhb_loop+0x40/0x90 [ 159.033054][ T6640] ? clear_bhb_loop+0x40/0x90 [ 159.037792][ T6640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.043743][ T6640] RIP: 0033:0x7f643219de59 [ 159.048197][ T6640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.067863][ T6640] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 159.076323][ T6640] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 159.084347][ T6640] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 159.092357][ T6640] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 159.100371][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.108374][ T6640] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 159.116405][ T6640] [ 160.013612][ T6657] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.227'. [ 160.028974][ T6657] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 161.367508][ T6667] netlink: 'syz.2.231': attribute type 10 has an invalid length. [ 161.387868][ T6667] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.397280][ T6667] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.471112][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.478690][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.487152][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.494442][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.538131][ T6667] team0: Port device bridge0 added [ 162.333229][ T6697] syzkaller0: entered promiscuous mode [ 162.342932][ T6697] syzkaller0: entered allmulticast mode [ 162.778141][ T6713] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 164.128309][ T6713] netlink: 'syz.0.247': attribute type 29 has an invalid length. [ 164.672555][ T6736] netlink: 'syz.2.253': attribute type 33 has an invalid length. [ 164.684717][ T6736] netlink: 152 bytes leftover after parsing attributes in process `syz.2.253'. [ 165.809910][ T6760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.260'. [ 166.284064][ T6766] netlink: 'syz.1.263': attribute type 27 has an invalid length. [ 166.296499][ T6766] netlink: 'syz.1.263': attribute type 25 has an invalid length. [ 166.311659][ T6770] netlink: 'syz.3.264': attribute type 10 has an invalid length. [ 166.374759][ T6770] wg1: entered promiscuous mode [ 166.399516][ T6770] wg1: entered allmulticast mode [ 166.419858][ T6770] team0: Device wg1 is of different type [ 166.673705][ T6777] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 166.695653][ T6777] hsr0: entered promiscuous mode [ 167.397886][ T6792] netlink: 'syz.0.273': attribute type 3 has an invalid length. [ 167.430137][ T6792] netlink: 'syz.0.273': attribute type 4 has an invalid length. [ 167.439129][ T6792] netlink: 'syz.0.273': attribute type 7 has an invalid length. [ 167.470239][ T6792] netlink: 'syz.0.273': attribute type 8 has an invalid length. [ 167.479018][ T6792] netlink: 'syz.0.273': attribute type 7 has an invalid length. [ 167.522884][ T6792] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.273'. [ 169.038983][ T6816] netlink: 'syz.2.280': attribute type 29 has an invalid length. [ 169.980924][ T6817] netlink: 'syz.0.279': attribute type 10 has an invalid length. [ 170.045869][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.080418][ T6817] bridge_slave_1: left allmulticast mode [ 170.096524][ T6817] bridge_slave_1: left promiscuous mode [ 170.109206][ T6817] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.178282][ T6816] netlink: 'syz.2.280': attribute type 29 has an invalid length. [ 170.212993][ T6824] Zero length message leads to an empty skb [ 170.226655][ T6824] netlink: 'syz.3.282': attribute type 10 has an invalid length. [ 170.234645][ T6824] netlink: 116 bytes leftover after parsing attributes in process `syz.3.282'. [ 170.508745][ T6829] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.284'. [ 171.558283][ T6846] FAULT_INJECTION: forcing a failure. [ 171.558283][ T6846] name failslab, interval 1, probability 0, space 0, times 0 [ 171.578489][ T6846] CPU: 0 PID: 6846 Comm: syz.3.289 Not tainted syzkaller #0 [ 171.585842][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.595929][ T6846] Call Trace: [ 171.599258][ T6846] [ 171.602220][ T6846] dump_stack_lvl+0x18c/0x250 [ 171.606939][ T6846] ? show_regs_print_info+0x20/0x20 [ 171.612173][ T6846] ? load_image+0x420/0x420 [ 171.616711][ T6846] ? __lock_acquire+0x7d80/0x7d80 [ 171.621774][ T6846] should_fail_ex+0x394/0x4c0 [ 171.626490][ T6846] should_failslab+0x9/0x20 [ 171.631026][ T6846] slab_pre_alloc_hook+0x59/0x300 [ 171.636094][ T6846] ? sock_write_iter+0x2dc/0x420 [ 171.641068][ T6846] ? vfs_write+0x474/0x9a0 [ 171.645511][ T6846] ? ksys_write+0x151/0x260 [ 171.650085][ T6846] kmem_cache_alloc_node+0x5e/0x310 [ 171.655326][ T6846] ? alloc_vmap_area+0x1b4/0x1e50 [ 171.660395][ T6846] alloc_vmap_area+0x1b4/0x1e50 [ 171.665298][ T6846] ? vm_map_ram+0xcf0/0xcf0 [ 171.669836][ T6846] ? rcu_is_watching+0x15/0xb0 [ 171.674638][ T6846] __get_vm_area_node+0x162/0x370 [ 171.679707][ T6846] __vmalloc_node_range+0x36f/0x1320 [ 171.685036][ T6846] ? netlink_sendmsg+0x602/0xbf0 [ 171.690011][ T6846] ? netlink_insert+0x1094/0x1390 [ 171.695087][ T6846] ? netlink_insert+0x2ba/0x1390 [ 171.700073][ T6846] ? free_vm_area+0x50/0x50 [ 171.704613][ T6846] ? netlink_sendmsg+0x602/0xbf0 [ 171.709581][ T6846] vmalloc+0x79/0x90 [ 171.713522][ T6846] ? netlink_sendmsg+0x602/0xbf0 [ 171.718493][ T6846] netlink_sendmsg+0x602/0xbf0 [ 171.723298][ T6846] ? netlink_getsockopt+0x590/0x590 [ 171.728530][ T6846] ? apparmor_socket_sendmsg+0x8e/0x330 [ 171.734099][ T6846] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 171.739416][ T6846] ? security_socket_sendmsg+0x80/0xa0 [ 171.744910][ T6846] sock_write_iter+0x2dc/0x420 [ 171.749713][ T6846] ? sock_read_iter+0x3f0/0x3f0 [ 171.754597][ T6846] ? common_file_perm+0x198/0x1f0 [ 171.759653][ T6846] vfs_write+0x474/0x9a0 [ 171.763940][ T6846] ? file_end_write+0x250/0x250 [ 171.768822][ T6846] ? __fget_files+0x3fc/0x460 [ 171.773537][ T6846] ? __fdget_pos+0x1d8/0x330 [ 171.778160][ T6846] ? ksys_write+0x74/0x260 [ 171.782607][ T6846] ksys_write+0x151/0x260 [ 171.787000][ T6846] ? __ia32_sys_read+0x90/0x90 [ 171.791833][ T6846] ? lockdep_hardirqs_on+0x98/0x150 [ 171.797076][ T6846] do_syscall_64+0x55/0xb0 [ 171.801535][ T6846] ? clear_bhb_loop+0x40/0x90 [ 171.806237][ T6846] ? clear_bhb_loop+0x40/0x90 [ 171.810948][ T6846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.816877][ T6846] RIP: 0033:0x7f909bf9de59 [ 171.821325][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.840965][ T6846] RSP: 002b:00007f909ce7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 171.849423][ T6846] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9de59 [ 171.857421][ T6846] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 171.865421][ T6846] RBP: 00007f909ce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 171.873414][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.881414][ T6846] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffeac11e5c8 [ 171.889429][ T6846] [ 172.014818][ T6846] syz.3.289: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 172.044666][ T6846] CPU: 1 PID: 6846 Comm: syz.3.289 Not tainted syzkaller #0 [ 172.052088][ T6846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.062192][ T6846] Call Trace: [ 172.065528][ T6846] [ 172.068508][ T6846] dump_stack_lvl+0x18c/0x250 [ 172.073255][ T6846] ? show_regs_print_info+0x20/0x20 [ 172.078521][ T6846] ? load_image+0x420/0x420 [ 172.083093][ T6846] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.089608][ T6846] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 172.096171][ T6846] warn_alloc+0x246/0x340 [ 172.100564][ T6846] ? slab_free_freelist_hook+0x130/0x1a0 [ 172.106257][ T6846] ? zone_watermark_ok_safe+0x230/0x230 [ 172.111868][ T6846] ? __get_vm_area_node+0x17b/0x370 [ 172.117135][ T6846] ? __get_vm_area_node+0x17b/0x370 [ 172.122402][ T6846] __vmalloc_node_range+0x394/0x1320 [ 172.127724][ T6846] ? netlink_insert+0x1094/0x1390 [ 172.132794][ T6846] ? netlink_insert+0x2ba/0x1390 [ 172.137772][ T6846] ? free_vm_area+0x50/0x50 [ 172.142314][ T6846] ? netlink_sendmsg+0x602/0xbf0 [ 172.147287][ T6846] vmalloc+0x79/0x90 [ 172.151218][ T6846] ? netlink_sendmsg+0x602/0xbf0 [ 172.156190][ T6846] netlink_sendmsg+0x602/0xbf0 [ 172.160995][ T6846] ? netlink_getsockopt+0x590/0x590 [ 172.166237][ T6846] ? apparmor_socket_sendmsg+0x8e/0x330 [ 172.171831][ T6846] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 172.177145][ T6846] ? security_socket_sendmsg+0x80/0xa0 [ 172.182641][ T6846] sock_write_iter+0x2dc/0x420 [ 172.187525][ T6846] ? sock_read_iter+0x3f0/0x3f0 [ 172.192407][ T6846] ? common_file_perm+0x198/0x1f0 [ 172.197466][ T6846] vfs_write+0x474/0x9a0 [ 172.201752][ T6846] ? file_end_write+0x250/0x250 [ 172.206636][ T6846] ? __fget_files+0x3fc/0x460 [ 172.211350][ T6846] ? __fdget_pos+0x1d8/0x330 [ 172.215972][ T6846] ? ksys_write+0x74/0x260 [ 172.220423][ T6846] ksys_write+0x151/0x260 [ 172.224801][ T6846] ? __ia32_sys_read+0x90/0x90 [ 172.229602][ T6846] ? lockdep_hardirqs_on+0x98/0x150 [ 172.234927][ T6846] do_syscall_64+0x55/0xb0 [ 172.239383][ T6846] ? clear_bhb_loop+0x40/0x90 [ 172.244173][ T6846] ? clear_bhb_loop+0x40/0x90 [ 172.248876][ T6846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.254891][ T6846] RIP: 0033:0x7f909bf9de59 [ 172.259332][ T6846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.278970][ T6846] RSP: 002b:00007f909ce7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 172.287411][ T6846] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9de59 [ 172.295410][ T6846] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000005 [ 172.303408][ T6846] RBP: 00007f909ce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 172.311404][ T6846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.319397][ T6846] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffeac11e5c8 [ 172.327502][ T6846] [ 172.459718][ T6846] Mem-Info: [ 172.462908][ T6846] active_anon:21021 inactive_anon:0 isolated_anon:0 [ 172.462908][ T6846] active_file:15327 inactive_file:39983 isolated_file:0 [ 172.462908][ T6846] unevictable:768 dirty:358 writeback:0 [ 172.462908][ T6846] slab_reclaimable:9831 slab_unreclaimable:90520 [ 172.462908][ T6846] mapped:34558 shmem:15876 pagetables:592 [ 172.462908][ T6846] sec_pagetables:0 bounce:0 [ 172.462908][ T6846] kernel_misc_reclaimable:0 [ 172.462908][ T6846] free:1336125 free_pcp:11079 free_cma:0 [ 172.604279][ T6846] Node 0 active_anon:85884kB inactive_anon:0kB active_file:61308kB inactive_file:159732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138232kB dirty:1428kB writeback:0kB shmem:63668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10580kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no [ 172.655497][ T6846] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 172.700579][ T6846] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.736117][ T6846] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 172.782465][ T6846] Node 0 DMA32 free:1454816kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:85944kB inactive_anon:0kB active_file:61308kB inactive_file:158916kB unevictable:1536kB writepending:1428kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:4316kB local_pcp:940kB free_cma:0kB [ 172.862363][ T6846] lowmem_reserve[]: 0 0 0 0 0 [ 172.867206][ T6846] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 172.868896][ T6865] FAULT_INJECTION: forcing a failure. [ 172.868896][ T6865] name failslab, interval 1, probability 0, space 0, times 0 [ 172.906679][ T6865] CPU: 0 PID: 6865 Comm: syz.2.293 Not tainted syzkaller #0 [ 172.914019][ T6865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.924216][ T6865] Call Trace: [ 172.927542][ T6865] [ 172.930525][ T6865] dump_stack_lvl+0x18c/0x250 [ 172.935279][ T6865] ? show_regs_print_info+0x20/0x20 [ 172.938023][ T6846] lowmem_reserve[]: [ 172.940519][ T6865] ? load_image+0x420/0x420 [ 172.940558][ T6865] ? netdev_core_pick_tx+0x370/0x370 [ 172.940590][ T6865] should_fail_ex+0x394/0x4c0 [ 172.940622][ T6865] should_failslab+0x9/0x20 [ 172.940652][ T6865] slab_pre_alloc_hook+0x59/0x300 [ 172.940688][ T6865] kmem_cache_alloc+0x5a/0x2c0 [ 172.940717][ T6865] ? skb_clone+0x1eb/0x370 [ 172.940743][ T6865] skb_clone+0x1eb/0x370 [ 172.940768][ T6865] bpf_clone_redirect+0x16d/0x4a0 [ 172.940804][ T6865] bpf_prog_e97454e6a39c6b06+0x61/0x66 [ 172.940831][ T6865] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 172.940861][ T6865] ? perf_trace_preemptirq_template+0xac/0x330 [ 172.940896][ T6865] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 172.940922][ T6865] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 172.940947][ T6865] ? lock_chain_count+0x20/0x20 [ 172.940969][ T6865] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 172.949266][ T6846] 0 0 0 0 [ 172.954613][ T6865] ? __local_bh_disable_ip+0x108/0x1a0 [ 172.954641][ T6865] ? __cant_sleep+0x220/0x220 [ 172.954666][ T6865] ? __local_bh_enable_ip+0x13a/0x1c0 [ 172.954688][ T6865] ? _local_bh_enable+0xa0/0xa0 [ 172.954713][ T6865] ? bpf_test_timer_continue+0x135/0x380 [ 172.987099][ T6846] 0 [ 172.987491][ T6865] ? bpf_test_run+0x174/0x870 [ 173.007165][ T6846] [ 173.011199][ T6865] bpf_test_run+0x2df/0x870 [ 173.011243][ T6865] ? bpf_test_run+0x174/0x870 [ 173.011269][ T6865] ? dst_hold+0x70/0x70 [ 173.011294][ T6865] ? eth_get_headlen+0x210/0x210 [ 173.032217][ T6846] Node 1 [ 173.036242][ T6865] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 173.089912][ T6846] Normal free:3893776kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19364kB local_pcp:9984kB free_cma:0kB [ 173.093069][ T6865] ? cpu_online+0x60/0x60 [ 173.126327][ T6865] bpf_prog_test_run+0x31f/0x390 [ 173.131322][ T6865] __sys_bpf+0x49d/0x890 [ 173.135619][ T6865] ? bpf_link_show_fdinfo+0x390/0x390 [ 173.141064][ T6865] ? lock_chain_count+0x20/0x20 [ 173.145980][ T6865] __x64_sys_bpf+0x7c/0x90 [ 173.150456][ T6865] do_syscall_64+0x55/0xb0 [ 173.154933][ T6865] ? clear_bhb_loop+0x40/0x90 [ 173.159661][ T6865] ? clear_bhb_loop+0x40/0x90 [ 173.164390][ T6865] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.169826][ T6846] lowmem_reserve[]: [ 173.170320][ T6865] RIP: 0033:0x7fe276d9de59 [ 173.170344][ T6865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.183953][ T6846] 0 [ 173.198217][ T6865] RSP: 002b:00007fe277c2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.198248][ T6865] RAX: ffffffffffffffda RBX: 00007fe277025fa0 RCX: 00007fe276d9de59 [ 173.198264][ T6865] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 173.198279][ T6865] RBP: 00007fe277c2c090 R08: 0000000000000000 R09: 0000000000000000 [ 173.198292][ T6865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.198306][ T6865] R13: 00007fe277026038 R14: 00007fe277025fa0 R15: 00007ffee8e2f5d8 [ 173.198336][ T6865] [ 173.290314][ T6846] 0 0 0 0 [ 173.294138][ T6846] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.334546][ T6846] Node 0 DMA32: 44*4kB (UE) 713*8kB (UME) 548*16kB (UE) 523*32kB (UE) 109*64kB (UE) 9*128kB (UE) 1*256kB (E) 3*512kB (UME) 9*1024kB (ME) 3*2048kB (ME) 340*4096kB (UM) = 1449304kB [ 173.363629][ T6846] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 173.383502][ T6846] Node 1 Normal: 242*4kB (UE) 45*8kB (UE) 36*16kB (UE) 65*32kB (UE) 20*64kB (UM) 7*128kB (UME) 0*256kB 1*512kB (M) 0*1024kB 0*2048kB 949*4096kB (UME) = 3893776kB [ 173.406217][ T6846] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.416387][ T6846] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.426548][ T6846] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.436666][ T6846] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.446567][ T6846] 73070 total pagecache pages [ 173.451701][ T6846] 0 pages in swap cache [ 173.455904][ T6846] Free swap = 124996kB [ 173.460571][ T6846] Total swap = 124996kB [ 173.464847][ T6846] 2097051 pages RAM [ 173.468690][ T6846] 0 pages HighMem/MovableOnly [ 173.475532][ T6846] 416953 pages reserved [ 173.480058][ T6846] 0 pages cma reserved [ 173.586040][ T6870] validate_nla: 6 callbacks suppressed [ 173.586057][ T6870] netlink: 'syz.1.292': attribute type 29 has an invalid length. [ 173.715139][ T6874] syzkaller0: entered promiscuous mode [ 173.738510][ T6874] syzkaller0: entered allmulticast mode [ 173.756369][ T6870] netlink: 'syz.1.292': attribute type 29 has an invalid length. [ 173.922487][ T6877] netlink: 'syz.2.296': attribute type 3 has an invalid length. [ 173.942224][ T6877] netlink: 'syz.2.296': attribute type 4 has an invalid length. [ 173.964198][ T6877] netlink: 'syz.2.296': attribute type 7 has an invalid length. [ 173.986152][ T6877] netlink: 'syz.2.296': attribute type 8 has an invalid length. [ 174.011482][ T6877] netlink: 'syz.2.296': attribute type 7 has an invalid length. [ 174.041895][ T6877] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.296'. [ 177.079181][ T6910] sctp: [Deprecated]: syz.3.302 (pid 6910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.079181][ T6910] Use struct sctp_sack_info instead [ 177.127469][ T6906] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 177.191672][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.248496][ T6906] bridge_slave_1: left allmulticast mode [ 177.274551][ T6906] bridge_slave_1: left promiscuous mode [ 177.290177][ T6906] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.134302][ T6930] FAULT_INJECTION: forcing a failure. [ 178.134302][ T6930] name failslab, interval 1, probability 0, space 0, times 0 [ 178.178587][ T6930] CPU: 0 PID: 6930 Comm: syz.1.310 Not tainted syzkaller #0 [ 178.186049][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.196133][ T6930] Call Trace: [ 178.199438][ T6930] [ 178.202400][ T6930] dump_stack_lvl+0x18c/0x250 [ 178.207120][ T6930] ? sctp_sendmsg+0x1519/0x27b0 [ 178.212008][ T6930] ? ___sys_sendmsg+0x2a6/0x360 [ 178.216910][ T6930] ? show_regs_print_info+0x20/0x20 [ 178.222149][ T6930] ? load_image+0x420/0x420 [ 178.226705][ T6930] should_fail_ex+0x394/0x4c0 [ 178.231422][ T6930] should_failslab+0x9/0x20 [ 178.235964][ T6930] slab_pre_alloc_hook+0x59/0x300 [ 178.241112][ T6930] ? sctp_add_bind_addr+0x8c/0x360 [ 178.246252][ T6930] __kmem_cache_alloc_node+0x53/0x250 [ 178.251671][ T6930] ? sctp_add_bind_addr+0x8c/0x360 [ 178.256812][ T6930] kmalloc_trace+0x2a/0xe0 [ 178.261269][ T6930] sctp_add_bind_addr+0x8c/0x360 [ 178.266245][ T6930] sctp_copy_local_addr_list+0x31b/0x4e0 [ 178.271913][ T6930] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 178.277659][ T6930] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 178.283843][ T6930] ? sctp_v6_is_any+0x64/0x70 [ 178.288560][ T6930] ? sctp_copy_one_addr+0x8c/0x350 [ 178.293794][ T6930] sctp_bind_addr_copy+0xb3/0x3c0 [ 178.298866][ T6930] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 178.305234][ T6930] sctp_connect_new_asoc+0x2f9/0x6a0 [ 178.310566][ T6930] ? __sctp_connect+0xd80/0xd80 [ 178.315459][ T6930] ? __local_bh_enable_ip+0x13a/0x1c0 [ 178.320874][ T6930] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 178.326456][ T6930] ? security_sctp_bind_connect+0x89/0xb0 [ 178.332215][ T6930] sctp_sendmsg+0x1519/0x27b0 [ 178.336933][ T6930] ? sctp_getsockopt+0xb60/0xb60 [ 178.341906][ T6930] ? aa_af_perm+0x330/0x330 [ 178.346464][ T6930] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 178.352939][ T6930] ? sock_rps_record_flow+0x19/0x3f0 [ 178.358275][ T6930] ? inet_sendmsg+0xce/0x2a0 [ 178.362909][ T6930] ? inet_send_prepare+0x250/0x250 [ 178.368075][ T6930] ____sys_sendmsg+0x61b/0x980 [ 178.372892][ T6930] ? __asan_memset+0x22/0x40 [ 178.377521][ T6930] ? __sys_sendmsg_sock+0x30/0x30 [ 178.382590][ T6930] ? __import_iovec+0x5f2/0x850 [ 178.387484][ T6930] ? import_iovec+0x73/0xa0 [ 178.392027][ T6930] ___sys_sendmsg+0x2a6/0x360 [ 178.396758][ T6930] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.401581][ T6930] ? __lock_acquire+0x7d80/0x7d80 [ 178.406662][ T6930] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.411558][ T6930] ? __x64_sys_sendmsg+0x80/0x80 [ 178.416560][ T6930] ? lockdep_hardirqs_on+0x98/0x150 [ 178.421804][ T6930] do_syscall_64+0x55/0xb0 [ 178.426259][ T6930] ? clear_bhb_loop+0x40/0x90 [ 178.430963][ T6930] ? clear_bhb_loop+0x40/0x90 [ 178.435669][ T6930] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.441685][ T6930] RIP: 0033:0x7f643219de59 [ 178.446128][ T6930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.465767][ T6930] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.474216][ T6930] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 178.482215][ T6930] RDX: 0000000000000041 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 178.490215][ T6930] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 178.498227][ T6930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.506256][ T6930] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 178.514279][ T6930] [ 178.618977][ T6932] syzkaller0: entered promiscuous mode [ 178.637322][ T6932] syzkaller0: entered allmulticast mode [ 178.698688][ T6937] FAULT_INJECTION: forcing a failure. [ 178.698688][ T6937] name failslab, interval 1, probability 0, space 0, times 0 [ 178.722449][ T6937] CPU: 0 PID: 6937 Comm: syz.1.312 Not tainted syzkaller #0 [ 178.729828][ T6937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 178.739942][ T6937] Call Trace: [ 178.743266][ T6937] [ 178.746239][ T6937] dump_stack_lvl+0x18c/0x250 [ 178.750975][ T6937] ? sctp_sendmsg+0x1519/0x27b0 [ 178.755873][ T6937] ? ___sys_sendmsg+0x2a6/0x360 [ 178.760786][ T6937] ? show_regs_print_info+0x20/0x20 [ 178.766052][ T6937] ? load_image+0x420/0x420 [ 178.770625][ T6937] should_fail_ex+0x394/0x4c0 [ 178.775374][ T6937] should_failslab+0x9/0x20 [ 178.779931][ T6937] slab_pre_alloc_hook+0x59/0x300 [ 178.785004][ T6937] ? sctp_add_bind_addr+0x8c/0x360 [ 178.790158][ T6937] __kmem_cache_alloc_node+0x53/0x250 [ 178.795583][ T6937] ? sctp_add_bind_addr+0x8c/0x360 [ 178.800732][ T6937] kmalloc_trace+0x2a/0xe0 [ 178.805192][ T6937] sctp_add_bind_addr+0x8c/0x360 [ 178.810159][ T6937] sctp_copy_local_addr_list+0x31b/0x4e0 [ 178.815822][ T6937] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 178.821575][ T6937] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 178.827692][ T6937] ? sctp_v4_is_any+0x35/0x60 [ 178.832413][ T6937] ? sctp_copy_one_addr+0x8c/0x350 [ 178.837557][ T6937] sctp_bind_addr_copy+0xb3/0x3c0 [ 178.842616][ T6937] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 178.848992][ T6937] sctp_connect_new_asoc+0x2f9/0x6a0 [ 178.854322][ T6937] ? __sctp_connect+0xd80/0xd80 [ 178.859294][ T6937] ? __local_bh_enable_ip+0x13a/0x1c0 [ 178.864705][ T6937] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 178.870302][ T6937] ? security_sctp_bind_connect+0x89/0xb0 [ 178.876068][ T6937] sctp_sendmsg+0x1519/0x27b0 [ 178.880810][ T6937] ? sctp_getsockopt+0xb60/0xb60 [ 178.885783][ T6937] ? aa_af_perm+0x330/0x330 [ 178.890323][ T6937] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 178.896774][ T6937] ? sock_rps_record_flow+0x19/0x3f0 [ 178.902091][ T6937] ? inet_sendmsg+0xce/0x2a0 [ 178.906707][ T6937] ? inet_send_prepare+0x250/0x250 [ 178.911852][ T6937] ____sys_sendmsg+0x61b/0x980 [ 178.916659][ T6937] ? __asan_memset+0x22/0x40 [ 178.921297][ T6937] ? __sys_sendmsg_sock+0x30/0x30 [ 178.926360][ T6937] ? __import_iovec+0x5f2/0x850 [ 178.931256][ T6937] ? import_iovec+0x73/0xa0 [ 178.935796][ T6937] ___sys_sendmsg+0x2a6/0x360 [ 178.940535][ T6937] ? get_pid_task+0x20/0x1e0 [ 178.945158][ T6937] ? __sys_sendmsg+0x2b0/0x2b0 [ 178.949982][ T6937] ? __lock_acquire+0x7d80/0x7d80 [ 178.955072][ T6937] __se_sys_sendmsg+0x1d0/0x2c0 [ 178.959960][ T6937] ? __x64_sys_sendmsg+0x80/0x80 [ 178.964943][ T6937] ? lockdep_hardirqs_on+0x98/0x150 [ 178.970177][ T6937] do_syscall_64+0x55/0xb0 [ 178.974633][ T6937] ? clear_bhb_loop+0x40/0x90 [ 178.979419][ T6937] ? clear_bhb_loop+0x40/0x90 [ 178.984120][ T6937] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.990050][ T6937] RIP: 0033:0x7f643219de59 [ 178.994512][ T6937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.014150][ T6937] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.022595][ T6937] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 179.030597][ T6937] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 179.038618][ T6937] RBP: 00007f6432fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 179.046617][ T6937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.054610][ T6937] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 179.062622][ T6937] [ 183.770115][ T6957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.317'. [ 183.795172][ T6964] netlink: 'syz.3.319': attribute type 10 has an invalid length. [ 183.839262][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.870302][ T6964] bridge_slave_1: left allmulticast mode [ 183.876020][ T6964] bridge_slave_1: left promiscuous mode [ 183.900269][ T6964] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.156367][ T6978] FAULT_INJECTION: forcing a failure. [ 184.156367][ T6978] name failslab, interval 1, probability 0, space 0, times 0 [ 184.169136][ T6978] CPU: 1 PID: 6978 Comm: syz.3.330 Not tainted syzkaller #0 [ 184.176480][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.186626][ T6978] Call Trace: [ 184.189962][ T6978] [ 184.192951][ T6978] dump_stack_lvl+0x18c/0x250 [ 184.197734][ T6978] ? show_regs_print_info+0x20/0x20 [ 184.202999][ T6978] ? load_image+0x420/0x420 [ 184.207567][ T6978] ? netdev_core_pick_tx+0x370/0x370 [ 184.212918][ T6978] should_fail_ex+0x394/0x4c0 [ 184.217690][ T6978] should_failslab+0x9/0x20 [ 184.222257][ T6978] slab_pre_alloc_hook+0x59/0x300 [ 184.227351][ T6978] kmem_cache_alloc+0x5a/0x2c0 [ 184.232172][ T6978] ? skb_clone+0x1eb/0x370 [ 184.236640][ T6978] skb_clone+0x1eb/0x370 [ 184.240953][ T6978] bpf_clone_redirect+0x16d/0x4a0 [ 184.246041][ T6978] bpf_prog_bf17f61a12bc632f+0x5e/0x63 [ 184.251571][ T6978] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.257607][ T6978] ? perf_trace_preemptirq_template+0xac/0x330 [ 184.263825][ T6978] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 184.269860][ T6978] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 184.275204][ T6978] ? lock_chain_count+0x20/0x20 [ 184.280106][ T6978] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 184.286408][ T6978] ? __local_bh_disable_ip+0x108/0x1a0 [ 184.291928][ T6978] ? __cant_sleep+0x220/0x220 [ 184.296759][ T6978] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.302183][ T6978] ? _local_bh_enable+0xa0/0xa0 [ 184.307121][ T6978] ? bpf_test_timer_continue+0x135/0x380 [ 184.312811][ T6978] ? bpf_test_run+0x174/0x870 [ 184.317541][ T6978] bpf_test_run+0x2df/0x870 [ 184.322112][ T6978] ? bpf_test_run+0x174/0x870 [ 184.326848][ T6978] ? dst_hold+0x70/0x70 [ 184.331057][ T6978] ? eth_get_headlen+0x210/0x210 [ 184.336067][ T6978] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 184.341535][ T6978] ? cpu_online+0x60/0x60 [ 184.345917][ T6978] bpf_prog_test_run+0x31f/0x390 [ 184.350930][ T6978] __sys_bpf+0x49d/0x890 [ 184.355227][ T6978] ? bpf_link_show_fdinfo+0x390/0x390 [ 184.360672][ T6978] ? lock_chain_count+0x20/0x20 [ 184.365597][ T6978] __x64_sys_bpf+0x7c/0x90 [ 184.370063][ T6978] do_syscall_64+0x55/0xb0 [ 184.374538][ T6978] ? clear_bhb_loop+0x40/0x90 [ 184.379258][ T6978] ? clear_bhb_loop+0x40/0x90 [ 184.383988][ T6978] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.389951][ T6978] RIP: 0033:0x7f909bf9de59 [ 184.394416][ T6978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.414076][ T6978] RSP: 002b:00007f909ce7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.422538][ T6978] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9de59 [ 184.430542][ T6978] RDX: 0000000000000050 RSI: 0000200000001040 RDI: 000000000000000a [ 184.438540][ T6978] RBP: 00007f909ce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 184.446552][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.454558][ T6978] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffeac11e5c8 [ 184.462593][ T6978] [ 184.468173][ T6975] netlink: 'syz.1.322': attribute type 3 has an invalid length. [ 184.508165][ T6975] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.322'. [ 184.600174][ T6982] netlink: 'syz.0.324': attribute type 3 has an invalid length. [ 184.607943][ T6982] netlink: 201336 bytes leftover after parsing attributes in process `syz.0.324'. [ 184.823914][ T6988] FAULT_INJECTION: forcing a failure. [ 184.823914][ T6988] name failslab, interval 1, probability 0, space 0, times 0 [ 184.836765][ T6988] CPU: 1 PID: 6988 Comm: syz.3.326 Not tainted syzkaller #0 [ 184.844135][ T6988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 184.854279][ T6988] Call Trace: [ 184.857631][ T6988] [ 184.860635][ T6988] dump_stack_lvl+0x18c/0x250 [ 184.865417][ T6988] ? trace_event_raw_event_lock+0x240/0x240 [ 184.871419][ T6988] ? show_regs_print_info+0x20/0x20 [ 184.876715][ T6988] ? load_image+0x420/0x420 [ 184.881393][ T6988] should_fail_ex+0x394/0x4c0 [ 184.886186][ T6988] should_failslab+0x9/0x20 [ 184.890782][ T6988] slab_pre_alloc_hook+0x59/0x300 [ 184.895937][ T6988] kmem_cache_alloc+0x5a/0x2c0 [ 184.900793][ T6988] ? __nf_conntrack_alloc+0x93/0x370 [ 184.906168][ T6988] __nf_conntrack_alloc+0x93/0x370 [ 184.911354][ T6988] init_conntrack+0x166/0xf40 [ 184.916108][ T6988] ? early_drop+0x7f0/0x7f0 [ 184.920676][ T6988] ? nf_conntrack_find_get+0x670/0x670 [ 184.926188][ T6988] ? __local_bh_enable_ip+0x13a/0x1c0 [ 184.931626][ T6988] ? __siphash_unaligned+0x25c/0x3d0 [ 184.936985][ T6988] nf_conntrack_in+0xc29/0x1630 [ 184.941954][ T6988] ? nf_ct_pernet+0x270/0x270 [ 184.946796][ T6988] ? ipt_do_table+0x2c5/0x15c0 [ 184.951653][ T6988] ? read_lock_is_recursive+0x20/0x20 [ 184.957079][ T6988] ? get_random_u32+0x4d5/0x930 [ 184.961984][ T6988] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 184.967517][ T6988] ? ipv4_conntrack_local+0x123/0x200 [ 184.972964][ T6988] ? ipv4_conntrack_in+0x20/0x20 [ 184.977960][ T6988] nf_hook_slow+0xbd/0x200 [ 184.982436][ T6988] ? nf_hook+0x390/0x390 [ 184.986735][ T6988] nf_hook+0x228/0x390 [ 184.990887][ T6988] ? nf_hook+0xa2/0x390 [ 184.995101][ T6988] ? __ip_local_out+0x5f0/0x5f0 [ 185.000017][ T6988] ? nf_hook+0x390/0x390 [ 185.004316][ T6988] ? dst_release+0x1a0/0x1a0 [ 185.008967][ T6988] ? __asan_memset+0x22/0x40 [ 185.013614][ T6988] ? ip6_update_pmtu+0x360/0x360 [ 185.018635][ T6988] ? ip_fast_csum+0x1ee/0x2b0 [ 185.023377][ T6988] __ip_local_out+0x4db/0x5f0 [ 185.028113][ T6988] ? nf_hook+0x390/0x390 [ 185.032424][ T6988] ip_local_out+0x2a/0x130 [ 185.036908][ T6988] iptunnel_xmit+0x4d0/0x910 [ 185.041559][ T6988] ? skb_copy_bits+0x8b/0x7a0 [ 185.046305][ T6988] ip_tunnel_xmit+0x1d18/0x25b0 [ 185.051290][ T6988] ? ip4_dst_hoplimit+0x2d0/0x2d0 [ 185.056403][ T6988] ? skb_push+0x8e/0xe0 [ 185.060731][ T6988] ipgre_xmit+0x7eb/0xb70 [ 185.065142][ T6988] dev_hard_start_xmit+0x269/0x790 [ 185.070356][ T6988] ? __dev_queue_xmit+0x275/0x3630 [ 185.075526][ T6988] __dev_queue_xmit+0x198c/0x3630 [ 185.080638][ T6988] ? __dev_queue_xmit+0x275/0x3630 [ 185.085843][ T6988] ? __kasan_slab_alloc+0x6c/0x80 [ 185.090937][ T6988] ? netdev_core_pick_tx+0x370/0x370 [ 185.096280][ T6988] ? rcu_is_watching+0x15/0xb0 [ 185.101115][ T6988] ? skb_release_data+0x1de/0x7f0 [ 185.106234][ T6988] ? __bpf_redirect+0x4d1/0xdf0 [ 185.111151][ T6988] __bpf_tx_skb+0x181/0x260 [ 185.115717][ T6988] bpf_clone_redirect+0x315/0x4a0 [ 185.120812][ T6988] ? bpf_test_run+0x174/0x870 [ 185.125554][ T6988] bpf_prog_973cd02a7a0e8181+0x5e/0x63 [ 185.131073][ T6988] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 185.137104][ T6988] ? __lock_acquire+0x7d80/0x7d80 [ 185.142192][ T6988] ? lock_chain_count+0x20/0x20 [ 185.147109][ T6988] ? seqcount_lockdep_reader_access+0x12b/0x1d0 [ 185.153407][ T6988] ? lockdep_softirqs_on+0x5b0/0x5b0 [ 185.158744][ T6988] ? ktime_get+0x7f/0x280 [ 185.163122][ T6988] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 185.169417][ T6988] ? ktime_get_real_ts64+0x440/0x440 [ 185.174764][ T6988] ? __x64_sys_bpf+0x7c/0x90 [ 185.179416][ T6988] ? __local_bh_disable_ip+0x108/0x1a0 [ 185.184929][ T6988] ? __cant_sleep+0x220/0x220 [ 185.189684][ T6988] ? read_tsc+0x9/0x20 [ 185.193808][ T6988] ? ktime_get+0x24b/0x280 [ 185.198282][ T6988] ? bpf_test_run+0x174/0x870 [ 185.203016][ T6988] ? kvm_sched_clock_read+0x11/0x20 [ 185.208267][ T6988] bpf_test_run+0x4fa/0x870 [ 185.212860][ T6988] ? bpf_test_run+0x174/0x870 [ 185.217592][ T6988] ? dst_hold+0x70/0x70 [ 185.221829][ T6988] ? eth_get_headlen+0x210/0x210 [ 185.226854][ T6988] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 185.232340][ T6988] ? cpu_online+0x60/0x60 [ 185.236725][ T6988] bpf_prog_test_run+0x31f/0x390 [ 185.241727][ T6988] __sys_bpf+0x49d/0x890 [ 185.246028][ T6988] ? bpf_link_show_fdinfo+0x390/0x390 [ 185.251499][ T6988] ? lock_chain_count+0x20/0x20 [ 185.256479][ T6988] __x64_sys_bpf+0x7c/0x90 [ 185.260965][ T6988] do_syscall_64+0x55/0xb0 [ 185.265435][ T6988] ? clear_bhb_loop+0x40/0x90 [ 185.270152][ T6988] ? clear_bhb_loop+0x40/0x90 [ 185.274892][ T6988] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 185.280848][ T6988] RIP: 0033:0x7f909bf9de59 [ 185.285317][ T6988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.304983][ T6988] RSP: 002b:00007f909ce7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 185.313477][ T6988] RAX: ffffffffffffffda RBX: 00007f909c225fa0 RCX: 00007f909bf9de59 [ 185.321496][ T6988] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 185.329511][ T6988] RBP: 00007f909ce7c090 R08: 0000000000000000 R09: 0000000000000000 [ 185.337531][ T6988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.345551][ T6988] R13: 00007f909c226038 R14: 00007f909c225fa0 R15: 00007ffeac11e5c8 [ 185.353619][ T6988] [ 185.987218][ T7005] syzkaller0: entered promiscuous mode [ 186.001402][ T7005] syzkaller0: entered allmulticast mode [ 186.041798][ T7001] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 186.221646][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.258921][ T7001] bridge_slave_1: left allmulticast mode [ 186.301064][ T7001] bridge_slave_1: left promiscuous mode [ 186.308390][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.608742][ T7020] netlink: 'syz.0.334': attribute type 29 has an invalid length. [ 188.080751][ T7018] netlink: 128 bytes leftover after parsing attributes in process `syz.0.334'. [ 188.101614][ T7018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.124096][ T7020] netlink: 'syz.0.334': attribute type 29 has an invalid length. [ 188.220348][ T7001] syz.2.331 (7001) used greatest stack depth: 19592 bytes left [ 188.305319][ T7033] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 188.318744][ T7033] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 188.348409][ T7038] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 188.370589][ T7035] syz.2.338 uses obsolete (PF_INET,SOCK_PACKET) [ 188.488275][ T7037] syzkaller0: entered promiscuous mode [ 188.493984][ T7037] syzkaller0: entered allmulticast mode [ 188.501940][ T7033] netlink: 'syz.1.336': attribute type 29 has an invalid length. [ 188.534166][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 188.889060][ T7046] netlink: 132 bytes leftover after parsing attributes in process `syz.0.341'. [ 189.416806][ T7060] validate_nla: 1 callbacks suppressed [ 189.416841][ T7060] netlink: 'syz.0.343': attribute type 3 has an invalid length. [ 189.437843][ T7060] netlink: 'syz.0.343': attribute type 4 has an invalid length. [ 189.447130][ T7060] netlink: 'syz.0.343': attribute type 7 has an invalid length. [ 189.455532][ T7060] netlink: 'syz.0.343': attribute type 8 has an invalid length. [ 189.480219][ T7060] netlink: 'syz.0.343': attribute type 7 has an invalid length. [ 189.488306][ T7060] netlink: 198048 bytes leftover after parsing attributes in process `syz.0.343'. [ 190.935238][ T7069] syzkaller0: entered promiscuous mode [ 190.941053][ T7069] syzkaller0: entered allmulticast mode [ 190.957213][ T7072] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 190.974379][ T7072] syzkaller1: linktype set to 786 [ 191.959716][ T7096] netlink: 'syz.1.354': attribute type 29 has an invalid length. [ 193.264159][ T7087] netlink: 132 bytes leftover after parsing attributes in process `syz.3.352'. [ 193.276287][ T7096] netlink: 'syz.1.354': attribute type 29 has an invalid length. [ 193.500164][ T7105] Q6`Ҙ: renamed from lo (while UP) [ 193.564600][ T7105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.356'. [ 193.605627][ T7107] netlink: 1042 bytes leftover after parsing attributes in process `syz.3.359'. [ 193.691141][ T7113] netlink: 'syz.3.359': attribute type 21 has an invalid length. [ 194.270872][ T7126] netlink: 132 bytes leftover after parsing attributes in process `syz.2.365'. [ 194.404373][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.420998][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.647099][ T7129] syzkaller0: entered promiscuous mode [ 194.660261][ T7129] syzkaller0: entered allmulticast mode [ 199.351147][ T7143] netlink: 164 bytes leftover after parsing attributes in process `syz.0.369'. [ 199.361251][ T7148] netlink: 164 bytes leftover after parsing attributes in process `syz.0.369'. [ 199.751105][ T7161] netlink: 'syz.1.374': attribute type 1 has an invalid length. [ 201.027363][ T7183] syzkaller0: entered promiscuous mode [ 201.033428][ T7183] syzkaller0: entered allmulticast mode [ 203.098389][ T7197] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.386'. [ 203.628951][ T7223] tap0: tun_chr_ioctl cmd 1074025677 [ 203.696946][ T7223] tap0: linktype set to 778 [ 203.829100][ T7226] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.395'. [ 203.961833][ T7226] netlink: 'syz.0.395': attribute type 21 has an invalid length. [ 204.225455][ T7234] netlink: 'syz.3.398': attribute type 1 has an invalid length. [ 204.233284][ T7234] netlink: 'syz.3.398': attribute type 2 has an invalid length. [ 204.241464][ T7234] netlink: 132 bytes leftover after parsing attributes in process `syz.3.398'. [ 204.268440][ T7232] sit0: entered allmulticast mode [ 204.662927][ T7246] netlink: 65185 bytes leftover after parsing attributes in process `syz.2.402'. [ 205.491520][ T7262] netlink: 56 bytes leftover after parsing attributes in process `syz.3.407'. [ 205.710109][ T7268] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.409'. [ 206.186217][ T7283] netlink: 'syz.3.415': attribute type 4 has an invalid length. [ 206.194612][ T7283] netlink: 152 bytes leftover after parsing attributes in process `syz.3.415'. [ 206.258695][ T7283] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 206.329124][ T7287] netlink: 'syz.1.417': attribute type 2 has an invalid length. [ 206.397360][ T7289] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 206.409894][ T7289] netlink: 'syz.2.418': attribute type 3 has an invalid length. [ 206.438452][ T7289] netlink: 132 bytes leftover after parsing attributes in process `syz.2.418'. [ 207.093935][ T7304] netlink: 56 bytes leftover after parsing attributes in process `syz.2.421'. [ 207.475517][ T7311] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.425'. [ 207.496454][ T7311] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 207.530384][ T51] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 209.579983][ T51] Bluetooth: hci2: command tx timeout [ 211.151374][ T7361] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 211.176603][ T7362] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 211.183691][ T7362] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 211.199048][ T7361] netlink: 152 bytes leftover after parsing attributes in process `syz.2.438'. [ 211.442611][ T7361] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 211.823498][ T7340] Bluetooth: hci0: command 0x0406 tx timeout [ 211.830920][ T7340] Bluetooth: hci1: command 0x0406 tx timeout [ 211.832360][ T5780] Bluetooth: hci2: command 0x0406 tx timeout [ 211.838931][ T7340] Bluetooth: hci3: command 0x0406 tx timeout [ 211.937827][ T7380] netlink: 'syz.3.445': attribute type 6 has an invalid length. [ 212.153140][ T7389] batman_adv: batadv0: adding TT local entry ba:a7:8f:6a:ff:ff to non-existent VLAN 815 [ 212.221419][ T7390] netlink: 'syz.2.448': attribute type 3 has an invalid length. [ 212.229924][ T7390] netlink: 'syz.2.448': attribute type 4 has an invalid length. [ 212.237989][ T7390] netlink: 'syz.2.448': attribute type 7 has an invalid length. [ 212.249048][ T7390] netlink: 'syz.2.448': attribute type 8 has an invalid length. [ 212.265541][ T7390] netlink: 'syz.2.448': attribute type 7 has an invalid length. [ 212.279161][ T7390] netlink: 198048 bytes leftover after parsing attributes in process `syz.2.448'. [ 212.635765][ T7400] netlink: 'syz.0.453': attribute type 4 has an invalid length. [ 212.650016][ T7400] netlink: 152 bytes leftover after parsing attributes in process `syz.0.453'. [ 212.696551][ T7400] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 213.611865][ T7416] netlink: 'syz.2.458': attribute type 9 has an invalid length. [ 213.619783][ T7416] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.458'. [ 213.942262][ T7422] netlink: 'syz.3.467': attribute type 3 has an invalid length. [ 213.959959][ T7422] netlink: 'syz.3.467': attribute type 4 has an invalid length. [ 213.983110][ T7422] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.467'. [ 214.118022][ T7427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.461'. [ 214.129837][ T7427] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 214.155268][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 216.222081][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 235.105546][ T5781] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 235.115305][ T5781] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 235.123325][ T5781] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 235.135394][ T5781] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 235.143747][ T5781] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 235.151222][ T5781] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 235.370675][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 235.380720][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 235.390107][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 235.399382][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 235.407331][ T5781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 235.420672][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 235.512596][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 235.522224][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 235.534404][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 235.543266][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 235.552196][ T51] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 235.559597][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 235.738330][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.747827][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.756726][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.765659][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.774068][ T5781] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 235.782328][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 236.488313][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 236.618196][ T7440] chnl_net:caif_netlink_parms(): no params data found [ 236.896002][ T7437] chnl_net:caif_netlink_parms(): no params data found [ 237.026775][ T7442] chnl_net:caif_netlink_parms(): no params data found [ 237.069944][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.077141][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.097665][ T7434] bridge_slave_0: entered allmulticast mode [ 237.107018][ T7434] bridge_slave_0: entered promiscuous mode [ 237.178073][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.190236][ T5781] Bluetooth: hci4: command tx timeout [ 237.210151][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.217446][ T7434] bridge_slave_1: entered allmulticast mode [ 237.233891][ T7434] bridge_slave_1: entered promiscuous mode [ 237.375853][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.392511][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.408474][ T7440] bridge_slave_0: entered allmulticast mode [ 237.439611][ T7440] bridge_slave_0: entered promiscuous mode [ 237.461661][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.468889][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.486115][ T7440] bridge_slave_1: entered allmulticast mode [ 237.496524][ T7440] bridge_slave_1: entered promiscuous mode [ 237.503552][ T5781] Bluetooth: hci5: command tx timeout [ 237.527220][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.579277][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.659874][ T5781] Bluetooth: hci6: command tx timeout [ 237.795878][ T7440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.820114][ T5781] Bluetooth: hci7: command tx timeout [ 237.864864][ T7437] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.880398][ T7437] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.887721][ T7437] bridge_slave_0: entered allmulticast mode [ 237.916663][ T7437] bridge_slave_0: entered promiscuous mode [ 237.932102][ T7434] team0: Port device team_slave_0 added [ 237.939897][ T7437] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.947101][ T7437] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.965392][ T7437] bridge_slave_1: entered allmulticast mode [ 237.978298][ T7437] bridge_slave_1: entered promiscuous mode [ 237.994323][ T7440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.044468][ T7434] team0: Port device team_slave_1 added [ 238.153013][ T7442] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.169927][ T7442] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.177248][ T7442] bridge_slave_0: entered allmulticast mode [ 238.195414][ T7442] bridge_slave_0: entered promiscuous mode [ 238.314386][ T7440] team0: Port device team_slave_0 added [ 238.335720][ T7442] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.349907][ T7442] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.357216][ T7442] bridge_slave_1: entered allmulticast mode [ 238.375607][ T7442] bridge_slave_1: entered promiscuous mode [ 238.395021][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.408981][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.450091][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.482899][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.499699][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.536897][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.576352][ T7437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.602761][ T7440] team0: Port device team_slave_1 added [ 239.259969][ T5781] Bluetooth: hci4: command tx timeout [ 239.580198][ T5781] Bluetooth: hci5: command tx timeout [ 239.739988][ T5781] Bluetooth: hci6: command tx timeout [ 239.906534][ T5781] Bluetooth: hci7: command tx timeout [ 241.340031][ T5781] Bluetooth: hci4: command tx timeout [ 241.660015][ T5781] Bluetooth: hci5: command tx timeout [ 241.819860][ T5781] Bluetooth: hci6: command tx timeout [ 241.983787][ T5781] Bluetooth: hci7: command tx timeout [ 243.419829][ T5781] Bluetooth: hci4: command tx timeout [ 243.740069][ T5781] Bluetooth: hci5: command tx timeout [ 243.899865][ T5781] Bluetooth: hci6: command tx timeout [ 244.065311][ T5781] Bluetooth: hci7: command tx timeout [ 295.400943][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 295.428757][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 295.436778][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 295.445780][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 295.453698][ T51] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 295.461763][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 295.564854][ T5781] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 295.574799][ T5781] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 295.583082][ T5781] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 295.593639][ T5781] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 295.602468][ T5781] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 295.613306][ T5781] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 295.731109][ T51] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 295.740945][ T51] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 295.748822][ T51] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 295.757429][ T51] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 295.766339][ T51] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 295.776190][ T51] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 296.398565][ T5781] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 296.407955][ T5781] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 296.416503][ T5781] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 296.424894][ T5781] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 296.434002][ T5781] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 296.441717][ T5781] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 297.500018][ T51] Bluetooth: hci8: command tx timeout [ 297.659982][ T51] Bluetooth: hci9: command tx timeout [ 297.820035][ T51] Bluetooth: hci10: command tx timeout [ 298.460013][ T51] Bluetooth: hci11: command tx timeout [ 299.579869][ T51] Bluetooth: hci8: command tx timeout [ 299.739816][ T51] Bluetooth: hci9: command tx timeout [ 299.899919][ T51] Bluetooth: hci10: command tx timeout [ 300.539839][ T51] Bluetooth: hci11: command tx timeout [ 301.659905][ T51] Bluetooth: hci8: command tx timeout [ 301.820020][ T51] Bluetooth: hci9: command tx timeout [ 301.979945][ T51] Bluetooth: hci10: command tx timeout [ 302.619867][ T51] Bluetooth: hci11: command tx timeout [ 303.739898][ T51] Bluetooth: hci8: command tx timeout [ 303.899966][ T51] Bluetooth: hci9: command tx timeout [ 304.059889][ T51] Bluetooth: hci10: command tx timeout [ 304.699835][ T51] Bluetooth: hci11: command tx timeout [ 319.029647][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 319.036307][ C0] rcu: 0-....: (1 GPs behind) idle=300c/1/0x4000000000000000 softirq=20371/20372 fqs=4581 [ 319.047124][ C0] rcu: hardirqs softirqs csw/system [ 319.053545][ C0] rcu: number: 1260803 0 0 [ 319.059995][ C0] rcu: cputime: 17558 34931 62 ==> 52520(ms) [ 319.067819][ C0] rcu: (t=10504 jiffies g=25977 q=2612 ncpus=2) [ 319.074153][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 232 jiffies! g25977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 319.086325][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=21242 [ 319.094243][ C0] rcu: rcu_preempt kthread starved for 235 jiffies! g25977 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 319.105453][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 319.115429][ C0] rcu: RCU grace-period kthread stack dump: [ 319.121331][ C0] task:rcu_preempt state:I stack:26280 pid:17 ppid:2 flags:0x00004000 [ 319.130667][ C0] Call Trace: [ 319.133970][ C0] [ 319.136920][ C0] __schedule+0x15ae/0x4660 [ 319.141453][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 319.146499][ C0] ? lock_chain_count+0x20/0x20 [ 319.151365][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 319.156585][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 319.162498][ C0] ? asan.module_dtor+0x20/0x20 [ 319.167366][ C0] ? rcu_is_watching+0x15/0xb0 [ 319.172160][ C0] schedule+0xbd/0x170 [ 319.176254][ C0] schedule_timeout+0x188/0x2d0 [ 319.181123][ C0] ? console_conditional_schedule+0x40/0x40 [ 319.187035][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 319.192946][ C0] ? update_process_times+0x1b0/0x1b0 [ 319.198352][ C0] ? prepare_to_swait_event+0x344/0x360 [ 319.203919][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 319.208796][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 319.214965][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 319.220013][ C0] ? rcu_gp_init+0x1530/0x1530 [ 319.224800][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 319.229676][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.234906][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 319.240139][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 319.244752][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 319.249883][ C0] ? __kthread_parkme+0x71/0x1c0 [ 319.254845][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 319.259894][ C0] kthread+0x2fa/0x390 [ 319.263983][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 319.269110][ C0] ? kthread_blkcg+0xd0/0xd0 [ 319.273711][ C0] ret_from_fork+0x48/0x80 [ 319.278147][ C0] ? kthread_blkcg+0xd0/0xd0 [ 319.282747][ C0] ret_from_fork_asm+0x11/0x20 [ 319.287544][ C0] [ 319.290592][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 319.296939][ C0] Sending NMI from CPU 0 to CPUs 1: [ 319.302151][ C1] NMI backtrace for cpu 1 [ 319.302160][ C1] CPU: 1 PID: 1003 Comm: kworker/u4:6 Not tainted syzkaller #0 [ 319.302177][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.302187][ C1] Workqueue: bat_events batadv_nc_worker [ 319.302207][ C1] RIP: 0010:__pv_queued_spin_lock_slowpath+0x538/0x9c0 [ 319.302235][ C1] Code: 24 10 42 0f b6 04 28 84 c0 0f 85 1b 01 00 00 48 8d 43 01 c6 00 01 41 bc 00 80 ff ff eb 07 f3 90 41 ff c4 74 47 43 0f b6 04 2e <84> c0 75 2b 80 3b 00 75 eb 48 89 df be 02 00 00 00 e8 e2 c5 49 f7 [ 319.302250][ C1] RSP: 0018:ffffc900001f07e0 EFLAGS: 00000286 [ 319.302263][ C1] RAX: 0000000000000000 RBX: ffffffff8dc79be0 RCX: ffff888022c75a00 [ 319.302275][ C1] RDX: 0000000000000100 RSI: ffffffff8acacb60 RDI: ffffffff8b1cfa20 [ 319.302287][ C1] RBP: ffffc900001f08d0 R08: ffffffff911e756f R09: 1ffffffff223cead [ 319.302299][ C1] R10: dffffc0000000000 R11: fffffbfff223ceae R12: 00000000ffffb8d7 [ 319.302311][ C1] R13: dffffc0000000000 R14: 1ffffffff1b8f37c R15: ffff8880b8f30001 [ 319.302324][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 319.302338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.302350][ C1] CR2: 00007ffdbde98f1c CR3: 000000000cf32000 CR4: 00000000003506e0 [ 319.302364][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.302374][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 319.302384][ C1] Call Trace: [ 319.302391][ C1] [ 319.302403][ C1] ? __pv_queued_spin_unlock_slowpath+0x2a0/0x2a0 [ 319.302428][ C1] ? ktime_get_with_offset+0x103/0x330 [ 319.302454][ C1] do_raw_spin_lock+0x23e/0x2b0 [ 319.302478][ C1] ? __rwlock_init+0x150/0x150 [ 319.302500][ C1] ? read_tsc+0x9/0x20 [ 319.302522][ C1] mac80211_hwsim_tx_frame_no_nl+0x76a/0x11e0 [ 319.302546][ C1] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 319.302566][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 319.302588][ C1] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 319.302612][ C1] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 319.302634][ C1] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 319.302656][ C1] mac80211_hwsim_beacon_tx+0x3df/0x770 [ 319.302678][ C1] __iterate_interfaces+0x225/0x4c0 [ 319.302705][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 319.302724][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 319.302752][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 319.302771][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 319.302800][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 319.302816][ C1] ? hw_scan_work+0xf10/0xf10 [ 319.302837][ C1] __hrtimer_run_queues+0x525/0xc10 [ 319.302866][ C1] ? hrtimer_interrupt+0x980/0x980 [ 319.302883][ C1] ? read_tsc+0x9/0x20 [ 319.302906][ C1] hrtimer_run_softirq+0x177/0x290 [ 319.302927][ C1] handle_softirqs+0x27d/0x820 [ 319.302943][ C1] ? read_tsc+0x9/0x20 [ 319.302960][ C1] ? ktime_get+0x24b/0x280 [ 319.302980][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 319.302999][ C1] ? do_softirq+0x1a0/0x1a0 [ 319.303020][ C1] __irq_exit_rcu+0xd3/0x190 [ 319.303037][ C1] ? irq_exit_rcu+0x20/0x20 [ 319.303058][ C1] irq_exit_rcu+0x9/0x20 [ 319.303072][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 319.303093][ C1] [ 319.303098][ C1] [ 319.303103][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 319.303137][ C1] RIP: 0010:lock_release+0x594/0x8c0 [ 319.303155][ C1] Code: 00 00 00 f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 2f 04 f8 75 70 f7 44 24 50 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 43 c7 44 2f 08 00 00 00 00 65 48 8b 04 25 [ 319.303169][ C1] RSP: 0018:ffffc9000418fa40 EFLAGS: 00000206 [ 319.303181][ C1] RAX: 0000000000000001 RBX: 7a4a4631e597686b RCX: 0bd1af00a63f1200 [ 319.303193][ C1] RDX: 0000000000000002 RSI: ffffffff8acadce0 RDI: ffffffff8b1cfa20 [ 319.303204][ C1] RBP: ffffc9000418fb50 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 319.303216][ C1] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffff888022c76530 [ 319.303228][ C1] R13: dffffc0000000000 R14: ffff888022c764d0 R15: 1ffff92000831f54 [ 319.303254][ C1] ? batadv_nc_worker+0xd2/0x600 [ 319.303270][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 319.303290][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 319.303308][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 319.303329][ C1] ? batadv_nc_worker+0xd2/0x600 [ 319.303345][ C1] batadv_nc_worker+0x28b/0x600 [ 319.303362][ C1] ? process_scheduled_works+0x975/0x1600 [ 319.303385][ C1] process_scheduled_works+0xa60/0x1600 [ 319.303421][ C1] ? worker_attach_to_pool+0x370/0x370 [ 319.303446][ C1] ? assign_work+0x3cc/0x5d0 [ 319.303469][ C1] worker_thread+0xa5e/0xfe0 [ 319.303502][ C1] ? _raw_spin_unlock+0x40/0x40 [ 319.303522][ C1] ? __kthread_parkme+0x71/0x1c0 [ 319.303543][ C1] kthread+0x2fa/0x390 [ 319.303557][ C1] ? pr_cont_work+0x550/0x550 [ 319.303578][ C1] ? kthread_blkcg+0xd0/0xd0 [ 319.303594][ C1] ret_from_fork+0x48/0x80 [ 319.303613][ C1] ? kthread_blkcg+0xd0/0xd0 [ 319.303630][ C1] ret_from_fork_asm+0x11/0x20 [ 319.303661][ C1] [ 319.304174][ C0] CPU: 0 PID: 7420 Comm: syz.1.460 Not tainted syzkaller #0 [ 319.806485][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.816573][ C0] RIP: 0010:should_fail_ex+0x0/0x4c0 [ 319.821906][ C0] Code: 89 f7 e8 33 be 7c fd e9 44 ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 62 ff ff ff 48 89 df e8 16 be 7c fd e9 55 ff ff ff 90 <66> 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 89 14 24 49 [ 319.841553][ C0] RSP: 0018:ffffc90000006a08 EFLAGS: 00000246 [ 319.847652][ C0] RAX: 0000000000000000 RBX: ffffc90000006a78 RCX: dffffc0000000000 [ 319.855729][ C0] RDX: 0000000000000001 RSI: 00000000000002c0 RDI: ffffffff8d22fd60 [ 319.863827][ C0] RBP: 0000000000082820 R08: 0000000000082820 R09: 0000000000000000 [ 319.871832][ C0] R10: ffff888077cf7000 R11: fffffbfff1d18d66 R12: 0000000000000000 [ 319.879924][ C0] R13: 00000000000002c0 R14: ffff88801ee428c0 R15: 0000000000000001 [ 319.887950][ C0] FS: 00007f6432fe06c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 319.896994][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 319.903597][ C0] CR2: 0000000100000000 CR3: 000000007774f000 CR4: 00000000003506f0 [ 319.911602][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 319.919618][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 319.927620][ C0] Call Trace: [ 319.930923][ C0] [ 319.933802][ C0] should_failslab+0x9/0x20 [ 319.938352][ C0] slab_pre_alloc_hook+0x59/0x300 [ 319.943412][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 319.948485][ C0] kmem_cache_alloc_node+0x5e/0x310 [ 319.953714][ C0] ? kmalloc_reserve+0x95/0x240 [ 319.958607][ C0] kmalloc_reserve+0x95/0x240 [ 319.963320][ C0] __alloc_skb+0x138/0x2c0 [ 319.967803][ C0] skb_copy+0x126/0x700 [ 319.971982][ C0] ? read_tsc+0x9/0x20 [ 319.977316][ C0] mac80211_hwsim_tx_frame_no_nl+0xcb2/0x11e0 [ 319.983427][ C0] ? mac80211_hwsim_tx_frame_nl+0xbb0/0xbb0 [ 319.989354][ C0] ? mac80211_hwsim_monitor_rx+0x1bf/0x810 [ 319.995197][ C0] mac80211_hwsim_tx+0x17ae/0x26e0 [ 320.000356][ C0] ieee80211_handle_wake_tx_queue+0x19f/0x2c0 [ 320.006503][ C0] ? ieee80211_ctstoself_duration+0x460/0x460 [ 320.012601][ C0] ? _local_bh_enable+0xa0/0xa0 [ 320.017507][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 320.022739][ C0] ieee80211_queue_skb+0x1915/0x2190 [ 320.028067][ C0] ieee80211_tx+0x2c3/0x460 [ 320.032596][ C0] ? ieee80211_skb_resize+0x610/0x610 [ 320.038012][ C0] ? ieee80211_xmit+0x2e0/0x3c0 [ 320.042888][ C0] __ieee80211_subif_start_xmit+0xe21/0x1540 [ 320.048897][ C0] ? __ieee80211_subif_start_xmit+0x2c8/0x1540 [ 320.055088][ C0] ? ieee80211_txq_schedule_start+0x310/0x310 [ 320.061195][ C0] ieee80211_subif_start_xmit+0xf2/0x570 [ 320.066858][ C0] ? ieee80211_build_hdr+0x25d0/0x25d0 [ 320.072333][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.077559][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.083749][ C0] dev_hard_start_xmit+0x269/0x790 [ 320.088890][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 320.094031][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 320.099164][ C0] __dev_queue_xmit+0x198c/0x3630 [ 320.104206][ C0] ? lock_chain_count+0x20/0x20 [ 320.109077][ C0] ? __dev_queue_xmit+0x275/0x3630 [ 320.114204][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.119460][ C0] ? netdev_core_pick_tx+0x370/0x370 [ 320.124767][ C0] ? __asan_memcpy+0x40/0x70 [ 320.129384][ C0] ? eth_header+0x11b/0x200 [ 320.133909][ C0] ? llc_sysctl_exit+0x70/0x70 [ 320.138735][ C0] ? neigh_resolve_output+0x5f5/0x710 [ 320.144137][ C0] ip6_finish_output2+0xe2e/0x1620 [ 320.149275][ C0] ? ip6_finish_output2+0x642/0x1620 [ 320.154580][ C0] ? nf_hook+0x390/0x390 [ 320.158843][ C0] ? ip6_mtu+0x321/0x3f0 [ 320.163140][ C0] ? ip6_finish_output+0x567/0x7f0 [ 320.168277][ C0] ndisc_send_skb+0xbb9/0x1480 [ 320.173053][ C0] ? ndisc_send_skb+0x201/0x1480 [ 320.178013][ C0] ? ndisc_mc_map+0x680/0x680 [ 320.182702][ C0] ? skb_dst+0xd0/0xd0 [ 320.186804][ C0] addrconf_rs_timer+0x36b/0x640 [ 320.191769][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 320.197882][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 320.203887][ C0] call_timer_fn+0x189/0x540 [ 320.208502][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 320.214581][ C0] ? call_timer_fn+0xd2/0x540 [ 320.219289][ C0] ? __run_timers+0x810/0x810 [ 320.223994][ C0] ? addrconf_disable_policy_idev+0x480/0x480 [ 320.230097][ C0] __run_timers+0x570/0x810 [ 320.234634][ C0] ? detach_timer+0x2b0/0x2b0 [ 320.239357][ C0] run_timer_softirq+0x67/0xf0 [ 320.244134][ C0] handle_softirqs+0x27d/0x820 [ 320.248915][ C0] ? read_tsc+0x9/0x20 [ 320.253002][ C0] ? ktime_get+0x24b/0x280 [ 320.257442][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 320.262229][ C0] ? do_softirq+0x1a0/0x1a0 [ 320.266764][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 320.272161][ C0] __irq_exit_rcu+0xd3/0x190 [ 320.276778][ C0] ? irq_exit_rcu+0x20/0x20 [ 320.281306][ C0] irq_exit_rcu+0x9/0x20 [ 320.285566][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 320.291219][ C0] [ 320.294260][ C0] [ 320.297207][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 320.303210][ C0] RIP: 0010:generic_exec_single+0x477/0x4e0 [ 320.309124][ C0] Code: 75 11 e8 4c 00 0b 00 48 85 db 75 16 e8 42 00 0b 00 eb 15 e8 3b 00 0b 00 e8 06 e3 0f 09 48 85 db 74 ea e8 2c 00 0b 00 fb 31 c0 <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 43 c7 44 2c 08 [ 320.328825][ C0] RSP: 0018:ffffc9000413fa00 EFLAGS: 00000246 [ 320.334907][ C0] RAX: 0000000000000000 RBX: 0000000000000200 RCX: 0000000000080000 [ 320.342998][ C0] RDX: ffffc9000d10a000 RSI: 0000000000002ed2 RDI: 0000000000002ed3 [ 320.350997][ C0] RBP: ffffc9000413fad0 R08: ffffffff911e75ff R09: 1ffffffff223cebf [ 320.358992][ C0] R10: dffffc0000000000 R11: fffffbfff223cec0 R12: 1ffff92000827f44 [ 320.366981][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000827f65 [ 320.374985][ C0] ? event_function+0x300/0x300 [ 320.379868][ C0] ? smp_call_function_single+0x5a0/0x5a0 [ 320.385610][ C0] ? percpu_counter_add_batch+0x1f4/0x2a0 [ 320.391346][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.396574][ C0] ? smp_call_function_single+0xb0/0x5a0 [ 320.402226][ C0] smp_call_function_single+0x36d/0x5a0 [ 320.407889][ C0] ? event_function+0x300/0x300 [ 320.412795][ C0] ? flush_smp_call_function_queue+0x250/0x250 [ 320.418994][ C0] ? event_function+0x300/0x300 [ 320.423893][ C0] perf_install_in_context+0x5bb/0x920 [ 320.429393][ C0] ? alloc_file_pseudo+0x1ae/0x210 [ 320.434536][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 320.440559][ C0] ? add_event_to_ctx+0x1170/0x1170 [ 320.445814][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 320.451054][ C0] ? perf_event__header_size+0x165/0x220 [ 320.456743][ C0] __se_sys_perf_event_open+0x1841/0x1c60 [ 320.462496][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 320.468173][ C0] ? lock_chain_count+0x20/0x20 [ 320.473064][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 320.478307][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 320.484087][ C0] do_syscall_64+0x55/0xb0 [ 320.488560][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.493263][ C0] ? clear_bhb_loop+0x40/0x90 [ 320.497966][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 320.503889][ C0] RIP: 0033:0x7f643219de59 [ 320.508342][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.528049][ C0] RSP: 002b:00007f6432fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 320.536482][ C0] RAX: ffffffffffffffda RBX: 00007f6432425fa0 RCX: 00007f643219de59 [ 320.544474][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000480 [ 320.552475][ C0] RBP: 00007f6432233e6f R08: 0000000000000008 R09: 0000000000000000 [ 320.560499][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 320.568498][ C0] R13: 00007f6432426038 R14: 00007f6432425fa0 R15: 00007ffed6522428 [ 320.576502][ C0]