last executing test programs: 8.389762204s ago: executing program 1 (id=868): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 7.928768761s ago: executing program 1 (id=870): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r1, 0x11}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[], 0x10) 7.721721983s ago: executing program 1 (id=871): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x1000000, 0x0, 0x7fffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(r6, &(0x7f0000000040), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x94) 4.105844222s ago: executing program 1 (id=879): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xffffffc6) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, 0x0, 0xffffffc6) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, 0x0) socket$kcm(0x10, 0x2, 0x0) 4.042690256s ago: executing program 4 (id=880): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) 3.704026536s ago: executing program 0 (id=882): mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x5d, 0xd5, &(0x7f0000000040)="deb2db0bbf66aed12833fa35e09c4f80621af768102dd68002b01b1fefc062b21e7a04d623bd1fe5551527bc561417b3c7e0815c0f9c0d109da1e27c4a0fe1fcb8ba46477cef7fa29f3ff6725ae62823e08d8a3f2e59daf65f6244abb4", &(0x7f00000000c0)=""/213, 0x3d, 0x0, 0xae, 0x74, &(0x7f00000001c0)="b844b3b3283ca48c2b22ef4b3f542808a35961807c997b348afaff23f54c025ef01d36527e43ddf142f8a845e29703cca95c1e83952d941b81ebdd5441137076acd47751704e840a56e0aa84288517b57138fc1d5347d0896ed38bccd5d1403e6bdeb7e2872e81970c3438aa914b6d887f51cebd66297b8d206418ab6c64adbf69e31ad6e6c03d68d6bda3a052f6994b6ebcca9eb38a464eeac5ed07f3df4584ffa8e3f9b54e75b7fe7e32214e89", &(0x7f0000000280)="892dd12256298b4210a7de368b1b7b93faf6aa920538ec6ab1cc7c6f31e22f2485b0f2f6dbf232d1e7bd1f9b55ec1741c047753c940769ded8d2bd6d6c2c106bd6b13e0b71f5cf2c89b0875c9d4e8bfe7132ee9d86cd9dcaf1536db1d22e0c6deae879f535da5afd8e335d0e908846155437b75d", 0x1, 0x0, 0x8}, 0x50) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000003c0)='memory.current\x00', 0x0, 0x0) openat$cgroup_type(r1, &(0x7f0000000400), 0x2, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f00000004c0)='tasks\x00', 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000500), 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/116, 0x74}, {&(0x7f0000000600)=""/88, 0x58}], 0x2, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x21) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x11, 0xe, 0x9, 0x0, 0x10100, r2, 0x5, '\x00', r4, r2, 0x1, 0x5, 0x0, 0x0, @void, @value, @value=r2}, 0x50) syz_open_procfs$namespace(r3, &(0x7f0000000880)='ns/pid\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@cgroup=r1, 0x1e, 0x1, 0x8, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0]}, 0x40) r6 = socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b00)={@fallback=r6, 0x5, 0x0, 0x4, &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000a40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000a80)=[0x0], &(0x7f0000000ac0)=[0x0, 0x0], 0x0}, 0x40) perf_event_open$cgroup(&(0x7f0000000b80)={0x2, 0x80, 0x9, 0x1, 0x0, 0x6, 0x0, 0xff, 0x104150, 0xb, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1000, 0x2, @perf_bp={&(0x7f0000000b40), 0x5}, 0x4817, 0x5, 0x7, 0x9, 0x1, 0x3, 0x8, 0x0, 0xafe, 0x0, 0xa}, r5, 0x7, r1, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r2, 0x58, &(0x7f0000000c00)}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d00)=0xffffffffffffffff, 0x4) openat$cgroup_pressure(r0, &(0x7f0000000d40)='io.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r5, &(0x7f0000000d80)='devices.allow\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001080)={r7, 0xe0, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000dc0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000e00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000000e80)=[{}, {}], 0x10, 0x10, &(0x7f0000000ec0), &(0x7f0000000f00), 0x8, 0xa3, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000010c0)={@map=r7, r1, 0x9, 0x0, r1, @void, @value=r7, @void, @void, r8}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001200)={@map=r1, 0x1, 0x1, 0x8, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001140)=[0x0], &(0x7f0000001180)=[0x0, 0x0], &(0x7f00000011c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x20801, 0x0) ioctl$TUNGETVNETLE(r9, 0x800454dd, &(0x7f0000001280)) r10 = perf_event_open$cgroup(&(0x7f0000001300)={0x0, 0x80, 0x5, 0x8, 0x1, 0xd5, 0x0, 0x3, 0x6810a, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f00000012c0), 0x3}, 0x10080, 0x6, 0x0, 0x6, 0x5, 0x4, 0x1, 0x0, 0xfffffffb}, r5, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r1) r11 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000001380)={r1, r7}) 3.511144617s ago: executing program 4 (id=884): r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d2"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(r6, &(0x7f0000000040), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x94) 2.42009562s ago: executing program 1 (id=891): r0 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000711215000000000095000000000000000527805d311d3c6cec8668f14641d973633e66f9ec4b3dac442280bd88fd031866e3b571f17d9b3b6cef91806330dbeb005afc5b1873a8cabbf07b59b985082e72e29545fad272a965cb8145f0b3b3555927e9ef854f0ba6a0554103f5555693538dc18a72aaf21830bf1c5da599147bec04d87d00866a94592263b2c831958131cc0175cecd0120bed509a89a2a06efd73c1da868ffedf6cb8270d8da97c0490aa20784661e4f8cba2d5afdc99b4625074e2c27b7972bc344dd3d2f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x891c, &(0x7f0000000040)={'geneve1\x00', @random="02001800"}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) r5 = gettid() perf_event_open(&(0x7f0000000ac0)={0x2, 0x80, 0x5, 0x0, 0x7f, 0xa4, 0x0, 0x0, 0x80001, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x75, 0x2, @perf_bp={&(0x7f0000000a80)}, 0x2000, 0x5, 0xe, 0x6, 0x8, 0x3ff, 0x100, 0x0, 0x1, 0x0, 0x800}, r5, 0xb, r0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 2.371033843s ago: executing program 2 (id=893): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x3, 0xd, 0x3}, {0x10000002, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r4, &(0x7f0000002900)={0x0, 0x0, 0x0}, 0x42) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000140), 0x4d) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0xfffffffffffffe16, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r8) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0xb}, 0x48) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r10 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 2.344020734s ago: executing program 0 (id=894): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) 2.099402718s ago: executing program 3 (id=895): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0xd8, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES16=0x0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0xffffffff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x401, 0xb, &(0x7f00000001c0)=""/11, 0x40f00, 0x20, '\x00', 0x0, 0x1a, r6, 0x8, &(0x7f0000000240)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x800, 0xc, 0x8, 0x2}, 0x10, 0x14296, r3, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$cgroup_pressure(r5, &(0x7f0000000080)={'some', 0x20, 0x2000000008, 0x20, 0x10000000fffff}, 0x2f) close(r5) 2.052446971s ago: executing program 0 (id=896): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000400000008"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x51) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 2.013407384s ago: executing program 2 (id=897): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 1.826922984s ago: executing program 4 (id=898): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0xffffffc6) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, 0x0, 0xffffffc6) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r8 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x80044944, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.752126919s ago: executing program 2 (id=899): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1.667781083s ago: executing program 3 (id=900): r0 = perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8913, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xffffffc6) 631.562573ms ago: executing program 4 (id=904): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x27, &(0x7f0000000040), 0x4) 427.409485ms ago: executing program 4 (id=905): socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d18"], 0xfe33) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000"], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="25390000290003"], 0x33fe0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712380000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x0, 0x400, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000003100)="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", 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) 333.461531ms ago: executing program 3 (id=906): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x4048800) 200.113558ms ago: executing program 3 (id=907): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) 0s ago: executing program 3 (id=908): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x1000000, 0x0, 0x7fffffff, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x2d, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x6d, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000180)="b90103606908068c3c270040e700009e0ff008001ffff2e1ffff86dd", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_type(r6, &(0x7f0000000040), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x92}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x8d, &(0x7f00000004c0)=""/141}, 0x94) kernel console output (not intermixed with test programs): 0: port 1(bridge_slave_0) entered forwarding state [ 74.096375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.126009][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.157039][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.178860][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.198804][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.206459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.243259][ T4280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.267128][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.297446][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.307821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.323499][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.330714][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.341179][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.350013][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.358879][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 74.367841][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 74.378739][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.387407][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.396520][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.405748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.414579][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.439592][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.455742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.465730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.480798][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.521235][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.539243][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.572490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.589389][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.596917][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.622529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.641872][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.673638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.691979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.722153][ T4279] device veth0_vlan entered promiscuous mode [ 74.768590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.776676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.798651][ T4279] device veth1_vlan entered promiscuous mode [ 74.817325][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.846976][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.857213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.871174][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.903607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.919436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.971828][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.001049][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.018901][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.049261][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.079070][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.101572][ T4269] device veth0_vlan entered promiscuous mode [ 75.140636][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.160961][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.181428][ T4279] device veth0_macvtap entered promiscuous mode [ 75.215489][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.233010][ T4269] device veth1_vlan entered promiscuous mode [ 75.264662][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.281353][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.291847][ T4279] device veth1_macvtap entered promiscuous mode [ 75.334768][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.345116][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.359406][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.381844][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.393326][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.407197][ T4280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.439589][ T4269] device veth0_macvtap entered promiscuous mode [ 75.450157][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.457691][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.469888][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.479396][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.496832][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.525210][ T4269] device veth1_macvtap entered promiscuous mode [ 75.535008][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.547258][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.563371][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.575818][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.594254][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.608923][ T4279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650583][ T4279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.654790][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 75.660334][ T4279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.680735][ T4279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.716179][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.725960][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.733868][ T4274] Bluetooth: hci0: command 0x040f tx timeout [ 75.745020][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.753815][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.770050][ T4278] device veth0_vlan entered promiscuous mode [ 75.791590][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.802559][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.814933][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.824397][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.834708][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.843571][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.853462][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.880688][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.891525][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 75.897568][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 75.903909][ T4274] Bluetooth: hci3: command 0x040f tx timeout [ 75.904026][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.923198][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.952236][ T4278] device veth1_vlan entered promiscuous mode [ 75.968517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.977047][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.987696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.996716][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.005708][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.014895][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.024200][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.033753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.044951][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.055877][ T4280] device veth0_vlan entered promiscuous mode [ 76.082014][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.091139][ T4269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.100670][ T4269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109809][ T4269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.135414][ T4271] device veth0_vlan entered promiscuous mode [ 76.166944][ T4271] device veth1_vlan entered promiscuous mode [ 76.175219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.184194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.192959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.202448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.211271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.219625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.263517][ T4280] device veth1_vlan entered promiscuous mode [ 76.281393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.291517][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.311778][ T4278] device veth0_macvtap entered promiscuous mode [ 76.342560][ T4278] device veth1_macvtap entered promiscuous mode [ 76.373848][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.386791][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.396787][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.405938][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.432223][ T4271] device veth0_macvtap entered promiscuous mode [ 76.462980][ T4271] device veth1_macvtap entered promiscuous mode [ 76.480011][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.504135][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.516219][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.516834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.534097][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.536745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.557574][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.566450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.585830][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.597455][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.610356][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.620982][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.634320][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.654966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.666497][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.676273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.685601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.697913][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.698830][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.709341][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.723065][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.728120][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.750069][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.760823][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.772552][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.783793][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.800063][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.811350][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.822081][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.835592][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.851060][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.862737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.871471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.881290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.890418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.899387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.910964][ T4280] device veth0_macvtap entered promiscuous mode [ 76.920749][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.935529][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.945875][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.958267][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.970095][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.981069][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.993004][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.007677][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.020048][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.029279][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.038186][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.051688][ T4280] device veth1_macvtap entered promiscuous mode [ 77.062256][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.084310][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.093808][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.103077][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.114183][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.124207][ T4278] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.136591][ T4278] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.138146][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.145934][ T4278] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162092][ T4278] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.196095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.262095][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.292712][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.306992][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.321313][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.338055][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.348902][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.358836][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.369422][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.388992][ C1] hrtimer: interrupt took 40650 ns [ 77.389654][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.451706][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.461259][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.544474][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.571518][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.584737][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.584778][ T4386] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 77.595798][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.615567][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.626446][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.637242][ T4280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.649649][ T4280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.661970][ T4280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.693221][ T4382] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 77.702314][ T4382] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.714341][ T4382] batman_adv: batadv0: Adding interface: vlan1 [ 77.721547][ T4382] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.728182][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 77.751688][ T4382] batman_adv: batadv0: Interface activated: vlan1 [ 77.774162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.809444][ T4274] Bluetooth: hci0: command 0x0419 tx timeout [ 77.816515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.850678][ T4280] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.869870][ T4280] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.899876][ T4280] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.910828][ T4280] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.952015][ T4389] netlink: 'syz.1.2': attribute type 21 has an invalid length. [ 77.965650][ T4386] wlan1: mtu greater than device maximum [ 77.972044][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 77.972084][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 77.982238][ T4274] Bluetooth: hci3: command 0x0419 tx timeout [ 78.010930][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.033859][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.053059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.124742][ T4368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.155410][ T4368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.218462][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.238887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.246255][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.267924][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.278709][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.287306][ T4395] wlan1: mtu greater than device maximum [ 78.301609][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.302299][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.350329][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.423878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.445551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.483113][ T4392] netlink: 'syz.2.6': attribute type 21 has an invalid length. [ 78.496505][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.538872][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.690613][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.730788][ T4399] netlink: 'syz.1.7': attribute type 3 has an invalid length. [ 78.790755][ T4399] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7'. [ 78.939340][ T4402] Zero length message leads to an empty skb [ 79.327139][ T4416] wlan1: mtu greater than device maximum [ 79.451183][ T4419] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.534068][ T4423] netlink: 'syz.3.4': attribute type 21 has an invalid length. [ 79.549754][ T4424] netlink: 'syz.2.10': attribute type 3 has an invalid length. [ 79.607210][ T4419] netlink: 'syz.1.9': attribute type 10 has an invalid length. [ 79.630949][ T4424] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 79.709996][ T4419] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 79.749987][ T4424] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.10'. [ 79.885872][ T4419] batman_adv: batadv0: Adding interface: vlan1 [ 79.948148][ T4419] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.378131][ T4419] batman_adv: batadv0: Interface activated: vlan1 [ 80.386245][ T4413] wlan1: mtu greater than device maximum [ 80.403514][ T4405] netlink: 'syz.4.8': attribute type 21 has an invalid length. [ 81.637319][ T4443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14'. [ 83.159148][ T4461] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.20'. [ 83.325414][ T4460] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.396874][ T4452] delete_channel: no stack [ 83.437510][ T4466] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 83.496555][ T4466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18'. [ 83.602741][ T4468] netlink: 'syz.0.20': attribute type 10 has an invalid length. [ 83.614578][ T4468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.20'. [ 84.163146][ T4468] batman_adv: batadv0: Adding interface: vlan1 [ 84.229350][ T4468] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.320586][ T4468] batman_adv: batadv0: Interface activated: vlan1 [ 84.785697][ T4471] delete_channel: no stack [ 86.332522][ T4505] wlan1: mtu greater than device maximum [ 86.455812][ T4507] netlink: 'syz.4.28': attribute type 21 has an invalid length. [ 86.585165][ T4508] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.31'. [ 86.677733][ T4508] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 86.770656][ T4508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.31'. [ 87.013174][ T14] cfg80211: failed to load regulatory.db [ 87.299727][ T4517] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.33'. [ 87.445845][ T4524] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.36'. [ 87.514361][ T4517] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 87.594477][ T4517] netlink: 40 bytes leftover after parsing attributes in process `syz.2.33'. [ 87.924263][ T4524] netlink: 'syz.3.36': attribute type 10 has an invalid length. [ 87.949330][ T4524] netlink: 40 bytes leftover after parsing attributes in process `syz.3.36'. [ 88.049922][ T4524] batman_adv: batadv0: Adding interface: vlan1 [ 88.068549][ T4524] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.127958][ T4524] batman_adv: batadv0: Interface activated: vlan1 [ 88.875612][ T4547] netlink: 'syz.0.41': attribute type 3 has an invalid length. [ 88.909426][ T4547] netlink: 'syz.0.41': attribute type 1 has an invalid length. [ 88.917938][ T4547] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.41'. [ 88.962604][ T4533] delete_channel: no stack [ 89.456178][ T4555] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.44'. [ 89.572321][ T4556] netlink: 'syz.1.43': attribute type 3 has an invalid length. [ 89.628716][ T4556] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 89.637044][ T4556] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.43'. [ 89.682244][ T4555] netlink: 'syz.0.44': attribute type 10 has an invalid length. [ 89.742133][ T4555] netlink: 40 bytes leftover after parsing attributes in process `syz.0.44'. [ 89.864007][ T4559] netlink: 'syz.4.45': attribute type 3 has an invalid length. [ 89.898355][ T4559] netlink: 'syz.4.45': attribute type 1 has an invalid length. [ 89.911503][ T4559] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.45'. [ 90.258847][ T4551] delete_channel: no stack [ 90.842483][ T4578] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.51'. [ 90.945088][ T4578] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 91.064828][ T4578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.51'. [ 91.216727][ T4568] delete_channel: no stack [ 91.873796][ T4590] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.55'. [ 92.064531][ T4599] wlan1: mtu greater than device maximum [ 92.082733][ T4599] netlink: 'syz.4.54': attribute type 21 has an invalid length. [ 92.110912][ T4595] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.56'. [ 92.207405][ T4598] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 92.247287][ T4598] netlink: 40 bytes leftover after parsing attributes in process `syz.1.56'. [ 94.144588][ T4630] __nla_validate_parse: 5 callbacks suppressed [ 94.144608][ T4630] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.67'. [ 94.190427][ T4628] validate_nla: 5 callbacks suppressed [ 94.190479][ T4628] netlink: 'syz.1.66': attribute type 3 has an invalid length. [ 94.217994][ T4628] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 94.238377][ T4633] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.68'. [ 94.249421][ T4628] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.66'. [ 94.313430][ T4633] netlink: 'syz.3.68': attribute type 10 has an invalid length. [ 94.351616][ T4633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.68'. [ 94.410829][ T4630] netlink: 'syz.0.67': attribute type 10 has an invalid length. [ 94.467631][ T4630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.67'. [ 94.689978][ T4643] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.71'. [ 94.921351][ T4650] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.75'. [ 94.936919][ T4648] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.73'. [ 94.975098][ T4653] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.74'. [ 94.997309][ T4650] netlink: 'syz.1.75': attribute type 10 has an invalid length. [ 95.011572][ T4650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.75'. [ 95.082645][ T4653] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 95.505932][ T4659] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 95.706377][ T4662] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 95.735324][ T4662] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 95.872457][ T4668] netlink: 'syz.0.80': attribute type 10 has an invalid length. [ 96.350400][ T4683] wlan1: mtu greater than device maximum [ 96.970477][ T4694] batman_adv: batadv0: Adding interface: vlan1 [ 97.007243][ T4694] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.071475][ T4694] batman_adv: batadv0: Interface activated: vlan1 [ 99.550811][ T4747] wlan1: mtu greater than device maximum [ 99.659874][ T4749] validate_nla: 11 callbacks suppressed [ 99.659894][ T4749] netlink: 'syz.0.103': attribute type 21 has an invalid length. [ 100.112892][ T4755] __nla_validate_parse: 24 callbacks suppressed [ 100.112913][ T4755] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.106'. [ 100.159283][ T4741] delete_channel: no stack [ 100.771476][ T4767] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.111'. [ 101.007953][ T4766] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.110'. [ 101.056350][ T4769] netlink: 'syz.1.110': attribute type 10 has an invalid length. [ 101.242176][ T4769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.110'. [ 103.703203][ T4780] netlink: 'syz.0.116': attribute type 3 has an invalid length. [ 103.848013][ T4779] netlink: 'syz.4.115': attribute type 3 has an invalid length. [ 103.886863][ T4780] netlink: 'syz.0.116': attribute type 1 has an invalid length. [ 103.964517][ T4779] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 103.996736][ T4780] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.116'. [ 104.008531][ T4779] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.115'. [ 104.404968][ T4774] delete_channel: no stack [ 104.524327][ T4793] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.119'. [ 104.656230][ T4793] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 104.694304][ T4793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.119'. [ 104.871141][ T4801] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.074350][ T4801] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 105.148804][ T4801] netlink: 40 bytes leftover after parsing attributes in process `syz.0.121'. [ 105.215016][ T4789] delete_channel: no stack [ 105.950136][ T4816] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.125'. [ 106.112298][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 106.779420][ T4830] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.128'. [ 108.259250][ T4856] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.432254][ T4856] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 108.484148][ T4856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.132'. [ 108.524824][ T4844] delete_channel: no stack [ 108.824873][ T4867] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.136'. [ 108.895641][ T4869] netlink: 'syz.3.136': attribute type 10 has an invalid length. [ 108.949101][ T4869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.136'. [ 109.057075][ T4857] delete_channel: no stack [ 109.491408][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 110.342174][ T4896] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.157'. [ 110.632721][ T4896] netlink: 'syz.2.157': attribute type 10 has an invalid length. [ 110.678382][ T4896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.157'. [ 111.865589][ T4919] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.151'. [ 112.028455][ T4919] netlink: 'syz.3.151': attribute type 10 has an invalid length. [ 112.093228][ T4919] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 112.109812][ T4913] delete_channel: no stack [ 113.201776][ T4928] delete_channel: no stack [ 113.931362][ T4954] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.161'. [ 114.440212][ T4964] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.163'. [ 114.903517][ T4972] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.168'. [ 114.976452][ T4972] netlink: 'syz.0.168': attribute type 10 has an invalid length. [ 115.065383][ T4972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.168'. [ 115.317252][ T4973] wlan1: mtu greater than device maximum [ 115.383633][ T4978] netlink: 'syz.2.169': attribute type 21 has an invalid length. [ 115.530661][ T4985] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.171'. [ 116.083720][ T4996] wlan1: mtu greater than device maximum [ 116.114931][ T4996] netlink: 'syz.1.175': attribute type 21 has an invalid length. [ 116.155158][ T4998] FAULT_INJECTION: forcing a failure. [ 116.155158][ T4998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 116.193185][ T4998] CPU: 1 PID: 4998 Comm: syz.0.176 Not tainted syzkaller #0 [ 116.200555][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.210638][ T4998] Call Trace: [ 116.213959][ T4998] [ 116.216927][ T4998] dump_stack_lvl+0x188/0x24e [ 116.221665][ T4998] ? show_regs_print_info+0x12/0x12 [ 116.226913][ T4998] ? load_image+0x400/0x400 [ 116.231462][ T4998] ? __lock_acquire+0x7d10/0x7d10 [ 116.236554][ T4998] ? slab_post_alloc_hook+0x4b/0x480 [ 116.241972][ T4998] should_fail_ex+0x399/0x4d0 [ 116.246703][ T4998] prepare_alloc_pages+0x1e2/0x5f0 [ 116.251867][ T4998] __alloc_pages+0x130/0x4f0 [ 116.256500][ T4998] ? kasan_populate_vmalloc_pte+0xa4/0xf0 [ 116.262249][ T4998] ? zone_statistics+0x170/0x170 [ 116.267231][ T4998] ? __rwlock_init+0x140/0x140 [ 116.272032][ T4998] ? do_raw_spin_unlock+0x11d/0x230 [ 116.277264][ T4998] __get_free_pages+0x8/0x30 [ 116.281895][ T4998] kasan_populate_vmalloc_pte+0x31/0xf0 [ 116.287474][ T4998] ? __apply_to_page_range+0x977/0xd10 [ 116.292972][ T4998] __apply_to_page_range+0x989/0xd10 [ 116.298308][ T4998] ? kasan_populate_vmalloc+0x70/0x70 [ 116.303719][ T4998] alloc_vmap_area+0x178f/0x18c0 [ 116.308697][ T4998] ? vm_map_ram+0xab0/0xab0 [ 116.313211][ T4998] ? rcu_is_watching+0x11/0xa0 [ 116.318004][ T4998] __get_vm_area_node+0x158/0x330 [ 116.324120][ T4998] __vmalloc_node_range+0x357/0x13b0 [ 116.329547][ T4998] ? xsk_map_alloc+0x162/0x250 [ 116.334358][ T4998] ? free_vm_area+0x50/0x50 [ 116.338881][ T4998] ? apparmor_capable+0x12c/0x190 [ 116.343933][ T4998] ? bpf_lsm_capable+0x5/0x10 [ 116.348634][ T4998] ? security_capable+0x85/0xb0 [ 116.353557][ T4998] bpf_map_area_alloc+0xd4/0xe0 [ 116.358450][ T4998] ? xsk_map_alloc+0x162/0x250 [ 116.363240][ T4998] xsk_map_alloc+0x162/0x250 [ 116.367852][ T4998] map_create+0x534/0x1000 [ 116.372301][ T4998] ? bpf_lsm_bpf+0x5/0x10 [ 116.376647][ T4998] __sys_bpf+0x38b/0x780 [ 116.380907][ T4998] ? bpf_link_show_fdinfo+0x380/0x380 [ 116.386306][ T4998] ? lock_chain_count+0x20/0x20 [ 116.391190][ T4998] __x64_sys_bpf+0x78/0x90 [ 116.395622][ T4998] do_syscall_64+0x4c/0xa0 [ 116.400052][ T4998] ? clear_bhb_loop+0x60/0xb0 [ 116.404741][ T4998] ? clear_bhb_loop+0x60/0xb0 [ 116.409518][ T4998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 116.415422][ T4998] RIP: 0033:0x7eff4539acb9 [ 116.419860][ T4998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.439506][ T4998] RSP: 002b:00007eff435f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 116.447941][ T4998] RAX: ffffffffffffffda RBX: 00007eff45615fa0 RCX: 00007eff4539acb9 [ 116.455935][ T4998] RDX: 0000000000000048 RSI: 0000200000000b40 RDI: 0000000000000000 [ 116.463914][ T4998] RBP: 00007eff435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 116.471898][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.479887][ T4998] R13: 00007eff45616038 R14: 00007eff45615fa0 R15: 00007fffc8b8e2b8 [ 116.487935][ T4998] [ 116.574501][ T5003] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.177'. [ 116.627009][ T5005] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.178'. [ 116.674371][ T5005] netlink: 'syz.3.178': attribute type 10 has an invalid length. [ 116.767794][ T5005] netlink: 40 bytes leftover after parsing attributes in process `syz.3.178'. [ 116.833271][ T5003] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 116.866420][ T5003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'. [ 117.249146][ T5014] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.182'. [ 118.580934][ T5033] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.186'. [ 118.974400][ T5030] netlink: 'syz.2.185': attribute type 1 has an invalid length. [ 119.008910][ T5030] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.185'. [ 119.614129][ T5047] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.191'. [ 119.665679][ T5047] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 119.709489][ T5047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.191'. [ 119.867664][ T5054] wlan1: mtu greater than device maximum [ 119.906984][ T5055] netlink: 'syz.0.190': attribute type 21 has an invalid length. [ 120.095351][ T5063] netlink: 'syz.1.194': attribute type 10 has an invalid length. [ 120.461344][ T5049] delete_channel: no stack [ 120.756709][ T5071] __nla_validate_parse: 2 callbacks suppressed [ 120.756732][ T5071] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.208'. [ 120.842903][ T5071] netlink: 'syz.2.208': attribute type 10 has an invalid length. [ 120.908374][ T5071] netlink: 40 bytes leftover after parsing attributes in process `syz.2.208'. [ 121.661363][ T5082] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.201'. [ 121.848087][ T5088] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.202'. [ 122.302709][ T5096] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.205'. [ 122.436830][ T5105] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.206'. [ 122.582345][ T5107] wlan1: mtu greater than device maximum [ 122.591292][ T5107] netlink: 'syz.3.207': attribute type 21 has an invalid length. [ 123.509905][ T5111] delete_channel: no stack [ 125.067798][ T5119] netlink: 'syz.0.211': attribute type 10 has an invalid length. [ 125.093076][ T5119] team0: Port device geneve1 added [ 125.106206][ T5122] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.212'. [ 125.391608][ T5137] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 125.401914][ T5134] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.216'. [ 125.609625][ T5137] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.650693][ T5137] bond0: (slave team0): Enslaving as an active interface with an up link [ 125.836722][ T5138] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 125.862774][ T5138] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.217'. [ 126.097163][ T5146] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.219'. [ 127.174615][ T5158] FAULT_INJECTION: forcing a failure. [ 127.174615][ T5158] name failslab, interval 1, probability 0, space 0, times 0 [ 127.235697][ T5158] CPU: 1 PID: 5158 Comm: syz.3.224 Not tainted syzkaller #0 [ 127.243057][ T5158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.253145][ T5158] Call Trace: [ 127.256444][ T5158] [ 127.259382][ T5158] dump_stack_lvl+0x188/0x24e [ 127.264078][ T5158] ? show_regs_print_info+0x12/0x12 [ 127.270070][ T5158] ? load_image+0x400/0x400 [ 127.274582][ T5158] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 127.280584][ T5158] should_fail_ex+0x399/0x4d0 [ 127.285280][ T5158] should_failslab+0x5/0x20 [ 127.289804][ T5158] slab_pre_alloc_hook+0x59/0x310 [ 127.294843][ T5158] kmem_cache_alloc+0x56/0x2f0 [ 127.299617][ T5158] ? __build_skb+0x2a/0x3c0 [ 127.304141][ T5158] __build_skb+0x2a/0x3c0 [ 127.308485][ T5158] build_skb+0x1e/0x230 [ 127.312664][ T5158] bpf_prog_test_run_skb+0x37e/0x12a0 [ 127.318053][ T5158] ? __fget_files+0x28/0x4b0 [ 127.322658][ T5158] ? __fget_files+0x43d/0x4b0 [ 127.327378][ T5158] ? cpu_online+0xa0/0xa0 [ 127.331717][ T5158] bpf_prog_test_run+0x31e/0x390 [ 127.336674][ T5158] __sys_bpf+0x62b/0x780 [ 127.340932][ T5158] ? bpf_link_show_fdinfo+0x380/0x380 [ 127.346328][ T5158] ? lock_chain_count+0x20/0x20 [ 127.351206][ T5158] __x64_sys_bpf+0x78/0x90 [ 127.355636][ T5158] do_syscall_64+0x4c/0xa0 [ 127.360063][ T5158] ? clear_bhb_loop+0x60/0xb0 [ 127.364963][ T5158] ? clear_bhb_loop+0x60/0xb0 [ 127.369673][ T5158] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.375588][ T5158] RIP: 0033:0x7fe33d39acb9 [ 127.380024][ T5158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.399643][ T5158] RSP: 002b:00007fe33e216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.408130][ T5158] RAX: ffffffffffffffda RBX: 00007fe33d615fa0 RCX: 00007fe33d39acb9 [ 127.416162][ T5158] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 127.424165][ T5158] RBP: 00007fe33e216090 R08: 0000000000000000 R09: 0000000000000000 [ 127.432175][ T5158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.440180][ T5158] R13: 00007fe33d616038 R14: 00007fe33d615fa0 R15: 00007ffda0f68dc8 [ 127.448238][ T5158] [ 127.612725][ T5154] delete_channel: no stack [ 127.982735][ T5152] wlan1: mtu greater than device maximum [ 127.998158][ T5162] netlink: 'syz.4.222': attribute type 21 has an invalid length. [ 128.029847][ T5172] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.228'. [ 128.091616][ T5172] netlink: 'syz.1.228': attribute type 10 has an invalid length. [ 128.131921][ T5172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.228'. [ 128.428754][ T5183] FAULT_INJECTION: forcing a failure. [ 128.428754][ T5183] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 128.475254][ T5183] CPU: 0 PID: 5183 Comm: syz.0.231 Not tainted syzkaller #0 [ 128.482634][ T5183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.492741][ T5183] Call Trace: [ 128.496046][ T5183] [ 128.499002][ T5183] dump_stack_lvl+0x188/0x24e [ 128.503718][ T5183] ? show_regs_print_info+0x12/0x12 [ 128.509032][ T5183] ? load_image+0x400/0x400 [ 128.513568][ T5183] ? __lock_acquire+0x7d10/0x7d10 [ 128.518639][ T5183] ? snprintf+0xe5/0x140 [ 128.522925][ T5183] should_fail_ex+0x399/0x4d0 [ 128.527652][ T5183] _copy_to_user+0x2c/0x130 [ 128.532193][ T5183] simple_read_from_buffer+0xe3/0x150 [ 128.537612][ T5183] proc_fail_nth_read+0x1a6/0x220 [ 128.542674][ T5183] ? proc_fault_inject_write+0x310/0x310 [ 128.548350][ T5183] ? fsnotify_perm+0x248/0x550 [ 128.553151][ T5183] ? proc_fault_inject_write+0x310/0x310 [ 128.558831][ T5183] vfs_read+0x2de/0xa00 [ 128.563035][ T5183] ? kernel_read+0x1e0/0x1e0 [ 128.567676][ T5183] ? __fget_files+0x28/0x4b0 [ 128.572308][ T5183] ? __fget_files+0x28/0x4b0 [ 128.576260][ T5189] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.233'. [ 128.576908][ T5183] ? __fget_files+0x43d/0x4b0 [ 128.576962][ T5183] ? __fdget_pos+0x2ae/0x360 [ 128.595449][ T5183] ? ksys_read+0x71/0x250 [ 128.599819][ T5183] ksys_read+0x14c/0x250 [ 128.604102][ T5183] ? vfs_write+0xa30/0xa30 [ 128.608551][ T5183] ? lockdep_hardirqs_on+0x94/0x140 [ 128.613780][ T5183] do_syscall_64+0x4c/0xa0 [ 128.618210][ T5183] ? clear_bhb_loop+0x60/0xb0 [ 128.622902][ T5183] ? clear_bhb_loop+0x60/0xb0 [ 128.627588][ T5183] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 128.633495][ T5183] RIP: 0033:0x7eff4535b58e [ 128.637917][ T5183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 128.657532][ T5183] RSP: 002b:00007eff435f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.665955][ T5183] RAX: ffffffffffffffda RBX: 00007eff435f66c0 RCX: 00007eff4535b58e [ 128.673933][ T5183] RDX: 000000000000000f RSI: 00007eff435f60a0 RDI: 0000000000000005 [ 128.681908][ T5183] RBP: 00007eff435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 128.689889][ T5183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 128.697867][ T5183] R13: 00007eff45616038 R14: 00007eff45615fa0 R15: 00007fffc8b8e2b8 [ 128.705858][ T5183] [ 128.895495][ T5192] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 128.913268][ T5192] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.232'. [ 129.102978][ T5195] netlink: 'syz.0.244': attribute type 22 has an invalid length. [ 129.746993][ T5204] delete_channel: no stack [ 130.518237][ T5214] netlink: 'syz.3.239': attribute type 10 has an invalid length. [ 132.354889][ T5214] team0: Port device geneve1 added [ 132.636232][ T5239] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.247'. [ 133.077058][ T5251] FAULT_INJECTION: forcing a failure. [ 133.077058][ T5251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.093923][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.093981][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.128359][ T5251] CPU: 1 PID: 5251 Comm: syz.2.251 Not tainted syzkaller #0 [ 133.135700][ T5251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 133.145770][ T5251] Call Trace: [ 133.149055][ T5251] [ 133.151994][ T5251] dump_stack_lvl+0x188/0x24e [ 133.156698][ T5251] ? show_regs_print_info+0x12/0x12 [ 133.161906][ T5251] ? load_image+0x400/0x400 [ 133.166419][ T5251] ? __might_fault+0xa6/0x120 [ 133.171108][ T5251] should_fail_ex+0x399/0x4d0 [ 133.175824][ T5251] copyin+0x1b/0x120 [ 133.179750][ T5251] _copy_from_iter+0x559/0x1130 [ 133.184630][ T5251] ? copyout_mc+0x110/0x110 [ 133.189167][ T5251] ? __virt_addr_valid+0x188/0x540 [ 133.194308][ T5251] ? __virt_addr_valid+0x188/0x540 [ 133.199439][ T5251] ? __virt_addr_valid+0x465/0x540 [ 133.204571][ T5251] ? __check_object_size+0x500/0xa40 [ 133.210394][ T5251] skb_copy_datagram_from_iter+0xef/0x690 [ 133.216135][ T5251] ? skb_put+0x117/0x210 [ 133.220406][ T5251] packet_sendmsg+0x3727/0x4e60 [ 133.225300][ T5251] ? __might_sleep+0xd0/0xd0 [ 133.229898][ T5251] ? verify_lock_unused+0x140/0x140 [ 133.235155][ T5251] ? aa_sk_perm+0x81f/0x950 [ 133.239672][ T5251] ? packet_getsockopt+0x9a0/0x9a0 [ 133.244804][ T5251] ? aa_sock_msg_perm+0x94/0x150 [ 133.249751][ T5251] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 133.255043][ T5251] ? security_socket_sendmsg+0x7c/0xa0 [ 133.260540][ T5251] ? packet_getsockopt+0x9a0/0x9a0 [ 133.265667][ T5251] ____sys_sendmsg+0x5be/0x970 [ 133.270453][ T5251] ? __sys_sendmsg_sock+0x30/0x30 [ 133.275576][ T5251] ? __import_iovec+0x315/0x500 [ 133.280440][ T5251] ? import_iovec+0x6f/0xa0 [ 133.284953][ T5251] ___sys_sendmsg+0x2a2/0x360 [ 133.289651][ T5251] ? __sys_sendmsg+0x290/0x290 [ 133.294440][ T5251] ? __lock_acquire+0x7d10/0x7d10 [ 133.299499][ T5251] __se_sys_sendmsg+0x1bb/0x2a0 [ 133.304368][ T5251] ? ct_nmi_exit+0x145/0x1c0 [ 133.308980][ T5251] ? __x64_sys_sendmsg+0x80/0x80 [ 133.313946][ T5251] ? lockdep_hardirqs_on+0x94/0x140 [ 133.319161][ T5251] do_syscall_64+0x4c/0xa0 [ 133.323587][ T5251] ? clear_bhb_loop+0x60/0xb0 [ 133.328280][ T5251] ? clear_bhb_loop+0x60/0xb0 [ 133.332967][ T5251] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.338870][ T5251] RIP: 0033:0x7f55ded9acb9 [ 133.343299][ T5251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.362917][ T5251] RSP: 002b:00007f55dfd43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.371340][ T5251] RAX: ffffffffffffffda RBX: 00007f55df015fa0 RCX: 00007f55ded9acb9 [ 133.379334][ T5251] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 133.387334][ T5251] RBP: 00007f55dfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 133.395328][ T5251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.403306][ T5251] R13: 00007f55df016038 R14: 00007f55df015fa0 R15: 00007ffc3039a4d8 [ 133.411321][ T5251] [ 133.718706][ T5262] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.255'. [ 133.805528][ T5264] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.256'. [ 133.819763][ T5254] delete_channel: no stack [ 133.850451][ T5262] netlink: 'syz.3.255': attribute type 10 has an invalid length. [ 133.885969][ T5262] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 133.936546][ T5264] netlink: 'syz.4.256': attribute type 10 has an invalid length. [ 133.950673][ T5264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.256'. [ 134.105422][ T5272] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.258'. [ 134.725333][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 135.203789][ T5298] wlan1: mtu greater than device maximum [ 135.236577][ T5298] netlink: 'syz.2.263': attribute type 21 has an invalid length. [ 135.457848][ T5306] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.269'. [ 135.511154][ T5306] netlink: 'syz.0.269': attribute type 10 has an invalid length. [ 135.530055][ T5306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'. [ 135.567283][ T5306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 135.905176][ T5310] netlink: 'syz.4.270': attribute type 3 has an invalid length. [ 135.949636][ T5310] netlink: 1034 bytes leftover after parsing attributes in process `syz.4.270'. [ 136.424707][ T5313] delete_channel: no stack [ 136.584411][ T4274] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 137.119046][ T5335] device bridge_slave_1 left promiscuous mode [ 137.172942][ T5335] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.176047][ T5335] device bridge_slave_0 left promiscuous mode [ 139.183812][ T5335] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.777831][ T5350] netlink: 'syz.4.281': attribute type 29 has an invalid length. [ 139.813308][ T5354] FAULT_INJECTION: forcing a failure. [ 139.813308][ T5354] name failslab, interval 1, probability 0, space 0, times 0 [ 139.819149][ T5353] syz.1.283 uses obsolete (PF_INET,SOCK_PACKET) [ 139.859496][ T5350] netlink: 'syz.4.281': attribute type 21 has an invalid length. [ 139.866882][ T5354] CPU: 1 PID: 5354 Comm: syz.2.282 Not tainted syzkaller #0 [ 139.874593][ T5354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.884685][ T5354] Call Trace: [ 139.888005][ T5354] [ 139.890975][ T5354] dump_stack_lvl+0x188/0x24e [ 139.895705][ T5354] ? show_regs_print_info+0x12/0x12 [ 139.900952][ T5354] ? load_image+0x400/0x400 [ 139.905493][ T5354] ? perf_trace_lock+0xf8/0x390 [ 139.910388][ T5354] ? verify_lock_unused+0x140/0x140 [ 139.915165][ T5350] netlink: 'syz.4.281': attribute type 1 has an invalid length. [ 139.915617][ T5354] ? perf_trace_lock+0xf8/0x390 [ 139.928156][ T5354] should_fail_ex+0x399/0x4d0 [ 139.932885][ T5354] should_failslab+0x5/0x20 [ 139.937431][ T5354] slab_pre_alloc_hook+0x59/0x310 [ 139.942490][ T5354] kmem_cache_alloc+0x56/0x2f0 [ 139.947290][ T5354] ? skb_clone+0x1e7/0x370 [ 139.951756][ T5354] skb_clone+0x1e7/0x370 [ 139.956047][ T5354] __netlink_deliver_tap+0x3ed/0x800 [ 139.961393][ T5354] ? netlink_deliver_tap+0x2e/0x1b0 [ 139.966635][ T5354] netlink_deliver_tap+0x19c/0x1b0 [ 139.971787][ T5354] netlink_unicast+0x728/0x8d0 [ 139.976606][ T5354] netlink_sendmsg+0x8ad/0xbd0 [ 139.981423][ T5354] ? netlink_getsockopt+0x550/0x550 [ 139.986667][ T5354] ? aa_sock_msg_perm+0x94/0x150 [ 139.991646][ T5354] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 139.996964][ T5354] ? security_socket_sendmsg+0x7c/0xa0 [ 140.002477][ T5354] ? netlink_getsockopt+0x550/0x550 [ 140.007721][ T5354] ____sys_sendmsg+0x5be/0x970 [ 140.012542][ T5354] ? __sys_sendmsg_sock+0x30/0x30 [ 140.017605][ T5354] ? __import_iovec+0x315/0x500 [ 140.022498][ T5354] ? import_iovec+0x6f/0xa0 [ 140.027038][ T5354] ___sys_sendmsg+0x2a2/0x360 [ 140.031765][ T5354] ? __sys_sendmsg+0x290/0x290 [ 140.036596][ T5354] ? trace_call_bpf+0xbf/0x6b0 [ 140.041444][ T5354] __se_sys_sendmsg+0x1bb/0x2a0 [ 140.046343][ T5354] ? __x64_sys_sendmsg+0x80/0x80 [ 140.051339][ T5354] ? lockdep_hardirqs_on+0x94/0x140 [ 140.056587][ T5354] do_syscall_64+0x4c/0xa0 [ 140.061039][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 140.065749][ T5354] ? clear_bhb_loop+0x60/0xb0 [ 140.070483][ T5354] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.076410][ T5354] RIP: 0033:0x7f55ded9acb9 [ 140.080860][ T5354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.100494][ T5354] RSP: 002b:00007f55dfd43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.108946][ T5354] RAX: ffffffffffffffda RBX: 00007f55df015fa0 RCX: 00007f55ded9acb9 [ 140.116956][ T5354] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 140.124958][ T5354] RBP: 00007f55dfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 140.132960][ T5354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.140961][ T5354] R13: 00007f55df016038 R14: 00007f55df015fa0 R15: 00007ffc3039a4d8 [ 140.148993][ T5354] [ 140.206605][ T5354] netlink: 64 bytes leftover after parsing attributes in process `syz.2.282'. [ 140.486614][ T5350] netlink: 'syz.4.281': attribute type 2 has an invalid length. [ 140.503442][ T5350] device .*! entered promiscuous mode [ 140.542370][ T5360] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.284'. [ 140.565186][ T5360] netlink: 'syz.3.284': attribute type 10 has an invalid length. [ 140.608431][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.3.284'. [ 141.004664][ T5376] wlan1: mtu greater than device maximum [ 141.032747][ T5376] netlink: 'syz.0.287': attribute type 21 has an invalid length. [ 141.407899][ T5381] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.288'. [ 141.441912][ T5383] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.290'. [ 141.522814][ T5385] netlink: 'syz.1.291': attribute type 10 has an invalid length. [ 141.582076][ T5385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.291'. [ 141.591741][ T5385] device team0 entered promiscuous mode [ 141.597504][ T5385] device team_slave_0 entered promiscuous mode [ 141.604437][ T5385] device team_slave_1 entered promiscuous mode [ 141.617142][ T5385] bridge0: port 3(team0) entered blocking state [ 141.755271][ T5385] bridge0: port 3(team0) entered disabled state [ 142.175379][ T5385] bridge0: port 3(team0) entered blocking state [ 142.181879][ T5385] bridge0: port 3(team0) entered forwarding state [ 142.924209][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 143.132356][ T5400] FAULT_INJECTION: forcing a failure. [ 143.132356][ T5400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.168378][ T5400] CPU: 0 PID: 5400 Comm: syz.4.294 Not tainted syzkaller #0 [ 143.176256][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 143.186344][ T5400] Call Trace: [ 143.189652][ T5400] [ 143.192614][ T5400] dump_stack_lvl+0x188/0x24e [ 143.197333][ T5400] ? show_regs_print_info+0x12/0x12 [ 143.202565][ T5400] ? load_image+0x400/0x400 [ 143.207107][ T5400] ? __lock_acquire+0x7d10/0x7d10 [ 143.212166][ T5400] ? snprintf+0xe5/0x140 [ 143.216436][ T5400] should_fail_ex+0x399/0x4d0 [ 143.221165][ T5400] _copy_to_user+0x2c/0x130 [ 143.225713][ T5400] simple_read_from_buffer+0xe3/0x150 [ 143.231136][ T5400] proc_fail_nth_read+0x1a6/0x220 [ 143.236180][ T5400] ? proc_fault_inject_write+0x310/0x310 [ 143.241837][ T5400] ? fsnotify_perm+0x248/0x550 [ 143.246621][ T5400] ? proc_fault_inject_write+0x310/0x310 [ 143.252359][ T5400] vfs_read+0x2de/0xa00 [ 143.256540][ T5400] ? kernel_read+0x1e0/0x1e0 [ 143.261153][ T5400] ? __fget_files+0x28/0x4b0 [ 143.265755][ T5400] ? __fget_files+0x28/0x4b0 [ 143.270376][ T5400] ? __fget_files+0x43d/0x4b0 [ 143.275073][ T5400] ? __fdget_pos+0x2ae/0x360 [ 143.279675][ T5400] ? ksys_read+0x71/0x250 [ 143.284049][ T5400] ksys_read+0x14c/0x250 [ 143.288313][ T5400] ? vfs_write+0xa30/0xa30 [ 143.292745][ T5400] ? lockdep_hardirqs_on+0x94/0x140 [ 143.297978][ T5400] do_syscall_64+0x4c/0xa0 [ 143.302413][ T5400] ? clear_bhb_loop+0x60/0xb0 [ 143.307097][ T5400] ? clear_bhb_loop+0x60/0xb0 [ 143.311781][ T5400] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.317680][ T5400] RIP: 0033:0x7f7af655b58e [ 143.322194][ T5400] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 143.341811][ T5400] RSP: 002b:00007f7af73c1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 143.350237][ T5400] RAX: ffffffffffffffda RBX: 00007f7af73c26c0 RCX: 00007f7af655b58e [ 143.358219][ T5400] RDX: 000000000000000f RSI: 00007f7af73c20a0 RDI: 0000000000000004 [ 143.366215][ T5400] RBP: 00007f7af73c2090 R08: 0000000000000000 R09: 0000000000000000 [ 143.374208][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.382198][ T5400] R13: 00007f7af6816038 R14: 00007f7af6815fa0 R15: 00007fff7435e688 [ 143.390200][ T5400] [ 143.535264][ T5407] netlink: 10 bytes leftover after parsing attributes in process `syz.1.296'. [ 143.932383][ T5415] delete_channel: no stack [ 144.227177][ T5423] FAULT_INJECTION: forcing a failure. [ 144.227177][ T5423] name failslab, interval 1, probability 0, space 0, times 0 [ 144.305755][ T5423] CPU: 1 PID: 5423 Comm: syz.4.300 Not tainted syzkaller #0 [ 144.306096][ T5425] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.301'. [ 144.313141][ T5423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 144.313176][ T5423] Call Trace: [ 144.313187][ T5423] [ 144.313201][ T5423] dump_stack_lvl+0x188/0x24e [ 144.313246][ T5423] ? show_regs_print_info+0x12/0x12 [ 144.313279][ T5423] ? load_image+0x400/0x400 [ 144.353297][ T5423] ? __might_sleep+0xd0/0xd0 [ 144.357951][ T5423] ? __lock_acquire+0x7d10/0x7d10 [ 144.363064][ T5423] should_fail_ex+0x399/0x4d0 [ 144.367817][ T5423] should_failslab+0x5/0x20 [ 144.372393][ T5423] slab_pre_alloc_hook+0x59/0x310 [ 144.377494][ T5423] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 144.383419][ T5423] __kmem_cache_alloc_node+0x4f/0x260 [ 144.388877][ T5423] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 144.394661][ T5423] __kmalloc+0xa0/0x240 [ 144.398886][ T5423] tomoyo_realpath_from_path+0xdf/0x5d0 [ 144.404526][ T5423] ? tomoyo_path_number_perm+0x205/0x650 [ 144.410234][ T5423] tomoyo_path_number_perm+0x22f/0x650 [ 144.415758][ T5423] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 144.421268][ T5423] ? ksys_write+0x1c0/0x250 [ 144.425841][ T5423] ? common_file_perm+0x171/0x1c0 [ 144.431020][ T5423] ? __fget_files+0x28/0x4b0 [ 144.435658][ T5423] ? __fget_files+0x28/0x4b0 [ 144.440338][ T5423] security_file_ioctl+0x6c/0xa0 [ 144.445336][ T5423] __se_sys_ioctl+0x48/0x170 [ 144.450017][ T5423] do_syscall_64+0x4c/0xa0 [ 144.454483][ T5423] ? clear_bhb_loop+0x60/0xb0 [ 144.459209][ T5423] ? clear_bhb_loop+0x60/0xb0 [ 144.463936][ T5423] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 144.469875][ T5423] RIP: 0033:0x7f7af659acb9 [ 144.474350][ T5423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.493998][ T5423] RSP: 002b:00007f7af73c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.502463][ T5423] RAX: ffffffffffffffda RBX: 00007f7af6815fa0 RCX: 00007f7af659acb9 [ 144.510474][ T5423] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000005 [ 144.518510][ T5423] RBP: 00007f7af73c2090 R08: 0000000000000000 R09: 0000000000000000 [ 144.526536][ T5423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.534562][ T5423] R13: 00007f7af6816038 R14: 00007f7af6815fa0 R15: 00007fff7435e688 [ 144.542637][ T5423] [ 144.617805][ T5425] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 144.649009][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.301'. [ 144.704265][ T5425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.828844][ T5433] wlan1: mtu greater than device maximum [ 144.845048][ T5433] netlink: 'syz.1.302': attribute type 21 has an invalid length. [ 144.984759][ T5423] ERROR: Out of memory at tomoyo_realpath_from_path. [ 145.793269][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 145.829958][ T5446] netlink: 'syz.2.308': attribute type 29 has an invalid length. [ 145.849307][ T5446] netlink: 'syz.2.308': attribute type 29 has an invalid length. [ 146.078960][ T5444] netlink: 'syz.0.315': attribute type 10 has an invalid length. [ 146.421201][ T5444] team0: Port device wlan1 added [ 147.138174][ T5465] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.313'. [ 147.856916][ T5462] delete_channel: no stack [ 148.938341][ T5472] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.314'. [ 149.011587][ T5480] netlink: 'syz.1.319': attribute type 29 has an invalid length. [ 149.031449][ T5472] netlink: 'syz.2.314': attribute type 10 has an invalid length. [ 149.039888][ T5472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.314'. [ 149.112081][ T5482] wlan1: mtu greater than device maximum [ 149.148569][ T5482] netlink: 'syz.0.317': attribute type 21 has an invalid length. [ 149.181357][ T5480] netlink: 'syz.1.319': attribute type 21 has an invalid length. [ 149.193528][ T5480] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 149.348519][ T5480] bridge0: port 3(team0) entered disabled state [ 149.395439][ T5484] netlink: 'syz.1.319': attribute type 2 has an invalid length. [ 149.604920][ T5480] device bridge_slave_1 left promiscuous mode [ 149.696974][ T5480] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.893300][ T5485] delete_channel: no stack [ 150.038904][ T5480] device bridge_slave_0 left promiscuous mode [ 150.045248][ T5480] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.179982][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 150.308652][ T5484] device .*! entered promiscuous mode [ 150.591313][ T5502] netlink: 'syz.4.324': attribute type 4 has an invalid length. [ 150.618301][ T5493] netlink: 'syz.0.333': attribute type 21 has an invalid length. [ 150.665791][ T5504] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.326'. [ 150.705998][ T5504] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.326'. [ 150.731006][ T5505] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.326'. [ 151.435063][ T5528] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.331'. [ 151.595528][ T5530] netlink: 'syz.0.331': attribute type 10 has an invalid length. [ 151.601198][ T5506] delete_channel: no stack [ 151.618817][ T5530] netlink: 40 bytes leftover after parsing attributes in process `syz.0.331'. [ 151.684962][ T5530] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 152.238766][ T5537] netlink: 'syz.4.334': attribute type 10 has an invalid length. [ 152.272370][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 152.302343][ T5537] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 152.331240][ T5537] device ipvlan1 entered promiscuous mode [ 152.363687][ T5537] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 153.231449][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 154.027190][ T5571] netlink: 'syz.0.342': attribute type 21 has an invalid length. [ 154.230823][ T5575] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.343'. [ 155.273939][ T5579] delete_channel: no stack [ 155.814835][ T5584] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.347'. [ 155.832319][ T5590] netlink: 'syz.0.348': attribute type 29 has an invalid length. [ 155.981573][ T5593] FAULT_INJECTION: forcing a failure. [ 155.981573][ T5593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.999091][ T5593] CPU: 1 PID: 5593 Comm: syz.3.351 Not tainted syzkaller #0 [ 156.001190][ T5590] netlink: 'syz.0.348': attribute type 21 has an invalid length. [ 156.006420][ T5593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.006435][ T5593] Call Trace: [ 156.006443][ T5593] [ 156.006451][ T5593] dump_stack_lvl+0x188/0x24e [ 156.006487][ T5593] ? show_regs_print_info+0x12/0x12 [ 156.006512][ T5593] ? load_image+0x400/0x400 [ 156.006535][ T5593] ? __lock_acquire+0x7d10/0x7d10 [ 156.006563][ T5593] ? snprintf+0xe5/0x140 [ 156.006583][ T5593] should_fail_ex+0x399/0x4d0 [ 156.006617][ T5593] _copy_to_user+0x2c/0x130 [ 156.006643][ T5593] simple_read_from_buffer+0xe3/0x150 [ 156.006676][ T5593] proc_fail_nth_read+0x1a6/0x220 [ 156.006701][ T5593] ? proc_fault_inject_write+0x310/0x310 [ 156.006726][ T5593] ? fsnotify_perm+0x248/0x550 [ 156.006749][ T5593] ? proc_fault_inject_write+0x310/0x310 [ 156.006770][ T5593] vfs_read+0x2de/0xa00 [ 156.006801][ T5593] ? kernel_read+0x1e0/0x1e0 [ 156.006828][ T5593] ? __fget_files+0x28/0x4b0 [ 156.006852][ T5593] ? __fget_files+0x28/0x4b0 [ 156.006877][ T5593] ? __fget_files+0x43d/0x4b0 [ 156.006911][ T5593] ? __fdget_pos+0x2ae/0x360 [ 156.006934][ T5593] ? ksys_read+0x71/0x250 [ 156.006961][ T5593] ksys_read+0x14c/0x250 [ 156.006988][ T5593] ? vfs_write+0xa30/0xa30 [ 156.007017][ T5593] ? lockdep_hardirqs_on+0x94/0x140 [ 156.007049][ T5593] do_syscall_64+0x4c/0xa0 [ 156.007071][ T5593] ? clear_bhb_loop+0x60/0xb0 [ 156.007099][ T5593] ? clear_bhb_loop+0x60/0xb0 [ 156.007121][ T5593] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 156.007141][ T5593] RIP: 0033:0x7fe33d35b58e [ 156.007159][ T5593] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.007175][ T5593] RSP: 002b:00007fe33e215fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.007198][ T5593] RAX: ffffffffffffffda RBX: 00007fe33e2166c0 RCX: 00007fe33d35b58e [ 156.007212][ T5593] RDX: 000000000000000f RSI: 00007fe33e2160a0 RDI: 0000000000000005 [ 156.007224][ T5593] RBP: 00007fe33e216090 R08: 0000000000000000 R09: 0000000000000000 [ 156.007237][ T5593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.007249][ T5593] R13: 00007fe33d616038 R14: 00007fe33d615fa0 R15: 00007ffda0f68dc8 [ 156.007279][ T5593] [ 156.354447][ T5590] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 156.494625][ T5600] device bridge_slave_1 left promiscuous mode [ 156.533220][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 156.555499][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.584016][ T5600] device bridge_slave_0 left promiscuous mode [ 156.593768][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.666175][ T5590] netlink: 'syz.0.348': attribute type 2 has an invalid length. [ 157.014889][ T5590] device .*! entered promiscuous mode [ 157.153868][ T5621] netlink: 'syz.2.359': attribute type 21 has an invalid length. [ 157.208756][ T5615] delete_channel: no stack [ 157.213501][ T5622] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 157.498414][ T5629] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.362'. [ 157.543931][ T5632] netlink: 'syz.0.364': attribute type 21 has an invalid length. [ 157.557338][ T5632] netlink: 'syz.0.364': attribute type 1 has an invalid length. [ 157.572699][ T5632] netlink: 144 bytes leftover after parsing attributes in process `syz.0.364'. [ 159.495586][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 159.542139][ T5643] FAULT_INJECTION: forcing a failure. [ 159.542139][ T5643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.556049][ T5643] CPU: 0 PID: 5643 Comm: syz.1.366 Not tainted syzkaller #0 [ 159.563386][ T5643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.573480][ T5643] Call Trace: [ 159.576794][ T5643] [ 159.579766][ T5643] dump_stack_lvl+0x188/0x24e [ 159.584489][ T5643] ? show_regs_print_info+0x12/0x12 [ 159.589734][ T5643] ? load_image+0x400/0x400 [ 159.594288][ T5643] ? __lock_acquire+0x7d10/0x7d10 [ 159.599361][ T5643] ? snprintf+0xe5/0x140 [ 159.603648][ T5643] should_fail_ex+0x399/0x4d0 [ 159.608381][ T5643] _copy_to_user+0x2c/0x130 [ 159.612932][ T5643] simple_read_from_buffer+0xe3/0x150 [ 159.618361][ T5643] proc_fail_nth_read+0x1a6/0x220 [ 159.623429][ T5643] ? proc_fault_inject_write+0x310/0x310 [ 159.629106][ T5643] ? fsnotify_perm+0x248/0x550 [ 159.633902][ T5643] ? proc_fault_inject_write+0x310/0x310 [ 159.639547][ T5643] vfs_read+0x2de/0xa00 [ 159.643732][ T5643] ? kernel_read+0x1e0/0x1e0 [ 159.648345][ T5643] ? __fget_files+0x28/0x4b0 [ 159.652961][ T5643] ? __fget_files+0x28/0x4b0 [ 159.657575][ T5643] ? __fget_files+0x43d/0x4b0 [ 159.662281][ T5643] ? __fdget_pos+0x2ae/0x360 [ 159.666904][ T5643] ? ksys_read+0x71/0x250 [ 159.671271][ T5643] ksys_read+0x14c/0x250 [ 159.675538][ T5643] ? vfs_write+0xa30/0xa30 [ 159.679980][ T5643] ? lockdep_hardirqs_on+0x94/0x140 [ 159.685215][ T5643] do_syscall_64+0x4c/0xa0 [ 159.689654][ T5643] ? clear_bhb_loop+0x60/0xb0 [ 159.694347][ T5643] ? clear_bhb_loop+0x60/0xb0 [ 159.699043][ T5643] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.704954][ T5643] RIP: 0033:0x7ff0bcb5b58e [ 159.709380][ T5643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 159.728998][ T5643] RSP: 002b:00007ff0bdadffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.737422][ T5643] RAX: ffffffffffffffda RBX: 00007ff0bdae06c0 RCX: 00007ff0bcb5b58e [ 159.745401][ T5643] RDX: 000000000000000f RSI: 00007ff0bdae00a0 RDI: 0000000000000005 [ 159.753379][ T5643] RBP: 00007ff0bdae0090 R08: 0000000000000000 R09: 0000000000000000 [ 159.761361][ T5643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.769343][ T5643] R13: 00007ff0bce16038 R14: 00007ff0bce15fa0 R15: 00007ffdfb25b328 [ 159.777339][ T5643] [ 160.003218][ T5652] delete_channel: no stack [ 160.256801][ T5669] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 160.364565][ T5669] team0: Port device wlan1 added [ 161.137226][ T5683] netlink: 'syz.2.378': attribute type 21 has an invalid length. [ 161.156287][ T5689] wlan1: mtu greater than device maximum [ 161.178424][ T5690] netlink: 'syz.3.379': attribute type 21 has an invalid length. [ 161.187771][ T5692] netlink: 'syz.0.380': attribute type 10 has an invalid length. [ 161.627054][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 161.889049][ T5704] delete_channel: no stack [ 162.102940][ T5715] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 162.131353][ T5715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.182980][ T5716] netlink: 'syz.0.390': attribute type 10 has an invalid length. [ 162.233667][ T5718] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.393'. [ 162.264565][ T5718] netlink: 'syz.3.393': attribute type 10 has an invalid length. [ 162.326130][ T5718] netlink: 40 bytes leftover after parsing attributes in process `syz.3.393'. [ 162.517775][ T5726] netlink: 'syz.2.394': attribute type 10 has an invalid length. [ 162.599891][ T5726] team0: Port device wlan1 added [ 162.986403][ T4274] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 163.158882][ T5745] wlan1: mtu greater than device maximum [ 163.188156][ T5745] netlink: 'syz.4.398': attribute type 21 has an invalid length. [ 163.350573][ T5751] netlink: 763 bytes leftover after parsing attributes in process `syz.2.401'. [ 164.234234][ T5765] netlink: 'syz.4.406': attribute type 29 has an invalid length. [ 164.342080][ T5753] delete_channel: no stack [ 164.651519][ T5769] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.407'. [ 164.754765][ T5769] netlink: 'syz.0.407': attribute type 10 has an invalid length. [ 164.778680][ T5769] netlink: 40 bytes leftover after parsing attributes in process `syz.0.407'. [ 164.940319][ T4274] Bluetooth: hci1: unexpected event 0x07 length: 15 < 255 [ 164.942291][ T5769] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 165.209808][ T5784] netlink: 'syz.3.410': attribute type 10 has an invalid length. [ 165.482608][ T5785] netlink: 14 bytes leftover after parsing attributes in process `syz.1.408'. [ 165.503254][ T5785] device hsr_slave_0 left promiscuous mode [ 165.513390][ T5785] device hsr_slave_1 left promiscuous mode [ 165.631094][ T5788] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.412'. [ 165.965851][ T5793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.413'. [ 166.051905][ T5793] device team0 entered promiscuous mode [ 166.182362][ T5793] device team_slave_0 entered promiscuous mode [ 166.272176][ T5793] device team_slave_1 entered promiscuous mode [ 166.337776][ T5793] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 166.695703][ T5805] wlan1: mtu greater than device maximum [ 166.728576][ T5805] validate_nla: 1 callbacks suppressed [ 166.728594][ T5805] netlink: 'syz.2.416': attribute type 21 has an invalid length. [ 168.332724][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 168.514182][ T5808] delete_channel: no stack [ 168.785251][ T5830] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 168.822448][ T5830] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.426'. [ 170.336323][ T5826] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.425'. [ 170.345812][ T5827] netlink: 'syz.3.425': attribute type 10 has an invalid length. [ 170.364690][ T5827] netlink: 40 bytes leftover after parsing attributes in process `syz.3.425'. [ 170.398040][ T5840] netlink: 'syz.0.429': attribute type 10 has an invalid length. [ 170.405839][ T5840] netlink: 40 bytes leftover after parsing attributes in process `syz.0.429'. [ 170.443148][ T5840] device team0 entered promiscuous mode [ 170.450498][ T5840] device team_slave_0 entered promiscuous mode [ 170.456854][ T5840] device team_slave_1 entered promiscuous mode [ 170.503894][ T5840] device geneve1 entered promiscuous mode [ 170.518376][ T5840] device wlan1 entered promiscuous mode [ 170.526745][ T5840] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 170.890254][ T4274] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 171.076693][ T5849] netlink: 'syz.4.432': attribute type 21 has an invalid length. [ 171.652625][ T5863] delete_channel: no stack [ 172.022289][ T5877] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.442'. [ 172.101824][ T5877] netlink: 'syz.2.442': attribute type 10 has an invalid length. [ 172.167476][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.2.442'. [ 172.634477][ T5884] netlink: 'syz.2.444': attribute type 10 has an invalid length. [ 172.738373][ T5884] netlink: 40 bytes leftover after parsing attributes in process `syz.2.444'. [ 172.818402][ T5884] device team0 entered promiscuous mode [ 172.878689][ T5884] device team_slave_0 entered promiscuous mode [ 172.920476][ T5884] device team_slave_1 entered promiscuous mode [ 172.942561][ T5884] device wlan1 entered promiscuous mode [ 172.970861][ T5884] bridge0: port 3(team0) entered blocking state [ 173.028878][ T5884] bridge0: port 3(team0) entered disabled state [ 173.063559][ T5884] bridge0: port 3(team0) entered blocking state [ 173.070131][ T5884] bridge0: port 3(team0) entered forwarding state [ 173.705534][ T5901] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.448'. [ 174.155775][ T5905] netlink: 'syz.0.459': attribute type 10 has an invalid length. [ 174.292284][ T5905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.459'. [ 174.381823][ T5905] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 174.980333][ T5910] netlink: 'syz.2.450': attribute type 21 has an invalid length. [ 175.207501][ T5918] FAULT_INJECTION: forcing a failure. [ 175.207501][ T5918] name failslab, interval 1, probability 0, space 0, times 0 [ 175.308115][ T5918] CPU: 1 PID: 5918 Comm: syz.4.451 Not tainted syzkaller #0 [ 175.315492][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.325615][ T5918] Call Trace: [ 175.328928][ T5918] [ 175.331896][ T5918] dump_stack_lvl+0x188/0x24e [ 175.336628][ T5918] ? show_regs_print_info+0x12/0x12 [ 175.341873][ T5918] ? load_image+0x400/0x400 [ 175.346417][ T5918] ? __might_sleep+0xd0/0xd0 [ 175.351042][ T5918] ? __lock_acquire+0x7d10/0x7d10 [ 175.356114][ T5918] should_fail_ex+0x399/0x4d0 [ 175.360840][ T5918] should_failslab+0x5/0x20 [ 175.365385][ T5918] slab_pre_alloc_hook+0x59/0x310 [ 175.370435][ T5918] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 175.376186][ T5918] __kmem_cache_alloc_node+0x4f/0x260 [ 175.381584][ T5918] ? tomoyo_realpath_from_path+0xdf/0x5d0 [ 175.387329][ T5918] __kmalloc+0xa0/0x240 [ 175.391513][ T5918] tomoyo_realpath_from_path+0xdf/0x5d0 [ 175.397090][ T5918] ? tomoyo_path_number_perm+0x205/0x650 [ 175.402745][ T5918] tomoyo_path_number_perm+0x22f/0x650 [ 175.408242][ T5918] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 175.414849][ T5918] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 175.420330][ T5918] ? ksys_write+0x1c0/0x250 [ 175.424849][ T5918] ? common_file_perm+0x171/0x1c0 [ 175.429922][ T5918] ? __fget_files+0x28/0x4b0 [ 175.434575][ T5918] ? __fget_files+0x28/0x4b0 [ 175.439191][ T5918] security_file_ioctl+0x6c/0xa0 [ 175.444147][ T5918] __se_sys_ioctl+0x48/0x170 [ 175.448754][ T5918] do_syscall_64+0x4c/0xa0 [ 175.453183][ T5918] ? clear_bhb_loop+0x60/0xb0 [ 175.457871][ T5918] ? clear_bhb_loop+0x60/0xb0 [ 175.462562][ T5918] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 175.468470][ T5918] RIP: 0033:0x7f7af659acb9 [ 175.472894][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.492508][ T5918] RSP: 002b:00007f7af73c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.500931][ T5918] RAX: ffffffffffffffda RBX: 00007f7af6815fa0 RCX: 00007f7af659acb9 [ 175.508915][ T5918] RDX: 00f0ff1f00000000 RSI: 0000000040047440 RDI: 0000000000000004 [ 175.516899][ T5918] RBP: 00007f7af73c2090 R08: 0000000000000000 R09: 0000000000000000 [ 175.524884][ T5918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.532862][ T5918] R13: 00007f7af6816038 R14: 00007f7af6815fa0 R15: 00007fff7435e688 [ 175.540862][ T5918] [ 175.573319][ T5918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 175.629084][ T5928] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.455'. [ 175.751329][ T5930] netlink: 14 bytes leftover after parsing attributes in process `syz.0.454'. [ 176.111058][ T5920] delete_channel: no stack [ 176.313029][ T5930] device hsr_slave_1 left promiscuous mode [ 176.492530][ T5940] netlink: 'syz.2.457': attribute type 10 has an invalid length. [ 176.524125][ T5940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 177.322323][ T5959] netlink: 'syz.1.464': attribute type 21 has an invalid length. [ 178.774388][ T5966] delete_channel: no stack [ 178.792313][ T5985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.473'. [ 179.073255][ T5984] netlink: 'syz.4.472': attribute type 10 has an invalid length. [ 179.095019][ T5984] netlink: 40 bytes leftover after parsing attributes in process `syz.4.472'. [ 179.109551][ T5984] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 179.346037][ T5996] netlink: 'syz.2.476': attribute type 10 has an invalid length. [ 179.419665][ T5996] team0: Device veth1_macvtap failed to register rx_handler [ 179.745707][ T6009] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.478'. [ 179.755611][ T6004] netlink: 65027 bytes leftover after parsing attributes in process `syz.4.478'. [ 179.897020][ T6009] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.478'. [ 180.045907][ T6007] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.478'. [ 180.122760][ T6007] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.478'. [ 181.036515][ T6021] netlink: 'syz.1.481': attribute type 10 has an invalid length. [ 181.120571][ T6021] device wlan1 entered promiscuous mode [ 181.162522][ T6021] team0: Port device wlan1 added [ 182.382004][ T6044] netlink: 'syz.4.489': attribute type 10 has an invalid length. [ 182.392708][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.489'. [ 182.404569][ T6044] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 182.753065][ T6054] FAULT_INJECTION: forcing a failure. [ 182.753065][ T6054] name failslab, interval 1, probability 0, space 0, times 0 [ 182.783758][ T6054] CPU: 0 PID: 6054 Comm: syz.2.493 Not tainted syzkaller #0 [ 182.791130][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.801224][ T6054] Call Trace: [ 182.804528][ T6054] [ 182.807493][ T6054] dump_stack_lvl+0x188/0x24e [ 182.812234][ T6054] ? show_regs_print_info+0x12/0x12 [ 182.817484][ T6054] ? load_image+0x400/0x400 [ 182.822030][ T6054] ? __might_sleep+0xd0/0xd0 [ 182.826656][ T6054] ? __lock_acquire+0x7d10/0x7d10 [ 182.831740][ T6054] should_fail_ex+0x399/0x4d0 [ 182.836474][ T6054] should_failslab+0x5/0x20 [ 182.841019][ T6054] slab_pre_alloc_hook+0x59/0x310 [ 182.846085][ T6054] kmem_cache_alloc_lru+0x49/0x2e0 [ 182.851230][ T6054] ? proc_alloc_inode+0x26/0xb0 [ 182.856127][ T6054] proc_alloc_inode+0x26/0xb0 [ 182.860850][ T6054] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 182.867223][ T6054] new_inode_pseudo+0x5f/0x1c0 [ 182.872031][ T6054] new_inode+0x25/0x1c0 [ 182.876229][ T6054] proc_pid_make_inode+0x20/0x1c0 [ 182.881302][ T6054] proc_ns_dir_lookup+0x6a0/0x7c0 [ 182.886370][ T6054] ? proc_ns_dir_readdir+0x420/0x420 [ 182.891707][ T6054] path_openat+0xfce/0x2ee0 [ 182.896273][ T6054] ? do_syscall_64+0x4c/0xa0 [ 182.900907][ T6054] ? do_filp_open+0x430/0x430 [ 182.905654][ T6054] do_filp_open+0x1f1/0x430 [ 182.910246][ T6054] ? vfs_tmpfile+0x480/0x480 [ 182.914872][ T6054] ? noop_direct_IO+0x10/0x10 [ 182.919574][ T6054] ? _raw_spin_unlock+0x24/0x40 [ 182.924433][ T6054] ? alloc_fd+0x58f/0x630 [ 182.928789][ T6054] do_sys_openat2+0x150/0x4b0 [ 182.933479][ T6054] ? atomic_notifier_call_chain+0x282/0x2b0 [ 182.939394][ T6054] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 182.945213][ T6054] ? do_sys_open+0xe0/0xe0 [ 182.949650][ T6054] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 182.955657][ T6054] ? lock_chain_count+0x20/0x20 [ 182.960545][ T6054] __x64_sys_openat+0x135/0x160 [ 182.965413][ T6054] do_syscall_64+0x4c/0xa0 [ 182.969846][ T6054] ? clear_bhb_loop+0x60/0xb0 [ 182.974534][ T6054] ? clear_bhb_loop+0x60/0xb0 [ 182.979227][ T6054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 182.985131][ T6054] RIP: 0033:0x7f55ded5b58e [ 182.989558][ T6054] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 183.009265][ T6054] RSP: 002b:00007f55dfd42ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 183.017718][ T6054] RAX: ffffffffffffffda RBX: 00007f55dfd436c0 RCX: 00007f55ded5b58e [ 183.025701][ T6054] RDX: 0000000000000002 RSI: 00007f55dfd42f90 RDI: ffffffffffffff9c [ 183.033708][ T6054] RBP: 00007f55dfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 183.041692][ T6054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.049764][ T6054] R13: 00007f55df016038 R14: 00007f55df015fa0 R15: 00007ffc3039a4d8 [ 183.057765][ T6054] [ 183.827811][ T6066] netlink: 'syz.3.496': attribute type 10 has an invalid length. [ 183.994210][ T6070] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.507'. [ 184.189862][ T6070] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 184.226199][ T6070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.507'. [ 184.306265][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 185.496113][ T6078] delete_channel: no stack [ 186.445209][ T6098] netlink: 'syz.1.505': attribute type 39 has an invalid length. [ 186.612760][ T6098] device veth0_macvtap left promiscuous mode [ 187.325099][ T6102] netlink: 'syz.2.508': attribute type 10 has an invalid length. [ 187.347919][ T6102] netlink: 40 bytes leftover after parsing attributes in process `syz.2.508'. [ 187.393197][ T6111] netlink: 'syz.0.509': attribute type 21 has an invalid length. [ 187.853599][ T6116] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 187.952244][ T6118] FAULT_INJECTION: forcing a failure. [ 187.952244][ T6118] name failslab, interval 1, probability 0, space 0, times 0 [ 187.988843][ T6118] CPU: 1 PID: 6118 Comm: syz.0.512 Not tainted syzkaller #0 [ 187.996224][ T6118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.006319][ T6118] Call Trace: [ 188.009630][ T6118] [ 188.012598][ T6118] dump_stack_lvl+0x188/0x24e [ 188.017335][ T6118] ? show_regs_print_info+0x12/0x12 [ 188.022576][ T6118] ? load_image+0x400/0x400 [ 188.027120][ T6118] ? __might_sleep+0xd0/0xd0 [ 188.031728][ T6118] ? __lock_acquire+0x7d10/0x7d10 [ 188.036775][ T6118] should_fail_ex+0x399/0x4d0 [ 188.041477][ T6118] should_failslab+0x5/0x20 [ 188.045999][ T6118] slab_pre_alloc_hook+0x59/0x310 [ 188.051043][ T6118] kmem_cache_alloc_node+0x5a/0x320 [ 188.056248][ T6118] ? lock_chain_count+0x20/0x20 [ 188.061117][ T6118] ? dup_task_struct+0x57/0x6b0 [ 188.065983][ T6118] dup_task_struct+0x57/0x6b0 [ 188.070679][ T6118] ? lockdep_hardirqs_on+0x94/0x140 [ 188.075896][ T6118] copy_process+0x5fa/0x4030 [ 188.080497][ T6118] ? __lock_acquire+0x7d10/0x7d10 [ 188.085565][ T6118] ? idle_dummy+0x10/0x10 [ 188.089916][ T6118] kernel_clone+0x24b/0x900 [ 188.094427][ T6118] ? ksys_write+0x1c0/0x250 [ 188.098970][ T6118] ? create_io_thread+0x170/0x170 [ 188.104047][ T6118] __x64_sys_clone+0x1a7/0x220 [ 188.108834][ T6118] ? __fget_files+0x43d/0x4b0 [ 188.113552][ T6118] ? __ia32_sys_vfork+0x140/0x140 [ 188.118609][ T6118] ? lock_chain_count+0x20/0x20 [ 188.123506][ T6118] ? lockdep_hardirqs_on+0x94/0x140 [ 188.128740][ T6118] do_syscall_64+0x4c/0xa0 [ 188.133174][ T6118] ? clear_bhb_loop+0x60/0xb0 [ 188.137871][ T6118] ? clear_bhb_loop+0x60/0xb0 [ 188.142745][ T6118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.148657][ T6118] RIP: 0033:0x7eff4539acb9 [ 188.153094][ T6118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.172747][ T6118] RSP: 002b:00007eff435f5fd8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 188.181190][ T6118] RAX: ffffffffffffffda RBX: 00007eff45615fa0 RCX: 00007eff4539acb9 [ 188.189187][ T6118] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 07db52bb03aa1091 [ 188.197176][ T6118] RBP: 00007eff435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 188.205154][ T6118] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 188.213149][ T6118] R13: 00007eff45616038 R14: 00007eff45615fa0 R15: 00007fffc8b8e2b8 [ 188.221174][ T6118] [ 188.432494][ T6121] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.513'. [ 188.501635][ T6121] netlink: 'syz.2.513': attribute type 10 has an invalid length. [ 188.528645][ T6121] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 190.707899][ T6163] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 191.611574][ T6170] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.529'. [ 191.781152][ T6171] netlink: 'syz.3.529': attribute type 10 has an invalid length. [ 192.015459][ T6171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.529'. [ 194.160239][ T6204] netlink: 'syz.3.536': attribute type 39 has an invalid length. [ 194.752068][ T6203] delete_channel: no stack [ 194.875437][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.881888][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.989875][ T6204] device veth0_macvtap left promiscuous mode [ 195.582755][ T6226] netlink: 'syz.2.545': attribute type 10 has an invalid length. [ 195.689307][ T6227] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.544'. [ 195.823155][ T6230] FAULT_INJECTION: forcing a failure. [ 195.823155][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 195.872089][ T6227] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 195.879316][ T6232] FAULT_INJECTION: forcing a failure. [ 195.879316][ T6232] name failslab, interval 1, probability 0, space 0, times 0 [ 195.902346][ T6227] netlink: 40 bytes leftover after parsing attributes in process `syz.4.544'. [ 195.907638][ T6230] CPU: 0 PID: 6230 Comm: syz.0.546 Not tainted syzkaller #0 [ 195.918554][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.928643][ T6230] Call Trace: [ 195.931947][ T6230] [ 195.934906][ T6230] dump_stack_lvl+0x188/0x24e [ 195.939631][ T6230] ? show_regs_print_info+0x12/0x12 [ 195.944862][ T6230] ? load_image+0x400/0x400 [ 195.949401][ T6230] ? __lock_acquire+0x7d10/0x7d10 [ 195.954464][ T6230] ? __bpf_prog_test_run_raw_tp+0x2a6/0x430 [ 195.960400][ T6230] should_fail_ex+0x399/0x4d0 [ 195.965118][ T6230] _copy_to_user+0x2c/0x130 [ 195.969654][ T6230] bpf_prog_test_run_raw_tp+0x4c6/0x660 [ 195.975241][ T6230] ? trace_bpf_test_finish+0x220/0x220 [ 195.980746][ T6230] ? trace_bpf_test_finish+0x220/0x220 [ 195.986244][ T6230] bpf_prog_test_run+0x31e/0x390 [ 195.991226][ T6230] __sys_bpf+0x62b/0x780 [ 195.995516][ T6230] ? bpf_link_show_fdinfo+0x380/0x380 [ 196.000945][ T6230] ? lock_chain_count+0x20/0x20 [ 196.005844][ T6230] __x64_sys_bpf+0x78/0x90 [ 196.010296][ T6230] do_syscall_64+0x4c/0xa0 [ 196.014729][ T6230] ? clear_bhb_loop+0x60/0xb0 [ 196.019418][ T6230] ? clear_bhb_loop+0x60/0xb0 [ 196.024106][ T6230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.030005][ T6230] RIP: 0033:0x7eff4539acb9 [ 196.034425][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.054043][ T6230] RSP: 002b:00007eff435f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.062474][ T6230] RAX: ffffffffffffffda RBX: 00007eff45615fa0 RCX: 00007eff4539acb9 [ 196.070451][ T6230] RDX: 000000000000000c RSI: 0000200000000080 RDI: 000000000000000a [ 196.078431][ T6230] RBP: 00007eff435f6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.086408][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.094382][ T6230] R13: 00007eff45616038 R14: 00007eff45615fa0 R15: 00007fffc8b8e2b8 [ 196.102371][ T6230] [ 196.110133][ T6232] CPU: 1 PID: 6232 Comm: syz.1.547 Not tainted syzkaller #0 [ 196.117477][ T6232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 196.127567][ T6232] Call Trace: [ 196.130875][ T6232] [ 196.133832][ T6232] dump_stack_lvl+0x188/0x24e [ 196.138561][ T6232] ? show_regs_print_info+0x12/0x12 [ 196.143800][ T6232] ? load_image+0x400/0x400 [ 196.148344][ T6232] ? __lock_acquire+0x7d10/0x7d10 [ 196.153409][ T6232] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 196.159437][ T6232] should_fail_ex+0x399/0x4d0 [ 196.164173][ T6232] should_failslab+0x5/0x20 [ 196.168724][ T6232] slab_pre_alloc_hook+0x59/0x310 [ 196.173820][ T6232] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 196.180019][ T6232] kmem_cache_alloc_bulk+0x42/0x4e0 [ 196.185277][ T6232] mas_alloc_nodes+0x449/0x890 [ 196.190090][ T6232] mas_expected_entries+0x209/0x340 [ 196.195343][ T6232] copy_mm+0x7a5/0x1690 [ 196.199551][ T6232] ? memset+0x1e/0x40 [ 196.203570][ T6232] ? lockdep_init_map_type+0x98/0x8d0 [ 196.208983][ T6232] ? copy_signal+0x680/0x680 [ 196.213604][ T6232] ? lockdep_init_map_type+0x98/0x8d0 [ 196.219043][ T6232] ? __init_rwsem+0x11e/0x160 [ 196.223759][ T6232] ? copy_signal+0x556/0x680 [ 196.228398][ T6232] copy_process+0x1979/0x4030 [ 196.233132][ T6232] ? copy_process+0x94d/0x4030 [ 196.237954][ T6232] ? idle_dummy+0x10/0x10 [ 196.242347][ T6232] kernel_clone+0x24b/0x900 [ 196.246890][ T6232] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 196.252651][ T6232] ? create_io_thread+0x170/0x170 [ 196.257718][ T6232] ? perf_trace_preemptirq_template+0x268/0x320 [ 196.264014][ T6232] __x64_sys_clone+0x1a7/0x220 [ 196.268830][ T6232] ? __ia32_sys_vfork+0x140/0x140 [ 196.273933][ T6232] do_syscall_64+0x4c/0xa0 [ 196.278385][ T6232] ? clear_bhb_loop+0x60/0xb0 [ 196.283097][ T6232] ? clear_bhb_loop+0x60/0xb0 [ 196.287820][ T6232] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.293747][ T6232] RIP: 0033:0x7ff0bcb9acb9 [ 196.298201][ T6232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.317847][ T6232] RSP: 002b:00007ff0bdadffd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 196.326299][ T6232] RAX: ffffffffffffffda RBX: 00007ff0bce15fa0 RCX: 00007ff0bcb9acb9 [ 196.334305][ T6232] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040042600 [ 196.342321][ T6232] RBP: 00007ff0bdae0090 R08: 0000000000000000 R09: 0000000000000000 [ 196.350320][ T6232] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 196.358325][ T6232] R13: 00007ff0bce16038 R14: 00007ff0bce15fa0 R15: 00007ffdfb25b328 [ 196.366350][ T6232] [ 196.608124][ T4274] Bluetooth: hci1: command 0x0406 tx timeout [ 196.928445][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 196.934924][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 196.941144][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 196.947186][ T4275] Bluetooth: hci2: command 0x0406 tx timeout [ 196.990511][ T6246] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.552'. [ 198.090716][ T6265] netlink: 'syz.2.559': attribute type 10 has an invalid length. [ 198.119115][ T6265] netlink: 40 bytes leftover after parsing attributes in process `syz.2.559'. [ 198.145401][ T6257] delete_channel: no stack [ 198.717068][ T6278] netlink: 132 bytes leftover after parsing attributes in process `syz.3.560'. [ 198.734693][ T6283] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.563'. [ 198.805078][ T6283] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 198.826559][ T6283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.563'. [ 201.087179][ T6320] netlink: 'syz.4.575': attribute type 10 has an invalid length. [ 201.167368][ T6320] netlink: 40 bytes leftover after parsing attributes in process `syz.4.575'. [ 201.452473][ T6309] delete_channel: no stack [ 201.489842][ T6320] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 201.609021][ T6327] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.577'. [ 201.698654][ T6329] wlan1: mtu greater than device maximum [ 201.759782][ T6330] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 201.810061][ T6330] netlink: 40 bytes leftover after parsing attributes in process `syz.1.577'. [ 203.457338][ T4274] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 203.918211][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 204.134521][ T6372] FAULT_INJECTION: forcing a failure. [ 204.134521][ T6372] name failslab, interval 1, probability 0, space 0, times 0 [ 204.249894][ T6372] CPU: 0 PID: 6372 Comm: syz.2.592 Not tainted syzkaller #0 [ 204.257294][ T6372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.267403][ T6372] Call Trace: [ 204.270737][ T6372] [ 204.273715][ T6372] dump_stack_lvl+0x188/0x24e [ 204.278464][ T6372] ? show_regs_print_info+0x12/0x12 [ 204.283729][ T6372] ? load_image+0x400/0x400 [ 204.288558][ T6372] ? __might_sleep+0xd0/0xd0 [ 204.293209][ T6372] ? __lock_acquire+0x7d10/0x7d10 [ 204.298313][ T6372] should_fail_ex+0x399/0x4d0 [ 204.303073][ T6372] should_failslab+0x5/0x20 [ 204.307628][ T6372] slab_pre_alloc_hook+0x59/0x310 [ 204.312701][ T6372] ? br_netlink_fini+0x30/0x30 [ 204.317525][ T6372] kmem_cache_alloc_node+0x5a/0x320 [ 204.322764][ T6372] ? if_nlmsg_size+0x5b0/0x880 [ 204.327596][ T6372] ? __alloc_skb+0xfc/0x7e0 [ 204.332179][ T6372] __alloc_skb+0xfc/0x7e0 [ 204.336586][ T6372] rtmsg_ifinfo_build_skb+0x80/0x180 [ 204.341946][ T6372] rtmsg_ifinfo+0x71/0x120 [ 204.346417][ T6372] dev_close_many+0x275/0x400 [ 204.351152][ T6372] ? __mod_timer+0x91e/0xd00 [ 204.355800][ T6372] ? __dev_open+0x430/0x430 [ 204.360382][ T6372] unregister_netdevice_many+0x487/0x1930 [ 204.366145][ T6372] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 204.372103][ T6372] ? alloc_netdev_mqs+0xf00/0xf00 [ 204.377174][ T6372] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 204.383208][ T6372] ? lock_chain_count+0x20/0x20 [ 204.388122][ T6372] ? queue_delayed_work_on+0x110/0x1f0 [ 204.393631][ T6372] ? lockdep_hardirqs_on+0x94/0x140 [ 204.398887][ T6372] unregister_netdevice_queue+0x324/0x370 [ 204.404650][ T6372] ? delayed_work_timer_fn+0x80/0x80 [ 204.409986][ T6372] ? list_netdevice+0x6c0/0x6c0 [ 204.414912][ T6372] __tun_detach+0xd4a/0x1500 [ 204.419604][ T6372] tun_chr_close+0x109/0x1b0 [ 204.424252][ T6372] ? tun_chr_open+0x4d0/0x4d0 [ 204.428973][ T6372] __fput+0x22c/0x920 [ 204.433032][ T6372] task_work_run+0x1d0/0x260 [ 204.437688][ T6372] ? task_work_cancel+0x220/0x220 [ 204.442782][ T6372] ? exit_to_user_mode_loop+0x3b/0x110 [ 204.448304][ T6372] exit_to_user_mode_loop+0xe6/0x110 [ 204.453649][ T6372] exit_to_user_mode_prepare+0xee/0x180 [ 204.459247][ T6372] syscall_exit_to_user_mode+0x16/0x40 [ 204.464746][ T6372] do_syscall_64+0x58/0xa0 [ 204.469203][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 204.473920][ T6372] ? clear_bhb_loop+0x60/0xb0 [ 204.478646][ T6372] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 204.484577][ T6372] RIP: 0033:0x7f55ded9acb9 [ 204.489034][ T6372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.508674][ T6372] RSP: 002b:00007f55dfd43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 204.517133][ T6372] RAX: 0000000000000000 RBX: 00007f55df015fa0 RCX: 00007f55ded9acb9 [ 204.525136][ T6372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 204.533139][ T6372] RBP: 00007f55dfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 204.541141][ T6372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.549145][ T6372] R13: 00007f55df016038 R14: 00007f55df015fa0 R15: 00007ffc3039a4d8 [ 204.557198][ T6372] [ 204.687750][ T6364] wlan1: mtu greater than device maximum [ 204.690883][ T6360] delete_channel: no stack [ 204.760090][ T6377] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.593'. [ 204.855677][ T6378] netlink: 'syz.0.593': attribute type 10 has an invalid length. [ 204.911757][ T6378] netlink: 40 bytes leftover after parsing attributes in process `syz.0.593'. [ 205.375422][ T6378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.676910][ T6387] netlink: 'syz.3.595': attribute type 10 has an invalid length. [ 205.694899][ T6387] netlink: 40 bytes leftover after parsing attributes in process `syz.3.595'. [ 205.758602][ T6387] device team0 entered promiscuous mode [ 205.764905][ T6387] device team_slave_0 entered promiscuous mode [ 205.781203][ T6387] device team_slave_1 entered promiscuous mode [ 205.823175][ T6387] device geneve1 entered promiscuous mode [ 205.861376][ T6387] device wlan1 entered promiscuous mode [ 205.924297][ T6387] bond0: (slave team0): Releasing backup interface [ 206.037318][ T6387] bridge0: port 3(team0) entered blocking state [ 206.062934][ T6387] bridge0: port 3(team0) entered disabled state [ 206.121296][ T6382] netlink: 'syz.2.597': attribute type 10 has an invalid length. [ 207.240384][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 207.658598][ T6422] wlan1: mtu greater than device maximum [ 207.981292][ T6431] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.610'. [ 208.063471][ T6431] netlink: 'syz.3.610': attribute type 10 has an invalid length. [ 208.133285][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.3.610'. [ 208.476815][ T6437] netlink: 'syz.4.612': attribute type 10 has an invalid length. [ 209.270539][ T6437] device wlan1 entered promiscuous mode [ 209.312620][ T6437] team0: Port device wlan1 added [ 209.418236][ T6445] netlink: 'syz.0.616': attribute type 10 has an invalid length. [ 209.426347][ T6445] netlink: 40 bytes leftover after parsing attributes in process `syz.0.616'. [ 209.490620][ T6445] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 209.747401][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 211.989590][ T6492] netlink: 'syz.3.630': attribute type 10 has an invalid length. [ 212.693784][ T4274] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 212.984592][ T6493] delete_channel: no stack [ 213.050999][ T6503] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.633'. [ 214.020317][ T6519] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 214.994761][ T6531] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.643'. [ 215.075645][ T6531] netlink: 'syz.1.643': attribute type 10 has an invalid length. [ 215.095414][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.643'. [ 216.030940][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 216.066675][ T6546] netlink: 'syz.0.645': attribute type 10 has an invalid length. [ 217.114341][ T6550] delete_channel: no stack [ 217.594971][ T6582] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.655'. [ 217.818786][ T6582] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 217.835034][ T6582] netlink: 40 bytes leftover after parsing attributes in process `syz.2.655'. [ 219.274758][ T6610] netlink: 'syz.0.666': attribute type 10 has an invalid length. [ 219.299454][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.666'. [ 219.309498][ T6615] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 219.385469][ T6610] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 220.029706][ T6607] delete_channel: no stack [ 220.090780][ T6629] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.670'. [ 224.317646][ T6666] netlink: 188 bytes leftover after parsing attributes in process `syz.3.678'. [ 225.149632][ T6673] netlink: 'syz.1.679': attribute type 10 has an invalid length. [ 225.687542][ T6686] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.683'. [ 225.738276][ T6691] netlink: 'syz.1.683': attribute type 10 has an invalid length. [ 225.777274][ T6691] netlink: 40 bytes leftover after parsing attributes in process `syz.1.683'. [ 226.502965][ T6709] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 226.515441][ T6690] delete_channel: no stack [ 229.245791][ T6714] ref_ctr_offset mismatch. inode: 0x2ba offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 230.025531][ T6726] netlink: 'syz.2.691': attribute type 21 has an invalid length. [ 230.124762][ T6726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.691'. [ 230.362833][ T6734] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 230.795642][ T6737] netlink: 'syz.0.694': attribute type 10 has an invalid length. [ 231.245447][ T6754] wlan1: mtu greater than device maximum [ 231.501773][ T6758] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.698'. [ 231.573780][ T6758] netlink: 'syz.2.698': attribute type 10 has an invalid length. [ 231.638168][ T6758] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 233.232063][ T6803] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 233.689971][ T6820] wlan1: mtu greater than device maximum [ 234.363909][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 234.433073][ T6808] delete_channel: no stack [ 235.758317][ T6864] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.730'. [ 235.855684][ T6864] netlink: 'syz.3.730': attribute type 10 has an invalid length. [ 235.874682][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.3.730'. [ 235.946790][ T6870] netlink: 830 bytes leftover after parsing attributes in process `syz.0.731'. [ 236.057556][ T4274] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 236.309657][ T6877] wlan1: mtu greater than device maximum [ 237.110861][ T6882] delete_channel: no stack [ 237.652847][ T6914] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.745'. [ 237.782978][ T6914] netlink: 'syz.1.745': attribute type 10 has an invalid length. [ 237.815303][ T6914] netlink: 40 bytes leftover after parsing attributes in process `syz.1.745'. [ 238.279016][ T4274] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 239.139708][ T6933] netlink: 16083 bytes leftover after parsing attributes in process `syz.1.751'. [ 240.229349][ T6940] delete_channel: no stack [ 240.692092][ T4274] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 242.516671][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 242.667737][ T7013] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.774'. [ 242.775230][ T7014] netlink: 'syz.2.774': attribute type 10 has an invalid length. [ 242.857900][ T7014] netlink: 40 bytes leftover after parsing attributes in process `syz.2.774'. [ 244.214875][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 244.299553][ T7049] IPv6: NLM_F_REPLACE set, but no existing node found! [ 244.370216][ T7051] IPv6: NLM_F_REPLACE set, but no existing node found! [ 244.920184][ T7060] netlink: 'syz.4.790': attribute type 28 has an invalid length. [ 244.978583][ T7060] netlink: 152 bytes leftover after parsing attributes in process `syz.4.790'. [ 247.154594][ T7088] wlan1: mtu greater than device maximum [ 247.235326][ T4274] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 248.140542][ T7107] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.806'. [ 248.163461][ T7107] netlink: 'syz.2.806': attribute type 10 has an invalid length. [ 248.209834][ T7107] netlink: 40 bytes leftover after parsing attributes in process `syz.2.806'. [ 249.106305][ T7121] netlink: 'syz.3.811': attribute type 21 has an invalid length. [ 249.194424][ T4274] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 249.373163][ T7125] netlink: 'syz.1.814': attribute type 10 has an invalid length. [ 249.824878][ T7139] wlan1: mtu greater than device maximum [ 250.621670][ T7151] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.823'. [ 250.706497][ T7151] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 250.755174][ T7151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.823'. [ 251.543164][ T7170] netlink: 'syz.3.829': attribute type 10 has an invalid length. [ 251.954990][ T7160] delete_channel: no stack [ 252.547490][ T7195] wlan1: mtu greater than device maximum [ 252.616778][ T7197] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.838'. [ 252.670310][ T7201] FAULT_INJECTION: forcing a failure. [ 252.670310][ T7201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.693699][ T7201] CPU: 0 PID: 7201 Comm: syz.3.839 Not tainted syzkaller #0 [ 252.701046][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 252.711220][ T7201] Call Trace: [ 252.714530][ T7201] [ 252.717487][ T7201] dump_stack_lvl+0x188/0x24e [ 252.722208][ T7201] ? show_regs_print_info+0x12/0x12 [ 252.727442][ T7201] ? load_image+0x400/0x400 [ 252.731976][ T7201] ? __lock_acquire+0x7d10/0x7d10 [ 252.737058][ T7201] should_fail_ex+0x399/0x4d0 [ 252.741790][ T7201] _copy_from_user+0x2c/0x170 [ 252.746509][ T7201] do_ipv6_setsockopt+0x317/0x3e30 [ 252.751670][ T7201] ? sk_dst_reset+0xa0/0xa0 [ 252.756226][ T7201] ? mark_lock+0x94/0x320 [ 252.760605][ T7201] ? __lock_acquire+0x12f4/0x7d10 [ 252.765706][ T7201] ? aa_label_sk_perm+0x456/0x5b0 [ 252.770777][ T7201] ? verify_lock_unused+0x140/0x140 [ 252.776018][ T7201] ? trace_call_bpf+0xbf/0x6b0 [ 252.780823][ T7201] ? aa_sk_perm+0x950/0x950 [ 252.785366][ T7201] ? migrate_enable+0x148/0x220 [ 252.790270][ T7201] ? __might_sleep+0xd0/0xd0 [ 252.794902][ T7201] ? __fget_files+0x28/0x4b0 [ 252.799542][ T7201] ? aa_sk_perm+0x81f/0x950 [ 252.804093][ T7201] ? aa_af_perm+0x340/0x340 [ 252.808626][ T7201] ? __fget_files+0x43d/0x4b0 [ 252.813353][ T7201] ? aa_sock_opt_perm+0x74/0x100 [ 252.818327][ T7201] ipv6_setsockopt+0x55/0x190 [ 252.823050][ T7201] ? sock_common_recvmsg+0x190/0x190 [ 252.828377][ T7201] __sys_setsockopt+0x2bf/0x3d0 [ 252.833294][ T7201] __x64_sys_setsockopt+0xb1/0xc0 [ 252.838357][ T7201] do_syscall_64+0x4c/0xa0 [ 252.842815][ T7201] ? clear_bhb_loop+0x60/0xb0 [ 252.847528][ T7201] ? clear_bhb_loop+0x60/0xb0 [ 252.852241][ T7201] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 252.858175][ T7201] RIP: 0033:0x7fe33d39acb9 [ 252.862617][ T7201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.882263][ T7201] RSP: 002b:00007fe33e216028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 252.890725][ T7201] RAX: ffffffffffffffda RBX: 00007fe33d615fa0 RCX: 00007fe33d39acb9 [ 252.898734][ T7201] RDX: 0000000000000042 RSI: 0000000000000029 RDI: 0000000000000003 [ 252.906747][ T7201] RBP: 00007fe33e216090 R08: 0000000000000004 R09: 0000000000000000 [ 252.914751][ T7201] R10: 0000200000001580 R11: 0000000000000246 R12: 0000000000000001 [ 252.922755][ T7201] R13: 00007fe33d616038 R14: 00007fe33d615fa0 R15: 00007ffda0f68dc8 [ 252.930777][ T7201] [ 253.309033][ T7209] netlink: 'syz.1.843': attribute type 10 has an invalid length. [ 253.946375][ T7222] FAULT_INJECTION: forcing a failure. [ 253.946375][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 254.055371][ T7222] CPU: 1 PID: 7222 Comm: syz.1.848 Not tainted syzkaller #0 [ 254.062745][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 254.072833][ T7222] Call Trace: [ 254.076142][ T7222] [ 254.079104][ T7222] dump_stack_lvl+0x188/0x24e [ 254.083827][ T7222] ? sctp_sendmsg+0x15b0/0x2940 [ 254.088720][ T7222] ? ___sys_sendmsg+0x2a2/0x360 [ 254.093618][ T7222] ? show_regs_print_info+0x12/0x12 [ 254.098863][ T7222] ? load_image+0x400/0x400 [ 254.103413][ T7222] ? mark_lock+0x94/0x320 [ 254.107789][ T7222] should_fail_ex+0x399/0x4d0 [ 254.112518][ T7222] should_failslab+0x5/0x20 [ 254.117063][ T7222] slab_pre_alloc_hook+0x59/0x310 [ 254.122112][ T7222] ? sctp_add_bind_addr+0x89/0x350 [ 254.127239][ T7222] __kmem_cache_alloc_node+0x4f/0x260 [ 254.132623][ T7222] ? sctp_add_bind_addr+0x89/0x350 [ 254.137745][ T7222] kmalloc_trace+0x26/0xe0 [ 254.142183][ T7222] sctp_add_bind_addr+0x89/0x350 [ 254.147150][ T7222] sctp_copy_local_addr_list+0x311/0x4e0 [ 254.152813][ T7222] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 254.158551][ T7222] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 254.164640][ T7222] ? sctp_v4_is_any+0x31/0x50 [ 254.169344][ T7222] ? sctp_copy_one_addr+0x93/0x660 [ 254.174482][ T7222] sctp_bind_addr_copy+0xaf/0x3c0 [ 254.179530][ T7222] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 254.185882][ T7222] sctp_connect_new_asoc+0x2f5/0x6a0 [ 254.191188][ T7222] ? __sctp_connect+0xd80/0xd80 [ 254.196066][ T7222] ? _local_bh_enable+0xa0/0xa0 [ 254.200928][ T7222] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 254.206752][ T7222] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 254.212595][ T7222] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 254.218168][ T7222] ? security_sctp_bind_connect+0x85/0xb0 [ 254.223901][ T7222] sctp_sendmsg+0x15b0/0x2940 [ 254.228616][ T7222] ? aa_sk_perm+0x7e1/0x950 [ 254.233158][ T7222] ? sctp_getsockopt+0x8a0/0x8a0 [ 254.238142][ T7222] ? aa_af_perm+0x340/0x340 [ 254.242662][ T7222] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 254.249112][ T7222] ? inet_sendmsg+0x78/0x2f0 [ 254.253722][ T7222] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 254.259021][ T7222] ? security_socket_sendmsg+0x7c/0xa0 [ 254.264506][ T7222] ? inet_send_prepare+0x260/0x260 [ 254.269637][ T7222] ____sys_sendmsg+0x5be/0x970 [ 254.274432][ T7222] ? __sys_sendmsg_sock+0x30/0x30 [ 254.279468][ T7222] ? __import_iovec+0x315/0x500 [ 254.284332][ T7222] ? import_iovec+0x6f/0xa0 [ 254.288848][ T7222] ___sys_sendmsg+0x2a2/0x360 [ 254.293562][ T7222] ? __sys_sendmsg+0x290/0x290 [ 254.298384][ T7222] ? __lock_acquire+0x7d10/0x7d10 [ 254.303469][ T7222] __se_sys_sendmsg+0x1bb/0x2a0 [ 254.308354][ T7222] ? __x64_sys_sendmsg+0x80/0x80 [ 254.313342][ T7222] ? lockdep_hardirqs_on+0x94/0x140 [ 254.318580][ T7222] do_syscall_64+0x4c/0xa0 [ 254.323013][ T7222] ? clear_bhb_loop+0x60/0xb0 [ 254.327704][ T7222] ? clear_bhb_loop+0x60/0xb0 [ 254.332402][ T7222] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.338303][ T7222] RIP: 0033:0x7ff0bcb9acb9 [ 254.342727][ T7222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.362341][ T7222] RSP: 002b:00007ff0bdae0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.370772][ T7222] RAX: ffffffffffffffda RBX: 00007ff0bce15fa0 RCX: 00007ff0bcb9acb9 [ 254.378754][ T7222] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 254.386732][ T7222] RBP: 00007ff0bdae0090 R08: 0000000000000000 R09: 0000000000000000 [ 254.394711][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.402710][ T7222] R13: 00007ff0bce16038 R14: 00007ff0bce15fa0 R15: 00007ffdfb25b328 [ 254.410717][ T7222] [ 254.459095][ T7216] delete_channel: no stack [ 255.155924][ T7233] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.851'. [ 255.472176][ T7251] device syzkaller0 entered promiscuous mode [ 255.970435][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976925][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.960081][ T7279] FAULT_INJECTION: forcing a failure. [ 256.960081][ T7279] name failslab, interval 1, probability 0, space 0, times 0 [ 256.986237][ T7279] CPU: 1 PID: 7279 Comm: syz.2.865 Not tainted syzkaller #0 [ 256.993600][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 257.003679][ T7279] Call Trace: [ 257.006973][ T7279] [ 257.009918][ T7279] dump_stack_lvl+0x188/0x24e [ 257.014617][ T7279] ? sctp_sendmsg+0x15b0/0x2940 [ 257.019494][ T7279] ? ___sys_sendmsg+0x2a2/0x360 [ 257.024372][ T7279] ? show_regs_print_info+0x12/0x12 [ 257.029597][ T7279] ? load_image+0x400/0x400 [ 257.034148][ T7279] should_fail_ex+0x399/0x4d0 [ 257.038858][ T7279] should_failslab+0x5/0x20 [ 257.043383][ T7279] slab_pre_alloc_hook+0x59/0x310 [ 257.048428][ T7279] ? sctp_add_bind_addr+0x89/0x350 [ 257.053557][ T7279] __kmem_cache_alloc_node+0x4f/0x260 [ 257.059035][ T7279] ? sctp_add_bind_addr+0x89/0x350 [ 257.064163][ T7279] kmalloc_trace+0x26/0xe0 [ 257.068607][ T7279] sctp_add_bind_addr+0x89/0x350 [ 257.073567][ T7279] sctp_copy_local_addr_list+0x311/0x4e0 [ 257.079223][ T7279] ? sctp_copy_local_addr_list+0xa1/0x4e0 [ 257.084966][ T7279] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 257.091068][ T7279] ? sctp_v4_is_any+0x31/0x50 [ 257.095774][ T7279] ? sctp_copy_one_addr+0x93/0x660 [ 257.100907][ T7279] sctp_bind_addr_copy+0xaf/0x3c0 [ 257.105954][ T7279] ? sctp_assoc_set_bind_addr_from_ep+0xa1/0x190 [ 257.112314][ T7279] sctp_connect_new_asoc+0x2f5/0x6a0 [ 257.117625][ T7279] ? __sctp_connect+0xd80/0xd80 [ 257.122496][ T7279] ? __local_bh_enable_ip+0x136/0x1c0 [ 257.127887][ T7279] ? _local_bh_enable+0xa0/0xa0 [ 257.132753][ T7279] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 257.138583][ T7279] ? sctp_endpoint_lookup_assoc+0x77/0x260 [ 257.144407][ T7279] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 257.149965][ T7279] ? security_sctp_bind_connect+0x85/0xb0 [ 257.155707][ T7279] sctp_sendmsg+0x15b0/0x2940 [ 257.160403][ T7279] ? trace_event_raw_event_lock+0x250/0x250 [ 257.166341][ T7279] ? aa_sk_perm+0x7e1/0x950 [ 257.170871][ T7279] ? sctp_getsockopt+0x8a0/0x8a0 [ 257.175834][ T7279] ? __might_fault+0xa6/0x120 [ 257.180533][ T7279] ? aa_af_perm+0x340/0x340 [ 257.185050][ T7279] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 257.191512][ T7279] ? inet_sendmsg+0x78/0x2f0 [ 257.196138][ T7279] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 257.201434][ T7279] ? security_socket_sendmsg+0x7c/0xa0 [ 257.206914][ T7279] ? inet_send_prepare+0x260/0x260 [ 257.212045][ T7279] ____sys_sendmsg+0x5be/0x970 [ 257.216850][ T7279] ? __sys_sendmsg_sock+0x30/0x30 [ 257.221911][ T7279] ? __import_iovec+0x315/0x500 [ 257.226813][ T7279] ? import_iovec+0x6f/0xa0 [ 257.231351][ T7279] ___sys_sendmsg+0x2a2/0x360 [ 257.236069][ T7279] ? __sys_sendmsg+0x290/0x290 [ 257.240899][ T7279] ? __lock_acquire+0x7d10/0x7d10 [ 257.245987][ T7279] __se_sys_sendmsg+0x1bb/0x2a0 [ 257.250865][ T7279] ? __x64_sys_sendmsg+0x80/0x80 [ 257.255848][ T7279] ? lockdep_hardirqs_on+0x94/0x140 [ 257.261074][ T7279] do_syscall_64+0x4c/0xa0 [ 257.265511][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 257.270202][ T7279] ? clear_bhb_loop+0x60/0xb0 [ 257.274899][ T7279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 257.280807][ T7279] RIP: 0033:0x7f55ded9acb9 [ 257.285260][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.304906][ T7279] RSP: 002b:00007f55dfd43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.313383][ T7279] RAX: ffffffffffffffda RBX: 00007f55df015fa0 RCX: 00007f55ded9acb9 [ 257.321551][ T7279] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 257.329536][ T7279] RBP: 00007f55dfd43090 R08: 0000000000000000 R09: 0000000000000000 [ 257.337520][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.345510][ T7279] R13: 00007f55df016038 R14: 00007f55df015fa0 R15: 00007ffc3039a4d8 [ 257.353524][ T7279] [ 257.664756][ T7276] delete_channel: no stack [ 258.122878][ T7295] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.869'. [ 259.577834][ T7257] netlink: 'syz.4.856': attribute type 27 has an invalid length. [ 261.561643][ T7284] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.867'. [ 261.572319][ T7287] netlink: 'syz.2.867': attribute type 10 has an invalid length. [ 261.581634][ T7287] netlink: 40 bytes leftover after parsing attributes in process `syz.2.867'. [ 261.634914][ T7315] netlink: 'syz.3.876': attribute type 21 has an invalid length. [ 261.652503][ T7315] netlink: 'syz.3.876': attribute type 4 has an invalid length. [ 261.997137][ T7324] netlink: 'syz.3.878': attribute type 10 has an invalid length. [ 262.723130][ T7322] delete_channel: no stack [ 262.974259][ T7346] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.887'. [ 262.996817][ T7350] FAULT_INJECTION: forcing a failure. [ 262.996817][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 263.056919][ T7346] netlink: 'syz.0.887': attribute type 10 has an invalid length. [ 263.072142][ T7350] CPU: 1 PID: 7350 Comm: syz.1.888 Not tainted syzkaller #0 [ 263.079506][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 263.089595][ T7350] Call Trace: [ 263.092909][ T7350] [ 263.095872][ T7350] dump_stack_lvl+0x188/0x24e [ 263.100593][ T7350] ? show_regs_print_info+0x12/0x12 [ 263.105831][ T7350] ? load_image+0x400/0x400 [ 263.110371][ T7350] ? __lock_acquire+0x7d10/0x7d10 [ 263.115442][ T7350] should_fail_ex+0x399/0x4d0 [ 263.120169][ T7350] _copy_from_user+0x2c/0x170 [ 263.120257][ T7346] netlink: 40 bytes leftover after parsing attributes in process `syz.0.887'. [ 263.124868][ T7350] do_ipv6_setsockopt+0x317/0x3e30 [ 263.124929][ T7350] ? sk_dst_reset+0xa0/0xa0 [ 263.124966][ T7350] ? mark_lock+0x94/0x320 [ 263.124996][ T7350] ? __lock_acquire+0x12f4/0x7d10 [ 263.125046][ T7350] ? aa_label_sk_perm+0x456/0x5b0 [ 263.125069][ T7350] ? verify_lock_unused+0x140/0x140 [ 263.125097][ T7350] ? trace_call_bpf+0xbf/0x6b0 [ 263.125124][ T7350] ? aa_sk_perm+0x950/0x950 [ 263.125155][ T7350] ? migrate_enable+0x148/0x220 [ 263.125182][ T7350] ? __might_sleep+0xd0/0xd0 [ 263.125209][ T7350] ? __fget_files+0x28/0x4b0 [ 263.125242][ T7350] ? aa_sk_perm+0x81f/0x950 [ 263.125273][ T7350] ? aa_af_perm+0x340/0x340 [ 263.125294][ T7350] ? __fget_files+0x43d/0x4b0 [ 263.125331][ T7350] ? aa_sock_opt_perm+0x74/0x100 [ 263.125353][ T7350] ipv6_setsockopt+0x55/0x190 [ 263.125371][ T7350] ? sock_common_recvmsg+0x190/0x190 [ 263.125398][ T7350] __sys_setsockopt+0x2bf/0x3d0 [ 263.125429][ T7350] __x64_sys_setsockopt+0xb1/0xc0 [ 263.125457][ T7350] do_syscall_64+0x4c/0xa0 [ 263.125480][ T7350] ? clear_bhb_loop+0x60/0xb0 [ 263.125500][ T7350] ? clear_bhb_loop+0x60/0xb0 [ 263.125523][ T7350] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 263.125544][ T7350] RIP: 0033:0x7ff0bcb9acb9 [ 263.125563][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.125581][ T7350] RSP: 002b:00007ff0bdae0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 263.125605][ T7350] RAX: ffffffffffffffda RBX: 00007ff0bce15fa0 RCX: 00007ff0bcb9acb9 [ 263.147183][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.148428][ T7350] RDX: 0000000000000035 RSI: 0000000000000029 RDI: 0000000000000003 [ 263.148446][ T7350] RBP: 00007ff0bdae0090 R08: 00000000000000cf R09: 0000000000000000 [ 263.148460][ T7350] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 263.148474][ T7350] R13: 00007ff0bce16038 R14: 00007ff0bce15fa0 R15: 00007ffdfb25b328 [ 263.148505][ T7350] [ 263.372935][ T7349] netlink: 'syz.2.889': attribute type 10 has an invalid length. [ 265.102781][ T7376] delete_channel: no stack [ 266.540939][ T7358] ------------[ cut here ]------------ [ 266.546449][ T7358] WARNING: CPU: 1 PID: 7358 at kernel/events/core.c:6592 perf_pending_task+0x358/0x470 [ 266.556348][ T7358] Modules linked in: [ 266.560447][ T7358] CPU: 1 PID: 7358 Comm: syz.1.891 Not tainted syzkaller #0 [ 266.568127][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.578257][ T7358] RIP: 0010:perf_pending_task+0x358/0x470 [ 266.584021][ T7358] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 266.603723][ T7358] RSP: 0018:ffffc90004f378e0 EFLAGS: 00010293 [ 266.609864][ T7358] RAX: ffffffff81a7f328 RBX: ffff8880547e9c58 RCX: ffff888054345940 [ 266.617877][ T7358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 266.626075][ T7358] RBP: 0000000000000001 R08: ffff888054346343 R09: 1ffff1100a868c68 [ 266.634149][ T7358] R10: dffffc0000000000 R11: ffffed100a868c69 R12: ffff888054345940 [ 266.642192][ T7358] R13: ffff888079136160 R14: ffff8880547e9a20 R15: 1ffff1100a8fd344 [ 266.650259][ T7358] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 266.659258][ T7358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.665873][ T7358] CR2: 0000200000000000 CR3: 0000000079a05000 CR4: 00000000003506e0 [ 266.673921][ T7358] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.681941][ T7358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 266.689983][ T7358] Call Trace: [ 266.693290][ T7358] [ 266.696260][ T7358] task_work_run+0x1d0/0x260 [ 266.700944][ T7358] ? task_work_cancel+0x220/0x220 [ 266.706022][ T7358] ? do_raw_spin_unlock+0x11d/0x230 [ 266.711314][ T7358] do_exit+0x982/0x2480 [ 266.715536][ T7358] ? put_task_struct+0x80/0x80 [ 266.720388][ T7358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 266.726404][ T7358] ? _raw_spin_lock_irq+0x86/0xf0 [ 266.731508][ T7358] ? lock_chain_count+0x20/0x20 [ 266.736403][ T7358] ? _raw_spin_lock_irq+0xb7/0xf0 [ 266.741529][ T7358] do_group_exit+0x217/0x2d0 [ 266.746177][ T7358] ? lockdep_hardirqs_on+0x94/0x140 [ 266.751472][ T7358] get_signal+0x1272/0x1350 [ 266.756056][ T7358] arch_do_signal_or_restart+0xc4/0x1350 [ 266.761780][ T7358] ? do_futex+0x310/0x320 [ 266.766138][ T7358] ? get_sigframe_size+0x10/0x10 [ 266.771181][ T7358] ? exit_to_user_mode_loop+0x3b/0x110 [ 266.776675][ T7358] exit_to_user_mode_loop+0x70/0x110 [ 266.782018][ T7358] exit_to_user_mode_prepare+0xee/0x180 [ 266.787604][ T7358] syscall_exit_to_user_mode+0x16/0x40 [ 266.793130][ T7358] do_syscall_64+0x58/0xa0 [ 266.797575][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 266.802299][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 266.807003][ T7358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.812958][ T7358] RIP: 0033:0x7ff0bcb9acb9 [ 266.817407][ T7358] Code: Unable to access opcode bytes at 0x7ff0bcb9ac8f. [ 266.824484][ T7358] RSP: 002b:00007ff0bdae00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 266.832976][ T7358] RAX: fffffffffffffe00 RBX: 00007ff0bce15fa8 RCX: 00007ff0bcb9acb9 [ 266.841015][ T7358] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff0bce15fa8 [ 266.849078][ T7358] RBP: 00007ff0bce15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 266.857091][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.865131][ T7358] R13: 00007ff0bce16038 R14: 00007ffdfb25b240 R15: 00007ffdfb25b328 [ 266.873191][ T7358] [ 266.876245][ T7358] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 266.883539][ T7358] CPU: 1 PID: 7358 Comm: syz.1.891 Not tainted syzkaller #0 [ 266.890829][ T7358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 266.900894][ T7358] Call Trace: [ 266.904179][ T7358] [ 266.907116][ T7358] dump_stack_lvl+0x188/0x24e [ 266.911808][ T7358] ? memcpy+0x3c/0x60 [ 266.915794][ T7358] ? show_regs_print_info+0x12/0x12 [ 266.921104][ T7358] ? load_image+0x400/0x400 [ 266.925626][ T7358] panic+0x2e5/0x730 [ 266.929550][ T7358] ? bpf_jit_dump+0xd0/0xd0 [ 266.934109][ T7358] __warn+0x2f8/0x4f0 [ 266.938105][ T7358] ? perf_pending_task+0x358/0x470 [ 266.943237][ T7358] ? perf_pending_task+0x358/0x470 [ 266.948358][ T7358] report_bug+0x2ba/0x4f0 [ 266.952698][ T7358] ? perf_pending_task+0x358/0x470 [ 266.957819][ T7358] handle_bug+0x3a/0x70 [ 266.961983][ T7358] exc_invalid_op+0x16/0x40 [ 266.966497][ T7358] asm_exc_invalid_op+0x16/0x20 [ 266.971358][ T7358] RIP: 0010:perf_pending_task+0x358/0x470 [ 266.977092][ T7358] Code: ff 84 db 75 14 e8 68 7f da ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 54 7f da ff e8 97 90 58 ff eb e5 e8 48 7f da ff <0f> 0b e9 f3 fe ff ff e8 3c 7f da ff 48 c7 c7 50 2d bc 8c 4c 89 f6 [ 266.996708][ T7358] RSP: 0018:ffffc90004f378e0 EFLAGS: 00010293 [ 267.002783][ T7358] RAX: ffffffff81a7f328 RBX: ffff8880547e9c58 RCX: ffff888054345940 [ 267.010760][ T7358] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 267.018738][ T7358] RBP: 0000000000000001 R08: ffff888054346343 R09: 1ffff1100a868c68 [ 267.026713][ T7358] R10: dffffc0000000000 R11: ffffed100a868c69 R12: ffff888054345940 [ 267.034689][ T7358] R13: ffff888079136160 R14: ffff8880547e9a20 R15: 1ffff1100a8fd344 [ 267.042674][ T7358] ? perf_pending_task+0x358/0x470 [ 267.047804][ T7358] task_work_run+0x1d0/0x260 [ 267.052406][ T7358] ? task_work_cancel+0x220/0x220 [ 267.057442][ T7358] ? do_raw_spin_unlock+0x11d/0x230 [ 267.062657][ T7358] do_exit+0x982/0x2480 [ 267.066839][ T7358] ? put_task_struct+0x80/0x80 [ 267.071616][ T7358] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 267.077607][ T7358] ? _raw_spin_lock_irq+0x86/0xf0 [ 267.082646][ T7358] ? lock_chain_count+0x20/0x20 [ 267.087506][ T7358] ? _raw_spin_lock_irq+0xb7/0xf0 [ 267.092545][ T7358] do_group_exit+0x217/0x2d0 [ 267.097147][ T7358] ? lockdep_hardirqs_on+0x94/0x140 [ 267.102364][ T7358] get_signal+0x1272/0x1350 [ 267.106901][ T7358] arch_do_signal_or_restart+0xc4/0x1350 [ 267.112552][ T7358] ? do_futex+0x310/0x320 [ 267.116888][ T7358] ? get_sigframe_size+0x10/0x10 [ 267.121853][ T7358] ? exit_to_user_mode_loop+0x3b/0x110 [ 267.127325][ T7358] exit_to_user_mode_loop+0x70/0x110 [ 267.132624][ T7358] exit_to_user_mode_prepare+0xee/0x180 [ 267.138182][ T7358] syscall_exit_to_user_mode+0x16/0x40 [ 267.143647][ T7358] do_syscall_64+0x58/0xa0 [ 267.148075][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 267.152758][ T7358] ? clear_bhb_loop+0x60/0xb0 [ 267.157441][ T7358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 267.163343][ T7358] RIP: 0033:0x7ff0bcb9acb9 [ 267.167762][ T7358] Code: Unable to access opcode bytes at 0x7ff0bcb9ac8f. [ 267.174784][ T7358] RSP: 002b:00007ff0bdae00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.183205][ T7358] RAX: fffffffffffffe00 RBX: 00007ff0bce15fa8 RCX: 00007ff0bcb9acb9 [ 267.191184][ T7358] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff0bce15fa8 [ 267.199162][ T7358] RBP: 00007ff0bce15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 267.207139][ T7358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.215129][ T7358] R13: 00007ff0bce16038 R14: 00007ffdfb25b240 R15: 00007ffdfb25b328 [ 267.223122][ T7358] [ 267.226469][ T7358] Kernel Offset: disabled [ 267.230794][ T7358] Rebooting in 86400 seconds..