last executing test programs: 36.908611273s ago: executing program 1 (id=12235): socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b00000000"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 36.571066875s ago: executing program 1 (id=12239): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x13}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000240)='n', 0x0, 0x40002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r4], 0x30, 0x4000801}, 0xd0) recvmsg$unix(r4, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e2b, @multicast2}, 0x10, &(0x7f0000000380), 0x2, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) 36.336409341s ago: executing program 1 (id=12241): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x21, &(0x7f0000000440)=[{&(0x7f0000000000)="2e00000010008188040f46ecdb4cb9cca7480ef421000000e3bd6efb440013030e000a000d000008ba8000001201", 0x2e}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000e00)={r0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80000000, 0x0}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x401, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x8}]}, {0x0, [0x61, 0x61, 0x2e, 0x20]}}, &(0x7f0000001900)=""/221, 0x2a, 0xdd, 0x1}, 0x28) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c0000005a006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36500001a44dd021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x6, 0xffffffff, 0xfffffff8, 0x20020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x8, &(0x7f0000000340)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x49f5c1ae}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4ad9}], &(0x7f0000000000)='GPL\x00', 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000180)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000140)=[@rights={{0x14, 0x1, 0x1, [r10]}}], 0x18, 0x10}, 0x20004000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x400}) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000240)={r0}) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000380)={r13, r10}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f2, &(0x7f0000000080)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=r2, 0x4) 33.67847935s ago: executing program 1 (id=12245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 33.182649582s ago: executing program 1 (id=12249): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x10) r2 = socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000018c0)={r3}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000009000000080000000200000000010000", @ANYRES32, @ANYBLOB="00000000000000306eba2f36c3ac8bdce704055d372f1dd02e14a60106312600000cda625ecb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f70000000000010000000000000000004500000000000000"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f3, &(0x7f0000000080)) sendmsg$kcm(r5, &(0x7f0000000140)={&(0x7f0000000440)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d7000000"], 0x10b8}, 0x40186) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000008000000000000000000000000000e884dab120caef2466797a9110000a0f6a9361e7489cf1115312b675eec4f783970484ab7d6163c3e5075da69d30a99cb2071d22f1b88ab8c9893ced2bc89994d0fc5bb58926851a84f93654be537a63c8e993cbbc6a17e550a76d0f872711058cb8b0662a3b018b0d2ca9b1561139a37e736e31244ae9661a171c076294ed3e36abe2df30bf80ad3ba45b50cc55a833f049454329c370017ad796e53fce7ab8903785ac9fca61e6e1edac036fc332240a45746b09627627e54c57318becbf85ac0d537"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xd, &(0x7f0000000580)=ANY=[@ANYRES32=r5, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r7, 0x2000012, 0xe, 0x0, &(0x7f00000001c0)="63ec00000000005ff8fadca27897d17bc200", 0x0, 0x1f4c, 0x0, 0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x17) 32.803701498s ago: executing program 1 (id=12253): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0502000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e0072", 0x54}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000760091"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x810}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_REFRESH(r5, 0x2402, 0x3) syz_clone(0x108000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 28.348462367s ago: executing program 0 (id=12265): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={0x0, 0x0, 0x10}, 0x18) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 28.208941926s ago: executing program 0 (id=12266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 23.901620006s ago: executing program 0 (id=12271): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}]}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000"], 0x0, 0x5a}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 21.077305935s ago: executing program 0 (id=12274): socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b00"/51], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 20.789176745s ago: executing program 0 (id=12275): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 16.162718855s ago: executing program 0 (id=12277): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, 0x0}, 0x4000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8fedcb79070011010000800000000017ce22cc0000", @ANYRESOCT=r1, @ANYBLOB="753cd5610a6e3dcf7323b3246fcd941a2b72207fd2168744317043f98a9878088e3fd43dc40766570c7d3b44f2bc22d484659efa8af81f9151f2718294a6f56a3df639108d84fcab82f5c4e1b3d71f1eaf4c9e3bc76ea51687dcc267ee5c117226f0d19e10398b7d28e32bdbf4623c5691e6a2fbd992cf73a5cb2c30ae781f41d9facfcbe99a7ecc9ac6dae9925b6e13d0d41668160f7b565df080598e0882e73d17e3fb51258ee267e27cac6fc452b4f9cbd0d6ac83f2742bae804de4b4394a18b4"], 0xfdef) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 16.037848943s ago: executing program 2 (id=12279): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 12.282029006s ago: executing program 2 (id=12283): socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102b00fe80000000000000875a650b9ff57b00"/51], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.239178789s ago: executing program 3 (id=12284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 9.710896768s ago: executing program 3 (id=12285): mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000940)=@generic={0x0, 0x0, 0x10}, 0x18) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002a00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.709758418s ago: executing program 2 (id=12292): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfa9, 0x9}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x2c, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x100000000002, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000000)="daab41f1b618fe4fa7427f", &(0x7f0000000300)=""/182}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000104000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x14, &(0x7f0000000500), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4c814) 9.574961987s ago: executing program 3 (id=12286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 5.330506232s ago: executing program 3 (id=12287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 5.328936242s ago: executing program 2 (id=12295): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 1.343845119s ago: executing program 3 (id=12288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x400}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) 974.651774ms ago: executing program 32 (id=12277): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, 0x0}, 0x4000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0xc, &(0x7f0000000380)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40000000}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x6, 0x9, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="7a04", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000080)={0x1, 0x41, 0x2, 0x0, 0x0, 0x0, 0x0, 0x91c, 0x4156, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0x12640, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x408) syz_clone(0xc4201100, 0x0, 0x0, &(0x7f0000000740), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8fedcb79070011010000800000000017ce22cc0000", @ANYRESOCT=r1, @ANYBLOB="753cd5610a6e3dcf7323b3246fcd941a2b72207fd2168744317043f98a9878088e3fd43dc40766570c7d3b44f2bc22d484659efa8af81f9151f2718294a6f56a3df639108d84fcab82f5c4e1b3d71f1eaf4c9e3bc76ea51687dcc267ee5c117226f0d19e10398b7d28e32bdbf4623c5691e6a2fbd992cf73a5cb2c30ae781f41d9facfcbe99a7ecc9ac6dae9925b6e13d0d41668160f7b565df080598e0882e73d17e3fb51258ee267e27cac6fc452b4f9cbd0d6ac83f2742bae804de4b4394a18b4"], 0xfdef) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 966.651815ms ago: executing program 2 (id=12290): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}]}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc", 0x29}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000"], 0x0, 0x5a}, 0x28) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x10, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x100}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x4000000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) 965.459845ms ago: executing program 3 (id=12291): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x22, 0x2, 0x21) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200400, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2000000000000, 0x30084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) 0s ago: executing program 2 (id=12293): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x110, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfa9, 0x9}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x2c, 0x0, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82100000000000a6020000f8ffffffb703000008000000b7030000000000000c0000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x100000000002, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000240)=ANY=[@ANYRESOCT, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000000)="daab41f1b618fe4fa7427f", &(0x7f0000000300)=""/182}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000104000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x2100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0x14, &(0x7f0000000500), 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000e00)="39000000140081ae00002c000500015601618575e285af01800000000d1300883795c04a31ba377a1b2cc37fffffffffffffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x4c814) kernel console output (not intermixed with test programs): ed(file):0kB mapped:112240kB dirty:504kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10288kB pagetables:2248kB sec_pagetables:0kB all_unreclaimable? no [ 2147.304782][ T6196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2147.336518][ T6196] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2147.395014][ T6196] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2147.410169][ T6196] Node 0 DMA32 free:1412476kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:46732kB inactive_anon:0kB active_file:77576kB inactive_file:161908kB unevictable:1536kB writepending:504kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:22016kB local_pcp:10864kB free_cma:0kB [ 2147.470598][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10889'. [ 2147.484140][ T6196] lowmem_reserve[]: 0 0 0 0 0 [ 2147.488953][ T6196] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 2147.525676][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10889'. [ 2147.535711][ T6196] lowmem_reserve[]: 0 0 0 0 0 [ 2147.542625][ T6212] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10889'. [ 2147.551976][ T6196] Node 1 Normal free:3890496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19240kB local_pcp:9124kB free_cma:0kB [ 2147.587615][ T6196] lowmem_reserve[]: 0 0 0 0 0 [ 2147.592804][ T6196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2147.606573][ T6196] Node 0 DMA32: 1115*4kB (UM) 1236*8kB (UME) 795*16kB (UME) 1866*32kB (UME) 1274*64kB (UME) 778*128kB (UME) 438*256kB (UME) 143*512kB (UME) 69*1024kB (UM) 10*2048kB (UME) 212*4096kB (UM) = 1412732kB [ 2147.626744][ T6196] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2147.690132][ T6196] Node 1 Normal: 248*4kB (UM) 56*8kB (UME) 48*16kB (UME) 45*32kB (UME) 20*64kB (UME) 6*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890496kB [ 2147.727891][ T6196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2147.741530][ T6196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2147.754870][ T6196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2147.767848][ T6196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2147.778801][ T6196] 63462 total pagecache pages [ 2147.786027][ T6196] 0 pages in swap cache [ 2147.799984][ T6196] Free swap = 124996kB [ 2147.804748][ T6196] Total swap = 124996kB [ 2147.809191][ T6196] 2097051 pages RAM [ 2147.813940][ T6196] 0 pages HighMem/MovableOnly [ 2147.818883][ T6196] 416926 pages reserved [ 2147.823772][ T6196] 0 pages cma reserved [ 2150.949952][ T6235] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2151.380703][ T6242] syzkaller0: entered promiscuous mode [ 2151.400059][ T6242] syzkaller0: entered allmulticast mode [ 2151.428308][ T6241] delete_channel: no stack [ 2156.696014][ T6270] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10912'. [ 2156.850180][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10907'. [ 2156.859326][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10907'. [ 2156.884546][ T6277] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10907'. [ 2157.348542][ T6284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2157.523432][ T6288] FAULT_INJECTION: forcing a failure. [ 2157.523432][ T6288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.540211][ T6288] CPU: 0 PID: 6288 Comm: syz.0.10913 Not tainted syzkaller #0 [ 2157.547738][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2157.557922][ T6288] Call Trace: [ 2157.561234][ T6288] [ 2157.564187][ T6288] dump_stack_lvl+0x18c/0x250 [ 2157.568902][ T6288] ? show_regs_print_info+0x20/0x20 [ 2157.574128][ T6288] ? load_image+0x420/0x420 [ 2157.578668][ T6288] ? __lock_acquire+0x7d40/0x7d40 [ 2157.583716][ T6288] ? snprintf+0xe9/0x140 [ 2157.588073][ T6288] should_fail_ex+0x39d/0x4d0 [ 2157.592801][ T6288] _copy_to_user+0x2f/0xa0 [ 2157.597348][ T6288] simple_read_from_buffer+0xe7/0x150 [ 2157.602839][ T6288] proc_fail_nth_read+0x1e8/0x260 [ 2157.607897][ T6288] ? proc_fault_inject_write+0x360/0x360 [ 2157.613573][ T6288] ? fsnotify_perm+0x271/0x5e0 [ 2157.618364][ T6288] ? proc_fault_inject_write+0x360/0x360 [ 2157.624030][ T6288] vfs_read+0x28b/0x970 [ 2157.628222][ T6288] ? kernel_read+0x1e0/0x1e0 [ 2157.632838][ T6288] ? __fget_files+0x28/0x4b0 [ 2157.637531][ T6288] ? __fget_files+0x28/0x4b0 [ 2157.642148][ T6288] ? __fget_files+0x43d/0x4b0 [ 2157.646874][ T6288] ? __fdget_pos+0x2a3/0x330 [ 2157.651481][ T6288] ? ksys_read+0x75/0x260 [ 2157.655844][ T6288] ksys_read+0x150/0x260 [ 2157.660240][ T6288] ? vfs_write+0x990/0x990 [ 2157.664701][ T6288] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2157.670709][ T6288] do_syscall_64+0x55/0xa0 [ 2157.675138][ T6288] ? clear_bhb_loop+0x40/0x90 [ 2157.679834][ T6288] ? clear_bhb_loop+0x40/0x90 [ 2157.684536][ T6288] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2157.690451][ T6288] RIP: 0033:0x7f381995d04e [ 2157.694916][ T6288] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2157.714562][ T6288] RSP: 002b:00007f381a838fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2157.723019][ T6288] RAX: ffffffffffffffda RBX: 00007f381a8396c0 RCX: 00007f381995d04e [ 2157.731010][ T6288] RDX: 000000000000000f RSI: 00007f381a8390a0 RDI: 000000000000000a [ 2157.739001][ T6288] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2157.746996][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2157.754985][ T6288] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2157.763015][ T6288] [ 2158.119324][ T6294] netlink: 'syz.0.10916': attribute type 21 has an invalid length. [ 2158.129199][ T6294] netlink: 156 bytes leftover after parsing attributes in process `syz.0.10916'. [ 2158.196365][ T6294] mac80211_hwsim hwsim80 wlan1: entered allmulticast mode [ 2160.626032][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.640252][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.207416][ T6321] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.10924'. [ 2161.227139][ T6321] netlink: 6328 bytes leftover after parsing attributes in process `syz.0.10924'. [ 2161.346268][ T6327] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2161.715727][ T6335] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.10929'. [ 2165.153036][ T6354] netlink: 168 bytes leftover after parsing attributes in process `syz.0.10935'. [ 2165.181055][ T6336] delete_channel: no stack [ 2165.543695][ T6368] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10939'. [ 2165.560825][ T6356] syzkaller0: entered promiscuous mode [ 2165.566763][ T6356] syzkaller0: entered allmulticast mode [ 2165.592643][ T6355] delete_channel: no stack [ 2168.319645][ T6370] FAULT_INJECTION: forcing a failure. [ 2168.319645][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 2168.332729][ T6370] CPU: 0 PID: 6370 Comm: syz.3.10941 Not tainted syzkaller #0 [ 2168.340223][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2168.350292][ T6370] Call Trace: [ 2168.353567][ T6370] [ 2168.356511][ T6370] dump_stack_lvl+0x18c/0x250 [ 2168.361194][ T6370] ? show_regs_print_info+0x20/0x20 [ 2168.366581][ T6370] ? load_image+0x420/0x420 [ 2168.371095][ T6370] ? __might_sleep+0xe0/0xe0 [ 2168.375712][ T6370] ? __lock_acquire+0x7d40/0x7d40 [ 2168.380746][ T6370] should_fail_ex+0x39d/0x4d0 [ 2168.385453][ T6370] should_failslab+0x9/0x20 [ 2168.389965][ T6370] slab_pre_alloc_hook+0x59/0x310 [ 2168.395015][ T6370] ? netdevice_event+0x3cc/0x8e0 [ 2168.399958][ T6370] __kmem_cache_alloc_node+0x53/0x250 [ 2168.405337][ T6370] ? netdevice_event+0x3cc/0x8e0 [ 2168.410276][ T6370] kmalloc_trace+0x2a/0xe0 [ 2168.414693][ T6370] netdevice_event+0x3cc/0x8e0 [ 2168.419453][ T6370] ? __up_read+0x2b6/0x6b0 [ 2168.423865][ T6370] ? inet6addr_event+0xd0/0xd0 [ 2168.428623][ T6370] ? netdevice_event+0x8e0/0x8e0 [ 2168.433564][ T6370] ? add_default_gids+0xe0/0xe0 [ 2168.438426][ T6370] ? is_ndev_for_default_gid_filter+0x2f0/0x2f0 [ 2168.444663][ T6370] ? enum_all_gids_of_dev_cb+0x260/0x260 [ 2168.450309][ T6370] ? netdev_upper_walk+0x210/0x210 [ 2168.455416][ T6370] ? add_default_gids+0xe0/0xe0 [ 2168.460270][ T6370] notifier_call_chain+0x197/0x380 [ 2168.465407][ T6370] dev_set_mac_address+0x39a/0x4d0 [ 2168.470535][ T6370] ? dev_pre_changeaddr_notify+0x120/0x120 [ 2168.476352][ T6370] ? down_write+0x16e/0x200 [ 2168.480858][ T6370] dev_set_mac_address_user+0x31/0x50 [ 2168.486228][ T6370] dev_ioctl+0x7b4/0x1140 [ 2168.490563][ T6370] sock_do_ioctl+0x239/0x310 [ 2168.495151][ T6370] ? sock_show_fdinfo+0xb0/0xb0 [ 2168.500009][ T6370] sock_ioctl+0x5ba/0x7e0 [ 2168.504459][ T6370] ? sock_poll+0x3e0/0x3e0 [ 2168.508876][ T6370] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2168.513816][ T6370] ? security_file_ioctl+0x80/0xa0 [ 2168.518922][ T6370] ? sock_poll+0x3e0/0x3e0 [ 2168.523346][ T6370] __se_sys_ioctl+0xfd/0x170 [ 2168.527953][ T6370] do_syscall_64+0x55/0xa0 [ 2168.532372][ T6370] ? clear_bhb_loop+0x40/0x90 [ 2168.537047][ T6370] ? clear_bhb_loop+0x40/0x90 [ 2168.541724][ T6370] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2168.547619][ T6370] RIP: 0033:0x7f44d019c819 [ 2168.552135][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2168.571922][ T6370] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2168.580363][ T6370] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2168.588500][ T6370] RDX: 00002000000002c0 RSI: 0000000000008924 RDI: 0000000000000009 [ 2168.596493][ T6370] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2168.604471][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2168.612443][ T6370] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2168.620597][ T6370] [ 2168.630578][ T6380] netlink: 'syz.1.10944': attribute type 21 has an invalid length. [ 2168.641691][ T6380] netlink: 156 bytes leftover after parsing attributes in process `syz.1.10944'. [ 2168.675175][ T6381] mac80211_hwsim hwsim88 wlan1: entered allmulticast mode [ 2168.751694][ T6388] Ù: renamed from bond_slave_1 (while UP) [ 2168.984956][ T6395] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2169.060354][ T6398] netlink: 'syz.1.10950': attribute type 9 has an invalid length. [ 2169.100492][ T6398] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10950'. [ 2169.159491][ T6404] netlink: 'syz.1.10950': attribute type 9 has an invalid length. [ 2169.170115][ T6404] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.10950'. [ 2169.366270][ T6407] netlink: 'syz.1.10950': attribute type 3 has an invalid length. [ 2169.376888][ T6407] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.10950'. [ 2171.087491][ T6413] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.10952'. [ 2171.656161][ T6423] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.10954'. [ 2171.718295][ T6415] syzkaller0: entered promiscuous mode [ 2171.724388][ T6415] syzkaller0: entered allmulticast mode [ 2171.734919][ T6420] netlink: 10 bytes leftover after parsing attributes in process `syz.1.10956'. [ 2171.750562][ T6414] delete_channel: no stack [ 2174.211696][ T6426] netlink: 'syz.3.10957': attribute type 21 has an invalid length. [ 2174.219755][ T6426] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10957'. [ 2174.263083][ T6439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2174.514531][ T6442] netlink: 'syz.0.10961': attribute type 10 has an invalid length. [ 2174.525912][ T6442] nla_validate_range_unsigned: 25 callbacks suppressed [ 2174.525954][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.561501][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.590262][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.599597][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.640353][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.670522][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.693999][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.707432][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.731412][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.770642][ T6442] netlink: 'syz.0.10961': attribute type 11 has an invalid length. [ 2174.784643][ T6442] netlink: 'syz.0.10961': attribute type 4 has an invalid length. [ 2174.798261][ T6442] netlink: 'syz.0.10961': attribute type 5 has an invalid length. [ 2174.840132][ T6442] netlink: 208556 bytes leftover after parsing attributes in process `syz.0.10961'. [ 2174.905858][ T6455] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10964'. [ 2174.918031][ T6454] netlink: 'syz.3.10965': attribute type 9 has an invalid length. [ 2174.926285][ T6454] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10965'. [ 2174.991837][ T6457] netlink: 'syz.3.10965': attribute type 9 has an invalid length. [ 2175.001598][ T6457] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.10965'. [ 2175.100862][ T6454] netlink: 'syz.3.10965': attribute type 3 has an invalid length. [ 2175.118253][ T6454] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.10965'. [ 2177.614317][ T6463] syzkaller0: entered promiscuous mode [ 2177.620333][ T6463] syzkaller0: entered allmulticast mode [ 2177.633809][ T6475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2177.654338][ T6462] delete_channel: no stack [ 2180.340770][ T6503] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10977'. [ 2180.387120][ T6508] netlink: 'syz.2.10979': attribute type 9 has an invalid length. [ 2180.395133][ T6508] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10979'. [ 2180.532646][ T6513] netlink: 'syz.2.10979': attribute type 9 has an invalid length. [ 2180.547761][ T6515] netlink: 'syz.2.10979': attribute type 3 has an invalid length. [ 2180.577785][ T6513] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.10979'. [ 2180.582394][ T6515] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.10979'. [ 2180.743260][ T6517] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2183.436197][ T6526] syzkaller0: entered promiscuous mode [ 2183.447235][ T6526] syzkaller0: entered allmulticast mode [ 2183.468727][ T6524] delete_channel: no stack [ 2183.904510][ T6555] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.10993'. [ 2186.071847][ T6561] netlink: 'syz.0.10995': attribute type 9 has an invalid length. [ 2186.104752][ T6561] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10995'. [ 2186.184124][ T6567] netlink: 'syz.0.10995': attribute type 9 has an invalid length. [ 2186.196627][ T6567] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.10995'. [ 2186.261674][ T6561] netlink: 'syz.0.10995': attribute type 3 has an invalid length. [ 2186.269754][ T6561] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.10995'. [ 2188.449091][ T6576] netlink: 'syz.3.11001': attribute type 10 has an invalid length. [ 2188.483837][ T6576] netlink: 210880 bytes leftover after parsing attributes in process `syz.3.11001'. [ 2188.629519][ T6578] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2188.819153][ T6586] netlink: 'syz.2.11005': attribute type 1 has an invalid length. [ 2188.848043][ T6586] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.11005'. [ 2189.132724][ T6592] syzkaller0: entered promiscuous mode [ 2189.138970][ T6592] syzkaller0: entered allmulticast mode [ 2189.147375][ T6586] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11005'. [ 2189.160488][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.197931][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.220230][ T6586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2189.234376][ T6586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2189.246484][ T6586] batadv_slave_1: entered promiscuous mode [ 2189.300294][ T6581] delete_channel: no stack [ 2189.644467][ T6607] netlink: 'syz.1.11012': attribute type 3 has an invalid length. [ 2189.652659][ T6607] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11012'. [ 2191.773006][ T6619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2191.837418][ T6615] netlink: 'syz.2.11014': attribute type 6 has an invalid length. [ 2191.849244][ T6615] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.11014'. [ 2193.974697][ T6629] FAULT_INJECTION: forcing a failure. [ 2193.974697][ T6629] name failslab, interval 1, probability 0, space 0, times 0 [ 2194.030059][ T6629] CPU: 1 PID: 6629 Comm: syz.2.11019 Not tainted syzkaller #0 [ 2194.037605][ T6629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2194.047713][ T6629] Call Trace: [ 2194.051034][ T6629] [ 2194.054018][ T6629] dump_stack_lvl+0x18c/0x250 [ 2194.058753][ T6629] ? show_regs_print_info+0x20/0x20 [ 2194.064006][ T6629] ? load_image+0x420/0x420 [ 2194.068560][ T6629] ? __might_sleep+0xe0/0xe0 [ 2194.073205][ T6629] ? __lock_acquire+0x7d40/0x7d40 [ 2194.078271][ T6629] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2194.084482][ T6629] should_fail_ex+0x39d/0x4d0 [ 2194.089203][ T6629] should_failslab+0x9/0x20 [ 2194.093725][ T6629] slab_pre_alloc_hook+0x59/0x310 [ 2194.098766][ T6629] ? find_get_pmu_context+0x81/0x9e0 [ 2194.104062][ T6629] __kmem_cache_alloc_node+0x53/0x250 [ 2194.109441][ T6629] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2194.115349][ T6629] ? find_get_pmu_context+0x81/0x9e0 [ 2194.120651][ T6629] kmalloc_trace+0x2a/0xe0 [ 2194.125084][ T6629] find_get_pmu_context+0x81/0x9e0 [ 2194.130219][ T6629] ? find_get_context+0x3df/0x4f0 [ 2194.135266][ T6629] __se_sys_perf_event_open+0xb7b/0x1c50 [ 2194.140926][ T6629] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2194.146592][ T6629] ? lock_chain_count+0x20/0x20 [ 2194.151464][ T6629] ? lockdep_hardirqs_on+0x98/0x150 [ 2194.156677][ T6629] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2194.162336][ T6629] do_syscall_64+0x55/0xa0 [ 2194.166790][ T6629] ? clear_bhb_loop+0x40/0x90 [ 2194.171486][ T6629] ? clear_bhb_loop+0x40/0x90 [ 2194.176173][ T6629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2194.182074][ T6629] RIP: 0033:0x7f887299c819 [ 2194.186495][ T6629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2194.206119][ T6629] RSP: 002b:00007f8873918028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2194.214543][ T6629] RAX: ffffffffffffffda RBX: 00007f8872c15fa0 RCX: 00007f887299c819 [ 2194.222520][ T6629] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2194.230496][ T6629] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2194.238474][ T6629] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2194.246455][ T6629] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2194.254562][ T6629] [ 2194.326129][ T6636] netlink: 'syz.1.11021': attribute type 3 has an invalid length. [ 2194.334240][ T6636] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11021'. [ 2194.867681][ T6642] syzkaller0: entered promiscuous mode [ 2194.874985][ T6642] syzkaller0: entered allmulticast mode [ 2194.889867][ T6647] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2194.906186][ T6641] delete_channel: no stack [ 2199.834922][ T6668] netlink: 'syz.2.11032': attribute type 3 has an invalid length. [ 2199.842923][ T6668] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11032'. [ 2201.722881][ T6679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2202.774555][ T6689] netlink: 'syz.2.11041': attribute type 9 has an invalid length. [ 2202.785032][ T6689] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11041'. [ 2202.823315][ T6687] netlink: 'syz.0.11040': attribute type 1 has an invalid length. [ 2202.853284][ T6687] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.11040'. [ 2202.899019][ T6694] netlink: 'syz.2.11041': attribute type 9 has an invalid length. [ 2202.927317][ T6694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11041'. [ 2203.033242][ T6696] syzkaller0: entered promiscuous mode [ 2203.038923][ T6696] syzkaller0: entered allmulticast mode [ 2203.108225][ T6690] delete_channel: no stack [ 2205.911272][ T6713] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11047'. [ 2207.722009][ T6711] netlink: 'syz.2.11047': attribute type 10 has an invalid length. [ 2207.746999][ T6713] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2207.769941][ T6713] CPU: 1 PID: 6713 Comm: syz.2.11047 Not tainted syzkaller #0 [ 2207.777470][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2207.787635][ T6713] Call Trace: [ 2207.790947][ T6713] [ 2207.793901][ T6713] dump_stack_lvl+0x18c/0x250 [ 2207.798615][ T6713] ? show_regs_print_info+0x20/0x20 [ 2207.803839][ T6713] ? load_image+0x420/0x420 [ 2207.808364][ T6713] sysfs_warn_dup+0x8e/0xa0 [ 2207.812875][ T6713] sysfs_do_create_link_sd+0xc0/0x110 [ 2207.818252][ T6713] device_add_class_symlinks+0x1cf/0x240 [ 2207.823892][ T6713] device_add+0x507/0xc20 [ 2207.828225][ T6713] wiphy_register+0x1dad/0x2ae0 [ 2207.833352][ T6713] ? cfg80211_event_work+0x40/0x40 [ 2207.838483][ T6713] ? minstrel_ht_alloc+0x88a/0x990 [ 2207.843601][ T6713] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2207.849678][ T6713] ieee80211_register_hw+0x3464/0x4250 [ 2207.855156][ T6713] ? ieee80211_tasklet_handler+0x20/0x20 [ 2207.860798][ T6713] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2207.866690][ T6713] ? __debug_object_init+0xec/0x450 [ 2207.871897][ T6713] ? __asan_memset+0x22/0x40 [ 2207.876498][ T6713] ? __hrtimer_init+0x186/0x270 [ 2207.881349][ T6713] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 2207.887118][ T6713] ? mac80211_hwsim_free+0x220/0x220 [ 2207.892424][ T6713] ? rcu_is_watching+0x15/0xb0 [ 2207.897218][ T6713] ? kstrndup+0xbd/0x140 [ 2207.901479][ T6713] hwsim_new_radio_nl+0xdc9/0x1a90 [ 2207.906601][ T6713] ? __nla_validate+0x50/0x50 [ 2207.911296][ T6713] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2207.917634][ T6713] ? __nla_parse+0x40/0x50 [ 2207.922070][ T6713] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2207.928428][ T6713] genl_family_rcv_msg_doit+0x211/0x310 [ 2207.933989][ T6713] ? end_current_label_crit_section+0x170/0x170 [ 2207.940349][ T6713] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2207.946269][ T6713] ? bpf_lsm_capable+0x9/0x10 [ 2207.950956][ T6713] ? security_capable+0x89/0xb0 [ 2207.955821][ T6713] genl_rcv_msg+0x619/0x7a0 [ 2207.960340][ T6713] ? genl_bind+0x360/0x360 [ 2207.964749][ T6713] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2207.970734][ T6713] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 2207.977062][ T6713] ? ref_tracker_free+0x690/0x840 [ 2207.982092][ T6713] netlink_rcv_skb+0x241/0x4d0 [ 2207.986862][ T6713] ? genl_bind+0x360/0x360 [ 2207.991285][ T6713] ? netlink_ack+0x1180/0x1180 [ 2207.996058][ T6713] ? __lock_acquire+0x7d40/0x7d40 [ 2208.001089][ T6713] ? down_read+0x1ac/0x2e0 [ 2208.005505][ T6713] genl_rcv+0x28/0x40 [ 2208.009481][ T6713] netlink_unicast+0x751/0x8d0 [ 2208.014258][ T6713] netlink_sendmsg+0x8d0/0xbf0 [ 2208.019058][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 2208.024288][ T6713] ? netlink_getsockopt+0x590/0x590 [ 2208.029506][ T6713] ? aa_sock_msg_perm+0x94/0x150 [ 2208.034450][ T6713] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2208.039738][ T6713] ? security_socket_sendmsg+0x80/0xa0 [ 2208.045197][ T6713] ? netlink_getsockopt+0x590/0x590 [ 2208.050400][ T6713] ____sys_sendmsg+0x5ba/0x960 [ 2208.055169][ T6713] ? __asan_memset+0x22/0x40 [ 2208.059765][ T6713] ? __sys_sendmsg_sock+0x30/0x30 [ 2208.064880][ T6713] ? __import_iovec+0x5f2/0x850 [ 2208.069740][ T6713] ? import_iovec+0x73/0xa0 [ 2208.074248][ T6713] ___sys_sendmsg+0x2a6/0x360 [ 2208.078933][ T6713] ? __sys_sendmsg+0x2a0/0x2a0 [ 2208.083718][ T6713] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2208.089985][ T6713] __se_sys_sendmsg+0x1c2/0x2b0 [ 2208.094835][ T6713] ? hrtimer_interrupt+0x7bb/0x9c0 [ 2208.099955][ T6713] ? __x64_sys_sendmsg+0x80/0x80 [ 2208.104908][ T6713] ? lockdep_hardirqs_on+0x98/0x150 [ 2208.110108][ T6713] do_syscall_64+0x55/0xa0 [ 2208.114576][ T6713] ? clear_bhb_loop+0x40/0x90 [ 2208.119357][ T6713] ? clear_bhb_loop+0x40/0x90 [ 2208.124036][ T6713] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.130188][ T6713] RIP: 0033:0x7f887299c819 [ 2208.134615][ T6713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.154234][ T6713] RSP: 002b:00007f88738d6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.162651][ T6713] RAX: ffffffffffffffda RBX: 00007f8872c16180 RCX: 00007f887299c819 [ 2208.170628][ T6713] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2208.178604][ T6713] RBP: 00007f8872a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 2208.186661][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.194636][ T6713] R13: 00007f8872c16218 R14: 00007f8872c16180 R15: 00007ffc412ec528 [ 2208.202626][ T6713] [ 2208.352703][ T6722] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2208.915443][ T6729] FAULT_INJECTION: forcing a failure. [ 2208.915443][ T6729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2208.929016][ T6729] CPU: 1 PID: 6729 Comm: syz.2.11052 Not tainted syzkaller #0 [ 2208.936536][ T6729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2208.946650][ T6729] Call Trace: [ 2208.949974][ T6729] [ 2208.952947][ T6729] dump_stack_lvl+0x18c/0x250 [ 2208.957691][ T6729] ? show_regs_print_info+0x20/0x20 [ 2208.962939][ T6729] ? load_image+0x420/0x420 [ 2208.967506][ T6729] ? __lock_acquire+0x7d40/0x7d40 [ 2208.972626][ T6729] ? snprintf+0xe9/0x140 [ 2208.976935][ T6729] should_fail_ex+0x39d/0x4d0 [ 2208.981690][ T6729] _copy_to_user+0x2f/0xa0 [ 2208.986163][ T6729] simple_read_from_buffer+0xe7/0x150 [ 2208.991608][ T6729] proc_fail_nth_read+0x1e8/0x260 [ 2208.996697][ T6729] ? proc_fault_inject_write+0x360/0x360 [ 2209.002411][ T6729] ? fsnotify_perm+0x271/0x5e0 [ 2209.007225][ T6729] ? proc_fault_inject_write+0x360/0x360 [ 2209.012911][ T6729] vfs_read+0x28b/0x970 [ 2209.017139][ T6729] ? kernel_read+0x1e0/0x1e0 [ 2209.021791][ T6729] ? __fget_files+0x28/0x4b0 [ 2209.026428][ T6729] ? __fget_files+0x28/0x4b0 [ 2209.031076][ T6729] ? __fget_files+0x43d/0x4b0 [ 2209.035836][ T6729] ? __fdget_pos+0x2a3/0x330 [ 2209.040473][ T6729] ? ksys_read+0x75/0x260 [ 2209.044862][ T6729] ksys_read+0x150/0x260 [ 2209.049162][ T6729] ? vfs_write+0x990/0x990 [ 2209.053652][ T6729] ? lockdep_hardirqs_on+0x98/0x150 [ 2209.058919][ T6729] do_syscall_64+0x55/0xa0 [ 2209.063383][ T6729] ? clear_bhb_loop+0x40/0x90 [ 2209.068106][ T6729] ? clear_bhb_loop+0x40/0x90 [ 2209.072837][ T6729] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2209.078784][ T6729] RIP: 0033:0x7f887295d04e [ 2209.083251][ T6729] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2209.102924][ T6729] RSP: 002b:00007f8873917fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2209.111499][ T6729] RAX: ffffffffffffffda RBX: 00007f88739186c0 RCX: 00007f887295d04e [ 2209.119525][ T6729] RDX: 000000000000000f RSI: 00007f88739180a0 RDI: 0000000000000004 [ 2209.127571][ T6729] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.135613][ T6729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2209.143648][ T6729] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2209.151731][ T6729] [ 2209.177449][ T6733] netlink: 'syz.1.11053': attribute type 9 has an invalid length. [ 2209.199399][ T6733] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11053'. [ 2209.390089][ T6734] netlink: 'syz.1.11053': attribute type 9 has an invalid length. [ 2209.398007][ T6734] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11053'. [ 2210.277266][ T6753] syzkaller0: entered promiscuous mode [ 2210.289080][ T6753] syzkaller0: entered allmulticast mode [ 2210.328803][ T6749] delete_channel: no stack [ 2214.909299][ T6767] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2214.928036][ T6769] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11065'. [ 2214.938554][ T6769] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 2215.040369][ T6775] netlink: 'syz.3.11068': attribute type 9 has an invalid length. [ 2215.048330][ T6775] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11068'. [ 2215.120204][ T6778] netlink: 'syz.3.11068': attribute type 9 has an invalid length. [ 2215.128111][ T6778] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11068'. [ 2215.392489][ T6786] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.11071'. [ 2215.419266][ T6786] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.11071'. [ 2215.444390][ T6786] tipc: Started in network mode [ 2215.464021][ T6786] tipc: Node identity b, cluster identity 73 [ 2215.478994][ T6786] tipc: Node number set to 11 [ 2215.713217][ T6788] syzkaller0: entered promiscuous mode [ 2215.722394][ T6788] syzkaller0: entered allmulticast mode [ 2215.791431][ T6787] delete_channel: no stack [ 2218.316443][ T6812] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2218.398664][ T6819] netlink: 'syz.3.11081': attribute type 9 has an invalid length. [ 2218.407052][ T6819] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11081'. [ 2218.477245][ T6819] netlink: 'syz.3.11081': attribute type 9 has an invalid length. [ 2218.496946][ T6819] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11081'. [ 2218.558318][ T6826] netlink: 'syz.3.11081': attribute type 3 has an invalid length. [ 2218.576262][ T6826] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11081'. [ 2218.895433][ T6833] syzkaller0: entered promiscuous mode [ 2218.901495][ T6833] syzkaller0: entered allmulticast mode [ 2218.913151][ T6832] delete_channel: no stack [ 2222.066153][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.079898][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2224.226638][ T6856] syz.1.11092 (6856) used obsolete PPPIOCDETACH ioctl [ 2224.276216][ T6859] netlink: 'syz.3.11093': attribute type 9 has an invalid length. [ 2224.370137][ T6859] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11093'. [ 2224.418527][ T6857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2224.481125][ T6869] netlink: 'syz.3.11093': attribute type 3 has an invalid length. [ 2224.489192][ T6869] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11093'. [ 2224.520610][ T6863] netlink: 'syz.3.11093': attribute type 9 has an invalid length. [ 2224.553476][ T6863] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11093'. [ 2224.869936][ T6874] syzkaller0: entered promiscuous mode [ 2224.880028][ T6874] syzkaller0: entered allmulticast mode [ 2224.898480][ T6873] delete_channel: no stack [ 2231.911194][ T6906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2232.006236][ T6911] netlink: 'syz.2.11108': attribute type 9 has an invalid length. [ 2232.014762][ T6911] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2232.108956][ T6918] netlink: 'syz.2.11108': attribute type 9 has an invalid length. [ 2232.150774][ T6918] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2232.198954][ T6911] netlink: 'syz.2.11108': attribute type 3 has an invalid length. [ 2232.216821][ T6923] sctp: [Deprecated]: syz.3.11111 (pid 6923) Use of int in max_burst socket option deprecated. [ 2232.216821][ T6923] Use struct sctp_assoc_value instead [ 2232.240528][ T6911] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11108'. [ 2232.404732][ T6931] FAULT_INJECTION: forcing a failure. [ 2232.404732][ T6931] name failslab, interval 1, probability 0, space 0, times 0 [ 2232.419734][ T6931] CPU: 1 PID: 6931 Comm: syz.0.11114 Not tainted syzkaller #0 [ 2232.427238][ T6931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2232.437309][ T6931] Call Trace: [ 2232.440606][ T6931] [ 2232.443547][ T6931] dump_stack_lvl+0x18c/0x250 [ 2232.448255][ T6931] ? show_regs_print_info+0x20/0x20 [ 2232.453481][ T6931] ? load_image+0x420/0x420 [ 2232.458003][ T6931] ? __lock_acquire+0x7d40/0x7d40 [ 2232.463093][ T6931] should_fail_ex+0x39d/0x4d0 [ 2232.467820][ T6931] should_failslab+0x9/0x20 [ 2232.472364][ T6931] slab_pre_alloc_hook+0x59/0x310 [ 2232.477424][ T6931] ? bpf_test_init+0x9f/0x140 [ 2232.482124][ T6931] ? bpf_test_init+0x9f/0x140 [ 2232.486904][ T6931] __kmem_cache_alloc_node+0x53/0x250 [ 2232.492303][ T6931] ? bpf_test_init+0x9f/0x140 [ 2232.497003][ T6931] __kmalloc+0xa4/0x230 [ 2232.501178][ T6931] bpf_test_init+0x9f/0x140 [ 2232.505697][ T6931] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 2232.511087][ T6931] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2232.517293][ T6931] ? lockdep_hardirqs_on+0x98/0x150 [ 2232.522529][ T6931] ? dev_put+0x80/0x80 [ 2232.526637][ T6931] ? dev_put+0x80/0x80 [ 2232.530719][ T6931] bpf_prog_test_run+0x321/0x390 [ 2232.535674][ T6931] __sys_bpf+0x49d/0x890 [ 2232.539933][ T6931] ? bpf_link_show_fdinfo+0x390/0x390 [ 2232.545330][ T6931] ? lock_chain_count+0x20/0x20 [ 2232.550216][ T6931] __x64_sys_bpf+0x7c/0x90 [ 2232.554647][ T6931] do_syscall_64+0x55/0xa0 [ 2232.559070][ T6931] ? clear_bhb_loop+0x40/0x90 [ 2232.563775][ T6931] ? clear_bhb_loop+0x40/0x90 [ 2232.568473][ T6931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2232.574388][ T6931] RIP: 0033:0x7f381999c819 [ 2232.578817][ T6931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2232.598448][ T6931] RSP: 002b:00007f381a818028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2232.606891][ T6931] RAX: ffffffffffffffda RBX: 00007f3819c16090 RCX: 00007f381999c819 [ 2232.614876][ T6931] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 2232.622861][ T6931] RBP: 00007f381a818090 R08: 0000000000000000 R09: 0000000000000000 [ 2232.630845][ T6931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2232.638826][ T6931] R13: 00007f3819c16128 R14: 00007f3819c16090 R15: 00007fffa6e8eb38 [ 2232.646830][ T6931] [ 2233.224868][ T6936] syzkaller0: entered promiscuous mode [ 2233.231467][ T6936] syzkaller0: entered allmulticast mode [ 2233.254109][ T6935] delete_channel: no stack [ 2233.305083][ T6939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2236.238837][ T6967] netlink: 'syz.1.11125': attribute type 9 has an invalid length. [ 2236.248125][ T6967] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11125'. [ 2236.293149][ T6969] netlink: 'syz.1.11125': attribute type 3 has an invalid length. [ 2236.303041][ T6969] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11125'. [ 2236.432850][ T6973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2236.998885][ T6982] netlink: 'syz.0.11130': attribute type 10 has an invalid length. [ 2237.075687][ T6982] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.11130'. [ 2237.175188][ T6975] syzkaller0: entered promiscuous mode [ 2237.183340][ T6975] syzkaller0: entered allmulticast mode [ 2237.216374][ T6974] delete_channel: no stack [ 2241.967376][ T6996] netlink: 'syz.1.11134': attribute type 10 has an invalid length. [ 2241.997937][ T6996] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11134'. [ 2242.001683][ T7001] FAULT_INJECTION: forcing a failure. [ 2242.001683][ T7001] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.013679][ T7000] netlink: 'syz.2.11136': attribute type 9 has an invalid length. [ 2242.029395][ T7001] CPU: 1 PID: 7001 Comm: syz.0.11135 Not tainted syzkaller #0 [ 2242.035557][ T7000] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11136'. [ 2242.036895][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2242.056444][ T7001] Call Trace: [ 2242.059736][ T7001] [ 2242.062691][ T7001] dump_stack_lvl+0x18c/0x250 [ 2242.067474][ T7001] ? show_regs_print_info+0x20/0x20 [ 2242.072706][ T7001] ? load_image+0x420/0x420 [ 2242.077247][ T7001] ? __might_sleep+0xe0/0xe0 [ 2242.081872][ T7001] ? __lock_acquire+0x7d40/0x7d40 [ 2242.086931][ T7001] should_fail_ex+0x39d/0x4d0 [ 2242.091651][ T7001] should_failslab+0x9/0x20 [ 2242.096197][ T7001] slab_pre_alloc_hook+0x59/0x310 [ 2242.101259][ T7001] ? __get_vm_area_node+0x125/0x370 [ 2242.106486][ T7001] __kmem_cache_alloc_node+0x53/0x250 [ 2242.111884][ T7001] ? __get_vm_area_node+0x125/0x370 [ 2242.117117][ T7001] kmalloc_node_trace+0x26/0xe0 [ 2242.121991][ T7001] __get_vm_area_node+0x125/0x370 [ 2242.127031][ T7001] __vmalloc_node_range+0x36e/0x1330 [ 2242.132328][ T7001] ? netlink_sendmsg+0x602/0xbf0 [ 2242.137267][ T7001] ? netlink_insert+0x109f/0x13a0 [ 2242.142324][ T7001] ? netlink_data_ready+0x10/0x10 [ 2242.147350][ T7001] ? free_vm_area+0x50/0x50 [ 2242.151859][ T7001] ? netlink_sendmsg+0x602/0xbf0 [ 2242.156855][ T7001] vmalloc+0x79/0x90 [ 2242.160778][ T7001] ? netlink_sendmsg+0x602/0xbf0 [ 2242.165755][ T7001] netlink_sendmsg+0x602/0xbf0 [ 2242.170593][ T7001] ? netlink_getsockopt+0x590/0x590 [ 2242.175803][ T7001] ? aa_sock_msg_perm+0x94/0x150 [ 2242.180769][ T7001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2242.186060][ T7001] ? security_socket_sendmsg+0x80/0xa0 [ 2242.191540][ T7001] ? netlink_getsockopt+0x590/0x590 [ 2242.196779][ T7001] ____sys_sendmsg+0x5ba/0x960 [ 2242.201562][ T7001] ? __asan_memset+0x22/0x40 [ 2242.206162][ T7001] ? __sys_sendmsg_sock+0x30/0x30 [ 2242.211186][ T7001] ? __import_iovec+0x5f2/0x850 [ 2242.216042][ T7001] ? import_iovec+0x73/0xa0 [ 2242.220545][ T7001] ___sys_sendmsg+0x2a6/0x360 [ 2242.225218][ T7001] ? get_pid_task+0x20/0x1e0 [ 2242.229822][ T7001] ? __sys_sendmsg+0x2a0/0x2a0 [ 2242.234598][ T7001] ? __lock_acquire+0x7d40/0x7d40 [ 2242.239724][ T7001] __se_sys_sendmsg+0x1c2/0x2b0 [ 2242.244574][ T7001] ? __x64_sys_sendmsg+0x80/0x80 [ 2242.249515][ T7001] ? lockdep_hardirqs_on+0x98/0x150 [ 2242.254717][ T7001] do_syscall_64+0x55/0xa0 [ 2242.259129][ T7001] ? clear_bhb_loop+0x40/0x90 [ 2242.263803][ T7001] ? clear_bhb_loop+0x40/0x90 [ 2242.268482][ T7001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2242.274373][ T7001] RIP: 0033:0x7f381999c819 [ 2242.278787][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.298400][ T7001] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2242.306989][ T7001] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2242.315048][ T7001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2242.323017][ T7001] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.330985][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.338953][ T7001] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2242.346936][ T7001] [ 2242.365088][ T7001] syz.0.11135: vmalloc error: size 213312, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2242.378761][ T7000] netlink: 'syz.2.11136': attribute type 3 has an invalid length. [ 2242.385191][ T7001] CPU: 0 PID: 7001 Comm: syz.0.11135 Not tainted syzkaller #0 [ 2242.394782][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2242.404840][ T7001] Call Trace: [ 2242.408120][ T7001] [ 2242.411054][ T7001] dump_stack_lvl+0x18c/0x250 [ 2242.415754][ T7001] ? show_regs_print_info+0x20/0x20 [ 2242.420956][ T7001] ? load_image+0x420/0x420 [ 2242.425462][ T7001] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2242.431881][ T7001] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2242.438382][ T7001] warn_alloc+0x246/0x340 [ 2242.442714][ T7001] ? __get_vm_area_node+0x125/0x370 [ 2242.447912][ T7001] ? zone_watermark_ok_safe+0x230/0x230 [ 2242.453463][ T7001] ? rcu_is_watching+0x15/0xb0 [ 2242.458229][ T7001] ? __get_vm_area_node+0x356/0x370 [ 2242.463433][ T7001] __vmalloc_node_range+0x393/0x1330 [ 2242.468730][ T7001] ? netlink_insert+0x109f/0x13a0 [ 2242.473799][ T7001] ? netlink_data_ready+0x10/0x10 [ 2242.478836][ T7001] ? free_vm_area+0x50/0x50 [ 2242.483357][ T7001] ? netlink_sendmsg+0x602/0xbf0 [ 2242.488298][ T7001] vmalloc+0x79/0x90 [ 2242.492193][ T7001] ? netlink_sendmsg+0x602/0xbf0 [ 2242.497131][ T7001] netlink_sendmsg+0x602/0xbf0 [ 2242.501904][ T7001] ? netlink_getsockopt+0x590/0x590 [ 2242.507105][ T7001] ? aa_sock_msg_perm+0x94/0x150 [ 2242.512045][ T7001] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2242.517336][ T7001] ? security_socket_sendmsg+0x80/0xa0 [ 2242.522792][ T7001] ? netlink_getsockopt+0x590/0x590 [ 2242.528006][ T7001] ____sys_sendmsg+0x5ba/0x960 [ 2242.532870][ T7001] ? __asan_memset+0x22/0x40 [ 2242.537502][ T7001] ? __sys_sendmsg_sock+0x30/0x30 [ 2242.542525][ T7001] ? __import_iovec+0x5f2/0x850 [ 2242.547375][ T7001] ? import_iovec+0x73/0xa0 [ 2242.551875][ T7001] ___sys_sendmsg+0x2a6/0x360 [ 2242.556560][ T7001] ? get_pid_task+0x20/0x1e0 [ 2242.561156][ T7001] ? __sys_sendmsg+0x2a0/0x2a0 [ 2242.565933][ T7001] ? __lock_acquire+0x7d40/0x7d40 [ 2242.570976][ T7001] __se_sys_sendmsg+0x1c2/0x2b0 [ 2242.575827][ T7001] ? __x64_sys_sendmsg+0x80/0x80 [ 2242.580774][ T7001] ? lockdep_hardirqs_on+0x98/0x150 [ 2242.586001][ T7001] do_syscall_64+0x55/0xa0 [ 2242.590420][ T7001] ? clear_bhb_loop+0x40/0x90 [ 2242.595096][ T7001] ? clear_bhb_loop+0x40/0x90 [ 2242.599790][ T7001] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2242.605715][ T7001] RIP: 0033:0x7f381999c819 [ 2242.610126][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.629736][ T7001] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2242.638158][ T7001] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2242.646130][ T7001] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 2242.654102][ T7001] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.662071][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.670047][ T7001] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2242.678031][ T7001] [ 2242.687229][ T7001] Mem-Info: [ 2242.690571][ T7001] active_anon:11378 inactive_anon:0 isolated_anon:0 [ 2242.690571][ T7001] active_file:19394 inactive_file:40764 isolated_file:0 [ 2242.690571][ T7001] unevictable:768 dirty:47 writeback:0 [ 2242.690571][ T7001] slab_reclaimable:10342 slab_unreclaimable:95918 [ 2242.690571][ T7001] mapped:25026 shmem:1361 pagetables:545 [ 2242.690571][ T7001] sec_pagetables:0 bounce:0 [ 2242.690571][ T7001] kernel_misc_reclaimable:0 [ 2242.690571][ T7001] free:1335415 free_pcp:6029 free_cma:0 [ 2242.695406][ T7000] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11136'. [ 2242.736361][ T7001] Node 0 active_anon:45512kB inactive_anon:0kB active_file:77576kB inactive_file:162852kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100104kB dirty:188kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10056kB pagetables:2180kB sec_pagetables:0kB all_unreclaimable? no [ 2242.736480][ T7001] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2242.833198][ T7001] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2242.860888][ T7001] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2242.866689][ T7001] Node 0 DMA32 free:1435540kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:45476kB inactive_anon:0kB active_file:77576kB inactive_file:162036kB unevictable:1536kB writepending:188kB present:3129332kB managed:2586956kB mlocked:0kB bounce:0kB free_pcp:5336kB local_pcp:3616kB free_cma:0kB [ 2242.899325][ T7001] lowmem_reserve[]: 0 0 0 0 0 [ 2242.904369][ T7001] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2242.934274][ T7001] lowmem_reserve[]: 0 0 0 0 0 [ 2242.939063][ T7001] Node 1 Normal free:3890496kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:19240kB local_pcp:9124kB free_cma:0kB [ 2242.977273][ T7001] lowmem_reserve[]: 0 0 0 0 0 [ 2242.995649][ T7001] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2243.008750][ T7001] Node 0 DMA32: 3741*4kB (UME) 1166*8kB (UME) 2825*16kB (UME) 1651*32kB (UME) 941*64kB (UME) 767*128kB (UME) 452*256kB (UME) 154*512kB (UME) 70*1024kB (UM) 10*2048kB (UME) 212*4096kB (UM) = 1435796kB [ 2243.028925][ T7001] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2243.062871][ T7001] Node 1 Normal: 248*4kB (UM) 56*8kB (UME) 48*16kB (UME) 45*32kB (UME) 20*64kB (UME) 6*128kB (UME) 3*256kB (UME) 0*512kB 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3890496kB [ 2243.089217][ T7001] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2243.099338][ T7001] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2243.109648][ T7001] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2243.121105][ T7001] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2243.131041][ T7001] 61519 total pagecache pages [ 2243.135754][ T7001] 0 pages in swap cache [ 2243.154106][ T7001] Free swap = 124996kB [ 2243.158339][ T7001] Total swap = 124996kB [ 2243.188059][ T7001] 2097051 pages RAM [ 2243.199004][ T7001] 0 pages HighMem/MovableOnly [ 2243.220947][ T7001] 416926 pages reserved [ 2243.230276][ T7010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2243.235311][ T7001] 0 pages cma reserved [ 2243.504109][ T7017] syzkaller0: entered promiscuous mode [ 2243.509976][ T7017] syzkaller0: entered allmulticast mode [ 2243.526350][ T7014] delete_channel: no stack [ 2246.023025][ T7027] netlink: 'syz.3.11146': attribute type 10 has an invalid length. [ 2246.032578][ T7027] bond0: (slave bond_slave_0): Releasing backup interface [ 2246.040458][ T7027] bond_slave_0: left promiscuous mode [ 2246.046105][ T7027] bond_slave_0: left allmulticast mode [ 2246.155282][ T7035] netlink: 'syz.2.11148': attribute type 9 has an invalid length. [ 2246.163495][ T7035] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11148'. [ 2246.228245][ T7040] netlink: 'syz.2.11148': attribute type 3 has an invalid length. [ 2246.259928][ T7040] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11148'. [ 2246.327642][ T7044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2247.060901][ T7069] netlink: 'syz.3.11161': attribute type 9 has an invalid length. [ 2247.068834][ T7069] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.11161'. [ 2247.089348][ T7056] syzkaller0: entered promiscuous mode [ 2247.112243][ T7070] netlink: 'syz.3.11161': attribute type 3 has an invalid length. [ 2247.130014][ T7056] syzkaller0: entered allmulticast mode [ 2247.149883][ T7070] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11161'. [ 2247.161210][ T7055] delete_channel: no stack [ 2251.098734][ T7077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2251.340855][ T7094] netlink: 'syz.2.11172': attribute type 9 has an invalid length. [ 2251.356828][ T7094] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11172'. [ 2251.413129][ T7094] netlink: 'syz.2.11172': attribute type 3 has an invalid length. [ 2251.435786][ T7094] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11172'. [ 2251.587489][ T7096] syzkaller0: entered promiscuous mode [ 2251.593429][ T7096] syzkaller0: entered allmulticast mode [ 2251.638467][ T7095] delete_channel: no stack [ 2254.455540][ T7107] netlink: 'syz.2.11175': attribute type 2 has an invalid length. [ 2254.463957][ T7107] netlink: 'syz.2.11175': attribute type 8 has an invalid length. [ 2254.473249][ T7107] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11175'. [ 2254.566636][ T7113] tap0: tun_chr_ioctl cmd 1074025675 [ 2254.572499][ T7113] tap0: persist enabled [ 2254.782106][ T7124] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2254.797700][ T7122] netlink: 'syz.2.11178': attribute type 10 has an invalid length. [ 2254.845295][ T7122] bridge0: port 2(bridge_slave_1) entered disabled state [ 2254.895980][ T7127] netlink: 'syz.3.11181': attribute type 19 has an invalid length. [ 2254.927855][ T7127] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11181'. [ 2254.954846][ T7133] netlink: 'syz.1.11183': attribute type 3 has an invalid length. [ 2254.962979][ T7133] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11183'. [ 2255.131919][ T7140] FAULT_INJECTION: forcing a failure. [ 2255.131919][ T7140] name failslab, interval 1, probability 0, space 0, times 0 [ 2255.196125][ T7140] CPU: 1 PID: 7140 Comm: syz.2.11185 Not tainted syzkaller #0 [ 2255.203664][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2255.213749][ T7140] Call Trace: [ 2255.217069][ T7140] [ 2255.220041][ T7140] dump_stack_lvl+0x18c/0x250 [ 2255.224755][ T7140] ? show_regs_print_info+0x20/0x20 [ 2255.229992][ T7140] ? load_image+0x420/0x420 [ 2255.234532][ T7140] ? __might_sleep+0xe0/0xe0 [ 2255.239155][ T7140] ? __lock_acquire+0x7d40/0x7d40 [ 2255.244234][ T7140] should_fail_ex+0x39d/0x4d0 [ 2255.248957][ T7140] should_failslab+0x9/0x20 [ 2255.253518][ T7140] slab_pre_alloc_hook+0x59/0x310 [ 2255.258580][ T7140] ? __lock_acquire+0x7d40/0x7d40 [ 2255.263642][ T7140] kmem_cache_alloc_node+0x60/0x320 [ 2255.268881][ T7140] ? __alloc_skb+0x103/0x2c0 [ 2255.273510][ T7140] __alloc_skb+0x103/0x2c0 [ 2255.277963][ T7140] netlink_sendmsg+0x66a/0xbf0 [ 2255.282770][ T7140] ? netlink_getsockopt+0x590/0x590 [ 2255.288005][ T7140] ? aa_sock_msg_perm+0x94/0x150 [ 2255.292983][ T7140] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2255.298295][ T7140] ? security_socket_sendmsg+0x80/0xa0 [ 2255.303771][ T7140] ? netlink_getsockopt+0x590/0x590 [ 2255.309006][ T7140] ____sys_sendmsg+0x5ba/0x960 [ 2255.313778][ T7140] ? __asan_memset+0x22/0x40 [ 2255.318367][ T7140] ? __sys_sendmsg_sock+0x30/0x30 [ 2255.323394][ T7140] ? __import_iovec+0x5f2/0x850 [ 2255.328252][ T7140] ? import_iovec+0x73/0xa0 [ 2255.332754][ T7140] ___sys_sendmsg+0x2a6/0x360 [ 2255.337430][ T7140] ? __sys_sendmsg+0x2a0/0x2a0 [ 2255.342206][ T7140] ? __lock_acquire+0x7d40/0x7d40 [ 2255.347247][ T7140] __se_sys_sendmsg+0x1c2/0x2b0 [ 2255.352097][ T7140] ? __x64_sys_sendmsg+0x80/0x80 [ 2255.357045][ T7140] ? lockdep_hardirqs_on+0x98/0x150 [ 2255.362242][ T7140] do_syscall_64+0x55/0xa0 [ 2255.366679][ T7140] ? clear_bhb_loop+0x40/0x90 [ 2255.371379][ T7140] ? clear_bhb_loop+0x40/0x90 [ 2255.376077][ T7140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2255.381970][ T7140] RIP: 0033:0x7f887299c819 [ 2255.386394][ T7140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2255.406013][ T7140] RSP: 002b:00007f8873918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2255.414431][ T7140] RAX: ffffffffffffffda RBX: 00007f8872c15fa0 RCX: 00007f887299c819 [ 2255.422408][ T7140] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2255.430381][ T7140] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2255.438349][ T7140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2255.446320][ T7140] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2255.454304][ T7140] [ 2255.627935][ T7138] syzkaller0: entered promiscuous mode [ 2255.634842][ T7138] syzkaller0: entered allmulticast mode [ 2255.657848][ T7136] delete_channel: no stack [ 2260.013676][ T7159] netlink: 'syz.0.11192': attribute type 3 has an invalid length. [ 2260.031346][ T7159] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.11192'. [ 2260.071154][ T7157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2260.356708][ T7170] netlink: 'syz.1.11197': attribute type 10 has an invalid length. [ 2260.368070][ T7170] netlink: 'syz.1.11197': attribute type 10 has an invalid length. [ 2260.397219][ T7170] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.11197'. [ 2260.407123][ T7170] openvswitch: netlink: Message has 4 unknown bytes. [ 2263.149114][ T7192] syzkaller0: entered promiscuous mode [ 2263.155513][ T7192] syzkaller0: entered allmulticast mode [ 2263.167190][ T7191] delete_channel: no stack [ 2263.240506][ T7201] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2263.488996][ T7204] netlink: 'syz.2.11206': attribute type 3 has an invalid length. [ 2263.509232][ T7204] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11206'. [ 2267.605854][ T7209] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11209'. [ 2267.617611][ T7209] bond0: (slave bond_slave_0): Releasing backup interface [ 2267.627148][ T7209] bond_slave_0: left promiscuous mode [ 2267.633945][ T7209] bond_slave_0: left allmulticast mode [ 2267.645410][ T7209] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2269.906525][ T7233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2270.005884][ T7238] netlink: 'syz.3.11218': attribute type 3 has an invalid length. [ 2270.014010][ T7238] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11218'. [ 2270.241991][ T7240] syzkaller0: entered promiscuous mode [ 2270.247986][ T7240] syzkaller0: entered allmulticast mode [ 2270.302057][ T7239] delete_channel: no stack [ 2274.565360][ T7251] netlink: 'syz.0.11223': attribute type 5 has an invalid length. [ 2274.852150][ T7261] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2275.003534][ T7272] netlink: 'syz.3.11231': attribute type 3 has an invalid length. [ 2275.011497][ T7272] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.11231'. [ 2275.113294][ T7276] netlink: 'syz.3.11234': attribute type 11 has an invalid length. [ 2275.121493][ T7276] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11234'. [ 2275.150795][ T7279] FAULT_INJECTION: forcing a failure. [ 2275.150795][ T7279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2275.199815][ T7279] CPU: 1 PID: 7279 Comm: syz.0.11233 Not tainted syzkaller #0 [ 2275.207359][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2275.217455][ T7279] Call Trace: [ 2275.220757][ T7279] [ 2275.223708][ T7279] dump_stack_lvl+0x18c/0x250 [ 2275.228511][ T7279] ? show_regs_print_info+0x20/0x20 [ 2275.233832][ T7279] ? load_image+0x420/0x420 [ 2275.238397][ T7279] ? __lock_acquire+0x7d40/0x7d40 [ 2275.243465][ T7279] should_fail_ex+0x39d/0x4d0 [ 2275.248198][ T7279] prepare_alloc_pages+0x1e2/0x5f0 [ 2275.253344][ T7279] __alloc_pages+0x134/0x460 [ 2275.257951][ T7279] ? zone_statistics+0x170/0x170 [ 2275.262913][ T7279] ? alloc_pages+0x4dc/0x740 [ 2275.267505][ T7279] ? do_raw_spin_unlock+0x121/0x230 [ 2275.272712][ T7279] __get_free_pages+0xc/0x30 [ 2275.277303][ T7279] kasan_populate_vmalloc_pte+0x35/0x100 [ 2275.283118][ T7279] __apply_to_page_range+0x860/0xdd0 [ 2275.288426][ T7279] ? kasan_populate_vmalloc+0x70/0x70 [ 2275.293806][ T7279] ? apply_to_page_range+0x50/0x50 [ 2275.298923][ T7279] ? do_raw_spin_unlock+0x121/0x230 [ 2275.304132][ T7279] alloc_vmap_area+0x1d0c/0x1e30 [ 2275.309098][ T7279] ? vm_map_ram+0xcb0/0xcb0 [ 2275.313608][ T7279] ? rcu_is_watching+0x15/0xb0 [ 2275.318380][ T7279] __get_vm_area_node+0x162/0x370 [ 2275.323405][ T7279] ? bpf_map_area_alloc+0x5e/0x110 [ 2275.328519][ T7279] __vmalloc_node_range+0x36e/0x1330 [ 2275.333810][ T7279] ? dev_map_create_hash+0x24/0x1d0 [ 2275.339026][ T7279] ? free_vm_area+0x50/0x50 [ 2275.343568][ T7279] ? __kmem_cache_alloc_node+0x13a/0x250 [ 2275.349300][ T7279] bpf_map_area_alloc+0xf1/0x110 [ 2275.354250][ T7279] ? dev_map_create_hash+0x24/0x1d0 [ 2275.359445][ T7279] dev_map_create_hash+0x24/0x1d0 [ 2275.364480][ T7279] ? bpf_map_init_from_attr+0x14a/0x340 [ 2275.370034][ T7279] dev_map_alloc+0x277/0x4c0 [ 2275.374630][ T7279] map_create+0x877/0x12f0 [ 2275.379045][ T7279] ? bpf_lsm_bpf+0x9/0x10 [ 2275.383383][ T7279] __sys_bpf+0x651/0x890 [ 2275.387630][ T7279] ? bpf_link_show_fdinfo+0x390/0x390 [ 2275.393012][ T7279] ? lock_chain_count+0x20/0x20 [ 2275.397922][ T7279] __x64_sys_bpf+0x7c/0x90 [ 2275.402359][ T7279] do_syscall_64+0x55/0xa0 [ 2275.406786][ T7279] ? clear_bhb_loop+0x40/0x90 [ 2275.411486][ T7279] ? clear_bhb_loop+0x40/0x90 [ 2275.416188][ T7279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2275.422095][ T7279] RIP: 0033:0x7f381999c819 [ 2275.426515][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2275.446123][ T7279] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2275.454561][ T7279] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2275.462546][ T7279] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000000 [ 2275.470535][ T7279] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.478530][ T7279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.486531][ T7279] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2275.494552][ T7279] [ 2278.237733][ T7292] delete_channel: no stack [ 2278.253801][ T7308] netlink: 'syz.1.11243': attribute type 3 has an invalid length. [ 2278.269989][ T7308] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.11243'. [ 2278.294741][ T7293] syzkaller0: entered promiscuous mode [ 2278.304439][ T7293] syzkaller0: entered allmulticast mode [ 2278.317688][ T7301] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2283.503255][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.509604][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.987803][ T7336] netlink: 'syz.2.11253': attribute type 9 has an invalid length. [ 2284.997811][ T7336] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.11253'. [ 2285.119244][ T7341] netlink: 'syz.2.11253': attribute type 3 has an invalid length. [ 2285.141129][ T7341] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11253'. [ 2285.157680][ T7342] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.11252'. [ 2285.238672][ T7343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2285.668310][ T7347] syzkaller0: entered promiscuous mode [ 2285.674752][ T7347] syzkaller0: entered allmulticast mode [ 2285.701595][ T7346] delete_channel: no stack [ 2290.935137][ T7370] netlink: 'syz.0.11263': attribute type 3 has an invalid length. [ 2290.972941][ T7373] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2290.974768][ T7370] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.11263'. [ 2291.001233][ T7374] mac80211_hwsim hwsim78 ..ãc¤±: renamed from wlan1 (while UP) [ 2291.311538][ T7383] netlink: 'syz.0.11268': attribute type 19 has an invalid length. [ 2291.319538][ T7383] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11268'. [ 2291.886327][ T7391] syzkaller0: entered promiscuous mode [ 2291.896599][ T7391] syzkaller0: entered allmulticast mode [ 2291.924227][ T7390] delete_channel: no stack [ 2296.658865][ T7409] netlink: 'syz.2.11277': attribute type 3 has an invalid length. [ 2296.700434][ T7409] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.11277'. [ 2296.723521][ T7408] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2296.983981][ T7425] netlink: 'syz.3.11284': attribute type 10 has an invalid length. [ 2297.602662][ T7437] syzkaller0: entered promiscuous mode [ 2297.608618][ T7437] syzkaller0: entered allmulticast mode [ 2297.639819][ T7436] delete_channel: no stack [ 2302.481755][ T7448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.731752][ T7460] FAULT_INJECTION: forcing a failure. [ 2302.731752][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2302.745482][ T7460] CPU: 0 PID: 7460 Comm: syz.0.11297 Not tainted syzkaller #0 [ 2302.753002][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2302.763089][ T7460] Call Trace: [ 2302.766385][ T7460] [ 2302.769340][ T7460] dump_stack_lvl+0x18c/0x250 [ 2302.774080][ T7460] ? show_regs_print_info+0x20/0x20 [ 2302.779313][ T7460] ? load_image+0x420/0x420 [ 2302.783850][ T7460] ? __lock_acquire+0x7d40/0x7d40 [ 2302.789020][ T7460] ? snprintf+0xe9/0x140 [ 2302.793309][ T7460] should_fail_ex+0x39d/0x4d0 [ 2302.798037][ T7460] _copy_to_user+0x2f/0xa0 [ 2302.802492][ T7460] simple_read_from_buffer+0xe7/0x150 [ 2302.807909][ T7460] proc_fail_nth_read+0x1e8/0x260 [ 2302.812975][ T7460] ? proc_fault_inject_write+0x360/0x360 [ 2302.818648][ T7460] ? fsnotify_perm+0x271/0x5e0 [ 2302.823448][ T7460] ? proc_fault_inject_write+0x360/0x360 [ 2302.829125][ T7460] vfs_read+0x28b/0x970 [ 2302.833322][ T7460] ? kernel_read+0x1e0/0x1e0 [ 2302.838032][ T7460] ? __fget_files+0x28/0x4b0 [ 2302.842652][ T7460] ? __fget_files+0x28/0x4b0 [ 2302.847448][ T7460] ? __fget_files+0x43d/0x4b0 [ 2302.852162][ T7460] ? __fdget_pos+0x2a3/0x330 [ 2302.856785][ T7460] ? ksys_read+0x75/0x260 [ 2302.861160][ T7460] ksys_read+0x150/0x260 [ 2302.865456][ T7460] ? vfs_write+0x990/0x990 [ 2302.869920][ T7460] ? lockdep_hardirqs_on+0x98/0x150 [ 2302.875173][ T7460] do_syscall_64+0x55/0xa0 [ 2302.879629][ T7460] ? clear_bhb_loop+0x40/0x90 [ 2302.884339][ T7460] ? clear_bhb_loop+0x40/0x90 [ 2302.889068][ T7460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.895013][ T7460] RIP: 0033:0x7f381995d04e [ 2302.899470][ T7460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2302.919113][ T7460] RSP: 002b:00007f381a838fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2302.927632][ T7460] RAX: ffffffffffffffda RBX: 00007f381a8396c0 RCX: 00007f381995d04e [ 2302.935640][ T7460] RDX: 000000000000000f RSI: 00007f381a8390a0 RDI: 0000000000000005 [ 2302.943648][ T7460] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2302.951652][ T7460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2302.959658][ T7460] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2302.967679][ T7460] [ 2303.628834][ T7485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2303.789166][ T7481] syzkaller0: entered promiscuous mode [ 2303.795555][ T7481] syzkaller0: entered allmulticast mode [ 2303.820753][ T7476] delete_channel: no stack [ 2307.559025][ T7511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2307.607027][ T7515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2308.208186][ T7520] syzkaller0: entered promiscuous mode [ 2308.214131][ T7520] syzkaller0: entered allmulticast mode [ 2308.231828][ T7519] delete_channel: no stack [ 2312.400449][ T7549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2312.487861][ T7554] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11326'. [ 2312.497521][ T7554] tc_dump_action: action bad kind [ 2312.687720][ T7557] syzkaller0: entered promiscuous mode [ 2312.693351][ T7557] syzkaller0: entered allmulticast mode [ 2312.709118][ T7555] delete_channel: no stack [ 2314.899100][ T7564] netlink: 'syz.0.11330': attribute type 17 has an invalid length. [ 2314.907146][ T7564] netlink: 'syz.0.11330': attribute type 16 has an invalid length. [ 2314.915761][ T7564] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11330'. [ 2315.053931][ T7569] netlink: 'syz.0.11332': attribute type 10 has an invalid length. [ 2315.122376][ T7571] netlink: 'syz.1.11333': attribute type 25 has an invalid length. [ 2315.423232][ T7584] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2315.748045][ T7590] syzkaller0: entered promiscuous mode [ 2315.754041][ T7590] syzkaller0: entered allmulticast mode [ 2315.793308][ T7589] delete_channel: no stack [ 2318.592061][ T7613] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11344'. [ 2319.142069][ T7631] FAULT_INJECTION: forcing a failure. [ 2319.142069][ T7631] name failslab, interval 1, probability 0, space 0, times 0 [ 2319.159871][ T7631] CPU: 1 PID: 7631 Comm: syz.2.11351 Not tainted syzkaller #0 [ 2319.167398][ T7631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2319.177481][ T7631] Call Trace: [ 2319.180792][ T7631] [ 2319.183747][ T7631] dump_stack_lvl+0x18c/0x250 [ 2319.188484][ T7631] ? show_regs_print_info+0x20/0x20 [ 2319.193714][ T7631] ? load_image+0x420/0x420 [ 2319.198319][ T7631] should_fail_ex+0x39d/0x4d0 [ 2319.203038][ T7631] should_failslab+0x9/0x20 [ 2319.207572][ T7631] slab_pre_alloc_hook+0x59/0x310 [ 2319.212635][ T7631] ? nf_ct_ext_add+0x1ab/0x440 [ 2319.217429][ T7631] ? nf_ct_ext_add+0x1ab/0x440 [ 2319.222222][ T7631] __kmem_cache_alloc_node+0x53/0x250 [ 2319.227639][ T7631] ? nf_ct_ext_add+0x1ab/0x440 [ 2319.232517][ T7631] __kmalloc_node_track_caller+0xa2/0x230 [ 2319.238280][ T7631] krealloc+0x86/0x120 [ 2319.242387][ T7631] nf_ct_ext_add+0x1ab/0x440 [ 2319.247019][ T7631] init_conntrack+0x69c/0xf10 [ 2319.251742][ T7631] ? early_drop+0x7f0/0x7f0 [ 2319.256281][ T7631] ? nf_conntrack_find_get+0x650/0x650 [ 2319.261762][ T7631] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2319.267162][ T7631] ? __siphash_unaligned+0x22e/0x3a0 [ 2319.272492][ T7631] nf_conntrack_in+0xc06/0x15c0 [ 2319.277426][ T7631] ? nf_ct_pernet+0x270/0x270 [ 2319.282150][ T7631] ? ipt_do_table+0x2c1/0x15e0 [ 2319.286970][ T7631] ? ipv4_conntrack_defrag+0x29d/0x5a0 [ 2319.292566][ T7631] ? ipv4_conntrack_local+0x123/0x200 [ 2319.297967][ T7631] ? ipv4_conntrack_in+0x20/0x20 [ 2319.302928][ T7631] nf_hook_slow+0xbd/0x200 [ 2319.307378][ T7631] ? nf_hook+0x390/0x390 [ 2319.311644][ T7631] nf_hook+0x228/0x390 [ 2319.315747][ T7631] ? nf_hook+0xa2/0x390 [ 2319.319930][ T7631] ? __ip_local_out+0x5f0/0x5f0 [ 2319.324813][ T7631] ? nf_hook+0x390/0x390 [ 2319.329104][ T7631] ? ip_fast_csum+0x1ee/0x2b0 [ 2319.333826][ T7631] __ip_local_out+0x4db/0x5f0 [ 2319.338525][ T7631] ? nf_hook+0x390/0x390 [ 2319.342801][ T7631] ip_send_skb+0x4c/0x1d0 [ 2319.347165][ T7631] udp_send_skb+0xa37/0x13a0 [ 2319.351835][ T7631] udp_sendmsg+0x1b16/0x23b0 [ 2319.356484][ T7631] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2319.361365][ T7631] ? udp_cmsg_send+0x350/0x350 [ 2319.366179][ T7631] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2319.372191][ T7631] ? lock_chain_count+0x20/0x20 [ 2319.377065][ T7631] ? inet_sendmsg+0x14b/0x2f0 [ 2319.381820][ T7631] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2319.387216][ T7631] ? _local_bh_enable+0xa0/0xa0 [ 2319.392100][ T7631] ? inet_sendmsg+0x14b/0x2f0 [ 2319.396814][ T7631] ? inet_sendmsg+0x14b/0x2f0 [ 2319.401518][ T7631] ? inet_send_prepare+0x260/0x260 [ 2319.406646][ T7631] ____sys_sendmsg+0x5ba/0x960 [ 2319.411419][ T7631] ? __lock_acquire+0x7d40/0x7d40 [ 2319.416452][ T7631] ? __asan_memset+0x22/0x40 [ 2319.421051][ T7631] ? __sys_sendmsg_sock+0x30/0x30 [ 2319.426077][ T7631] ? __import_iovec+0x3fa/0x850 [ 2319.430945][ T7631] ? import_iovec+0x73/0xa0 [ 2319.435460][ T7631] ___sys_sendmsg+0x2a6/0x360 [ 2319.440150][ T7631] ? __sys_sendmsg+0x2a0/0x2a0 [ 2319.444950][ T7631] ? trace_call_bpf+0xc3/0x6c0 [ 2319.449784][ T7631] __se_sys_sendmsg+0x1c2/0x2b0 [ 2319.454646][ T7631] ? __x64_sys_sendmsg+0x80/0x80 [ 2319.459611][ T7631] ? lockdep_hardirqs_on+0x98/0x150 [ 2319.464842][ T7631] do_syscall_64+0x55/0xa0 [ 2319.469257][ T7631] ? clear_bhb_loop+0x40/0x90 [ 2319.473939][ T7631] ? clear_bhb_loop+0x40/0x90 [ 2319.478642][ T7631] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2319.484539][ T7631] RIP: 0033:0x7f887299c819 [ 2319.488958][ T7631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2319.508594][ T7631] RSP: 002b:00007f8873918028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2319.517017][ T7631] RAX: ffffffffffffffda RBX: 00007f8872c15fa0 RCX: 00007f887299c819 [ 2319.525114][ T7631] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000010 [ 2319.533093][ T7631] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2319.541068][ T7631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2319.549040][ T7631] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2319.557042][ T7631] [ 2319.614682][ T7622] netlink: 'syz.1.11344': attribute type 2 has an invalid length. [ 2319.631447][ T7622] netlink: 'syz.1.11344': attribute type 4 has an invalid length. [ 2319.639450][ T7622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11344'. [ 2319.932116][ T7634] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2320.326943][ T7638] syzkaller0: entered promiscuous mode [ 2320.333029][ T7638] syzkaller0: entered allmulticast mode [ 2320.349292][ T7637] delete_channel: no stack [ 2322.528190][ T7651] netlink: 'syz.2.11357': attribute type 2 has an invalid length. [ 2322.541454][ T7651] netlink: 'syz.2.11357': attribute type 8 has an invalid length. [ 2322.550693][ T7651] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11357'. [ 2322.706608][ T7663] netlink: 'syz.3.11361': attribute type 21 has an invalid length. [ 2322.730043][ T7663] FAULT_INJECTION: forcing a failure. [ 2322.730043][ T7663] name failslab, interval 1, probability 0, space 0, times 0 [ 2322.766891][ T7663] CPU: 1 PID: 7663 Comm: syz.3.11361 Not tainted syzkaller #0 [ 2322.774091][ T7664] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.11362'. [ 2322.774386][ T7663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2322.774401][ T7663] Call Trace: [ 2322.774411][ T7663] [ 2322.774421][ T7663] dump_stack_lvl+0x18c/0x250 [ 2322.804912][ T7663] ? show_regs_print_info+0x20/0x20 [ 2322.810163][ T7663] ? load_image+0x420/0x420 [ 2322.814716][ T7663] ? __lock_acquire+0x7d40/0x7d40 [ 2322.819777][ T7663] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2322.825557][ T7663] should_fail_ex+0x39d/0x4d0 [ 2322.830295][ T7663] should_failslab+0x9/0x20 [ 2322.834831][ T7663] slab_pre_alloc_hook+0x59/0x310 [ 2322.839890][ T7663] ? fib_create_info+0xa61/0x2460 [ 2322.844947][ T7663] ? fib_create_info+0xa61/0x2460 [ 2322.850000][ T7663] __kmem_cache_alloc_node+0x53/0x250 [ 2322.855412][ T7663] ? fib_create_info+0xa61/0x2460 [ 2322.860486][ T7663] __kmalloc+0xa4/0x230 [ 2322.864689][ T7663] fib_create_info+0xa61/0x2460 [ 2322.869613][ T7663] fib_table_insert+0xc6/0x1b20 [ 2322.874506][ T7663] ? lwtunnel_valid_encap_type+0x27e/0x600 [ 2322.880355][ T7663] ? lwtunnel_valid_encap_type+0x90/0x600 [ 2322.886116][ T7663] ? rtm_to_fib_config+0x1074/0x13b0 [ 2322.891568][ T7663] ? fib_new_table+0x10a/0x2d0 [ 2322.896396][ T7663] inet_rtm_newroute+0x14b/0x240 [ 2322.901367][ T7663] ? rcu_read_unlock+0xa0/0xa0 [ 2322.906166][ T7663] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2322.911291][ T7663] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 2322.916406][ T7663] ? rcu_read_unlock+0xa0/0xa0 [ 2322.921261][ T7663] rtnetlink_rcv_msg+0x869/0xfa0 [ 2322.926216][ T7663] ? rtnetlink_bind+0x80/0x80 [ 2322.930900][ T7663] ? perf_trace_preemptirq_template+0xac/0x330 [ 2322.937063][ T7663] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 2322.942883][ T7663] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2322.948907][ T7663] ? __dev_queue_xmit+0x265/0x3660 [ 2322.954042][ T7663] ? __dev_queue_xmit+0x265/0x3660 [ 2322.959204][ T7663] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2322.964955][ T7663] ? perf_trace_lock+0x304/0x3b0 [ 2322.969923][ T7663] netlink_rcv_skb+0x241/0x4d0 [ 2322.974709][ T7663] ? rtnetlink_bind+0x80/0x80 [ 2322.979394][ T7663] ? netlink_ack+0x1180/0x1180 [ 2322.984188][ T7663] ? __lock_acquire+0x7d40/0x7d40 [ 2322.989234][ T7663] ? netlink_deliver_tap+0x2e/0x1b0 [ 2322.994481][ T7663] netlink_unicast+0x751/0x8d0 [ 2322.999288][ T7663] netlink_sendmsg+0x8d0/0xbf0 [ 2323.004059][ T7663] ? perf_trace_lock+0x304/0x3b0 [ 2323.009015][ T7663] ? netlink_getsockopt+0x590/0x590 [ 2323.014230][ T7663] ? aa_sock_msg_perm+0x94/0x150 [ 2323.019179][ T7663] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2323.024729][ T7663] ? security_socket_sendmsg+0x80/0xa0 [ 2323.030192][ T7663] ? netlink_getsockopt+0x590/0x590 [ 2323.035401][ T7663] ____sys_sendmsg+0x5ba/0x960 [ 2323.040184][ T7663] ? __asan_memset+0x22/0x40 [ 2323.044781][ T7663] ? __sys_sendmsg_sock+0x30/0x30 [ 2323.049808][ T7663] ? __import_iovec+0x5f2/0x850 [ 2323.054675][ T7663] ? import_iovec+0x73/0xa0 [ 2323.059187][ T7663] ___sys_sendmsg+0x2a6/0x360 [ 2323.063893][ T7663] ? __sys_sendmsg+0x2a0/0x2a0 [ 2323.068693][ T7663] ? __lock_acquire+0x7d40/0x7d40 [ 2323.073758][ T7663] __se_sys_sendmsg+0x1c2/0x2b0 [ 2323.078706][ T7663] ? __x64_sys_sendmsg+0x80/0x80 [ 2323.083668][ T7663] ? lockdep_hardirqs_on+0x98/0x150 [ 2323.088873][ T7663] do_syscall_64+0x55/0xa0 [ 2323.093286][ T7663] ? clear_bhb_loop+0x40/0x90 [ 2323.097969][ T7663] ? clear_bhb_loop+0x40/0x90 [ 2323.102651][ T7663] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2323.108555][ T7663] RIP: 0033:0x7f44d019c819 [ 2323.112975][ T7663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2323.132633][ T7663] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2323.141056][ T7663] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2323.149027][ T7663] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 2323.157000][ T7663] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2323.164993][ T7663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2323.172969][ T7663] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2323.180968][ T7663] [ 2323.243795][ T7664] netlink: 'syz.2.11362': attribute type 21 has an invalid length. [ 2323.253948][ T7664] netlink: 'syz.2.11362': attribute type 6 has an invalid length. [ 2323.266089][ T7664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11362'. [ 2323.391649][ T7670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2323.954758][ T7679] syzkaller0: entered promiscuous mode [ 2323.961886][ T7679] syzkaller0: entered allmulticast mode [ 2323.979635][ T7678] delete_channel: no stack [ 2326.823758][ T7706] netlink: 'syz.0.11374': attribute type 21 has an invalid length. [ 2326.854530][ T7706] netlink: 'syz.0.11374': attribute type 6 has an invalid length. [ 2326.903892][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11374'. [ 2327.007556][ T7713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2327.839142][ T7719] syzkaller0: entered promiscuous mode [ 2327.850992][ T7719] syzkaller0: entered allmulticast mode [ 2327.907307][ T7718] delete_channel: no stack [ 2330.899675][ T7749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2331.965938][ T7773] syzkaller0: entered promiscuous mode [ 2331.972107][ T7773] syzkaller0: entered allmulticast mode [ 2331.993087][ T7772] delete_channel: no stack [ 2334.418093][ T7792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2334.597038][ T7798] netlink: 164 bytes leftover after parsing attributes in process `syz.2.11407'. [ 2334.707338][ T7805] netlink: 'syz.2.11407': attribute type 10 has an invalid length. [ 2334.726465][ T7804] FAULT_INJECTION: forcing a failure. [ 2334.726465][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 2334.789597][ T7804] CPU: 1 PID: 7804 Comm: syz.3.11409 Not tainted syzkaller #0 [ 2334.797132][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2334.807305][ T7804] Call Trace: [ 2334.810605][ T7804] [ 2334.813554][ T7804] dump_stack_lvl+0x18c/0x250 [ 2334.818277][ T7804] ? show_regs_print_info+0x20/0x20 [ 2334.823519][ T7804] ? load_image+0x420/0x420 [ 2334.828054][ T7804] ? __might_sleep+0xe0/0xe0 [ 2334.832673][ T7804] ? __lock_acquire+0x7d40/0x7d40 [ 2334.837728][ T7804] should_fail_ex+0x39d/0x4d0 [ 2334.842530][ T7804] should_failslab+0x9/0x20 [ 2334.847059][ T7804] slab_pre_alloc_hook+0x59/0x310 [ 2334.852117][ T7804] ? kvmalloc_node+0x70/0x180 [ 2334.856820][ T7804] ? kvmalloc_node+0x70/0x180 [ 2334.861547][ T7804] __kmem_cache_alloc_node+0x53/0x250 [ 2334.866972][ T7804] ? kvmalloc_node+0x70/0x180 [ 2334.871678][ T7804] __kmalloc_node+0xa4/0x230 [ 2334.876297][ T7804] kvmalloc_node+0x70/0x180 [ 2334.880825][ T7804] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 2334.886276][ T7804] ? 0xffffffffa0004200 [ 2334.890460][ T7804] ? 0xffffffffa0004200 [ 2334.894644][ T7804] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2334.900571][ T7804] ? 0xffffffffa0004200 [ 2334.904774][ T7804] ? xdp_convert_md_to_buff+0x330/0x330 [ 2334.910393][ T7804] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2334.916671][ T7804] ? _copy_from_user+0xa5/0xe0 [ 2334.921473][ T7804] ? bpf_test_init+0x119/0x140 [ 2334.926279][ T7804] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2334.931771][ T7804] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2334.937202][ T7804] ? dev_put+0x80/0x80 [ 2334.941315][ T7804] ? dev_put+0x80/0x80 [ 2334.945412][ T7804] bpf_prog_test_run+0x321/0x390 [ 2334.950391][ T7804] __sys_bpf+0x49d/0x890 [ 2334.954643][ T7804] ? bpf_link_show_fdinfo+0x390/0x390 [ 2334.960064][ T7804] ? lock_chain_count+0x20/0x20 [ 2334.964950][ T7804] __x64_sys_bpf+0x7c/0x90 [ 2334.969399][ T7804] do_syscall_64+0x55/0xa0 [ 2334.973845][ T7804] ? clear_bhb_loop+0x40/0x90 [ 2334.978619][ T7804] ? clear_bhb_loop+0x40/0x90 [ 2334.983331][ T7804] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2334.989268][ T7804] RIP: 0033:0x7f44d019c819 [ 2334.993714][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2335.013443][ T7804] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2335.021892][ T7804] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2335.029885][ T7804] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2335.037871][ T7804] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2335.045860][ T7804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2335.053853][ T7804] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2335.061862][ T7804] [ 2335.896899][ T7830] syzkaller0: entered promiscuous mode [ 2335.906610][ T7830] syzkaller0: entered allmulticast mode [ 2335.940454][ T7829] delete_channel: no stack [ 2336.007470][ T7835] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2336.394188][ T7846] FAULT_INJECTION: forcing a failure. [ 2336.394188][ T7846] name failslab, interval 1, probability 0, space 0, times 0 [ 2336.408550][ T7846] CPU: 0 PID: 7846 Comm: syz.3.11422 Not tainted syzkaller #0 [ 2336.416045][ T7846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2336.426117][ T7846] Call Trace: [ 2336.429418][ T7846] [ 2336.432617][ T7846] dump_stack_lvl+0x18c/0x250 [ 2336.437333][ T7846] ? show_regs_print_info+0x20/0x20 [ 2336.442551][ T7846] ? load_image+0x420/0x420 [ 2336.447075][ T7846] ? __might_sleep+0xe0/0xe0 [ 2336.451682][ T7846] ? __lock_acquire+0x7d40/0x7d40 [ 2336.456724][ T7846] should_fail_ex+0x39d/0x4d0 [ 2336.461427][ T7846] should_failslab+0x9/0x20 [ 2336.465954][ T7846] slab_pre_alloc_hook+0x59/0x310 [ 2336.470996][ T7846] ? tomoyo_encode+0x28b/0x540 [ 2336.475770][ T7846] ? tomoyo_encode+0x28b/0x540 [ 2336.480540][ T7846] __kmem_cache_alloc_node+0x53/0x250 [ 2336.485934][ T7846] ? tomoyo_encode+0x28b/0x540 [ 2336.490792][ T7846] __kmalloc+0xa4/0x230 [ 2336.494976][ T7846] tomoyo_encode+0x28b/0x540 [ 2336.499583][ T7846] tomoyo_realpath_from_path+0x592/0x5d0 [ 2336.505254][ T7846] tomoyo_path_number_perm+0x248/0x620 [ 2336.510741][ T7846] ? tomoyo_path_number_perm+0x217/0x620 [ 2336.516392][ T7846] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2336.521866][ T7846] ? perf_trace_preemptirq_template+0xac/0x330 [ 2336.528033][ T7846] ? ksys_write+0x1c4/0x260 [ 2336.532555][ T7846] ? preempt_schedule_irq+0xea/0x150 [ 2336.537895][ T7846] ? __fget_files+0x28/0x4b0 [ 2336.542511][ T7846] ? __fget_files+0x28/0x4b0 [ 2336.547131][ T7846] security_file_ioctl+0x70/0xa0 [ 2336.552089][ T7846] __se_sys_ioctl+0x48/0x170 [ 2336.556701][ T7846] do_syscall_64+0x55/0xa0 [ 2336.561135][ T7846] ? clear_bhb_loop+0x40/0x90 [ 2336.565915][ T7846] ? clear_bhb_loop+0x40/0x90 [ 2336.570602][ T7846] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2336.576681][ T7846] RIP: 0033:0x7f44d019c819 [ 2336.581109][ T7846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2336.600733][ T7846] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2336.609159][ T7846] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2336.617161][ T7846] RDX: 00002000000000c0 RSI: 0000000000008b04 RDI: 0000000000000004 [ 2336.625143][ T7846] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2336.633148][ T7846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2336.641135][ T7846] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2336.649164][ T7846] [ 2336.662610][ T7846] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2338.582042][ T7849] FAULT_INJECTION: forcing a failure. [ 2338.582042][ T7849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2338.604731][ T7849] CPU: 0 PID: 7849 Comm: syz.2.11423 Not tainted syzkaller #0 [ 2338.612261][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2338.622343][ T7849] Call Trace: [ 2338.625646][ T7849] [ 2338.628589][ T7849] dump_stack_lvl+0x18c/0x250 [ 2338.633285][ T7849] ? show_regs_print_info+0x20/0x20 [ 2338.638520][ T7849] ? load_image+0x420/0x420 [ 2338.643027][ T7849] ? __might_fault+0xaa/0x120 [ 2338.647696][ T7849] ? __lock_acquire+0x7d40/0x7d40 [ 2338.652733][ T7849] should_fail_ex+0x39d/0x4d0 [ 2338.657493][ T7849] _copy_from_user+0x2f/0xe0 [ 2338.662092][ T7849] __sys_bpf+0x23e/0x890 [ 2338.666365][ T7849] ? bpf_link_show_fdinfo+0x390/0x390 [ 2338.671774][ T7849] ? lock_chain_count+0x20/0x20 [ 2338.676653][ T7849] __x64_sys_bpf+0x7c/0x90 [ 2338.681077][ T7849] do_syscall_64+0x55/0xa0 [ 2338.685491][ T7849] ? clear_bhb_loop+0x40/0x90 [ 2338.690191][ T7849] ? clear_bhb_loop+0x40/0x90 [ 2338.694900][ T7849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2338.700852][ T7849] RIP: 0033:0x7f887299c819 [ 2338.705288][ T7849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2338.724919][ T7849] RSP: 002b:00007f8873918028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2338.733373][ T7849] RAX: ffffffffffffffda RBX: 00007f8872c15fa0 RCX: 00007f887299c819 [ 2338.741368][ T7849] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 2338.749367][ T7849] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2338.757356][ T7849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2338.765342][ T7849] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2338.773330][ T7849] [ 2338.790311][ T7853] bridge0: port 4(bond0) entered disabled state [ 2338.841528][ T7853] bond0 (unregistering): left allmulticast mode [ 2338.847929][ T7853] batadv_slave_0: left allmulticast mode [ 2338.865049][ T7853] bridge0: port 4(bond0) entered disabled state [ 2338.893937][ T7853] bond0 (unregistering): (slave cÙ): Releasing backup interface [ 2338.915796][ T7853] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 2338.956131][ T7853] mac80211_hwsim hwsim86 wlan1: left promiscuous mode [ 2338.966545][ T7853] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2338.977001][ T7853] batadv_slave_0: left promiscuous mode [ 2338.988330][ T7853] bond0 (unregistering): Released all slaves [ 2339.052149][ T7864] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2339.285862][ T7872] netlink: 763 bytes leftover after parsing attributes in process `syz.1.11433'. [ 2340.000199][ T7880] syzkaller0: entered promiscuous mode [ 2340.020178][ T7880] syzkaller0: entered allmulticast mode [ 2340.055443][ T7878] delete_channel: no stack [ 2343.468863][ T7904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2344.785772][ T7919] syzkaller0: entered promiscuous mode [ 2344.810848][ T7919] syzkaller0: entered allmulticast mode [ 2344.854268][ T7918] delete_channel: no stack [ 2344.971288][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.977998][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2348.048813][ T7925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11451'. [ 2348.650559][ T7943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2352.087180][ T7962] syzkaller0: entered promiscuous mode [ 2352.111607][ T7962] syzkaller0: entered allmulticast mode [ 2352.164719][ T7961] delete_channel: no stack [ 2354.586914][ T7981] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2357.389397][ T7999] netlink: 'syz.0.11476': attribute type 10 has an invalid length. [ 2357.506305][ T8003] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.11477'. [ 2357.886485][ T8010] syzkaller0: entered promiscuous mode [ 2357.892087][ T8010] syzkaller0: entered allmulticast mode [ 2357.907995][ T8009] delete_channel: no stack [ 2358.331337][ T8024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2358.716826][ T8035] netlink: 'syz.2.11485': attribute type 10 has an invalid length. [ 2358.850665][ T8035] netlink: 2 bytes leftover after parsing attributes in process `syz.2.11485'. [ 2358.882525][ T8035] hsr0: entered promiscuous mode [ 2358.889478][ T8035] bridge0: port 1(hsr0) entered blocking state [ 2358.896439][ T8035] bridge0: port 1(hsr0) entered disabled state [ 2358.952264][ T8035] hsr0: entered allmulticast mode [ 2359.035157][ T8035] hsr_slave_0: entered allmulticast mode [ 2359.090651][ T8035] hsr_slave_1: entered allmulticast mode [ 2359.622117][ T8042] syzkaller0: entered promiscuous mode [ 2359.634596][ T8042] syzkaller0: entered allmulticast mode [ 2363.703809][ T8041] delete_channel: no stack [ 2363.820671][ T8069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2364.041496][ T8078] FAULT_INJECTION: forcing a failure. [ 2364.041496][ T8078] name failslab, interval 1, probability 0, space 0, times 0 [ 2364.079838][ T8078] CPU: 0 PID: 8078 Comm: syz.1.11499 Not tainted syzkaller #0 [ 2364.087367][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2364.097448][ T8078] Call Trace: [ 2364.100742][ T8078] [ 2364.103708][ T8078] dump_stack_lvl+0x18c/0x250 [ 2364.108427][ T8078] ? fib_rules_lookup+0x9c/0xb40 [ 2364.113391][ T8078] ? show_regs_print_info+0x20/0x20 [ 2364.118613][ T8078] ? load_image+0x420/0x420 [ 2364.123136][ T8078] ? fib_rules_lookup+0x9c/0xb40 [ 2364.128110][ T8078] should_fail_ex+0x39d/0x4d0 [ 2364.132813][ T8078] should_failslab+0x9/0x20 [ 2364.137334][ T8078] slab_pre_alloc_hook+0x59/0x310 [ 2364.142394][ T8078] kmem_cache_alloc+0x5a/0x2d0 [ 2364.147186][ T8078] ? dst_alloc+0x105/0x170 [ 2364.151628][ T8078] dst_alloc+0x105/0x170 [ 2364.155889][ T8078] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 2364.161980][ T8078] ? ip_route_output_key_hash_rcu+0x12b1/0x2370 [ 2364.168249][ T8078] ? ip_route_output_key_hash+0x13d/0x330 [ 2364.174030][ T8078] ip_route_output_key_hash+0x1f3/0x330 [ 2364.179598][ T8078] ? kfree+0x31/0x190 [ 2364.183601][ T8078] ? ip_route_input_rcu+0x30f0/0x30f0 [ 2364.188998][ T8078] ? ip_cmsg_send+0x9c0/0xa70 [ 2364.193792][ T8078] ip_route_output_flow+0x2a/0x150 [ 2364.198920][ T8078] ? security_sk_classify_flow+0x7b/0x90 [ 2364.204572][ T8078] udp_sendmsg+0x1603/0x23b0 [ 2364.209201][ T8078] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 2364.214071][ T8078] ? udp_cmsg_send+0x350/0x350 [ 2364.218866][ T8078] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2364.224895][ T8078] ? lock_chain_count+0x20/0x20 [ 2364.229744][ T8078] ? inet_sendmsg+0x14b/0x2f0 [ 2364.234454][ T8078] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2364.239852][ T8078] ? _local_bh_enable+0xa0/0xa0 [ 2364.244729][ T8078] ? do_raw_spin_unlock+0x121/0x230 [ 2364.249952][ T8078] ? inet_sendmsg+0x14b/0x2f0 [ 2364.254646][ T8078] ? inet_sendmsg+0x14b/0x2f0 [ 2364.259326][ T8078] ? inet_send_prepare+0x260/0x260 [ 2364.264432][ T8078] ____sys_sendmsg+0x5ba/0x960 [ 2364.269184][ T8078] ? __lock_acquire+0x7d40/0x7d40 [ 2364.274213][ T8078] ? __sys_sendmsg_sock+0x30/0x30 [ 2364.279246][ T8078] ? __import_iovec+0x5f2/0x850 [ 2364.284111][ T8078] ? import_iovec+0x73/0xa0 [ 2364.288605][ T8078] ___sys_sendmsg+0x2a6/0x360 [ 2364.293284][ T8078] ? get_pid_task+0x20/0x1e0 [ 2364.297888][ T8078] ? __sys_sendmsg+0x2a0/0x2a0 [ 2364.302653][ T8078] ? __lock_acquire+0x7d40/0x7d40 [ 2364.307677][ T8078] __se_sys_sendmsg+0x1c2/0x2b0 [ 2364.312538][ T8078] ? __x64_sys_sendmsg+0x80/0x80 [ 2364.317482][ T8078] ? lockdep_hardirqs_on+0x98/0x150 [ 2364.322670][ T8078] do_syscall_64+0x55/0xa0 [ 2364.327088][ T8078] ? clear_bhb_loop+0x40/0x90 [ 2364.331782][ T8078] ? clear_bhb_loop+0x40/0x90 [ 2364.336473][ T8078] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2364.342376][ T8078] RIP: 0033:0x7f968b99c819 [ 2364.346795][ T8078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2364.366406][ T8078] RSP: 002b:00007f968c902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2364.374822][ T8078] RAX: ffffffffffffffda RBX: 00007f968bc15fa0 RCX: 00007f968b99c819 [ 2364.382789][ T8078] RDX: 0000000000000000 RSI: 0000200000000b40 RDI: 0000000000000003 [ 2364.390765][ T8078] RBP: 00007f968c902090 R08: 0000000000000000 R09: 0000000000000000 [ 2364.398730][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2364.406702][ T8078] R13: 00007f968bc16038 R14: 00007f968bc15fa0 R15: 00007ffd28a31058 [ 2364.414683][ T8078] [ 2364.514318][ T8082] netlink: 'syz.3.11500': attribute type 10 has an invalid length. [ 2364.526378][ T8082] nla_validate_range_unsigned: 25 callbacks suppressed [ 2364.526431][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.544754][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.553948][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.563780][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.572323][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.580949][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.591859][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.601567][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.611448][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.620034][ T8082] netlink: 'syz.3.11500': attribute type 11 has an invalid length. [ 2364.631744][ T8082] netlink: 'syz.3.11500': attribute type 4 has an invalid length. [ 2364.640250][ T8082] netlink: 'syz.3.11500': attribute type 5 has an invalid length. [ 2364.648840][ T8082] netlink: 208556 bytes leftover after parsing attributes in process `syz.3.11500'. [ 2365.016801][ T8089] syzkaller0: entered promiscuous mode [ 2365.024464][ T8089] syzkaller0: entered allmulticast mode [ 2367.006168][ T8088] delete_channel: no stack [ 2367.032063][ T8102] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2367.490558][ T8121] delete_channel: no stack [ 2367.558596][ T8131] netlink: 'syz.0.11519': attribute type 10 has an invalid length. [ 2367.567803][ T8131] hsr_slave_0: left promiscuous mode [ 2367.574658][ T8131] hsr_slave_1: left promiscuous mode [ 2368.296740][ T8145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2368.596581][ T8151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2368.621607][ T8152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2368.718270][ T8159] syzkaller0: entered promiscuous mode [ 2368.724732][ T8159] syzkaller0: entered allmulticast mode [ 2368.738177][ T8157] delete_channel: no stack [ 2371.613486][ T8168] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.11529'. [ 2371.626883][ T8168] bridge_slave_1: default FDB implementation only supports local addresses [ 2371.848106][ T8177] netlink: 'syz.2.11533': attribute type 2 has an invalid length. [ 2371.870738][ T8177] netlink: 'syz.2.11533': attribute type 8 has an invalid length. [ 2371.878964][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11533'. [ 2371.895100][ T8184] netlink: 'syz.2.11533': attribute type 2 has an invalid length. [ 2371.903964][ T8184] netlink: 'syz.2.11533': attribute type 8 has an invalid length. [ 2371.915465][ T8184] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11533'. [ 2371.934408][ T8187] tap0: tun_chr_ioctl cmd 2147767511 [ 2371.949434][ T8183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2372.181411][ T8195] FAULT_INJECTION: forcing a failure. [ 2372.181411][ T8195] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.208039][ T8195] CPU: 0 PID: 8195 Comm: syz.0.11540 Not tainted syzkaller #0 [ 2372.215562][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2372.225635][ T8195] Call Trace: [ 2372.228930][ T8195] [ 2372.231877][ T8195] dump_stack_lvl+0x18c/0x250 [ 2372.236575][ T8195] ? show_regs_print_info+0x20/0x20 [ 2372.241796][ T8195] ? load_image+0x420/0x420 [ 2372.246320][ T8195] ? __might_sleep+0xe0/0xe0 [ 2372.250928][ T8195] ? __lock_acquire+0x7d40/0x7d40 [ 2372.255974][ T8195] should_fail_ex+0x39d/0x4d0 [ 2372.260684][ T8195] should_failslab+0x9/0x20 [ 2372.265197][ T8195] slab_pre_alloc_hook+0x59/0x310 [ 2372.270329][ T8195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2372.276060][ T8195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2372.281777][ T8195] __kmem_cache_alloc_node+0x53/0x250 [ 2372.287163][ T8195] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2372.292886][ T8195] __kmalloc+0xa4/0x230 [ 2372.297105][ T8195] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2372.302673][ T8195] tomoyo_path_number_perm+0x248/0x620 [ 2372.308151][ T8195] ? tomoyo_path_number_perm+0x217/0x620 [ 2372.313794][ T8195] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 2372.319263][ T8195] ? ksys_write+0x1c4/0x260 [ 2372.323806][ T8195] ? __fget_files+0x28/0x4b0 [ 2372.328404][ T8195] ? __fget_files+0x28/0x4b0 [ 2372.333013][ T8195] security_file_ioctl+0x70/0xa0 [ 2372.337957][ T8195] __se_sys_ioctl+0x48/0x170 [ 2372.342564][ T8195] do_syscall_64+0x55/0xa0 [ 2372.346984][ T8195] ? clear_bhb_loop+0x40/0x90 [ 2372.352455][ T8195] ? clear_bhb_loop+0x40/0x90 [ 2372.357150][ T8195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2372.363058][ T8195] RIP: 0033:0x7f381999c819 [ 2372.367483][ T8195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2372.387104][ T8195] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2372.395530][ T8195] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2372.403513][ T8195] RDX: 00002000000000c0 RSI: 00000000800454d7 RDI: 0000000000000003 [ 2372.411492][ T8195] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2372.419461][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2372.427447][ T8195] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2372.435440][ T8195] [ 2372.463382][ T8195] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2372.483883][ T8195] tap1: tun_chr_ioctl cmd 2147767511 [ 2373.065724][ T8205] tap0: tun_chr_ioctl cmd 2147767511 [ 2373.081817][ T8202] delete_channel: no stack [ 2373.436975][ T8220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2373.511005][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2373.540086][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2373.807016][ T8232] netlink: 'syz.2.11553': attribute type 29 has an invalid length. [ 2374.035050][ T8229] syzkaller0: entered promiscuous mode [ 2374.049975][ T8229] syzkaller0: entered allmulticast mode [ 2374.082209][ T8232] netlink: 'syz.2.11553': attribute type 29 has an invalid length. [ 2374.087853][ T8225] delete_channel: no stack [ 2374.098615][ T8236] netlink: 'syz.2.11553': attribute type 29 has an invalid length. [ 2374.373771][ T8242] netlink: 'syz.2.11553': attribute type 29 has an invalid length. [ 2376.283621][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2376.291403][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2376.299325][ T8249] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2376.307121][ T8249] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2376.321918][ T8249] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 2376.329056][ T8249] batman_adv: batadv0: Removing interface: veth0_vlan [ 2376.337009][ T8249] batman_adv: batadv0: Removing interface: netdevsim0 [ 2376.537841][ T8257] netlink: 'syz.3.11559': attribute type 21 has an invalid length. [ 2376.554710][ T8257] netlink: 'syz.3.11559': attribute type 1 has an invalid length. [ 2376.563110][ T8257] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.11559'. [ 2376.611252][ T8260] FAULT_INJECTION: forcing a failure. [ 2376.611252][ T8260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2376.638505][ T8260] CPU: 1 PID: 8260 Comm: syz.2.11561 Not tainted syzkaller #0 [ 2376.646036][ T8260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2376.656120][ T8260] Call Trace: [ 2376.659421][ T8260] [ 2376.662385][ T8260] dump_stack_lvl+0x18c/0x250 [ 2376.667098][ T8260] ? show_regs_print_info+0x20/0x20 [ 2376.672336][ T8260] ? load_image+0x420/0x420 [ 2376.676878][ T8260] ? __lock_acquire+0x7d40/0x7d40 [ 2376.681930][ T8260] ? snprintf+0xe9/0x140 [ 2376.686215][ T8260] should_fail_ex+0x39d/0x4d0 [ 2376.690934][ T8260] _copy_to_user+0x2f/0xa0 [ 2376.695398][ T8260] simple_read_from_buffer+0xe7/0x150 [ 2376.700808][ T8260] proc_fail_nth_read+0x1e8/0x260 [ 2376.705866][ T8260] ? proc_fault_inject_write+0x360/0x360 [ 2376.711539][ T8260] ? fsnotify_perm+0x271/0x5e0 [ 2376.716342][ T8260] ? proc_fault_inject_write+0x360/0x360 [ 2376.722007][ T8260] vfs_read+0x28b/0x970 [ 2376.726197][ T8260] ? kernel_read+0x1e0/0x1e0 [ 2376.730808][ T8260] ? __fget_files+0x28/0x4b0 [ 2376.735397][ T8260] ? __fget_files+0x28/0x4b0 [ 2376.739988][ T8260] ? __fget_files+0x43d/0x4b0 [ 2376.744677][ T8260] ? __fdget_pos+0x2a3/0x330 [ 2376.749272][ T8260] ? ksys_read+0x75/0x260 [ 2376.753609][ T8260] ksys_read+0x150/0x260 [ 2376.757939][ T8260] ? vfs_write+0x990/0x990 [ 2376.762358][ T8260] ? lockdep_hardirqs_on+0x98/0x150 [ 2376.767644][ T8260] do_syscall_64+0x55/0xa0 [ 2376.772065][ T8260] ? clear_bhb_loop+0x40/0x90 [ 2376.776739][ T8260] ? clear_bhb_loop+0x40/0x90 [ 2376.781429][ T8260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2376.787333][ T8260] RIP: 0033:0x7f887295d04e [ 2376.791747][ T8260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2376.811627][ T8260] RSP: 002b:00007f8873917fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2376.820044][ T8260] RAX: ffffffffffffffda RBX: 00007f88739186c0 RCX: 00007f887295d04e [ 2376.828012][ T8260] RDX: 000000000000000f RSI: 00007f88739180a0 RDI: 0000000000000004 [ 2376.835978][ T8260] RBP: 00007f8873918090 R08: 0000000000000000 R09: 0000000000000000 [ 2376.843963][ T8260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2376.851967][ T8260] R13: 00007f8872c16038 R14: 00007f8872c15fa0 R15: 00007ffc412ec528 [ 2376.859965][ T8260] [ 2377.020767][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2377.301755][ T8274] syzkaller0: entered promiscuous mode [ 2377.312903][ T8274] syzkaller0: entered allmulticast mode [ 2377.468402][ T8273] delete_channel: no stack [ 2377.498721][ T8283] FAULT_INJECTION: forcing a failure. [ 2377.498721][ T8283] name failslab, interval 1, probability 0, space 0, times 0 [ 2377.530196][ T8283] CPU: 1 PID: 8283 Comm: syz.0.11569 Not tainted syzkaller #0 [ 2377.537725][ T8283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2377.547809][ T8283] Call Trace: [ 2377.551107][ T8283] [ 2377.554063][ T8283] dump_stack_lvl+0x18c/0x250 [ 2377.558772][ T8283] ? show_regs_print_info+0x20/0x20 [ 2377.563995][ T8283] ? lockdep_hardirqs_on+0x98/0x150 [ 2377.569222][ T8283] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2377.575412][ T8283] should_fail_ex+0x39d/0x4d0 [ 2377.580115][ T8283] should_failslab+0x9/0x20 [ 2377.584650][ T8283] slab_pre_alloc_hook+0x59/0x310 [ 2377.589711][ T8283] ? __lock_acquire+0x7d40/0x7d40 [ 2377.594760][ T8283] kmem_cache_alloc_node+0x60/0x320 [ 2377.599979][ T8283] ? __alloc_skb+0x103/0x2c0 [ 2377.604610][ T8283] __alloc_skb+0x103/0x2c0 [ 2377.609068][ T8283] netlink_sendmsg+0x66a/0xbf0 [ 2377.613866][ T8283] ? netlink_getsockopt+0x590/0x590 [ 2377.619098][ T8283] ? aa_sock_msg_perm+0x94/0x150 [ 2377.624062][ T8283] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2377.629371][ T8283] ? security_socket_sendmsg+0x80/0xa0 [ 2377.634863][ T8283] ? netlink_getsockopt+0x590/0x590 [ 2377.640090][ T8283] ____sys_sendmsg+0x5ba/0x960 [ 2377.644879][ T8283] ? __asan_memset+0x22/0x40 [ 2377.649486][ T8283] ? __sys_sendmsg_sock+0x30/0x30 [ 2377.654525][ T8283] ? __import_iovec+0x5f2/0x850 [ 2377.659396][ T8283] ? import_iovec+0x73/0xa0 [ 2377.663920][ T8283] ___sys_sendmsg+0x2a6/0x360 [ 2377.668618][ T8283] ? get_pid_task+0x20/0x1e0 [ 2377.673235][ T8283] ? __sys_sendmsg+0x2a0/0x2a0 [ 2377.678128][ T8283] ? __lock_acquire+0x7d40/0x7d40 [ 2377.683195][ T8283] __se_sys_sendmsg+0x1c2/0x2b0 [ 2377.688074][ T8283] ? __x64_sys_sendmsg+0x80/0x80 [ 2377.693131][ T8283] ? lockdep_hardirqs_on+0x98/0x150 [ 2377.698357][ T8283] do_syscall_64+0x55/0xa0 [ 2377.702787][ T8283] ? clear_bhb_loop+0x40/0x90 [ 2377.707488][ T8283] ? clear_bhb_loop+0x40/0x90 [ 2377.712184][ T8283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2377.718095][ T8283] RIP: 0033:0x7f381999c819 [ 2377.722568][ T8283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2377.742198][ T8283] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2377.750637][ T8283] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2377.758624][ T8283] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000008 [ 2377.766874][ T8283] RBP: 00007f381a839090 R08: 0000000000000000 R09: 0000000000000000 [ 2377.774862][ T8283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2377.782846][ T8283] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2377.790856][ T8283] [ 2378.501705][ T8299] netlink: 'syz.0.11573': attribute type 3 has an invalid length. [ 2378.511769][ T8299] netlink: 'syz.0.11573': attribute type 1 has an invalid length. [ 2378.529946][ T8299] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.11573'. [ 2379.091172][ T8302] FAULT_INJECTION: forcing a failure. [ 2379.091172][ T8302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2379.112709][ T8302] CPU: 0 PID: 8302 Comm: syz.0.11574 Not tainted syzkaller #0 [ 2379.120223][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2379.130277][ T8302] Call Trace: [ 2379.133545][ T8302] [ 2379.136471][ T8302] dump_stack_lvl+0x18c/0x250 [ 2379.141243][ T8302] ? show_regs_print_info+0x20/0x20 [ 2379.146444][ T8302] ? load_image+0x420/0x420 [ 2379.150944][ T8302] ? __might_fault+0xaa/0x120 [ 2379.155628][ T8302] ? __lock_acquire+0x7d40/0x7d40 [ 2379.160650][ T8302] should_fail_ex+0x39d/0x4d0 [ 2379.165349][ T8302] _copy_from_user+0x2f/0xe0 [ 2379.169962][ T8302] sctp_setsockopt+0x19e/0x11e0 [ 2379.174833][ T8302] ? sock_common_recvmsg+0x190/0x190 [ 2379.180129][ T8302] do_sock_setsockopt+0x175/0x1a0 [ 2379.185173][ T8302] ? __fdget+0x180/0x210 [ 2379.189411][ T8302] __x64_sys_setsockopt+0x182/0x200 [ 2379.194605][ T8302] do_syscall_64+0x55/0xa0 [ 2379.199017][ T8302] ? clear_bhb_loop+0x40/0x90 [ 2379.203690][ T8302] ? clear_bhb_loop+0x40/0x90 [ 2379.208365][ T8302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2379.214264][ T8302] RIP: 0033:0x7f381999c819 [ 2379.218699][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2379.238311][ T8302] RSP: 002b:00007f381a839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2379.246742][ T8302] RAX: ffffffffffffffda RBX: 00007f3819c15fa0 RCX: 00007f381999c819 [ 2379.254717][ T8302] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003 [ 2379.262681][ T8302] RBP: 00007f381a839090 R08: 0000000000000010 R09: 0000000000000000 [ 2379.270658][ T8302] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2379.278649][ T8302] R13: 00007f3819c16038 R14: 00007f3819c15fa0 R15: 00007fffa6e8eb38 [ 2379.286630][ T8302] [ 2380.641773][ T8310] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2380.987948][ T8329] netlink: 10 bytes leftover after parsing attributes in process `syz.0.11583'. [ 2381.479661][ T8335] syzkaller0: entered promiscuous mode [ 2381.498660][ T8335] syzkaller0: entered allmulticast mode [ 2381.524617][ T8333] delete_channel: no stack [ 2383.456677][ T8359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2383.561984][ T8365] netlink: 'syz.2.11595': attribute type 6 has an invalid length. [ 2384.143638][ T8380] netlink: 'syz.0.11599': attribute type 13 has an invalid length. [ 2384.172974][ T8380] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.11599'. [ 2384.255530][ T8389] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11602'. [ 2384.380817][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11604'. [ 2384.390271][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11604'. [ 2384.474703][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11605'. [ 2384.521751][ T8398] IPv6: Can't replace route, no match found [ 2384.595128][ T1887] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2385.191229][ T8407] syzkaller0: entered promiscuous mode [ 2385.204445][ T8407] syzkaller0: entered allmulticast mode [ 2385.227887][ T8406] delete_channel: no stack [ 2385.233228][ T8411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2389.923949][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11615'. [ 2389.949013][ T8426] IPv6: Can't replace route, no match found [ 2390.093447][ T8434] netlink: 10 bytes leftover after parsing attributes in process `syz.2.11619'. [ 2390.165821][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2390.303493][ T8441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2390.334583][ T8443] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11620'. [ 2390.832313][ T8452] syzkaller0: entered promiscuous mode [ 2390.838867][ T8452] syzkaller0: entered allmulticast mode [ 2391.213281][ T8461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11629'. [ 2391.242895][ T8461] IPv6: Can't replace route, no match found [ 2391.328661][ T1887] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2393.565202][ T8480] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2393.592887][ T8450] delete_channel: no stack [ 2393.723478][ T8488] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11636'. [ 2393.739389][ T8488] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11636'. [ 2393.760364][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11638'. [ 2393.772304][ T8483] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11636'. [ 2393.800215][ T8488] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.11636'. [ 2393.818389][ T8487] IPv6: Can't replace route, no match found [ 2393.826820][ T8492] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11637'. [ 2393.938519][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2394.868593][ T8507] syzkaller0: entered promiscuous mode [ 2394.895263][ T8507] syzkaller0: entered allmulticast mode [ 2394.907725][ T8509] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2395.255685][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11649'. [ 2397.486527][ T8520] IPv6: Can't replace route, no match found [ 2397.605381][ T1887] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2398.340264][ T8533] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11653'. [ 2398.724238][ T8535] FAULT_INJECTION: forcing a failure. [ 2398.724238][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2398.739012][ T8535] CPU: 0 PID: 8535 Comm: syz.3.11654 Not tainted syzkaller #0 [ 2398.746518][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2398.756779][ T8535] Call Trace: [ 2398.760053][ T8535] [ 2398.762995][ T8535] dump_stack_lvl+0x18c/0x250 [ 2398.767669][ T8535] ? show_regs_print_info+0x20/0x20 [ 2398.772866][ T8535] ? load_image+0x420/0x420 [ 2398.777360][ T8535] ? __might_fault+0xaa/0x120 [ 2398.782023][ T8535] ? __lock_acquire+0x7d40/0x7d40 [ 2398.787042][ T8535] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2398.793290][ T8535] should_fail_ex+0x39d/0x4d0 [ 2398.797976][ T8535] _copy_from_user+0x2f/0xe0 [ 2398.802566][ T8535] __sys_bpf+0x23e/0x890 [ 2398.806806][ T8535] ? bpf_link_show_fdinfo+0x390/0x390 [ 2398.812183][ T8535] ? lock_chain_count+0x20/0x20 [ 2398.817028][ T8535] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2398.823017][ T8535] __x64_sys_bpf+0x7c/0x90 [ 2398.827447][ T8535] do_syscall_64+0x55/0xa0 [ 2398.831863][ T8535] ? clear_bhb_loop+0x40/0x90 [ 2398.836560][ T8535] ? clear_bhb_loop+0x40/0x90 [ 2398.841234][ T8535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2398.847210][ T8535] RIP: 0033:0x7f44d019c819 [ 2398.851625][ T8535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2398.871245][ T8535] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2398.879664][ T8535] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2398.887636][ T8535] RDX: 0000000000000048 RSI: 000020000000e000 RDI: 0000000000000005 [ 2398.895605][ T8535] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2398.903572][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2398.911563][ T8535] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2398.919889][ T8535] [ 2400.149138][ T8547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11658'. [ 2400.162166][ T8549] IPv6: Can't replace route, no match found [ 2400.193556][ T8503] delete_channel: no stack [ 2400.313563][ T8551] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2400.438061][ T1887] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2400.576687][ T8564] netlink: set zone limit has 8 unknown bytes [ 2400.711076][ T8571] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.11663'. [ 2400.876979][ T8564] macvlan1: entered promiscuous mode [ 2401.156929][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11668'. [ 2401.235602][ T8577] IPv6: Can't replace route, no match found [ 2401.818094][ T8587] syzkaller0: entered promiscuous mode [ 2401.825204][ T8587] syzkaller0: entered allmulticast mode [ 2401.833254][ T8590] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11672'. [ 2402.111158][ T1887] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2406.382850][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.399780][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2406.415397][ T8601] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2406.445015][ T8580] delete_channel: no stack [ 2406.529058][ T8615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11679'. [ 2406.559408][ T8615] IPv6: Can't replace route, no match found [ 2406.833022][ T8626] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11680'. [ 2406.939871][ T1887] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2407.997952][ T8639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2408.166536][ T8650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11692'. [ 2408.204003][ T8650] IPv6: Can't replace route, no match found [ 2408.298765][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2408.717083][ T8640] delete_channel: no stack [ 2410.580296][ T8670] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11696'. [ 2410.658561][ T8671] netlink: 'syz.3.11698': attribute type 10 has an invalid length. [ 2410.987739][ T8678] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2411.164166][ T8682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11703'. [ 2411.222556][ T8682] IPv6: Can't replace route, no match found [ 2411.419252][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2411.571467][ T8699] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11709'. [ 2411.840898][ T8706] netlink: 'syz.1.11711': attribute type 25 has an invalid length. [ 2411.864183][ T8706] netlink: 'syz.1.11711': attribute type 9 has an invalid length. [ 2411.948287][ T8706] syzkaller0: entered promiscuous mode [ 2411.954027][ T8706] syzkaller0: entered allmulticast mode [ 2413.753765][ T8683] delete_channel: no stack [ 2414.246162][ T8722] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11715'. [ 2415.905124][ T8717] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2415.912566][ T8726] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11716'. [ 2415.928480][ T8728] IPv6: Can't replace route, no match found [ 2416.094397][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2416.503085][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11726'. [ 2416.551077][ T8756] IPv6: Can't replace route, no match found [ 2416.629399][ T8760] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11725'. [ 2416.687883][ T8759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2416.957880][ T8738] delete_channel: no stack [ 2417.531778][ T8774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2417.544943][ T8774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2417.554126][ T8774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2417.564505][ T8774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2417.572683][ T8774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2417.580641][ T8774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2417.769971][ T8772] chnl_net:caif_netlink_parms(): no params data found [ 2417.856117][ T8772] bridge0: port 1(bridge_slave_0) entered blocking state [ 2417.863403][ T8772] bridge0: port 1(bridge_slave_0) entered disabled state [ 2417.872091][ T8772] bridge_slave_0: entered allmulticast mode [ 2417.879380][ T8772] bridge_slave_0: entered promiscuous mode [ 2417.888482][ T8772] bridge0: port 2(bridge_slave_1) entered blocking state [ 2417.896010][ T8772] bridge0: port 2(bridge_slave_1) entered disabled state [ 2417.903759][ T8772] bridge_slave_1: entered allmulticast mode [ 2417.911404][ T8772] bridge_slave_1: entered promiscuous mode [ 2417.945802][ T8772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2417.958056][ T8772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2417.994925][ T8772] team0: Port device team_slave_0 added [ 2418.006366][ T8772] team0: Port device team_slave_1 added [ 2418.036897][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2418.044646][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2418.073223][ T8772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2418.086376][ T8772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2418.093997][ T8772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2418.121553][ T8772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2418.270973][ T8772] hsr_slave_0: entered promiscuous mode [ 2418.877981][ T8772] hsr_slave_1: entered promiscuous mode [ 2419.812795][ T8772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2419.820714][ T8772] Cannot create hsr debugfs directory [ 2419.918212][ T1887] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2419.980186][ T1887] Bluetooth: hci4: command tx timeout [ 2420.137199][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11736'. [ 2420.225079][ T8793] netlink: 'syz.0.11735': attribute type 29 has an invalid length. [ 2420.243479][ T8772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.263353][ T8793] netlink: 'syz.0.11735': attribute type 29 has an invalid length. [ 2420.276111][ T8798] IPv6: Can't replace route, no match found [ 2420.284298][ T8799] netlink: 'syz.0.11735': attribute type 29 has an invalid length. [ 2420.293273][ T8802] netlink: 'syz.0.11735': attribute type 29 has an invalid length. [ 2420.357794][ T8772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.376523][ T8793] netlink: 'syz.0.11735': attribute type 29 has an invalid length. [ 2420.499484][ T8808] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11739'. [ 2420.517542][ T8803] syzkaller0: entered promiscuous mode [ 2420.523384][ T8803] syzkaller0: entered allmulticast mode [ 2420.575474][ T8772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.617194][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2420.668044][ T8772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.903077][ T8772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2420.916323][ T8772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2420.935749][ T8772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2421.487036][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2422.059866][ T1887] Bluetooth: hci4: command tx timeout [ 2424.143753][ T1887] Bluetooth: hci4: command tx timeout [ 2426.030915][ T8772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2426.072687][ T8800] delete_channel: no stack [ 2426.184421][ T8772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2426.197198][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11746'. [ 2426.220531][ T1887] Bluetooth: hci4: command tx timeout [ 2426.249075][ T8772] 8021q: adding VLAN 0 to HW filter on device team0 [ 2426.277467][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2426.284706][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2426.304241][ T8827] IPv6: Can't replace route, no match found [ 2426.311199][ T8829] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 2426.321883][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 2426.330138][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2426.513566][ T8836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2426.778435][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2426.786989][ T8772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2426.838431][ T8850] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.11752'. [ 2426.893144][ T8772] veth0_vlan: entered promiscuous mode [ 2426.929308][ T8772] veth1_vlan: entered promiscuous mode [ 2426.997810][ T8772] veth0_macvtap: entered promiscuous mode [ 2427.041365][ T8772] veth1_macvtap: entered promiscuous mode [ 2427.087152][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2427.140211][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.223552][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2427.235390][ T8772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2427.246383][ T8772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2427.259985][ T8772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2427.303237][ T8772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.313252][ T8772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.323773][ T8772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.333015][ T8772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2427.391711][ T8856] syzkaller0: entered promiscuous mode [ 2427.397264][ T8856] syzkaller0: entered allmulticast mode [ 2427.550967][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.569657][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.645351][ T7116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2427.664669][ T7116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2427.691618][ T8864] netlink: 'syz.3.11758': attribute type 10 has an invalid length. [ 2427.709575][ T8864] FAULT_INJECTION: forcing a failure. [ 2427.709575][ T8864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2427.727763][ T8864] CPU: 1 PID: 8864 Comm: syz.3.11758 Not tainted syzkaller #0 [ 2427.735408][ T8864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2427.745496][ T8864] Call Trace: [ 2427.748801][ T8864] [ 2427.751757][ T8864] dump_stack_lvl+0x18c/0x250 [ 2427.756468][ T8864] ? show_regs_print_info+0x20/0x20 [ 2427.761699][ T8864] ? load_image+0x420/0x420 [ 2427.766260][ T8864] ? __lock_acquire+0x7d40/0x7d40 [ 2427.771326][ T8864] ? snprintf+0xe9/0x140 [ 2427.775598][ T8864] should_fail_ex+0x39d/0x4d0 [ 2427.780299][ T8864] _copy_to_user+0x2f/0xa0 [ 2427.784730][ T8864] simple_read_from_buffer+0xe7/0x150 [ 2427.790133][ T8864] proc_fail_nth_read+0x1e8/0x260 [ 2427.795262][ T8864] ? proc_fault_inject_write+0x360/0x360 [ 2427.800906][ T8864] ? fsnotify_perm+0x271/0x5e0 [ 2427.805764][ T8864] ? proc_fault_inject_write+0x360/0x360 [ 2427.811399][ T8864] vfs_read+0x28b/0x970 [ 2427.815563][ T8864] ? kernel_read+0x1e0/0x1e0 [ 2427.820163][ T8864] ? __fget_files+0x28/0x4b0 [ 2427.824756][ T8864] ? __fget_files+0x28/0x4b0 [ 2427.829345][ T8864] ? __fget_files+0x43d/0x4b0 [ 2427.834031][ T8864] ? __fdget_pos+0x2a3/0x330 [ 2427.838617][ T8864] ? ksys_read+0x75/0x260 [ 2427.842967][ T8864] ksys_read+0x150/0x260 [ 2427.847240][ T8864] ? vfs_write+0x990/0x990 [ 2427.851689][ T8864] ? lockdep_hardirqs_on+0x98/0x150 [ 2427.856905][ T8864] do_syscall_64+0x55/0xa0 [ 2427.861333][ T8864] ? clear_bhb_loop+0x40/0x90 [ 2427.866035][ T8864] ? clear_bhb_loop+0x40/0x90 [ 2427.870741][ T8864] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2427.876643][ T8864] RIP: 0033:0x7f44d015d04e [ 2427.881059][ T8864] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2427.900673][ T8864] RSP: 002b:00007f44d0fdffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2427.909116][ T8864] RAX: ffffffffffffffda RBX: 00007f44d0fe06c0 RCX: 00007f44d015d04e [ 2427.917109][ T8864] RDX: 000000000000000f RSI: 00007f44d0fe00a0 RDI: 0000000000000004 [ 2427.925082][ T8864] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2427.933051][ T8864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2427.941017][ T8864] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2427.949004][ T8864] [ 2431.889300][ T8873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11759'. [ 2431.900723][ T8876] IPv6: Can't replace route, no match found [ 2431.912854][ T8884] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2431.920167][ T8884] IPv6: NLM_F_CREATE should be set when creating new route [ 2431.927616][ T8884] IPv6: NLM_F_CREATE should be set when creating new route [ 2431.934947][ T8884] IPv6: NLM_F_CREATE should be set when creating new route [ 2431.945690][ T8853] delete_channel: no stack [ 2432.018795][ T1887] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2432.216406][ T8895] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11765'. [ 2432.357984][ T8897] netlink: 'syz.2.11767': attribute type 10 has an invalid length. [ 2432.434694][ T8897] team0: Device xfrm0 is of different type [ 2432.721421][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11771'. [ 2432.732471][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11771'. [ 2432.743924][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11771'. [ 2432.785509][ T8905] netlink: 60 bytes leftover after parsing attributes in process `syz.0.11771'. [ 2432.996342][ T1887] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2433.017287][ T8911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2433.082424][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11773'. [ 2433.151610][ T8915] IPv6: Can't replace route, no match found [ 2433.612125][ T8937] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11782'. [ 2433.698381][ T8939] FAULT_INJECTION: forcing a failure. [ 2433.698381][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 2433.719486][ T8939] CPU: 1 PID: 8939 Comm: syz.2.11784 Not tainted syzkaller #0 [ 2433.727052][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2433.737159][ T8939] Call Trace: [ 2433.740482][ T8939] [ 2433.743458][ T8939] dump_stack_lvl+0x18c/0x250 [ 2433.748209][ T8939] ? show_regs_print_info+0x20/0x20 [ 2433.753471][ T8939] ? load_image+0x420/0x420 [ 2433.758046][ T8939] ? __might_sleep+0xe0/0xe0 [ 2433.762697][ T8939] ? __lock_acquire+0x7d40/0x7d40 [ 2433.767789][ T8939] should_fail_ex+0x39d/0x4d0 [ 2433.772542][ T8939] should_failslab+0x9/0x20 [ 2433.777093][ T8939] slab_pre_alloc_hook+0x59/0x310 [ 2433.782164][ T8939] ? __lock_acquire+0x7d40/0x7d40 [ 2433.787219][ T8939] kmem_cache_alloc_node+0x60/0x320 [ 2433.792542][ T8939] ? __alloc_skb+0x103/0x2c0 [ 2433.797158][ T8939] __alloc_skb+0x103/0x2c0 [ 2433.801602][ T8939] netlink_sendmsg+0x66a/0xbf0 [ 2433.806393][ T8939] ? perf_trace_lock+0x304/0x3b0 [ 2433.811454][ T8939] ? netlink_getsockopt+0x590/0x590 [ 2433.816688][ T8939] ? aa_sock_msg_perm+0x94/0x150 [ 2433.821652][ T8939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2433.826971][ T8939] ? security_socket_sendmsg+0x80/0xa0 [ 2433.832458][ T8939] ? netlink_getsockopt+0x590/0x590 [ 2433.837684][ T8939] ____sys_sendmsg+0x5ba/0x960 [ 2433.842497][ T8939] ? __asan_memset+0x22/0x40 [ 2433.847102][ T8939] ? __sys_sendmsg_sock+0x30/0x30 [ 2433.852134][ T8939] ? __import_iovec+0x3fa/0x850 [ 2433.857021][ T8939] ? import_iovec+0x73/0xa0 [ 2433.861562][ T8939] ___sys_sendmsg+0x2a6/0x360 [ 2433.866286][ T8939] ? __sys_sendmsg+0x2a0/0x2a0 [ 2433.871130][ T8939] ? __lock_acquire+0x7d40/0x7d40 [ 2433.876250][ T8939] __se_sys_sendmsg+0x1c2/0x2b0 [ 2433.881150][ T8939] ? __x64_sys_sendmsg+0x80/0x80 [ 2433.886161][ T8939] ? lockdep_hardirqs_on+0x98/0x150 [ 2433.891396][ T8939] do_syscall_64+0x55/0xa0 [ 2433.895829][ T8939] ? clear_bhb_loop+0x40/0x90 [ 2433.900526][ T8939] ? clear_bhb_loop+0x40/0x90 [ 2433.905229][ T8939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2433.911149][ T8939] RIP: 0033:0x7f4817f9c819 [ 2433.915675][ T8939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2433.935308][ T8939] RSP: 002b:00007f4818dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2433.943750][ T8939] RAX: ffffffffffffffda RBX: 00007f4818215fa0 RCX: 00007f4817f9c819 [ 2433.951735][ T8939] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 2433.959736][ T8939] RBP: 00007f4818dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2433.967731][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2433.975715][ T8939] R13: 00007f4818216038 R14: 00007f4818215fa0 R15: 00007ffdb32cd6e8 [ 2433.983748][ T8939] [ 2434.002320][ T8908] delete_channel: no stack [ 2434.130946][ T1887] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2434.208236][ T8943] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11786'. [ 2434.262500][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11787'. [ 2434.324367][ T8946] IPv6: Can't replace route, no match found [ 2434.656289][ T8948] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2435.396200][ T8964] syzkaller0: entered promiscuous mode [ 2435.403842][ T8964] syzkaller0: entered allmulticast mode [ 2435.570457][ T1887] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2435.899637][ T8984] IPv6: Can't replace route, no match found [ 2438.134617][ T8989] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2438.174394][ T8962] delete_channel: no stack [ 2438.354281][ T1887] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2438.535497][ T9007] netlink: 'syz.3.11806': attribute type 10 has an invalid length. [ 2438.591830][ T9009] __nla_validate_parse: 2 callbacks suppressed [ 2438.591864][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11809'. [ 2438.608424][ T9007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11806'. [ 2438.634247][ T9007] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11806'. [ 2438.677257][ T9012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11806'. [ 2438.688146][ T9009] IPv6: Can't replace route, no match found [ 2438.923102][ T9018] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.11812'. [ 2438.963059][ T9024] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11811'. [ 2438.973766][ T9021] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2439.234197][ T9026] syzkaller0: entered promiscuous mode [ 2439.245885][ T9026] syzkaller0: entered allmulticast mode [ 2439.692792][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2441.824563][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11820'. [ 2441.846727][ T9047] IPv6: Can't replace route, no match found [ 2441.864408][ T9022] delete_channel: no stack [ 2441.918320][ T9051] netlink: 'syz.1.11821': attribute type 10 has an invalid length. [ 2442.126301][ T9064] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11826'. [ 2442.214306][ T9061] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2442.364440][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2442.453912][ T9073] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11827'. [ 2442.494925][ T9075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11830'. [ 2442.542622][ T9075] IPv6: Can't replace route, no match found [ 2442.678502][ T9083] netlink: 'syz.2.11833': attribute type 21 has an invalid length. [ 2442.874873][ T9087] netlink: 'syz.2.11835': attribute type 10 has an invalid length. [ 2442.884045][ T9087] team0: entered promiscuous mode [ 2442.889446][ T9087] team_slave_0: entered promiscuous mode [ 2442.906554][ T9087] team_slave_1: entered promiscuous mode [ 2442.913855][ T9087] team0: entered allmulticast mode [ 2442.932419][ T9087] team_slave_0: entered allmulticast mode [ 2442.943585][ T9087] team_slave_1: entered allmulticast mode [ 2442.965644][ T9087] bridge0: port 3(team0) entered blocking state [ 2442.988637][ T9087] bridge0: port 3(team0) entered disabled state [ 2443.030500][ T9087] bridge0: port 3(team0) entered blocking state [ 2443.037471][ T9087] bridge0: port 3(team0) entered forwarding state [ 2443.295906][ T9094] netlink: 'syz.3.11836': attribute type 10 has an invalid length. [ 2443.369007][ T9076] delete_channel: no stack [ 2443.457138][ T1887] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 2443.504138][ T9099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2443.589034][ T9102] IPv6: Can't replace route, no match found [ 2443.876677][ T9118] netlink: 'syz.0.11846': attribute type 10 has an invalid length. [ 2443.965594][ T9121] __nla_validate_parse: 4 callbacks suppressed [ 2443.965613][ T9121] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11845'. [ 2444.248179][ T9117] syzkaller0: entered promiscuous mode [ 2444.257541][ T9117] syzkaller0: entered allmulticast mode [ 2444.978425][ T1887] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 2449.223001][ T9116] delete_channel: no stack [ 2449.246540][ T9140] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2449.352271][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11856'. [ 2449.407019][ T9147] IPv6: Can't replace route, no match found [ 2449.411432][ T9150] FAULT_INJECTION: forcing a failure. [ 2449.411432][ T9150] name failslab, interval 1, probability 0, space 0, times 0 [ 2449.429050][ T9150] CPU: 0 PID: 9150 Comm: syz.2.11858 Not tainted syzkaller #0 [ 2449.436567][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2449.446648][ T9150] Call Trace: [ 2449.449948][ T9150] [ 2449.452889][ T9150] dump_stack_lvl+0x18c/0x250 [ 2449.457591][ T9150] ? show_regs_print_info+0x20/0x20 [ 2449.462799][ T9150] ? load_image+0x420/0x420 [ 2449.467307][ T9150] ? __might_sleep+0xe0/0xe0 [ 2449.471895][ T9150] ? __lock_acquire+0x7d40/0x7d40 [ 2449.476935][ T9150] should_fail_ex+0x39d/0x4d0 [ 2449.481620][ T9150] should_failslab+0x9/0x20 [ 2449.486126][ T9150] slab_pre_alloc_hook+0x59/0x310 [ 2449.491188][ T9150] ? sock_kmalloc+0x96/0xf0 [ 2449.495697][ T9150] ? sock_kmalloc+0x96/0xf0 [ 2449.500196][ T9150] __kmem_cache_alloc_node+0x53/0x250 [ 2449.505571][ T9150] ? sock_kmalloc+0x96/0xf0 [ 2449.510073][ T9150] __kmalloc+0xa4/0x230 [ 2449.514233][ T9150] sock_kmalloc+0x96/0xf0 [ 2449.518653][ T9150] ____sys_sendmsg+0x1be/0x960 [ 2449.523430][ T9150] ? __asan_memset+0x22/0x40 [ 2449.528019][ T9150] ? __sys_sendmsg_sock+0x30/0x30 [ 2449.533046][ T9150] ? __import_iovec+0x3fa/0x850 [ 2449.537904][ T9150] ? import_iovec+0x73/0xa0 [ 2449.542411][ T9150] ___sys_sendmsg+0x2a6/0x360 [ 2449.547083][ T9150] ? get_pid_task+0x20/0x1e0 [ 2449.551677][ T9150] ? __sys_sendmsg+0x2a0/0x2a0 [ 2449.556449][ T9150] ? __lock_acquire+0x7d40/0x7d40 [ 2449.561489][ T9150] __se_sys_sendmsg+0x1c2/0x2b0 [ 2449.566338][ T9150] ? __x64_sys_sendmsg+0x80/0x80 [ 2449.571282][ T9150] ? lockdep_hardirqs_on+0x98/0x150 [ 2449.576485][ T9150] do_syscall_64+0x55/0xa0 [ 2449.580910][ T9150] ? clear_bhb_loop+0x40/0x90 [ 2449.585589][ T9150] ? clear_bhb_loop+0x40/0x90 [ 2449.590264][ T9150] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2449.596155][ T9150] RIP: 0033:0x7f4817f9c819 [ 2449.600567][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2449.620169][ T9150] RSP: 002b:00007f4818dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2449.628580][ T9150] RAX: ffffffffffffffda RBX: 00007f4818215fa0 RCX: 00007f4817f9c819 [ 2449.636550][ T9150] RDX: 0000000000044004 RSI: 0000200000000280 RDI: 0000000000000003 [ 2449.644518][ T9150] RBP: 00007f4818dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2449.652485][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2449.660626][ T9150] R13: 00007f4818216038 R14: 00007f4818215fa0 R15: 00007ffdb32cd6e8 [ 2449.668628][ T9150] [ 2449.806796][ T1887] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2449.851911][ T9158] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11859'. [ 2450.564127][ T9167] syzkaller0: entered promiscuous mode [ 2450.579897][ T9167] syzkaller0: entered allmulticast mode [ 2451.045757][ T8774] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2451.057181][ T8774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2451.066825][ T8774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2451.076545][ T8774] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2451.086639][ T8774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2451.105829][ T8774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2455.366037][ T9183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11870'. [ 2455.378057][ T9166] delete_channel: no stack [ 2455.383359][ T9185] IPv6: Can't replace route, no match found [ 2455.499906][ T8774] Bluetooth: hci2: command tx timeout [ 2455.521997][ T8774] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2455.744244][ T7116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2455.848893][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 2455.910702][ T9204] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11875'. [ 2455.957494][ T7116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.131910][ T7116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.215518][ T9210] syzkaller0: entered promiscuous mode [ 2456.235435][ T9210] syzkaller0: entered allmulticast mode [ 2456.258948][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 2456.266494][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 2456.274163][ T9176] bridge_slave_0: entered allmulticast mode [ 2456.297536][ T9176] bridge_slave_0: entered promiscuous mode [ 2456.355488][ T7116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2456.371536][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 2456.378900][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 2456.386861][ T9176] bridge_slave_1: entered allmulticast mode [ 2456.394653][ T9176] bridge_slave_1: entered promiscuous mode [ 2456.458533][ T9214] tun0: tun_chr_ioctl cmd 2147767521 [ 2456.483793][ T9214] tun0: tun_chr_ioctl cmd 1074025677 [ 2456.494286][ T9214] tun0: linktype set to 776 [ 2456.499086][ T9217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11879'. [ 2457.580091][ T8774] Bluetooth: hci2: command tx timeout [ 2458.414060][ T9214] tun0: tun_chr_ioctl cmd 1074812118 [ 2458.422471][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2458.436383][ T9215] tun0: tun_chr_ioctl cmd 1074025688 [ 2458.442451][ T9218] IPv6: Can't replace route, no match found [ 2458.482220][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2458.556723][ T9176] team0: Port device team_slave_0 added [ 2458.581919][ T9176] team0: Port device team_slave_1 added [ 2458.683814][ T8774] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2458.699270][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2458.717328][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2458.744393][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2458.758983][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2458.766447][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2458.796519][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2459.057591][ T9221] syzkaller0: entered promiscuous mode [ 2459.064207][ T9221] syzkaller0: entered allmulticast mode [ 2459.088158][ T7116] tipc: Left network mode [ 2459.659844][ T8774] Bluetooth: hci2: command tx timeout [ 2461.743886][ T8774] Bluetooth: hci2: command tx timeout [ 2463.105430][ T9220] delete_channel: no stack [ 2463.216864][ T9176] hsr_slave_0: entered promiscuous mode [ 2463.226782][ T9176] hsr_slave_1: entered promiscuous mode [ 2463.249226][ T9176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2463.270558][ T9176] Cannot create hsr debugfs directory [ 2463.432552][ T9260] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.11886'. [ 2463.776523][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11888'. [ 2463.840985][ T9268] IPv6: Can't replace route, no match found [ 2464.077415][ T9275] delete_channel: no stack [ 2464.094962][ T9275] delete_channel: no stack [ 2464.241659][ T8774] Bluetooth: hci4: unexpected event 0x07 length: 15 < 255 [ 2464.666096][ T9288] syzkaller0: entered promiscuous mode [ 2464.750813][ T9288] syzkaller0: entered allmulticast mode [ 2467.824693][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.831359][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2468.784496][ T9284] delete_channel: no stack [ 2469.012467][ T9319] FAULT_INJECTION: forcing a failure. [ 2469.012467][ T9319] name failslab, interval 1, probability 0, space 0, times 0 [ 2469.044296][ T9319] CPU: 1 PID: 9319 Comm: syz.2.11897 Not tainted syzkaller #0 [ 2469.051826][ T9319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2469.062001][ T9319] Call Trace: [ 2469.065317][ T9319] [ 2469.068265][ T9319] dump_stack_lvl+0x18c/0x250 [ 2469.072972][ T9319] ? show_regs_print_info+0x20/0x20 [ 2469.078207][ T9319] ? load_image+0x420/0x420 [ 2469.082742][ T9319] ? __might_sleep+0xe0/0xe0 [ 2469.087357][ T9319] ? __lock_acquire+0x7d40/0x7d40 [ 2469.092411][ T9319] should_fail_ex+0x39d/0x4d0 [ 2469.097201][ T9319] should_failslab+0x9/0x20 [ 2469.101715][ T9319] slab_pre_alloc_hook+0x59/0x310 [ 2469.106769][ T9319] ? genl_start+0x1c9/0x6b0 [ 2469.111294][ T9319] __kmem_cache_alloc_node+0x53/0x250 [ 2469.116874][ T9319] ? genl_start+0x1c9/0x6b0 [ 2469.121401][ T9319] kmalloc_trace+0x2a/0xe0 [ 2469.125850][ T9319] genl_start+0x1c9/0x6b0 [ 2469.130201][ T9319] ? netlink_lookup+0x30/0x200 [ 2469.134979][ T9319] __netlink_dump_start+0x4a9/0x810 [ 2469.140189][ T9319] genl_family_rcv_msg_dumpit+0x214/0x310 [ 2469.145937][ T9319] ? genl_rcv_msg+0x7a0/0x7a0 [ 2469.150617][ T9319] ? genl_get_cmd+0x692/0x920 [ 2469.155327][ T9319] ? genl_family_rcv_msg_doit+0x310/0x310 [ 2469.161132][ T9319] ? genl_start+0x6b0/0x6b0 [ 2469.165628][ T9319] ? genl_dumpit+0x1a0/0x1a0 [ 2469.170227][ T9319] genl_rcv_msg+0x5e5/0x7a0 [ 2469.174772][ T9319] ? genl_bind+0x360/0x360 [ 2469.179181][ T9319] ? tipc_nl_node_reset_link_stats+0x770/0x770 [ 2469.185341][ T9319] ? ref_tracker_free+0x690/0x840 [ 2469.190392][ T9319] netlink_rcv_skb+0x241/0x4d0 [ 2469.195255][ T9319] ? genl_bind+0x360/0x360 [ 2469.199700][ T9319] ? netlink_ack+0x1180/0x1180 [ 2469.204471][ T9319] ? __lock_acquire+0x7d40/0x7d40 [ 2469.209495][ T9319] ? down_read+0x1ac/0x2e0 [ 2469.213917][ T9319] genl_rcv+0x28/0x40 [ 2469.217894][ T9319] netlink_unicast+0x751/0x8d0 [ 2469.222665][ T9319] netlink_sendmsg+0x8d0/0xbf0 [ 2469.227436][ T9319] ? netlink_getsockopt+0x590/0x590 [ 2469.232637][ T9319] ? aa_sock_msg_perm+0x94/0x150 [ 2469.237577][ T9319] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2469.242866][ T9319] ? security_socket_sendmsg+0x80/0xa0 [ 2469.248324][ T9319] ? netlink_getsockopt+0x590/0x590 [ 2469.253529][ T9319] ____sys_sendmsg+0x5ba/0x960 [ 2469.258294][ T9319] ? __asan_memset+0x22/0x40 [ 2469.262885][ T9319] ? __sys_sendmsg_sock+0x30/0x30 [ 2469.267908][ T9319] ? __import_iovec+0x5f2/0x850 [ 2469.272764][ T9319] ? import_iovec+0x73/0xa0 [ 2469.277264][ T9319] ___sys_sendmsg+0x2a6/0x360 [ 2469.281942][ T9319] ? __sys_sendmsg+0x2a0/0x2a0 [ 2469.286769][ T9319] __se_sys_sendmsg+0x1c2/0x2b0 [ 2469.291621][ T9319] ? __x64_sys_sendmsg+0x80/0x80 [ 2469.296576][ T9319] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2469.302469][ T9319] do_syscall_64+0x55/0xa0 [ 2469.306878][ T9319] ? clear_bhb_loop+0x40/0x90 [ 2469.311559][ T9319] ? clear_bhb_loop+0x40/0x90 [ 2469.316231][ T9319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2469.322123][ T9319] RIP: 0033:0x7f4817f9c819 [ 2469.326535][ T9319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2469.346146][ T9319] RSP: 002b:00007f4818dec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2469.354568][ T9319] RAX: ffffffffffffffda RBX: 00007f4818215fa0 RCX: 00007f4817f9c819 [ 2469.362626][ T9319] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 2469.370600][ T9319] RBP: 00007f4818dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2469.378566][ T9319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2469.386533][ T9319] R13: 00007f4818216038 R14: 00007f4818215fa0 R15: 00007ffdb32cd6e8 [ 2469.394517][ T9319] [ 2469.403287][ T7116] bond0: (slave wlan1): Releasing backup interface [ 2469.417473][ T9318] delete_channel: no stack [ 2469.450000][ T9318] delete_channel: no stack [ 2469.467602][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11898'. [ 2469.515863][ T9328] IPv6: Can't replace route, no match found [ 2469.731036][ T8774] Bluetooth: hci3: unexpected event 0x07 length: 15 < 255 [ 2469.824958][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2469.843414][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2469.862897][ T9343] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11902'. [ 2469.873640][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2469.889907][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2470.131141][ T7116] veth1_macvtap: left promiscuous mode [ 2470.136836][ T7116] veth0_macvtap: left promiscuous mode [ 2470.159478][ T7116] veth1_vlan: left promiscuous mode [ 2470.180284][ T7116] veth0_vlan: left promiscuous mode [ 2473.641119][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2473.693691][ T7116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2473.978445][ T7116] bond0 (unregistering): Released all slaves [ 2474.020952][ T9346] netlink: 'syz.1.11904': attribute type 10 has an invalid length. [ 2474.043356][ T9353] tap0: tun_chr_ioctl cmd 1074025677 [ 2474.055503][ T9353] tap0: linktype set to 773 [ 2474.091666][ T9355] netlink: 'syz.3.11905': attribute type 10 has an invalid length. [ 2474.117549][ T9176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2474.139394][ T9176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2474.190044][ T9176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2474.222239][ T9176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2474.482898][ T9378] syzkaller0: entered promiscuous mode [ 2474.501927][ T9378] syzkaller0: entered allmulticast mode [ 2474.552952][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11910'. [ 2474.735486][ T9396] IPv6: Can't replace route, no match found [ 2474.764600][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2474.786050][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 2474.810553][ T7117] bridge0: port 1(bridge_slave_0) entered blocking state [ 2474.817805][ T7117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2474.840071][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 2474.847339][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2474.926792][ T9176] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2478.173872][ T9376] delete_channel: no stack [ 2478.346024][ T8774] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 2478.402955][ T9176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2478.568475][ T9426] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11913'. [ 2478.569468][ T9176] veth0_vlan: entered promiscuous mode [ 2478.636168][ T9176] veth1_vlan: entered promiscuous mode [ 2478.727225][ T9176] veth0_macvtap: entered promiscuous mode [ 2478.762837][ T9176] veth1_macvtap: entered promiscuous mode [ 2478.831652][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2478.859155][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2478.898715][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2478.944605][ T9176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2479.004483][ T9176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2479.031723][ T9176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2479.053408][ T9176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.082116][ T9176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.104651][ T9176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.122222][ T9176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2479.335031][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2479.354558][ T9438] FAULT_INJECTION: forcing a failure. [ 2479.354558][ T9438] name failslab, interval 1, probability 0, space 0, times 0 [ 2479.367582][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2479.386864][ T9438] CPU: 0 PID: 9438 Comm: syz.1.11915 Not tainted syzkaller #0 [ 2479.394410][ T9438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2479.404542][ T9438] Call Trace: [ 2479.407870][ T9438] [ 2479.410842][ T9438] dump_stack_lvl+0x18c/0x250 [ 2479.415581][ T9438] ? show_regs_print_info+0x20/0x20 [ 2479.420849][ T9438] ? load_image+0x420/0x420 [ 2479.425407][ T9438] ? __might_sleep+0xe0/0xe0 [ 2479.430051][ T9438] ? __lock_acquire+0x7d40/0x7d40 [ 2479.435137][ T9438] should_fail_ex+0x39d/0x4d0 [ 2479.439889][ T9438] should_failslab+0x9/0x20 [ 2479.444447][ T9438] slab_pre_alloc_hook+0x59/0x310 [ 2479.449515][ T9438] ? __lock_acquire+0x7d40/0x7d40 [ 2479.454599][ T9438] kmem_cache_alloc_node+0x60/0x320 [ 2479.459854][ T9438] ? __alloc_skb+0x103/0x2c0 [ 2479.464532][ T9438] __alloc_skb+0x103/0x2c0 [ 2479.469020][ T9438] netlink_sendmsg+0x66a/0xbf0 [ 2479.473874][ T9438] ? netlink_getsockopt+0x590/0x590 [ 2479.479147][ T9438] ? aa_sock_msg_perm+0x94/0x150 [ 2479.484154][ T9438] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2479.489489][ T9438] ? security_socket_sendmsg+0x80/0xa0 [ 2479.494999][ T9438] ? netlink_getsockopt+0x590/0x590 [ 2479.500269][ T9438] ____sys_sendmsg+0x5ba/0x960 [ 2479.505103][ T9438] ? __asan_memset+0x22/0x40 [ 2479.509755][ T9438] ? __sys_sendmsg_sock+0x30/0x30 [ 2479.514831][ T9438] ? __import_iovec+0x5f2/0x850 [ 2479.519784][ T9438] ? import_iovec+0x73/0xa0 [ 2479.524357][ T9438] ___sys_sendmsg+0x2a6/0x360 [ 2479.529093][ T9438] ? get_pid_task+0x20/0x1e0 [ 2479.533765][ T9438] ? __sys_sendmsg+0x2a0/0x2a0 [ 2479.538659][ T9438] ? __lock_acquire+0x7d40/0x7d40 [ 2479.543825][ T9438] __se_sys_sendmsg+0x1c2/0x2b0 [ 2479.548756][ T9438] ? __x64_sys_sendmsg+0x80/0x80 [ 2479.553795][ T9438] ? lockdep_hardirqs_on+0x98/0x150 [ 2479.559068][ T9438] do_syscall_64+0x55/0xa0 [ 2479.563533][ T9438] ? clear_bhb_loop+0x40/0x90 [ 2479.568257][ T9438] ? clear_bhb_loop+0x40/0x90 [ 2479.572993][ T9438] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2479.578942][ T9438] RIP: 0033:0x7f968b99c819 [ 2479.583452][ T9438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2479.603376][ T9438] RSP: 002b:00007f968c902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2479.612028][ T9438] RAX: ffffffffffffffda RBX: 00007f968bc15fa0 RCX: 00007f968b99c819 [ 2479.620053][ T9438] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000006 [ 2479.628077][ T9438] RBP: 00007f968c902090 R08: 0000000000000000 R09: 0000000000000000 [ 2479.636542][ T9438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2479.644574][ T9438] R13: 00007f968bc16038 R14: 00007f968bc15fa0 R15: 00007ffd28a31058 [ 2479.652648][ T9438] [ 2479.665665][T27968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2479.673800][T27968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2479.824094][ T9440] netlink: 26403 bytes leftover after parsing attributes in process `syz.2.11916'. [ 2479.861074][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11916'. [ 2479.964143][ T9442] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2479.972504][ T9442] IPv6: NLM_F_CREATE should be set when creating new route [ 2479.983224][ T9442] IPv6: NLM_F_CREATE should be set when creating new route [ 2479.991904][ T9442] IPv6: NLM_F_CREATE should be set when creating new route [ 2480.182731][ T9448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11918'. [ 2480.217977][ T9448] IPv6: Can't replace route, no match found [ 2480.572859][ T9456] syzkaller0: entered promiscuous mode [ 2480.578917][ T9456] syzkaller0: entered allmulticast mode [ 2480.791454][ T9464] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11923'. [ 2483.543429][ T9467] sctp: [Deprecated]: syz.2.11924 (pid 9467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2483.543429][ T9467] Use struct sctp_sack_info instead [ 2486.238064][ T9475] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.11927'. [ 2486.250967][ T9475] netlink: zone id is out of range [ 2486.256328][ T9475] netlink: zone id is out of range [ 2486.263185][ T9475] netlink: zone id is out of range [ 2486.268556][ T9475] netlink: zone id is out of range [ 2486.274747][ T9475] netlink: zone id is out of range [ 2486.284867][ T9475] netlink: zone id is out of range [ 2486.295180][ T9475] netlink: zone id is out of range [ 2486.301070][ T9475] netlink: zone id is out of range [ 2486.306542][ T9475] netlink: zone id is out of range [ 2486.317020][ T9475] netlink: zone id is out of range [ 2488.101666][ T9479] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2488.109060][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11929'. [ 2488.119031][ T9484] IPv6: Can't replace route, no match found [ 2488.133337][ T9449] delete_channel: no stack [ 2488.500392][ T9499] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.11932'. [ 2489.073146][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11939'. [ 2489.156360][ T9514] IPv6: Can't replace route, no match found [ 2489.174152][ T9516] sit0: entered promiscuous mode [ 2489.186557][ T9516] sit0: entered allmulticast mode [ 2489.432102][ T9519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2489.606254][ T9523] syzkaller0: entered promiscuous mode [ 2489.612253][ T9523] syzkaller0: entered allmulticast mode [ 2490.218612][ T9537] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11946'. [ 2494.674641][ T9541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11948'. [ 2494.686280][ T9543] IPv6: Can't replace route, no match found [ 2494.741728][ T9517] delete_channel: no stack [ 2495.076030][ T9552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2495.263224][ T9563] sctp: [Deprecated]: syz.3.11955 (pid 9563) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2495.263224][ T9563] Use struct sctp_sack_info instead [ 2495.327199][ T9555] netlink: 'syz.1.11953': attribute type 21 has an invalid length. [ 2495.656414][ T9572] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.11956'. [ 2495.941935][ T9577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11959'. [ 2496.218422][ T9579] IPv6: Can't replace route, no match found [ 2496.325644][ T9583] syzkaller0: entered promiscuous mode [ 2496.333626][ T9583] syzkaller0: entered allmulticast mode [ 2500.464216][ T9604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2500.515495][ T9580] delete_channel: no stack [ 2500.705141][ T9617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11970'. [ 2500.744131][ T9613] netlink: 'syz.3.11968': attribute type 21 has an invalid length. [ 2500.758824][ T9613] netlink: 128 bytes leftover after parsing attributes in process `syz.3.11968'. [ 2500.759472][ T9621] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.11971'. [ 2500.772494][ T9613] netlink: 'syz.3.11968': attribute type 4 has an invalid length. [ 2500.781409][ T9622] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.11969'. [ 2500.804553][ T9613] netlink: 'syz.3.11968': attribute type 5 has an invalid length. [ 2500.817341][ T9613] netlink: 3 bytes leftover after parsing attributes in process `syz.3.11968'. [ 2500.843948][ T9617] IPv6: Can't replace route, no match found [ 2501.247896][ T9635] FAULT_INJECTION: forcing a failure. [ 2501.247896][ T9635] name failslab, interval 1, probability 0, space 0, times 0 [ 2501.299324][ T9635] CPU: 1 PID: 9635 Comm: syz.3.11976 Not tainted syzkaller #0 [ 2501.306870][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2501.317124][ T9635] Call Trace: [ 2501.320407][ T9635] [ 2501.323335][ T9635] dump_stack_lvl+0x18c/0x250 [ 2501.328020][ T9635] ? show_regs_print_info+0x20/0x20 [ 2501.333222][ T9635] ? load_image+0x420/0x420 [ 2501.337726][ T9635] ? __might_sleep+0xe0/0xe0 [ 2501.342317][ T9635] ? __lock_acquire+0x7d40/0x7d40 [ 2501.347353][ T9635] should_fail_ex+0x39d/0x4d0 [ 2501.352035][ T9635] should_failslab+0x9/0x20 [ 2501.356537][ T9635] slab_pre_alloc_hook+0x59/0x310 [ 2501.361563][ T9635] ? __lock_acquire+0x7d40/0x7d40 [ 2501.366586][ T9635] kmem_cache_alloc_node+0x60/0x320 [ 2501.371783][ T9635] ? __alloc_skb+0x103/0x2c0 [ 2501.376382][ T9635] __alloc_skb+0x103/0x2c0 [ 2501.380801][ T9635] netlink_sendmsg+0x66a/0xbf0 [ 2501.385587][ T9635] ? netlink_getsockopt+0x590/0x590 [ 2501.390790][ T9635] ? aa_sock_msg_perm+0x94/0x150 [ 2501.395730][ T9635] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2501.401019][ T9635] ? security_socket_sendmsg+0x80/0xa0 [ 2501.406476][ T9635] ? netlink_getsockopt+0x590/0x590 [ 2501.411710][ T9635] ____sys_sendmsg+0x5ba/0x960 [ 2501.416473][ T9635] ? __asan_memset+0x22/0x40 [ 2501.421148][ T9635] ? __sys_sendmsg_sock+0x30/0x30 [ 2501.426163][ T9635] ? __import_iovec+0x5f2/0x850 [ 2501.431016][ T9635] ? import_iovec+0x73/0xa0 [ 2501.435521][ T9635] ___sys_sendmsg+0x2a6/0x360 [ 2501.440214][ T9635] ? __sys_sendmsg+0x2a0/0x2a0 [ 2501.444987][ T9635] ? __lock_acquire+0x7d40/0x7d40 [ 2501.450026][ T9635] __se_sys_sendmsg+0x1c2/0x2b0 [ 2501.454883][ T9635] ? __x64_sys_sendmsg+0x80/0x80 [ 2501.459829][ T9635] ? lockdep_hardirqs_on+0x98/0x150 [ 2501.465026][ T9635] do_syscall_64+0x55/0xa0 [ 2501.469452][ T9635] ? clear_bhb_loop+0x40/0x90 [ 2501.474130][ T9635] ? clear_bhb_loop+0x40/0x90 [ 2501.478804][ T9635] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2501.484718][ T9635] RIP: 0033:0x7f44d019c819 [ 2501.489130][ T9635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2501.508741][ T9635] RSP: 002b:00007f44d0fe0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2501.517154][ T9635] RAX: ffffffffffffffda RBX: 00007f44d0415fa0 RCX: 00007f44d019c819 [ 2501.525125][ T9635] RDX: 0000000000040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 2501.533197][ T9635] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2501.541166][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2501.549128][ T9635] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2501.557135][ T9635] [ 2501.610514][ T12] hsr_slave_0: left promiscuous mode [ 2501.687989][ T12] hsr_slave_1: left promiscuous mode [ 2501.702554][ T12] hsr0: left allmulticast mode [ 2501.716198][ T12] bridge0: port 1(hsr0) entered disabled state [ 2501.731474][ T12] bridge_slave_1: left allmulticast mode [ 2501.748025][ T12] bridge_slave_1: left promiscuous mode [ 2501.757862][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 2501.979850][ T12] veth1_macvtap: left promiscuous mode [ 2501.992575][ T12] veth0_macvtap: left promiscuous mode [ 2501.998421][ T12] veth1_vlan: left promiscuous mode [ 2502.016284][ T12] veth0_vlan: left promiscuous mode [ 2502.889635][ T9644] delete_channel: no stack [ 2502.934762][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2502.981941][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2503.256032][ T12] bond0 (unregistering): Released all slaves [ 2503.370527][ T9642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2503.552798][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11980'. [ 2503.711377][ T9656] IPv6: Can't replace route, no match found [ 2506.971925][ T9679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2507.053065][ T9685] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.11987'. [ 2507.594236][ T9688] syzkaller0: entered promiscuous mode [ 2507.600352][ T9688] syzkaller0: entered allmulticast mode [ 2507.627176][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11991'. [ 2507.638956][ T9693] IPv6: Can't replace route, no match found [ 2511.712581][ T9687] delete_channel: no stack [ 2511.804264][ T9712] netlink: 'syz.3.11997': attribute type 21 has an invalid length. [ 2511.837146][ T9712] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11997'. [ 2512.098632][ T9715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2512.187257][ T9719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12001'. [ 2512.256891][ T9719] IPv6: Can't replace route, no match found [ 2512.492963][ T9731] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12002'. [ 2513.054995][ T9738] syzkaller0: entered promiscuous mode [ 2513.072783][ T9738] syzkaller0: entered allmulticast mode [ 2517.603151][ T9747] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2517.618462][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12012'. [ 2517.634761][ T9754] IPv6: Can't replace route, no match found [ 2517.643112][ T9737] delete_channel: no stack [ 2517.890850][ T9762] netlink: 'syz.0.12015': attribute type 10 has an invalid length. [ 2517.909774][ T9762] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12015'. [ 2517.918794][ T9762] hsr0: entered promiscuous mode [ 2517.930838][ T9762] bridge0: port 3(hsr0) entered blocking state [ 2517.942244][ T9762] bridge0: port 3(hsr0) entered disabled state [ 2517.948651][ T9762] hsr0: entered allmulticast mode [ 2517.964772][ T9762] hsr_slave_0: entered allmulticast mode [ 2517.970852][ T9762] hsr_slave_1: entered allmulticast mode [ 2517.979270][ T9762] bridge0: port 3(hsr0) entered blocking state [ 2517.985653][ T9762] bridge0: port 3(hsr0) entered forwarding state [ 2518.222015][ T9779] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12019'. [ 2518.282266][ T9776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2518.375930][ T9783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12023'. [ 2518.669774][ T9781] syzkaller0: entered promiscuous mode [ 2518.675545][ T9781] syzkaller0: entered allmulticast mode [ 2520.923308][ T9784] IPv6: Can't replace route, no match found [ 2520.934305][ T9798] netlink: 'syz.1.12026': attribute type 10 has an invalid length. [ 2520.953695][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2520.972890][ T9798] bridge_slave_1: left allmulticast mode [ 2520.978733][ T9798] bridge_slave_1: left promiscuous mode [ 2520.986148][ T9780] delete_channel: no stack [ 2520.987643][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state [ 2521.005423][ T9798] bridge_slave_1: entered promiscuous mode [ 2521.014460][ T9798] bridge_slave_1: entered allmulticast mode [ 2521.031272][ T9798] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2521.636627][ T9817] delete_channel: no stack [ 2521.687059][ T9820] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2521.808308][ T9825] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12034'. [ 2521.877399][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12036'. [ 2521.908758][ T9829] IPv6: Can't replace route, no match found [ 2522.630780][ T9830] delete_channel: no stack [ 2522.938345][ T9845] netlink: 'syz.0.12040': attribute type 2 has an invalid length. [ 2525.675749][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12046'. [ 2525.716493][ T9864] IPv6: Can't replace route, no match found [ 2525.910487][ T8774] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 2526.115918][ T9860] syzkaller0: entered promiscuous mode [ 2526.129984][ T9860] syzkaller0: entered allmulticast mode [ 2526.198843][ T9863] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2526.242887][ T9854] delete_channel: no stack [ 2526.256355][ T9872] syzkaller0: entered promiscuous mode [ 2526.268117][ T9872] syzkaller0: entered allmulticast mode [ 2526.428250][ T9883] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12051'. [ 2528.683747][ T9891] netlink: 'syz.0.12054': attribute type 9 has an invalid length. [ 2528.692953][ T9891] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12054'. [ 2529.263941][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.270437][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2529.820034][ T6138] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 2530.583245][ T9865] delete_channel: no stack [ 2530.584533][ T9892] netlink: 'syz.0.12054': attribute type 9 has an invalid length. [ 2530.599421][ T9892] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12054'. [ 2530.815081][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12058'. [ 2530.912049][ T9903] IPv6: Can't replace route, no match found [ 2530.963553][ T9908] FAULT_INJECTION: forcing a failure. [ 2530.963553][ T9908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2530.966294][ T8774] Bluetooth: hci2: unexpected event 0x08 length: 15 > 4 [ 2530.980563][ T9908] CPU: 1 PID: 9908 Comm: syz.3.12060 Not tainted syzkaller #0 [ 2530.995159][ T9908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2531.005390][ T9908] Call Trace: [ 2531.008691][ T9908] [ 2531.011631][ T9908] dump_stack_lvl+0x18c/0x250 [ 2531.016330][ T9908] ? show_regs_print_info+0x20/0x20 [ 2531.021546][ T9908] ? load_image+0x420/0x420 [ 2531.026077][ T9908] ? __lock_acquire+0x7d40/0x7d40 [ 2531.031109][ T9908] ? snprintf+0xe9/0x140 [ 2531.035361][ T9908] should_fail_ex+0x39d/0x4d0 [ 2531.040073][ T9908] _copy_to_user+0x2f/0xa0 [ 2531.044514][ T9908] simple_read_from_buffer+0xe7/0x150 [ 2531.049918][ T9908] proc_fail_nth_read+0x1e8/0x260 [ 2531.054974][ T9908] ? proc_fault_inject_write+0x360/0x360 [ 2531.060654][ T9908] ? fsnotify_perm+0x271/0x5e0 [ 2531.065436][ T9908] ? proc_fault_inject_write+0x360/0x360 [ 2531.071086][ T9908] vfs_read+0x28b/0x970 [ 2531.075286][ T9908] ? kernel_read+0x1e0/0x1e0 [ 2531.079887][ T9908] ? __fget_files+0x28/0x4b0 [ 2531.084496][ T9908] ? __fget_files+0x28/0x4b0 [ 2531.089116][ T9908] ? __fget_files+0x43d/0x4b0 [ 2531.093857][ T9908] ? __fdget_pos+0x2a3/0x330 [ 2531.098466][ T9908] ? ksys_read+0x75/0x260 [ 2531.102824][ T9908] ksys_read+0x150/0x260 [ 2531.107088][ T9908] ? vfs_write+0x990/0x990 [ 2531.111526][ T9908] ? lockdep_hardirqs_on+0x98/0x150 [ 2531.116740][ T9908] do_syscall_64+0x55/0xa0 [ 2531.121163][ T9908] ? clear_bhb_loop+0x40/0x90 [ 2531.125841][ T9908] ? clear_bhb_loop+0x40/0x90 [ 2531.130526][ T9908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2531.136423][ T9908] RIP: 0033:0x7f44d015d04e [ 2531.140864][ T9908] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2531.160488][ T9908] RSP: 002b:00007f44d0fdffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2531.168912][ T9908] RAX: ffffffffffffffda RBX: 00007f44d0fe06c0 RCX: 00007f44d015d04e [ 2531.176892][ T9908] RDX: 000000000000000f RSI: 00007f44d0fe00a0 RDI: 0000000000000006 [ 2531.184968][ T9908] RBP: 00007f44d0fe0090 R08: 0000000000000000 R09: 0000000000000000 [ 2531.192971][ T9908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2531.200960][ T9908] R13: 00007f44d0416038 R14: 00007f44d0415fa0 R15: 00007ffca6e2c4b8 [ 2531.208968][ T9908] [ 2531.299618][ T9911] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2531.482721][ T9919] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12062'. [ 2531.574555][ T9921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2531.978105][ T9925] syzkaller0: entered promiscuous mode [ 2531.989959][ T9925] syzkaller0: entered allmulticast mode [ 2532.348591][ T9935] netlink: 'syz.2.12068': attribute type 9 has an invalid length. [ 2532.368449][ T9935] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12068'. [ 2536.239077][ T9937] netlink: 'syz.2.12068': attribute type 9 has an invalid length. [ 2536.248178][ T9937] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12068'. [ 2536.258323][ T9924] delete_channel: no stack [ 2536.328942][ T8774] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 2536.345596][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12070'. [ 2536.406342][ T9949] IPv6: Can't replace route, no match found [ 2536.521286][ T9952] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2536.857625][ T9964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2537.053262][ T9976] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12080'. [ 2537.208772][ T9970] delete_channel: no stack [ 2537.391750][ T9985] netlink: 'syz.0.12083': attribute type 9 has an invalid length. [ 2537.404006][ T9985] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12083'. [ 2537.477949][ T9987] netlink: 'syz.0.12083': attribute type 9 has an invalid length. [ 2537.505254][ T9987] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12083'. [ 2537.623001][ T9989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12085'. [ 2537.724808][ T9989] IPv6: Can't replace route, no match found [ 2538.186427][T10000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2538.430116][T10009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2538.523385][T10003] delete_channel: no stack [ 2538.596374][T10013] netlink: 'syz.2.12094': attribute type 9 has an invalid length. [ 2538.608991][T10013] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12094'. [ 2538.627767][T10017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12096'. [ 2538.662380][T10017] IPv6: Can't replace route, no match found [ 2538.719786][T10021] netlink: 'syz.2.12094': attribute type 9 has an invalid length. [ 2538.727822][T10021] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12094'. [ 2538.796180][T10013] netlink: 'syz.2.12094': attribute type 3 has an invalid length. [ 2538.822755][T10013] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12094'. [ 2539.657612][T10038] netlink: 'syz.3.12100': attribute type 9 has an invalid length. [ 2539.816772][T10045] netlink: 'syz.3.12100': attribute type 9 has an invalid length. [ 2539.986979][T10048] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2540.197380][T10049] delete_channel: no stack [ 2540.402603][T10062] IPv6: Can't replace route, no match found [ 2540.425818][T10060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2540.543668][T10065] netlink: 'syz.1.12111': attribute type 9 has an invalid length. [ 2540.668298][T10066] netlink: 'syz.1.12111': attribute type 9 has an invalid length. [ 2541.579802][ T1887] Bluetooth: hci4: command 0x0406 tx timeout [ 2542.798487][T10079] __nla_validate_parse: 8 callbacks suppressed [ 2542.798507][T10079] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12120'. [ 2543.628779][T10093] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2543.794748][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12119'. [ 2543.840926][T10101] IPv6: Can't replace route, no match found [ 2543.878531][T10094] delete_channel: no stack [ 2544.205799][T10113] validate_nla: 1 callbacks suppressed [ 2544.205827][T10113] netlink: 'syz.0.12125': attribute type 9 has an invalid length. [ 2544.219540][T10113] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12125'. [ 2544.223453][T10115] sctp: [Deprecated]: syz.2.12126 (pid 10115) Use of int in max_burst socket option deprecated. [ 2544.223453][T10115] Use struct sctp_assoc_value instead [ 2544.318172][T10116] netlink: 'syz.0.12125': attribute type 9 has an invalid length. [ 2544.351469][T10116] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12125'. [ 2544.523619][T10113] netlink: 'syz.0.12125': attribute type 3 has an invalid length. [ 2544.541603][T10113] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12125'. [ 2545.190178][T10126] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12127'. [ 2547.632657][T10138] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2547.960044][T10141] delete_channel: no stack [ 2548.075074][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12135'. [ 2548.123663][T10151] IPv6: Can't replace route, no match found [ 2548.281428][T10157] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12137'. [ 2550.234861][T10161] netlink: 'syz.2.12139': attribute type 9 has an invalid length. [ 2550.323609][T10161] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12139'. [ 2550.487117][T10170] netlink: 'syz.2.12139': attribute type 9 has an invalid length. [ 2550.499172][T10170] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12139'. [ 2550.573836][T10161] netlink: 'syz.2.12139': attribute type 3 has an invalid length. [ 2550.582273][T10161] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12139'. [ 2550.646979][T10172] sctp: [Deprecated]: syz.1.12138 (pid 10172) Use of int in max_burst socket option deprecated. [ 2550.646979][T10172] Use struct sctp_assoc_value instead [ 2550.707617][T10175] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2552.890797][T10179] delete_channel: no stack [ 2552.893723][T10188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12146'. [ 2552.925978][T10188] IPv6: Can't replace route, no match found [ 2553.301836][T10197] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12147'. [ 2556.376110][T10210] sctp: [Deprecated]: syz.0.12153 (pid 10210) Use of int in max_burst socket option deprecated. [ 2556.376110][T10210] Use struct sctp_assoc_value instead [ 2556.458859][T10214] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2556.544783][T10211] delete_channel: no stack [ 2556.792391][ T8774] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 2556.826951][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12157'. [ 2556.864465][T10221] IPv6: Can't replace route, no match found [ 2557.354015][T10234] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12161'. [ 2560.649322][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12168'. [ 2560.731758][T10248] IPv6: Can't replace route, no match found [ 2560.826030][T10245] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2560.962756][ T8774] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2561.061362][T10253] delete_channel: no stack [ 2561.149575][T10263] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.12171'. [ 2561.220070][T10263] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.12171'. [ 2561.337684][T10268] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2561.350421][T10268] netlink: 'syz.0.12173': attribute type 21 has an invalid length. [ 2561.358807][T10268] netlink: 'syz.0.12173': attribute type 6 has an invalid length. [ 2561.367496][T10268] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12173'. [ 2561.537043][T10275] netlink: 144 bytes leftover after parsing attributes in process `syz.3.12176'. [ 2561.594469][T10278] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12174'. [ 2564.234129][T10290] FAULT_INJECTION: forcing a failure. [ 2564.234129][T10290] name failslab, interval 1, probability 0, space 0, times 0 [ 2564.257518][T10290] CPU: 1 PID: 10290 Comm: syz.2.12179 Not tainted syzkaller #0 [ 2564.265139][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2564.275227][T10290] Call Trace: [ 2564.278529][T10290] [ 2564.281483][T10290] dump_stack_lvl+0x18c/0x250 [ 2564.286197][T10290] ? show_regs_print_info+0x20/0x20 [ 2564.291431][T10290] ? load_image+0x420/0x420 [ 2564.295958][T10290] ? __might_sleep+0xe0/0xe0 [ 2564.300570][T10290] ? __lock_acquire+0x7d40/0x7d40 [ 2564.305617][T10290] should_fail_ex+0x39d/0x4d0 [ 2564.310312][T10290] should_failslab+0x9/0x20 [ 2564.314821][T10290] slab_pre_alloc_hook+0x59/0x310 [ 2564.319851][T10290] ? __lock_acquire+0x7d40/0x7d40 [ 2564.324879][T10290] ? kvmalloc_node+0x70/0x180 [ 2564.329651][T10290] ? kvmalloc_node+0x70/0x180 [ 2564.334334][T10290] __kmem_cache_alloc_node+0x53/0x250 [ 2564.339721][T10290] ? __schedule_delayed_monitor_work+0x200/0x200 [ 2564.346058][T10290] ? kvmalloc_node+0x70/0x180 [ 2564.350741][T10290] __kmalloc_node+0xa4/0x230 [ 2564.355339][T10290] kvmalloc_node+0x70/0x180 [ 2564.359847][T10290] bpf_test_run_xdp_live+0x1c2/0x1b20 [ 2564.365236][T10290] ? 0xffffffffa0004200 [ 2564.369398][T10290] ? 0xffffffffa0004200 [ 2564.373596][T10290] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 2564.379502][T10290] ? 0xffffffffa0004200 [ 2564.383662][T10290] ? xdp_convert_md_to_buff+0x330/0x330 [ 2564.389300][T10290] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2564.395547][T10290] ? _copy_from_user+0xa5/0xe0 [ 2564.400315][T10290] ? bpf_test_init+0x119/0x140 [ 2564.405083][T10290] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2564.410545][T10290] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 2564.415930][T10290] ? dev_put+0x80/0x80 [ 2564.420012][T10290] ? dev_put+0x80/0x80 [ 2564.424081][T10290] bpf_prog_test_run+0x321/0x390 [ 2564.429023][T10290] __sys_bpf+0x49d/0x890 [ 2564.433267][T10290] ? bpf_link_show_fdinfo+0x390/0x390 [ 2564.438654][T10290] ? lock_chain_count+0x20/0x20 [ 2564.443513][T10290] __x64_sys_bpf+0x7c/0x90 [ 2564.447933][T10290] do_syscall_64+0x55/0xa0 [ 2564.452355][T10290] ? clear_bhb_loop+0x40/0x90 [ 2564.457033][T10290] ? clear_bhb_loop+0x40/0x90 [ 2564.461713][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2564.467624][T10290] RIP: 0033:0x7f4817f9c819 [ 2564.472047][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2564.491683][T10290] RSP: 002b:00007f4818dec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2564.500103][T10290] RAX: ffffffffffffffda RBX: 00007f4818215fa0 RCX: 00007f4817f9c819 [ 2564.508110][T10290] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 2564.516170][T10290] RBP: 00007f4818dec090 R08: 0000000000000000 R09: 0000000000000000 [ 2564.524147][T10290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2564.532119][T10290] R13: 00007f4818216038 R14: 00007f4818215fa0 R15: 00007ffdb32cd6e8 [ 2564.540116][T10290] [ 2564.563934][T10296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12178'. [ 2564.589758][T10296] IPv6: Can't replace route, no match found [ 2564.727610][ T8774] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 2564.749352][T10292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2564.826434][T10297] delete_channel: no stack [ 2565.217953][T10313] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.12186'. [ 2566.917063][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12191'. [ 2566.969291][T10332] IPv6: Can't replace route, no match found [ 2567.175266][T10338] netlink: 'syz.0.12193': attribute type 3 has an invalid length. [ 2567.198425][T10338] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.12193'. [ 2567.293080][T10339] delete_channel: no stack [ 2567.525575][T10344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2567.773165][T10355] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12199'. [ 2568.196902][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12202'. [ 2568.284251][T10364] IPv6: Can't replace route, no match found [ 2568.481599][T10359] macsec0: entered promiscuous mode [ 2568.524923][T10359] macsec0: entered allmulticast mode [ 2568.541813][T10359] veth1_macvtap: entered allmulticast mode [ 2568.805333][T10373] netlink: 'syz.0.12204': attribute type 39 has an invalid length. [ 2571.161878][T10384] netlink: 'syz.3.12208': attribute type 3 has an invalid length. [ 2571.175972][T10384] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.12208'. [ 2571.252879][T10379] delete_channel: no stack [ 2571.374841][T10389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2571.557425][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12212'. [ 2571.619131][T10391] IPv6: Can't replace route, no match found [ 2571.947756][T10407] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12214'. [ 2573.199345][T10417] delete_channel: no stack [ 2573.343837][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12222'. [ 2573.362440][T10421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2573.399853][T10424] IPv6: Can't replace route, no match found [ 2573.596688][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12231'. [ 2573.626822][T10430] netlink: 'syz.2.12223': attribute type 3 has an invalid length. [ 2573.628106][T10428] IPv6: Can't replace route, no match found [ 2573.649829][T10430] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.12223'. [ 2573.717069][T10432] netlink: 'syz.3.12224': attribute type 10 has an invalid length. [ 2573.886631][T10443] FAULT_INJECTION: forcing a failure. [ 2573.886631][T10443] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.908940][T10443] CPU: 0 PID: 10443 Comm: syz.1.12236 Not tainted syzkaller #0 [ 2573.911949][T10441] FAULT_INJECTION: forcing a failure. [ 2573.911949][T10441] name failslab, interval 1, probability 0, space 0, times 0 [ 2573.916532][T10443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2573.932391][T10445] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12226'. [ 2573.939170][T10443] Call Trace: [ 2573.939186][T10443] [ 2573.954666][T10443] dump_stack_lvl+0x18c/0x250 [ 2573.959487][T10443] ? show_regs_print_info+0x20/0x20 [ 2573.964893][T10443] ? load_image+0x420/0x420 [ 2573.969428][T10443] ? __might_sleep+0xe0/0xe0 [ 2573.974062][T10443] ? __lock_acquire+0x7d40/0x7d40 [ 2573.979142][T10443] should_fail_ex+0x39d/0x4d0 [ 2573.983860][T10443] should_failslab+0x9/0x20 [ 2573.988485][T10443] slab_pre_alloc_hook+0x59/0x310 [ 2573.993541][T10443] ? __lock_acquire+0x7d40/0x7d40 [ 2573.998589][T10443] kmem_cache_alloc_node+0x60/0x320 [ 2574.003809][T10443] ? __alloc_skb+0x103/0x2c0 [ 2574.008426][T10443] __alloc_skb+0x103/0x2c0 [ 2574.012856][T10443] netlink_sendmsg+0x66a/0xbf0 [ 2574.017640][T10443] ? netlink_getsockopt+0x590/0x590 [ 2574.022847][T10443] ? aa_sock_msg_perm+0x94/0x150 [ 2574.027789][T10443] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2574.033182][T10443] ? security_socket_sendmsg+0x80/0xa0 [ 2574.038642][T10443] ? netlink_getsockopt+0x590/0x590 [ 2574.043888][T10443] ____sys_sendmsg+0x5ba/0x960 [ 2574.048679][T10443] ? __asan_memset+0x22/0x40 [ 2574.053290][T10443] ? __sys_sendmsg_sock+0x30/0x30 [ 2574.058322][T10443] ? __import_iovec+0x5f2/0x850 [ 2574.063187][T10443] ? import_iovec+0x73/0xa0 [ 2574.067731][T10443] ___sys_sendmsg+0x2a6/0x360 [ 2574.072419][T10443] ? __sys_sendmsg+0x2a0/0x2a0 [ 2574.077207][T10443] ? __lock_acquire+0x7d40/0x7d40 [ 2574.082263][T10443] __se_sys_sendmsg+0x1c2/0x2b0 [ 2574.087118][T10443] ? __x64_sys_sendmsg+0x80/0x80 [ 2574.092084][T10443] ? lockdep_hardirqs_on+0x98/0x150 [ 2574.097292][T10443] do_syscall_64+0x55/0xa0 [ 2574.101708][T10443] ? clear_bhb_loop+0x40/0x90 [ 2574.106389][T10443] ? clear_bhb_loop+0x40/0x90 [ 2574.111072][T10443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2574.116975][T10443] RIP: 0033:0x7f968b99c819 [ 2574.121393][T10443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2574.140998][T10443] RSP: 002b:00007f968c902028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2574.149414][T10443] RAX: ffffffffffffffda RBX: 00007f968bc15fa0 RCX: 00007f968b99c819 [ 2574.157560][T10443] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 2574.165795][T10443] RBP: 00007f968c902090 R08: 0000000000000000 R09: 0000000000000000 [ 2574.173768][T10443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.181738][T10443] R13: 00007f968bc16038 R14: 00007f968bc15fa0 R15: 00007ffd28a31058 [ 2574.189815][T10443] [ 2574.192979][T10441] CPU: 1 PID: 10441 Comm: syz.0.12227 Not tainted syzkaller #0 [ 2574.200558][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2574.210720][T10441] Call Trace: [ 2574.214005][T10441] [ 2574.216939][T10441] dump_stack_lvl+0x18c/0x250 [ 2574.221807][T10441] ? show_regs_print_info+0x20/0x20 [ 2574.227011][T10441] ? load_image+0x420/0x420 [ 2574.231524][T10441] ? __lock_acquire+0x7d40/0x7d40 [ 2574.236581][T10441] ? perf_trace_lock_acquire+0x104/0x410 [ 2574.242227][T10441] should_fail_ex+0x39d/0x4d0 [ 2574.246918][T10441] should_failslab+0x9/0x20 [ 2574.251441][T10441] slab_pre_alloc_hook+0x59/0x310 [ 2574.256520][T10441] ? trace_event_raw_event_lock+0x250/0x250 [ 2574.262446][T10441] ? iovec_from_user+0x87/0x240 [ 2574.267307][T10441] ? iovec_from_user+0x87/0x240 [ 2574.272157][T10441] __kmem_cache_alloc_node+0x53/0x250 [ 2574.277542][T10441] ? iovec_from_user+0x87/0x240 [ 2574.282391][T10441] __kmalloc+0xa4/0x230 [ 2574.286553][T10441] iovec_from_user+0x87/0x240 [ 2574.291236][T10441] __import_iovec+0x13d/0x850 [ 2574.295919][T10441] ? __might_fault+0xaa/0x120 [ 2574.300692][T10441] import_iovec+0x73/0xa0 [ 2574.305028][T10441] ___sys_recvmsg+0x4ba/0x590 [ 2574.309722][T10441] ? __sys_recvmsg+0x2a0/0x2a0 [ 2574.314497][T10441] ? ksys_write+0x1c4/0x260 [ 2574.319020][T10441] ? __fget_files+0x43d/0x4b0 [ 2574.323718][T10441] __x64_sys_recvmsg+0x20c/0x2e0 [ 2574.328661][T10441] ? ___sys_recvmsg+0x590/0x590 [ 2574.333530][T10441] ? lockdep_hardirqs_on+0x98/0x150 [ 2574.338738][T10441] do_syscall_64+0x55/0xa0 [ 2574.343155][T10441] ? clear_bhb_loop+0x40/0x90 [ 2574.347836][T10441] ? clear_bhb_loop+0x40/0x90 [ 2574.352520][T10441] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2574.358416][T10441] RIP: 0033:0x7fad99d9c819 [ 2574.362832][T10441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2574.382443][T10441] RSP: 002b:00007fad9acda028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2574.390861][T10441] RAX: ffffffffffffffda RBX: 00007fad9a015fa0 RCX: 00007fad99d9c819 [ 2574.398920][T10441] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2574.406906][T10441] RBP: 00007fad9acda090 R08: 0000000000000000 R09: 0000000000000000 [ 2574.414882][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2574.422857][T10441] R13: 00007fad9a016038 R14: 00007fad9a015fa0 R15: 00007ffe4ce35bc8 [ 2574.430851][T10441] [ 2574.731530][T10457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2574.886691][T10455] delete_channel: no stack [ 2575.068178][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12234'. [ 2575.135119][T10471] IPv6: Can't replace route, no match found [ 2575.436835][T10479] netlink: 'syz.0.12238': attribute type 10 has an invalid length. [ 2575.459840][T10479] bond0: (slave bond_slave_0): Releasing backup interface [ 2577.431271][ T8774] Bluetooth: hci2: command 0x0406 tx timeout [ 2578.217499][T10484] netlink: 'syz.1.12241': attribute type 10 has an invalid length. [ 2578.451204][T10498] delete_channel: no stack [ 2578.550424][T10506] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12243'. [ 2578.595774][T10505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2578.711964][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12247'. [ 2578.772724][T10509] IPv6: Can't replace route, no match found [ 2578.944079][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12249'. [ 2579.051403][T10514] IPv6: Can't replace route, no match found [ 2579.246617][T10521] netlink: 'syz.1.12253': attribute type 6 has an invalid length. [ 2579.502117][T10528] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.12253'. [ 2579.526449][T10525] delete_channel: no stack [ 2579.986689][T10537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2580.318607][ T8774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2580.331560][ T8774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2580.341971][ T8774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2580.356671][ T8774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2580.364681][ T8774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2580.375274][ T8774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2580.633846][T10539] chnl_net:caif_netlink_parms(): no params data found [ 2580.756069][T10539] bridge0: port 1(bridge_slave_0) entered blocking state [ 2580.766212][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 2580.775698][T10539] bridge_slave_0: entered allmulticast mode [ 2580.797810][T10539] bridge_slave_0: entered promiscuous mode [ 2580.815181][T10539] bridge0: port 2(bridge_slave_1) entered blocking state [ 2580.822689][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 2580.830651][T10539] bridge_slave_1: entered allmulticast mode [ 2580.842157][T10539] bridge_slave_1: entered promiscuous mode [ 2580.890316][T10539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2580.906673][T10539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2580.964150][T10539] team0: Port device team_slave_0 added [ 2580.973251][T10539] team0: Port device team_slave_1 added [ 2581.015277][T10539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2581.024116][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2581.055307][T10539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2581.070899][T10539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2581.078157][T10539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2581.105519][T10539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2582.463171][ T8774] Bluetooth: hci1: command tx timeout [ 2582.605055][T10539] hsr_slave_0: entered promiscuous mode [ 2582.636232][T10539] hsr_slave_1: entered promiscuous mode [ 2583.043178][T10555] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12262'. [ 2583.342442][ T7116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2583.677351][ T7116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2583.724713][T10562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12263'. [ 2583.754835][T10565] IPv6: Can't replace route, no match found [ 2584.539951][ T8774] Bluetooth: hci1: command tx timeout [ 2584.689457][T10569] delete_channel: no stack [ 2584.727439][ T7116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2585.825083][T10577] syzkaller0: entered promiscuous mode [ 2585.830795][T10577] syzkaller0: entered allmulticast mode [ 2585.837031][T10583] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.12267'. [ 2585.876904][ T7116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2586.619955][ T8774] Bluetooth: hci1: command tx timeout [ 2588.074345][T10588] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2588.463569][T10601] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.12271'. [ 2588.699847][ T8774] Bluetooth: hci1: command tx timeout [ 2590.706260][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.719757][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.973129][T10609] netlink: 'syz.2.12273': attribute type 10 has an invalid length. [ 2591.622520][T10628] syzkaller0: entered promiscuous mode [ 2591.638997][T10628] syzkaller0: entered allmulticast mode [ 2591.685618][T10627] delete_channel: no stack [ 2596.093482][T10539] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2596.170968][T10539] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2596.355175][T10539] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2596.401427][T10539] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2596.863511][T10638] delete_channel: no stack [ 2597.091258][T10649] syzkaller0: entered promiscuous mode [ 2597.107112][T10649] syzkaller0: entered allmulticast mode [ 2597.417949][T10667] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.12281'. [ 2599.698217][T10670] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2602.377000][T10539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2602.408209][ T7116] hsr_slave_0: left promiscuous mode [ 2602.416061][ T7116] hsr_slave_1: left promiscuous mode [ 2602.431246][ T7116] bond0: left allmulticast mode [ 2602.441488][ T7116] bond_slave_1: left allmulticast mode [ 2602.447216][ T7116] batadv_slave_0: left allmulticast mode [ 2602.453659][ T7116] bridge_slave_1: left allmulticast mode [ 2602.460779][ T7116] bridge0: port 3(bond0) entered disabled state [ 2602.472393][ T7116] bridge_slave_0: left allmulticast mode [ 2602.478145][ T7116] bridge_slave_0: left promiscuous mode [ 2602.486689][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2602.516787][ T7116] veth1_macvtap: left allmulticast mode [ 2602.524308][ T7116] veth1_macvtap: left promiscuous mode [ 2602.531056][ T7116] veth0_macvtap: left promiscuous mode [ 2602.536664][ T7116] veth1_vlan: left promiscuous mode [ 2602.544528][ T7116] veth0_vlan: left promiscuous mode [ 2605.986432][ T7116] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2605.997180][ T7116] batadv_slave_0 (unregistering): left promiscuous mode [ 2606.133291][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2606.142901][ T7116] bond_slave_1 (unregistering): left promiscuous mode [ 2606.226228][ T7116] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 2606.235480][ T7116] bridge_slave_1 (unregistering): left promiscuous mode [ 2606.505673][ T7116] bond0 (unregistering): Released all slaves [ 2606.585431][T10695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2606.627954][T10539] 8021q: adding VLAN 0 to HW filter on device team0 [ 2606.644332][ T652] bridge0: port 1(bridge_slave_0) entered blocking state [ 2606.651501][ T652] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2606.745040][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2606.752253][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2606.892027][T10539] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2606.981266][T10707] syzkaller0: entered promiscuous mode [ 2606.986827][T10707] syzkaller0: entered allmulticast mode [ 2607.036059][T10705] delete_channel: no stack [ 2610.703821][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2610.838694][T10539] veth0_vlan: entered promiscuous mode [ 2610.866935][T10539] veth1_vlan: entered promiscuous mode [ 2610.933623][T10539] veth0_macvtap: entered promiscuous mode [ 2610.954302][T10539] veth1_macvtap: entered promiscuous mode [ 2610.993380][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2611.026853][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.037164][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2611.073334][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.094407][T10539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2611.125355][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.164145][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.178020][T10539] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2611.197075][T10539] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2611.208881][T10539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2611.273040][T10539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.282718][T10728] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.12290'. [ 2611.296817][T10539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.306339][T10539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.315777][T10539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2611.603363][T10725] syzkaller0: entered promiscuous mode [ 2611.611772][T10725] syzkaller0: entered allmulticast mode [ 2611.639017][T10723] delete_channel: no stack [ 2611.863699][ T1887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2611.889908][ T1887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2611.906840][ T1887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2611.924966][ T1887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2611.932906][ T1887] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2611.944745][ T1887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2613.857057][T10734] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2614.060446][ T8774] Bluetooth: hci0: command tx timeout [ 2614.126263][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2614.149457][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2614.162316][ T3069] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.248449][ T3069] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.266056][ T2993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2614.275291][ T2993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2614.327761][ T3069] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.349997][T10729] chnl_net:caif_netlink_parms(): no params data found [ 2614.392491][ T3069] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2614.405769][T10742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12259'. [ 2614.496588][T10742] IPv6: Can't replace route, no match found [ 2614.564348][T10729] bridge0: port 1(bridge_slave_0) entered blocking state [ 2614.576711][T10729] bridge0: port 1(bridge_slave_0) entered disabled state [ 2614.588936][T10729] bridge_slave_0: entered allmulticast mode [ 2614.596204][T10729] bridge_slave_0: entered promiscuous mode [ 2614.605361][T10729] bridge0: port 2(bridge_slave_1) entered blocking state [ 2614.612769][T10729] bridge0: port 2(bridge_slave_1) entered disabled state [ 2614.620828][T10729] bridge_slave_1: entered allmulticast mode [ 2614.627539][T10729] bridge_slave_1: entered promiscuous mode [ 2614.687639][T10729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2614.701086][T10729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2614.747844][T10729] team0: Port device team_slave_0 added [ 2614.758145][T10729] team0: Port device team_slave_1 added [ 2614.821697][T10729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2614.828673][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2614.855795][T10729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2614.870143][T10729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2614.877122][T10729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2614.904483][T10729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2614.974048][T10729] hsr_slave_0: entered promiscuous mode [ 2614.981832][T10729] hsr_slave_1: entered promiscuous mode [ 2614.987912][T10729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2614.996400][T10729] Cannot create hsr debugfs directory [ 2615.414117][T10729] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2615.431883][T10729] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2615.472091][T10729] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2615.484160][T10729] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2615.633699][T10729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2615.689172][T10729] 8021q: adding VLAN 0 to HW filter on device team0 [ 2615.725712][ T7116] bridge0: port 1(bridge_slave_0) entered blocking state [ 2615.732947][ T7116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2615.754714][ T7116] bridge0: port 2(bridge_slave_1) entered blocking state [ 2615.762007][ T7116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2616.039231][ T3069] hsr_slave_0: left promiscuous mode [ 2616.057256][ T3069] hsr_slave_1: left promiscuous mode [ 2616.065459][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2616.087701][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2616.104730][ T3069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2616.112676][ T3069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2616.125342][ T3069] hsr0: left allmulticast mode [ 2616.130991][ T3069] bridge0: port 3(hsr0) entered disabled state [ 2616.139213][ T3069] bridge_slave_1: left allmulticast mode [ 2616.145176][ T8774] Bluetooth: hci0: command tx timeout [ 2616.156907][ T3069] bridge_slave_1: left promiscuous mode [ 2616.163308][ T3069] bridge0: port 2(bridge_slave_1) entered disabled state [ 2616.178586][ T3069] bridge_slave_0: left allmulticast mode [ 2616.185101][ T3069] bridge_slave_0: left promiscuous mode [ 2616.191566][ T3069] bridge0: port 1(bridge_slave_0) entered disabled state [ 2616.220434][ T3069] veth1_macvtap: left promiscuous mode [ 2616.226009][ T3069] veth0_macvtap: left promiscuous mode [ 2616.232054][ T3069] veth1_vlan: left promiscuous mode [ 2616.237396][ T3069] veth0_vlan: left promiscuous mode [ 2616.814935][ T3069] team0 (unregistering): Port device team_slave_1 removed [ 2616.864509][ T3069] team0 (unregistering): Port device team_slave_0 removed [ 2616.913448][ T3069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2617.282537][ T3069] bond0 (unregistering): Released all slaves [ 2617.515776][T10729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2617.910478][T10729] veth0_vlan: entered promiscuous mode [ 2617.928874][T10729] veth1_vlan: entered promiscuous mode [ 2617.970999][T10729] veth0_macvtap: entered promiscuous mode [ 2617.992335][T10729] veth1_macvtap: entered promiscuous mode [ 2618.018422][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2618.033630][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.044576][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2618.058601][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.072099][T10729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2618.089482][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2618.100199][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.110490][T10729] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2618.122204][T10729] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2618.133768][T10729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2618.163090][T10729] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.172500][T10729] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.181341][T10729] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.190263][T10729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2618.221019][ T8774] Bluetooth: hci0: command tx timeout [ 2618.286111][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.296126][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2618.338976][T16165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2618.348483][T16165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2620.302859][ T8774] Bluetooth: hci0: command tx timeout [ 2622.728975][T10884] syzkaller0: entered promiscuous mode [ 2622.742513][T10884] syzkaller0: entered allmulticast mode [ 2622.774010][T10883] delete_channel: no stack [ 2652.142848][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.149213][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2705.419876][ T1887] Bluetooth: hci1: command 0x0406 tx timeout [ 2713.592861][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.599226][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2736.143855][ T1887] Bluetooth: hci0: command 0x0406 tx timeout [ 2763.993238][ T7116] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.131684][ T7116] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.199049][ T7116] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2764.365063][ T7116] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2765.747681][ T7116] hsr_slave_0: left promiscuous mode [ 2765.755759][ T7116] hsr_slave_1: left promiscuous mode [ 2765.772876][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2765.780783][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2765.789459][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2765.800608][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2765.808731][ T7116] bridge0: port 3(team0) entered disabled state [ 2765.818168][ T7116] bridge_slave_1: left allmulticast mode [ 2765.824032][ T7116] bridge_slave_1: left promiscuous mode [ 2765.830341][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2765.840720][ T7116] bridge_slave_0: left allmulticast mode [ 2765.847310][ T7116] bridge_slave_0: left promiscuous mode [ 2765.855157][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2765.895903][ T7116] veth1_macvtap: left promiscuous mode [ 2765.901855][ T7116] veth0_macvtap: left promiscuous mode [ 2765.907521][ T7116] veth1_vlan: left promiscuous mode [ 2765.913478][ T7116] veth0_vlan: left promiscuous mode [ 2766.609334][ T7116] team_slave_1 (unregistering): left promiscuous mode [ 2766.617345][ T7116] team_slave_1 (unregistering): left allmulticast mode [ 2766.628578][ T7116] team0 (unregistering): Port device team_slave_1 removed [ 2766.669039][ T7116] team_slave_0 (unregistering): left promiscuous mode [ 2766.677229][ T7116] team_slave_0 (unregistering): left allmulticast mode [ 2766.686497][ T7116] team0 (unregistering): Port device team_slave_0 removed [ 2766.732859][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2766.776530][ T7116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2767.123758][ T7116] bond0 (unregistering): Released all slaves [ 2767.657127][ T7116] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.735734][ T7116] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.825003][ T7116] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2767.900013][ T7116] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.108035][ T7116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.197914][ T7116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.328756][ T7116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.438796][ T7116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.647435][ T7116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.736877][ T7116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.830876][ T7116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2768.893230][ T7116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2771.077241][ T7116] hsr_slave_0: left promiscuous mode [ 2771.085133][ T7116] hsr_slave_1: left promiscuous mode [ 2771.093120][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2771.101711][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2771.109330][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2771.116800][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2771.126339][ T7116] bridge_slave_1: left allmulticast mode [ 2771.132105][ T7116] bridge_slave_1: left promiscuous mode [ 2771.137771][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.146344][ T7116] bridge_slave_0: left allmulticast mode [ 2771.152417][ T7116] bridge_slave_0: left promiscuous mode [ 2771.158084][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.170677][ T7116] hsr_slave_0: left promiscuous mode [ 2771.176460][ T7116] hsr_slave_1: left promiscuous mode [ 2771.183849][ T7116] bridge_slave_1: left allmulticast mode [ 2771.189510][ T7116] bridge_slave_1: left promiscuous mode [ 2771.195284][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.203716][ T7116] bridge_slave_0: left allmulticast mode [ 2771.209362][ T7116] bridge_slave_0: left promiscuous mode [ 2771.215121][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.226923][ T7116] hsr_slave_0: left promiscuous mode [ 2771.233330][ T7116] hsr_slave_1: left promiscuous mode [ 2771.239358][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2771.246898][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2771.254722][ T7116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2771.263829][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2771.271693][ T7116] bridge_slave_1: left allmulticast mode [ 2771.277329][ T7116] bridge_slave_1: left promiscuous mode [ 2771.283131][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 2771.291672][ T7116] bridge_slave_0: left allmulticast mode [ 2771.297340][ T7116] bridge_slave_0: left promiscuous mode [ 2771.303504][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 2771.340821][ T7116] veth1_macvtap: left promiscuous mode [ 2771.346395][ T7116] veth0_macvtap: left promiscuous mode [ 2771.352239][ T7116] veth1_vlan: left promiscuous mode [ 2771.357562][ T7116] veth0_vlan: left promiscuous mode [ 2771.364838][ T7116] veth1_macvtap: left promiscuous mode [ 2771.370473][ T7116] veth0_macvtap: left promiscuous mode [ 2771.376031][ T7116] veth1_vlan: left promiscuous mode [ 2771.381382][ T7116] veth0_vlan: left promiscuous mode [ 2771.387499][ T7116] veth1_macvtap: left promiscuous mode [ 2771.393400][ T7116] veth0_macvtap: left promiscuous mode [ 2771.398962][ T7116] veth1_vlan: left promiscuous mode [ 2771.404704][ T7116] veth0_vlan: left promiscuous mode [ 2772.094379][ T7116] team0 (unregistering): Port device team_slave_1 removed [ 2772.143384][ T7116] team0 (unregistering): Port device team_slave_0 removed [ 2772.189025][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2772.238926][ T7116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2772.591319][ T7116] bond0 (unregistering): Released all slaves [ 2774.123447][ T7116] team0 (unregistering): Port device team_slave_1 removed [ 2774.168939][ T7116] team0 (unregistering): Port device team_slave_0 removed [ 2774.216076][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2774.261341][ T7116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2774.592194][ T7116] bond0 (unregistering): Released all slaves [ 2775.024384][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2775.031022][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2836.463500][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.469909][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.903344][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.909904][ T1281] ieee802154 phy1 wpan1: encryption failed: -22