last executing test programs: 10.665430352s ago: executing program 2 (id=5171): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10.335365631s ago: executing program 2 (id=5175): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000a40)=""/174, 0xae}], 0x5, &(0x7f0000000f80)}, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500000000016db5cc"], &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r7], &(0x7f0000000740)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.912412613s ago: executing program 1 (id=5185): socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x11498d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=0xffffffffffffffff, 0x12) openat$cgroup_subtree(r0, &(0x7f0000000540), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000007509010000000000950000000000000018000000040000000000000001010000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000"], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000fbffffffffffffff6c000000040000000e00000001000013090000000800000001000000000000800c0000000000000b050000000400000003000004400000000c00000002000000090000000900000002000000050000000900000003000000020000000900000000000007e10000000c0000000000001203000000005f6100"], &(0x7f0000001c40)=""/235, 0x88, 0xeb, 0x0, 0x7}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xc5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB="060001040000000000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000000100000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000008000000000000000007c94282da3206707d4d3cc3a8c0d5ac41e6795bbf919c962b03f558128bb89e573759b0dfe011be11ac595af372bd3ab6c673dd495cbbe7b91acf055e72bde3cdebd5ec1220e6159f2c3a2481e122370d90a364178d60000000000006ef360745732ccd125885e2e952fcf1a9f0ce21e7b5c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 7.46952085s ago: executing program 0 (id=5186): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008000000000"], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, 0x0, &(0x7f0000000640)}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x107, 0x5, &(0x7f0000000140), 0x55) 7.190428726s ago: executing program 2 (id=5187): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfff8, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3083cb300c038000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24004080) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) socketpair(0x18, 0x1, 0x9, &(0x7f0000000080)) 7.183735667s ago: executing program 1 (id=5195): socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x10, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x11498d, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a0000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_pid(r0, &(0x7f00000006c0)=0xffffffffffffffff, 0x12) openat$cgroup_subtree(r0, &(0x7f0000000540), 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000007509010000000000950000000000000018000000040000000000000001010000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000"], 0x0}, 0x94) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000fbffffffffffffff6c000000040000000e00000001000013090000000800000001000000000000800c0000000000000b050000000400000003000004400000000c00000002000000090000000900000002000000050000000900000003000000020000000900000000000007e10000000c0000000000001203000000005f6100"], &(0x7f0000001c40)=""/235, 0x88, 0xeb, 0x0, 0x7}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f0000000401a8000100fec0ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xc5}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xa, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYBLOB="060001040000000000"], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000007c0)='cpu.stat\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000004000000000100000800000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000040000000000008000000000000000007c94282da3206707d4d3cc3a8c0d5ac41e6795bbf919c962b03f558128bb89e573759b0dfe011be11ac595af372bd3ab6c673dd495cbbe7b91acf055e72bde3cdebd5ec1220e6159f2c3a2481e122370d90a364178d60000000000006ef360745732ccd125885e2e952fcf1a9f0ce21e7b5c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848470000005e2f0042180000180e000a001400000002800000121f", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 6.838327707s ago: executing program 0 (id=5189): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) (async) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x10}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x24, &(0x7f0000000200), 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) r6 = perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x94, 0xc, 0x0, 0xffffffffffffffff, 0xc0858, 0x9, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x1ff, 0x5e60}, 0x103030, 0x6, 0xa, 0x3, 0x80000001, 0x7, 0x0, 0x0, 0x2, 0x0, 0x28475c35}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r2, 0x29, 0x32, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000800000000010000000000000e01000000000000000061"], 0x0, 0x37, 0x0, 0x0, 0x22e2f0b9}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000800000000010000000000000e01000000000000000061"], 0x0, 0x37, 0x0, 0x0, 0x22e2f0b9}, 0x28) close(r1) (async) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x7, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80000000}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0xa}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000140)={'batadv_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) (async) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) 6.759859142s ago: executing program 1 (id=5191): r0 = socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x4556, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3, 0x3}, 0x18, 0x0, 0xfffffffe, 0x1, 0x5, 0x2, 0x103, 0x0, 0x2, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x1b) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400008"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x97ff}, 0x0) 5.847196816s ago: executing program 0 (id=5192): perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000008af94d3a7dc07f579500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x2, 0xfffffffffffffdfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080), 0x8}, 0x112, 0x8000000000000001, 0x0, 0x0, 0x0, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x40}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x1, @perf_bp={&(0x7f0000000140), 0x4}, 0x108010, 0xfffffffffffffff9, 0x43a1bd76, 0x7, 0x3, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x3a) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x20) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{0x0}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000080)='\xd2^\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) recvmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) sendmsg$inet(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ffbc", 0x2}], 0x1}, 0xc001) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000040000f2ffffffffffa90000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000000100"/28], 0x48) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x80, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x16}, 0x94) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 5.846959836s ago: executing program 1 (id=5193): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="007a707573657420006370750806"], 0x12) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0x101d0}], 0x1}, 0x40000000) (async) close(r2) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000580)='syz0\x00', 0x200002, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x200040c4) (async) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000025008188e6b62aa73772cc9f1ba1f8482e0000005e14060288a8ffff0e0003001000000002800000128c", 0x2e}], 0x1}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x600000000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$kcm(r6, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, &(0x7f00000002c0)=0x1) (async) close(r8) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) 5.791634119s ago: executing program 2 (id=5194): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x43}, 0x94) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 5.77894951s ago: executing program 3 (id=5196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000280)='ns/ipc\x00') r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000002a80)={0x4, 0x80, 0xb, 0xfc, 0x8, 0x6, 0x0, 0x3, 0x4804, 0xe, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0xffffffffffffff00, 0x9}, 0x101000, 0x0, 0x2, 0x0, 0x8898, 0x2, 0x5, 0x0, 0x4}, r2, 0x9, r3, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060c1) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe50a10a001600014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="0100002010c3"}) sendmsg$sock(r5, &(0x7f0000000640)={&(0x7f0000000000)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000180)="2caa22eecf155b92f7ba4b2fa9b1b5d757da88b6ec379131db3d632a5ca5006fa299dd8604ca012dddb699c3aa603f0245ea0041ff7664fe9361138415061cace7dfe28d532c80d6fcfdeedd6977bee6e08a7dc626dfd1efd8fa89e6c0d6db1b54cde3df6b93b2803a", 0x69}, {&(0x7f0000000080)="9a76f82fb9b4db151cf1fabb045f29e229822a908c5d302938abda02900106ce2928678879653d940c90a7e8d5568a", 0x2f}, {&(0x7f0000000280)="59f44294e7be0535a05069e7211a64efee3870f2974f5cf97f91ae064ce27b14bbd66651978ad826514d0462ed3bf7875c3da0e7269167465420069036d1fa3020cb212f21fe4ff7c4bc70686cb94a64114f413873d10f9cdaae5b2df14f180989a15c51caa3b8dc65af1c7972d24d99e07bd89374f58e2d3df33be792288ddd9e3bd01bbf09cfe225d5de96e6786bba283411519b1d3a7c3a46b362f0407880778d9ec301e061475360d93acfe0085f93b4852716c10f1e77971d859c85b45cf32a6c91d529ef8f254ec8d2eafbcc840f960293f5481ab9532a26dcb85c44c653bef24762da0bdd625f2590c4cae6a530d70adda694", 0xf6}, {&(0x7f0000000380)="0514aaafc0a3ea6832672b82c926841fc40620bf2270dad3034854e935908fe924782076611922e5ba37e10a96c3b371f1f9b54d11cead3d125c171ce3c0844da6d1118cc94acfa7de3b4fd24ef20ad453a747fc42b411e4c14294abf34cdbc1a4487a66c167a27f309b160d01d3100afc69c46ae3533a127cf9b1068ad65b9af14f303cec3d3811de1b5fd9d86ebf0936a3dd4358df6e2be5a359cc3e96d8fc112134d1a133", 0xa6}, {&(0x7f0000000100)="937489dedb6872482093a1f8766d7f", 0xf}, {&(0x7f0000000440)="187c6de3b08b4d239af40e0ec9bf5fa816e5d76bb16e5268b5453769334b04f547c16180c1008b2bfd47a1ccf4b130e01afa131ce630e0bfa063bc84c999a8f289625070dcf5c13914dad10252", 0x4d}, {&(0x7f00000004c0)="6af9c198c7a3020287183862d148bce5f1a9a9f774f8bf8f067ff94bf528d02c3454c9430f24c80b4f11d811529f6e13f72687bd6f755023987794f93dca6f8c41558e9a86dea7d7dfb5f2b158204478e4dede99f2aaaa3260bc380e0526552a52b129ed2b2b8c6a95cab155daef2233666afb52a2b903b5a7e5f70e1079cd913cdeb027a89f543c6b34739976b1c542f0411fc2e010c6d9af3e89ff3a4d15c5571b365a946c7a8eed1c06442f15480746997ab617cd7512e2b901000edb2e20f1d059d393cd05c0f5e78def8aa153d39da413145eec56e4904223d5a50466c3fe17a48756a09671a46802c9", 0xec}, {&(0x7f0000000200)="cbfd55", 0x3}], 0x8}, 0x4010) sendmsg$kcm(r5, &(0x7f0000002a40)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000680)="64b6d740ceae7917382fe4289f883b742b8c3dda920ee039ce453dcaaa8bd20408e2f8bbc6744f0e1d6d3600806794d72bcf44e7d1ed0304ea1d", 0x3a}, {&(0x7f00000006c0)="ed7e1cc4d048a71521594535a09a88569883a05ae4", 0x15}, {&(0x7f0000000700)="420a63fe5ef9ca6954d1960c114e7b3f60e3411312a44b02ccaeec970f12d12dc92a1d6c439c6e51c7759235206c90ea74fc62fecd7ab0e006b5031a77b1019891e34cf3168758c21c63506dc07de1c0b8a4f6f8ffdde7e04f54be8575cb2c550919aa85b38192dff636f4147c088c35abc72bf3c4e2fd42ac321f9fcea5012dac0b641d4b02ca9a3d6fb14fbb495d320295efa09878d46713d748d6d8947a8da9d9bde895832e34c97686621167b5752540ce5a2f1ed9ca86282c0323157f56b485e4c8a7814c", 0xc7}, {&(0x7f0000000800)="a5a877913221546f60faced168c8f12c9ff8b912d9d6c1886bf54d4ef6a1e32419a1c4783670333e73e0dfdfcd1befbf806edc8834110fe2f10cd8a39d106fd0e671a2a1a53d70eb02d8f61e89d1e94d1d8c34e27bb0932a275137daaf9b13a4c03e367e25c95351e78ce193bf07c85b6ed0ff90f9d1400297e9dd75529096f8675c3bbb2ae676707d3e9dc0b9b97e5572559416a73472e29122238b477cab01aa997597fe93bf046b4c3eb6363ac4ee44048d4a99c8135beed493181f6876", 0xbf}, {&(0x7f00000008c0)="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", 0x1000}], 0x5, &(0x7f0000001940)=[{0xf0, 0x110, 0x8, "051b621bc16a4b50e648535d9a517bf62773bc420f95063cec414c8e24fe1ac63125f461792fd2dd38bce2cab51814882b297557d2467e7da6fe785c5d0e95aee06fc9119956f6225fef98f0e3f1cf94aef2e0ddb5db88ca77b07a32541ad529ac502ae64aa775b39bda9aef22a82fa450c81885a9318749e4a7fe4c73238b4d82ada5e03a40be0b46c2919d8eb3666d6656289cce2f8ca6f79dd5e0c3e8b6bd56011f4f4d50d65057dc69107cca187f205831d237af943cd81248fa2a8bb2195c7f8e4c22b0f32291a65f99f8a666904f47ddc8073baff454"}, {0x1010, 0x119, 0x9, "2f41fac01922a2bd5053065938b48ad5d65de840c9a85f747863cf150f4e2ee862323c7fdefe466f36ed8541380b6037210cb2a3fcc2ebacbfd230a675003666bab2a9dfa2ba65887dda07712ac174b917e58c76e28d65dab25cb083d1a8d161e7fda831381566c9f0e69b95e2c34933ea40f0f2092e787c018416a9a89138b1ef0caddad7e061f7e27c8a1e52cfde414fb1a0a27131da9e358742f8de6117f166683817614b2976e35b5dee89c4313cd603616d5189be3957f87ea2e09e87c6f757de402f930f795b7fb347b0a9d4aaf3dcb27ca4c86df9ca226c0fed5d552f4c2e026b4d147e745e71ad56d8f6c0237a05ab6d040728bd7452f550ca0a589cbf7f5ecd831fc22d44fd5fd0674b9f7627d566bcb0675363a361353aaaaeee1867835a4ef662f178a2d01c0f6b34f492d33d8b28d464d376b975d524c6391028f074a58fa048e1761353caf7fbe69dd0b16c6f04ad2c1b5e79c46547acc8f8ceec56293150d65bb74c4933538963b77968dd217b863c3e7944caecb6f7fd85b47e3b27384566c8c9f8f8ab8966eba0ceb82cf9ee2765046011a9adb013b3480e132dea5c843ce6f2b2bdb26c6e35335e70e30f3790bea9370c913bccb89a5d8833f9625006426db008eca77183be54634fc1ce8ebb62e82a4f852c037297f47b20a7788c1694ea15286e733428720786b79512a9699a88a1ffabf45afbb83000e1864b6effa296db24e1b94c7967d987286576fba264e2abe3025360f0b798f04c782c4325c0e41e7c22828e6c7ce69daca45b6c96f18c7d2abc2d9b9db756a486f6ce31876e5d79dc4ac51d028f414cd8e4c8d64a45b00461e10d705c372fcc11ab2d89264fea6cb27f1d9dfc369dce2cd596f2dab04ad31b1c5e42a1b74c1aaba55dff79cdab7467ca0c25c25835a6c031de23fb3113889c299e218a9c515a81620b9ba98ced823a181bd872886d60f39fa3cdeaea16984f6341841440971b5c1815474cf688991da8271e9001cd47c823eb6c7f7ebf6f351f964f02bc6f4470fc9ca56f1c59caa6daa37ed350d8432dc04aeabef032209d6b6752963f646deff0ad74f493116bfc5c997d1e2df5070343f39df8bddbeed4a28499ea002dd0df06a6a68eb2dd3e2a9749040ac5628ccdfff4d10b93baae41e8326febc1ac32ccae0fa9801565eaefd81205915edbd1aa3264d339b02bd1ccd29a8f275a2b01cb36b24cf60d72f401c1b275bbfcae56a27867ddf17ab38dcde8bac74cea4e055186248d54cb28eca3372bc976964a1f5736ce31634d4464ea3cefd25fd380251a66c07e6cdda727db66209908286c02c7f066b8c8c5eb67469f60c7a06a5659b61cd1f3a345a162e282b6cbe7ccb900f87d939c848b70cd640a5f1f1b15b64c82f05c30d34748b767e1a9fc3ba38a277069ebc40b747c6b74548ab7311b5eec70181dce26a5e3e5de4fd8d687c99ed451ff273e329eca1dfd382951187cb629006694f9e0656ee4da7c1408573e647c92ad95610876dc2dc3579bbb9cfe418234458c0a66f6a8e31db51d5be2f34864c8df57794309b66496e3330ebdc25ebc58f5a06375d08c4fb3851e13f700e25467423155b0d9b856f75521a22c54ecfacecfbb8d9dd6992fb04f7626443288faaaadf2bb7ee14952a8d0d2c881cd3ad016266856a0c1c620afaf59f162a020590ae23c0bc41ce10908e9d77dd137f47eaef47a8d08b2319ee6643d5cfe3e38832f4c0faba3ed19bc7f40c5578333e664a5567d0d6a2f00d798702f227751bb767d61145862e6d0e4e0060233998cfd0b8a7c059451f8f7b7848f2dfc3f9e7b528b14e507b93c3e32481fd4ec161fe4faec67467435bb37e8c52457b953e6c47f4cebd213789fd5a30470cc16c4c783d4792f52057e6241830767d56e0b74426e427e2f4afb9917464e8507b39b4761385475534c0d5574b3c12f61513bb3c962004c93992051be61f2381e091425d0c15a0de8c0078d17e3ed405a2c678fe0b9fac2a1c7215885da18e3bf62e8f06554a9b95773d0e3cc382bbbd664265c9fe4027af9a206cb9292f3493f804c8ea2ec8fbd2e33193611e3cabb5e9379808e97f616d16b08bc3fff86a12c89474c438a0953d96377ccd9bdf3aa0a3bedcd533e9a7387e15aae94ea1487438ef5f876d5dc3edf80350a0eac4b01a00b5b068ec4fcf035cd593d5f3d56e457cd6796f8326e5c08884d5a9f20b5feeabbb9cf1fdd778004caffa5889cf2254473cf0933476fa91ca55bc0573d84ad6d07b94feff33e64f45e79facdb6d7921e06896a60b387604d56f0de7ff596275c8e7c391bb3377cb486ead77272eceb8179cef1dccac9944573ff8e3698dd0640764878a1636ef06ef137e4bbdb3a88fbf62aa91114ff86cd07beca3ba28f353ea25530552d3301339b7c8648621c5ec994278519f7daa3dd6f72921b4518125d36812fe2092ec112de0cd28c0838ec5d8ae7667b5c66b2a46f41a1ecf04efdc770bbcf47ed38fc0e5845c01f828ec6738b09289d696403ca28a221cf439a6e79a52f165181b8194aa39d17131795237e724250843db9767e3d7f8bdb46a29340550ba019277e7d07ac7567171e617a566eefa033c533f48e6efa007d200c2247bbc48a80b1a883017f8c2ba5384387e10693b75a796f43f9455670b15245058f5ea505bcecc76c6806922e11c7156a1372ae6133081b7ef1e94122c0389643a5d560927029b69ba8be12d4323a08a91d043dcb4d1b92c1f5ec547867c34210f7076a6d1754932fd1c8a1d5108a2896e9d9e9b769aaa3874e40f0f13a0a927db00547f0e819436d3cfec130f30d7e361b725c52f03d1617811a6c24b57a499318c51ac720751e0779c5c7c67c04d30e5faf612024f1a78f6fde3b11f94a3d642b9ae7a90d9fe35ea5d0f334b4c28ddaefc633d102e13ee74d63daaefaded2f3b6f8f2d0e77b538ae286f9bf8a62e8ce1c88a24f2b237b58e17e784f240bc96bb6443b42dece39bbd5e91d8eea92a850b03db43b605def880337899ad7f139e4923d0c227c566aa4105283b6ae08369cd2f7f49d372b49cff4b561324fc7c60026cd42cd3fab881f49f18fcabfb35edbb674df93d9e0d2d241037f6a11b6e776b0d7532dbf8b7f861f6fe7222e3f5561178172cb209eb5e085c1a720cba6b184256612046aa026570d3918636326f514f77ef723bbb1ae89e03b8cf7c8d113bead64ebfdb55f2d8509b8fe28fff0034489436e2cdc1ffcec0f378f02690c3a11b1b5e0b64e57f2db2aec65847415a806f8522001a1e843c1cd17630e7accd5ea1170f516da31a251c6593567b733cb307e9d5f6d2d4d2ef7f92328e5afd95faf3fd857ea3d631f8ab1263f97d1b2d13cf7c06dd9ac43d203e3780aecd1850021f5df5306bc1977392ca14e9db16c14b856d58d915f35cde8e290dd5efd519c77f1de970ec5b6a9507c6a1d7850b0411d6e156d7593739f178d43f10debccd5a5967aff60458163d452cd2f24a2553ec97c448eaea62ece78cc76e099747444e5bfbc862eb7e80b1de718f0b9e8e011c5f6d4c7450d851e18404f5bd99cfa699aea5810684d714d5648f30fbf31d17a31c3eb2f3819482123725d3166eb4201fa4cf4b08680704fcdb5b00c9f8c91a323eb9a6c4a60f1df401c1bde9f8e0693590c4043081ae4557fbf8e48571cf903f15c6dc2e653f048236b337eebe200c6e3f698657fe34c55a7bcc1eaa4ea82e7be5fa0f97bdbe5f38f68ec3839e20f17fdd7df697b7990a177d3d7adbfaf5e5fefe729b056e7fa00c49d064f497c845fcab049a6750db2c0af6fdc4f67c0e51fb9ff942ec231410f8acff4b941831a1cf862aa584c44cc2f7500aad1db9f931c86e24bb55fbe340a670bdb680716dc39d00689660b0511d3dfcb4f2d8ea2aa1017dcb45abe5a00b8ffd3484a4080aee1379238a207f095a46809d01a1b8cfad51f0ecaecea4820448e5ac75d207619472b081718eec398cf4192597f60a641a4187bbebfd1253650d48f5cd1d8463e16c889fd9fd7ea8749ed79357e41c5841b8bd70364febac96e36ba4c86112830b7b055476b7846817651dc6a5b7edbe545502765c4429edf3865df4bc354b024949873405748d3cec11e7cce71ac4f8b161050f7e00a63bc516f8f37e6278c84497060dd408a87894bc61ed26e067d47b4de6810b7d3c33ba9b9d397c2fe401f955e91577e6c2650cbc0b10f8c8bf4555613b8cf83048f16cf13ed0b97a261a0b5126636517278356e360859791a732b9490a6941bc641d3fab66fa9ae2ae03e2202f674c220740351346af0c09bf1c1cc4f4c00ae357b90ac32abfadd05e7629f6c9a0d2a316cabf4965c8aec0076b4e2c46f97c5bf1d92119cb872f3f3d4ea2664d402ed77ba305338ec8015b9b857030d9d5143ac5c099f8a3dd50e1a3c2f1e05e3e86bb1700720b62aca0bb7e3a3617b9c858084c168a4e8ae0ed146c1dde09144d8ec45b2edaced15eceb50e654477f33e08ab839b20fde395a6d00b3e2e422509400faefb93b10fdd88e02218f75a6dd23c4947bd0adb7f99dbd5007442aab76cd8f9a1f19e3657abe3cac8128def5ff8bd2595219e033acea486e9a0c532ef2224bfc94318ea3ea9bca4601c08f9d3c168c386c79fa0b3d58a3f59ed3f545d94c09297802826992bf116f10fff721962436f461838e2129243244b50dba2ef9a44cf301aa06addd7cd67d9803e982b7506de96576130071c49102dcaf85e94ed6a2cbd0f172dcece501959de50203182ec047777230268037c09668998e95463f5834420171a85a57f09b15114f2dcfcfd3b3d1b4967a7d88eb81d12bcf6992b474441d90aa36412d6e778765f55c4f03a9117b03c23c4ae7c4318efc1cd17dd2b7753f83a08913b79b3384ce6ebc25b493bbc45df0f65c83e9b732d840cbee499b0a15f2218a22541b99364c9452103a102e79587ec2b13e12edd116c1513556d3a62714375c021e9697f9b11ca326d22daeb8e5a01edad1c356cb4a31ef7a7ca114c2b83f19ddab5f203c53b15e559020cd6422bb560154be528ea55e897814915d452c434030b5af27990c2072fe7da9db0ad0bef4b8751f371d4d164fb908c2e61fd4ac1c5aebdf052d703f2b7d6a9de49ecba7e2869a10e1d3c0e8f878db4e354ac9a69b1740d2b15834e9db95f474d4c5ef341da3385cd8feb47de93bfa013f5fc64af30469886136b4ef3e00587492d72e2d62a935214262aec9c95f3d7a6342ce3bafbc60a07d889209ba22c17e137fdf0ddd5e22d2d762a3d351a5916503c3e4141ac0673bcc5b9453dc506ecd5d73badad098f39bdc7617ddd82afc7fc21c264694ae9c8ff8411995f431c00e0d5936f271b76f1e4a7aded36c3826cd1c67f4f69ef669d4e4e640f00f133f101de4707039b69bfc666467fe282be42a40e6488836153e013f7a6c9a5e144b6ee3762560f02a78244a33ec3a139549793d0c9974a98f82bb21f8adeb526646412f5f19dfe974fde07dd823b61978879315e621353aa1970920e1cbe17e1dafcfb0b8d9eacfbf498587bf1263e380e2e8757ecc9c129979b5f5dce7373539a9e366b573c6bcb8966c6511bb9d3e15a3234583490b1948aacabf2864b2e2f81f84f2d673f5bce67df6081617284ff97af5c115f08767344fbee7e9b1d1a321784537b7595f91a3ace90df72afde691c4b2eaee1df11cfe076a23426b742ddcd40efbc6de62907b73ce1ef55eea13c6e8364e90f9bf062852a2a318e89bf920cbe1917a58"}], 0x1100}, 0xc000) 5.659776446s ago: executing program 1 (id=5197): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000a40)=""/174, 0xae}], 0x5, &(0x7f0000000f80)}, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500000000016db5cc"], &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r7], &(0x7f0000000740)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 5.659475006s ago: executing program 2 (id=5198): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_freezer_state(r4, &(0x7f0000000100)='THAWED\x00', 0x7) 5.377571233s ago: executing program 3 (id=5199): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a0000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000008000000000"], 0x50) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, 0x0, &(0x7f0000000640)}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000480000000000e1ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f51ee988e6e06c8206ac6939fc404000000c788b277be1cb79b0a4dcf23d410f6accd3641110bec4e90a634199e07f8f6eb968f200e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e46968eea3fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000000000000005335000000143ea70c2ab40c7cb70c943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a33e680846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850af895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fa807de38a3a61e44a9ecab19bdfb15a32a4fd67ce446adb431d07db79240acaf091231b986e77d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061629d1822f720ec23812770d72c700a44e113d17088fdd00600000f7889b8c7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f747c08f4010586903500000000000000000000be34cf652e28e700000000000000b24478a78a0f9d640dd782ac0cbc46903243d0d0f4bc7f253d0500000032daaf281c450e64c33aac8ff7e7d1c94c450503009688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0000f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4cbaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e033b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13e434aae9df81ecaf5f744f22f2e45afe2c9e8632276cffe5f1fc215c0797d0244cf1ce269d10525745caaa3f77d1b80116cb9a384002421d898913c45a9ac091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c045a17e9a61c3b064e679508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2434ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f5513662809073710937ed0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c68549e9da89ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f27859946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d522946727024de0c59ca3305e66825715e5e4cd5b54c1b05c09f04337a76a30373baac3ecec91fd546eb7c32dbecb18a308a0004be94dfab28c2a51dc856df00000000000000000000dfa4c12254f041804f7f7074356789b1d4dd55f3e045a48241a4ce04d06acb2cf11eab759ba78da5d00f26126d4cf2c73e5f94030000000000000000000000c301985d603403592486204054be3fdda91f9e315886941928e5a8bc1a00e69a98c0a8f7192f6ee93cc4124cf4e7610915efc08c834a44e1d685d6835a40b5bc615949cbcd98d0e68d7eef5d32d5fcc7923d7544fa492aa38717481c55e86dcd7816ad8940bd1995369d89ae6eadeb9117e8b94ab422c8d62fc9dfffeb13b4858875dccdbc89572231ef5d6df6a9c55f8df763c7c64da7cc017e1ef90ed4cb9fe6d19b11d4d38239d318016e622b9683b7e46be64dc097982e23462392a0cd05afb2e060fd42ef00dfbd057311aab94f307d10c7a1af0d8e5a0fcb547475d13c0000000000000000f1cc97103d714d1af45790517c4a0f5c6a5024e3359e8d83e3f6edf9e2afb5ab59c7b2b45cfb0a3c1303a98e4ed531ac11cca1cd744b431de74c7cd6533adaa8ec749061b2959d53da626aa189781dc1be4d5c81aebc0cada819895b377d6cf0a7878ba99864ae84464744c605646caf2e06b13eba7ba10acf77d91b2297e9573abb0a4da534d735a223626402b308daf7835780fa6f4e410000000000fb00000000000000000000b14952139bd4bdbccc5e334c49584655c4fce8c5bb7c54664aef6d78429d358aa54b4b49926c4be9ee4659153d9f9f5d07cc4efdab2c5f4503148d0255d0b748366dafe042d78479c21d832e1431ed6d646d13e8e7230300920a5642bbed1dee9b46b6f02e572024ccf3c8edd82660e5d74c52be71d780c300000000d0267ac40d1130a9000000000045f50812a1a0530b02baed19f4c977ac0d397ed6371ec589bf5943690250bdfa5b676d5d53d2ab3aeee1a6910c1a33b6c06c93386768f8b1bb27ec31cffbd4f5c7b0c2e14e4fc6c2f089ab08567254e93780afdddefb3f0d2143ad73c0bf2467859049d46dc5aa91f918a307e7dcaaccd6cbe66e8a04d201392a487f681f82528a800e27d65200ae10e1b5d39a29d8a2c8ed2dfa77e21249b45806733e674a9e8e72ad1cb0d3bfadb00a18a5008ea1e4c8fb93d311f52a476c576a3f65c9bdd4e4b870aed4cb9906a8aa25986e6e30be249d9911114b42b2fb51168e56000a62b794c193f7797ebeb7f8b91c70b6e720af06ecfcfb89a2d5a25f"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r7, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768b", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x890c, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r2, 0x107, 0x5, &(0x7f0000000140), 0x55) 3.503677114s ago: executing program 0 (id=5200): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f00000004c0)='Y', 0x1}], 0x1}, 0x4000040) close(r2) 2.522202141s ago: executing program 3 (id=5201): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000002c0)="679d", 0x2}], 0x1, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00}}}], 0x20, 0x40}, 0x40000) recvmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40) 2.04437588s ago: executing program 3 (id=5202): r0 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f0000000040), 0x8) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) sendmsg$kcm(r0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)=ANY=[@ANYRES8=r0, @ANYRESOCT=0x0, @ANYBLOB="6fa4cda41a9255b0babe9b88d748181d17584de46ef54520a757dc9561fcbe772c5a83587271c24b52727c5179419b46886e97a5b91d0290ff66c3b3a784063aba86a1a378955bb80295237ee5bef6cf7958211ed0dea417f8e785e4992efe4d3814d626ee", @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="515a3fe3fe5d6734931b9922167a9ffd04a4f746caa6f465a94ba12bc160a18bf9da6a05fa9273d0524fc648de7d73f8b28e14343aa3a14c59e3564f138c8e170d2842e6f49dc12b6ee20300000064431d828b259c107a83e1f87c592cb04d28793a00000000", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=r0], 0x158}, 0x20044881) 2.04373598s ago: executing program 0 (id=5203): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x1, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000, 0x2, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1, 0x0, 0xf00}, 0x4000080) 1.252178826s ago: executing program 3 (id=5204): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xfff8, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3083cb300c038000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24004080) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) socketpair(0x18, 0x1, 0x9, &(0x7f0000000080)) 1.248558927s ago: executing program 0 (id=5212): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000c80)=@framed={{}, [@ldst={0x5c6ccd1daf94070, 0x1, 0x1, 0x0, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {&(0x7f0000000a40)=""/174, 0xae}], 0x5, &(0x7f0000000f80)}, 0x3) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500000000016db5cc"], &(0x7f0000000480)='GPL\x00'}, 0x80) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r8, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a902", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800208b000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000228500000094", @ANYRES16, @ANYRESOCT, @ANYRESHEX=r6, @ANYRES8=r7], &(0x7f0000000740)='GPL\x00', 0x0, 0x26, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.248276956s ago: executing program 2 (id=5205): unlink(&(0x7f0000001300)='./file0\x00') socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f00000001c0), 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f0000000580)=0x2, 0x0}, 0x20) close(0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0), 0x1}, 0x0) sendmsg$kcm(r0, 0x0, 0x20000001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907a56675f37538ec86dd6317ce22667f1100db5b686158bbcfe8875a65969ff57b03000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r7 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_subtree(r7, 0x0, 0x13) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.243679317s ago: executing program 1 (id=5213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x0, 0xfffff274, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_freezer_state(r4, &(0x7f0000000100)='THAWED\x00', 0x7) 0s ago: executing program 3 (id=5206): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000080)=[{&(0x7f0000000480)="d80000001c0081064e81f782db44b9040a1d08040000000800000aa1180015000600142603600e1208000f0000810401a8001600200001400300000007600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a08400e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): e lo may have been left with an inconsistent configuration, please check. [ 819.051776][T20029] IPv6: Can't replace route, no match found [ 819.736231][T20044] validate_nla: 17 callbacks suppressed [ 819.736249][T20044] netlink: 'syz.2.4580': attribute type 29 has an invalid length. [ 819.754636][T20044] netlink: 'syz.2.4580': attribute type 29 has an invalid length. [ 819.793238][T20044] netlink: 'syz.2.4580': attribute type 29 has an invalid length. [ 819.802957][T20046] FAULT_INJECTION: forcing a failure. [ 819.802957][T20046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 819.821561][T20046] CPU: 0 PID: 20046 Comm: syz.1.4581 Not tainted syzkaller #0 [ 819.829075][T20046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 819.839164][T20046] Call Trace: [ 819.842473][T20046] [ 819.845436][T20046] dump_stack_lvl+0x18c/0x250 [ 819.850165][T20046] ? show_regs_print_info+0x20/0x20 [ 819.855409][T20046] ? load_image+0x400/0x400 [ 819.859958][T20046] ? __might_fault+0xaa/0x120 [ 819.864663][T20046] ? __lock_acquire+0x7d40/0x7d40 [ 819.869739][T20046] ? cfg80211_mgd_wext_giwessid+0x42a/0x530 [ 819.875685][T20046] should_fail_ex+0x39d/0x4d0 [ 819.880429][T20046] _copy_to_user+0x2f/0xa0 [ 819.884882][T20046] ioctl_standard_iw_point+0x930/0xcf0 [ 819.890409][T20046] ? cfg80211_wext_siwessid+0x120/0x120 [ 819.895990][T20046] ? iw_handler_get_iwstats+0x110/0x110 [ 819.901573][T20046] ? wext_ioctl_dispatch+0x115/0x600 [ 819.906902][T20046] ? mutex_lock_nested+0x20/0x20 [ 819.911899][T20046] ? cfg80211_wext_siwessid+0x120/0x120 [ 819.917485][T20046] ioctl_standard_call+0xb7/0x2b0 [ 819.922564][T20046] ? cfg80211_wext_siwessid+0x120/0x120 [ 819.928163][T20046] wext_ioctl_dispatch+0x1cb/0x600 [ 819.933324][T20046] ? wext_ioctl_dispatch+0x600/0x600 [ 819.938649][T20046] ? iw_handler_get_private+0x1f0/0x1f0 [ 819.944250][T20046] ? wext_handle_ioctl+0x1d0/0x1d0 [ 819.949405][T20046] ? __might_fault+0xaa/0x120 [ 819.954212][T20046] ? __might_fault+0xc6/0x120 [ 819.958934][T20046] ? __might_fault+0xaa/0x120 [ 819.963669][T20046] wext_handle_ioctl+0x117/0x1d0 [ 819.968662][T20046] ? call_commit_handler+0xf0/0xf0 [ 819.973861][T20046] sock_ioctl+0x15d/0x7e0 [ 819.978231][T20046] ? sock_poll+0x3e0/0x3e0 [ 819.982710][T20046] ? bpf_lsm_file_ioctl+0x9/0x10 [ 819.987669][T20046] ? security_file_ioctl+0x80/0xa0 [ 819.992790][T20046] ? sock_poll+0x3e0/0x3e0 [ 819.997215][T20046] __se_sys_ioctl+0xfd/0x170 [ 820.001808][T20046] do_syscall_64+0x55/0xa0 [ 820.006234][T20046] ? clear_bhb_loop+0x40/0x90 [ 820.010923][T20046] ? clear_bhb_loop+0x40/0x90 [ 820.015627][T20046] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 820.021527][T20046] RIP: 0033:0x7feb3919aeb9 [ 820.025972][T20046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.028082][T20055] netlink: 'syz.3.4583': attribute type 28 has an invalid length. [ 820.045595][T20046] RSP: 002b:00007feb39fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.045626][T20046] RAX: ffffffffffffffda RBX: 00007feb39415fa0 RCX: 00007feb3919aeb9 [ 820.045642][T20046] RDX: 0000200000000000 RSI: 0000000000008b1b RDI: 0000000000000005 [ 820.045654][T20046] RBP: 00007feb39fee090 R08: 0000000000000000 R09: 0000000000000000 [ 820.045666][T20046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.045682][T20046] R13: 00007feb39416038 R14: 00007feb39415fa0 R15: 00007ffcf2526398 [ 820.045727][T20046] [ 820.086935][T20044] netlink: 'syz.2.4580': attribute type 29 has an invalid length. [ 820.095915][T20055] netlink: 'syz.3.4583': attribute type 29 has an invalid length. [ 820.123534][T20055] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4583'. [ 820.175191][T20048] netlink: 'syz.2.4580': attribute type 29 has an invalid length. [ 820.373658][T20063] netlink: 'syz.2.4585': attribute type 28 has an invalid length. [ 820.398393][T20063] netlink: 'syz.2.4585': attribute type 29 has an invalid length. [ 820.408478][T20063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4585'. [ 820.956723][T20074] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4589'. [ 821.340501][T20086] netlink: 'syz.1.4593': attribute type 29 has an invalid length. [ 821.429478][T20090] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4595'. [ 821.683653][T20097] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4598'. [ 821.694408][T20096] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4598'. [ 822.200671][T20113] netlink: 9062 bytes leftover after parsing attributes in process `syz.0.4604'. [ 822.376995][T20115] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4605'. [ 822.601508][T20120] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4607'. [ 822.611083][T20119] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4607'. [ 823.071896][T20130] IPv6: Can't replace route, no match found [ 823.271768][T20140] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4615'. [ 823.340413][T20143] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4616'. [ 823.400886][T20142] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4616'. [ 823.853857][T20162] IPv6: Can't replace route, no match found [ 824.061733][T20166] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 824.932063][T20175] validate_nla: 17 callbacks suppressed [ 824.932084][T20175] netlink: 'syz.3.4627': attribute type 10 has an invalid length. [ 825.365052][T20188] IPv6: Can't replace route, no match found [ 825.581143][T20192] IPv6: Can't replace route, no match found [ 825.901218][T20207] netlink: 'syz.3.4639': attribute type 10 has an invalid length. [ 826.910012][T20225] IPv6: Can't replace route, no match found [ 827.158355][T20230] IPv6: Can't replace route, no match found [ 827.182570][T20232] __nla_validate_parse: 8 callbacks suppressed [ 827.182582][T20232] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4647'. [ 827.198898][T20231] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4647'. [ 827.268328][T20234] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4648'. [ 827.314235][T20234] netlink: 'syz.1.4648': attribute type 10 has an invalid length. [ 828.407616][T20248] IPv6: Can't replace route, no match found [ 828.644239][T20253] netlink: 'syz.0.4655': attribute type 28 has an invalid length. [ 828.653375][T20253] netlink: 'syz.0.4655': attribute type 29 has an invalid length. [ 828.662077][T20253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4655'. [ 828.870524][T20259] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4656'. [ 828.880449][T20258] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4656'. [ 829.821723][T20270] netlink: 'syz.1.4667': attribute type 10 has an invalid length. [ 829.998498][T20270] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.012931][T20270] team0: entered promiscuous mode [ 830.018861][T20270] C: entered promiscuous mode [ 830.024714][T20270] team_slave_1: entered promiscuous mode [ 830.035324][T20270] .`: (slave team0): Enslaving as an active interface with an up link [ 830.047773][T20268] IPv6: Can't replace route, no match found [ 830.181545][T20278] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 830.553614][T20285] IPv6: Can't replace route, no match found [ 830.711073][ T51] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 830.750568][T20293] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4666'. [ 830.816470][T20288] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4666'. [ 830.992518][T20304] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4673'. [ 831.015156][T20304] netlink: 'syz.3.4673': attribute type 10 has an invalid length. [ 831.304365][T20309] netlink: 38267 bytes leftover after parsing attributes in process `syz.3.4675'. [ 831.644054][T20313] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 832.157773][T20323] IPv6: Can't replace route, no match found [ 832.214810][T20326] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4680'. [ 832.229026][T20322] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4680'. [ 832.240859][T20325] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4681'. [ 832.251449][T20325] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4681'. [ 832.302602][T20325] netlink: 'syz.0.4681': attribute type 33 has an invalid length. [ 832.315612][T20325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4681'. [ 832.403609][T20332] can: request_module (can-proto-0) failed. [ 832.615784][T20336] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4684'. [ 832.748394][T20338] netlink: 'syz.3.4685': attribute type 28 has an invalid length. [ 832.756921][T20338] netlink: 'syz.3.4685': attribute type 29 has an invalid length. [ 832.765054][T20338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4685'. [ 833.843905][T20359] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 834.413050][T20364] IPv6: Can't replace route, no match found [ 834.603467][T20371] netlink: 'syz.2.4694': attribute type 9 has an invalid length. [ 834.613547][T20371] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.4694'. [ 834.870736][T20379] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4696'. [ 834.971245][T20379] netlink: 'syz.1.4696': attribute type 10 has an invalid length. [ 835.281404][T20381] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4697'. [ 835.376236][T20381] netlink: 'syz.1.4697': attribute type 10 has an invalid length. [ 835.392397][T20370] delete_channel: no stack [ 835.688463][T20387] IPv6: Can't replace route, no match found [ 835.708418][T20389] IPv6: Can't replace route, no match found [ 835.899903][T20398] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 836.075964][T20403] FAULT_INJECTION: forcing a failure. [ 836.075964][T20403] name failslab, interval 1, probability 0, space 0, times 0 [ 836.089314][T20403] CPU: 1 PID: 20403 Comm: syz.1.4706 Not tainted syzkaller #0 [ 836.096793][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 836.106849][T20403] Call Trace: [ 836.110125][T20403] [ 836.113048][T20403] dump_stack_lvl+0x18c/0x250 [ 836.117744][T20403] ? show_regs_print_info+0x20/0x20 [ 836.122938][T20403] ? load_image+0x400/0x400 [ 836.127443][T20403] ? __might_sleep+0xe0/0xe0 [ 836.132028][T20403] ? __lock_acquire+0x7d40/0x7d40 [ 836.137049][T20403] ? lock_chain_count+0x20/0x20 [ 836.141895][T20403] should_fail_ex+0x39d/0x4d0 [ 836.146573][T20403] should_failslab+0x9/0x20 [ 836.151071][T20403] slab_pre_alloc_hook+0x59/0x310 [ 836.156092][T20403] ? _raw_spin_unlock+0x40/0x40 [ 836.160935][T20403] ? __request_module+0x2d1/0x600 [ 836.165952][T20403] __kmem_cache_alloc_node+0x53/0x250 [ 836.171324][T20403] ? __request_module+0x2d1/0x600 [ 836.176346][T20403] kmalloc_trace+0x2a/0xe0 [ 836.180769][T20403] __request_module+0x2d1/0x600 [ 836.185615][T20403] ? module_enforce_rwx_sections+0x150/0x150 [ 836.191610][T20403] ? can_get_proto+0x1d/0x280 [ 836.196548][T20403] ? can_get_proto+0x1d/0x280 [ 836.201220][T20403] ? can_get_proto+0x234/0x280 [ 836.205977][T20403] can_create+0x9e/0x4d0 [ 836.210219][T20403] __sock_create+0x4a6/0x940 [ 836.214814][T20403] __sys_socketpair+0x1c1/0x550 [ 836.219663][T20403] __x64_sys_socketpair+0x9b/0xb0 [ 836.224682][T20403] do_syscall_64+0x55/0xa0 [ 836.229092][T20403] ? clear_bhb_loop+0x40/0x90 [ 836.233761][T20403] ? clear_bhb_loop+0x40/0x90 [ 836.238431][T20403] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 836.244315][T20403] RIP: 0033:0x7feb3919aeb9 [ 836.248722][T20403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.268321][T20403] RSP: 002b:00007feb39fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 836.276726][T20403] RAX: ffffffffffffffda RBX: 00007feb39415fa0 RCX: 00007feb3919aeb9 [ 836.284691][T20403] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000001d [ 836.292654][T20403] RBP: 00007feb39fee090 R08: 0000000000000000 R09: 0000000000000000 [ 836.300619][T20403] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 836.308584][T20403] R13: 00007feb39416038 R14: 00007feb39415fa0 R15: 00007ffcf2526398 [ 836.316561][T20403] [ 836.322421][T20403] can: request_module (can-proto-0) failed. [ 836.379230][T20406] netlink: 'syz.1.4707': attribute type 10 has an invalid length. [ 836.701468][T20410] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 836.920931][T20415] netlink: 'syz.3.4710': attribute type 10 has an invalid length. [ 837.068627][T20420] IPv6: Can't replace route, no match found [ 837.198567][T20422] IPv6: Can't replace route, no match found [ 837.390726][T20428] __nla_validate_parse: 5 callbacks suppressed [ 837.390749][T20428] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4716'. [ 837.415011][T20428] netlink: 'syz.3.4716': attribute type 10 has an invalid length. [ 837.538378][T20432] netlink: 'syz.3.4719': attribute type 28 has an invalid length. [ 837.547768][T20432] netlink: 'syz.3.4719': attribute type 29 has an invalid length. [ 837.557560][T20432] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4719'. [ 837.911568][T20443] IPv6: Can't replace route, no match found [ 838.391783][T20447] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4723'. [ 838.411018][T20447] netlink: 'syz.2.4723': attribute type 10 has an invalid length. [ 838.636315][T20456] netlink: 'syz.0.4727': attribute type 21 has an invalid length. [ 838.647170][T20456] netlink: 'syz.0.4727': attribute type 6 has an invalid length. [ 838.655508][T20456] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4727'. [ 838.911902][T20460] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4728'. [ 838.921663][T20461] netlink: 'syz.0.4728': attribute type 10 has an invalid length. [ 841.080786][T20468] pimreg0: tun_chr_ioctl cmd 1074025681 [ 841.089924][T20469] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4730'. [ 841.101792][T20474] IPv6: Can't replace route, no match found [ 841.169049][T20488] netlink: 'syz.0.4738': attribute type 21 has an invalid length. [ 841.256136][T20490] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4739'. [ 841.418330][T20494] validate_nla: 1 callbacks suppressed [ 841.418370][T20494] netlink: 'syz.1.4741': attribute type 28 has an invalid length. [ 841.437449][T20494] netlink: 'syz.1.4741': attribute type 29 has an invalid length. [ 841.448955][T20494] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4741'. [ 841.640197][T20504] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 841.812725][T20509] IPv6: Can't replace route, no match found [ 842.182116][T20519] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4751'. [ 842.277125][T20519] netlink: 'syz.3.4751': attribute type 10 has an invalid length. [ 842.612352][T20531] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 842.839245][T20532] IPv6: Can't replace route, no match found [ 842.978498][T20535] IPv6: Can't replace route, no match found [ 843.028131][T20537] mac80211_hwsim hwsim508 .3ãc¤±: renamed from wlan1 (while UP) [ 843.183152][T20543] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4761'. [ 843.237903][T20543] netlink: 'syz.3.4761': attribute type 10 has an invalid length. [ 843.363211][T20551] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4764'. [ 843.434044][T20551] netlink: 'syz.3.4764': attribute type 10 has an invalid length. [ 843.464205][T20549] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4763'. [ 843.474209][T20549] netlink: 6 bytes leftover after parsing attributes in process `syz.2.4763'. [ 843.496351][T20549] netlink: 'syz.2.4763': attribute type 33 has an invalid length. [ 843.504490][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4763'. [ 844.074273][T20563] FAULT_INJECTION: forcing a failure. [ 844.074273][T20563] name failslab, interval 1, probability 0, space 0, times 0 [ 844.095129][T20563] CPU: 0 PID: 20563 Comm: syz.3.4768 Not tainted syzkaller #0 [ 844.102633][T20563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 844.112711][T20563] Call Trace: [ 844.116010][T20563] [ 844.118946][T20563] dump_stack_lvl+0x18c/0x250 [ 844.123624][T20563] ? show_regs_print_info+0x20/0x20 [ 844.128819][T20563] ? load_image+0x400/0x400 [ 844.133313][T20563] ? __might_sleep+0xe0/0xe0 [ 844.137898][T20563] ? __lock_acquire+0x7d40/0x7d40 [ 844.142406][T20566] IPv6: Can't replace route, no match found [ 844.142908][T20563] should_fail_ex+0x39d/0x4d0 [ 844.153473][T20563] should_failslab+0x9/0x20 [ 844.157977][T20563] slab_pre_alloc_hook+0x59/0x310 [ 844.163000][T20563] ? kvmalloc_node+0x70/0x180 [ 844.167671][T20563] ? kvmalloc_node+0x70/0x180 [ 844.172351][T20563] __kmem_cache_alloc_node+0x53/0x250 [ 844.177728][T20563] ? kvmalloc_node+0x70/0x180 [ 844.182398][T20563] __kmalloc_node+0xa4/0x230 [ 844.186987][T20563] kvmalloc_node+0x70/0x180 [ 844.191486][T20563] bpf_test_run_xdp_live+0x1e9/0x1b20 [ 844.196859][T20563] ? 0xffffffffa0004100 [ 844.201003][T20563] ? 0xffffffffa0004100 [ 844.205148][T20563] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 844.211035][T20563] ? 0xffffffffa0004100 [ 844.215185][T20563] ? xdp_convert_md_to_buff+0x330/0x330 [ 844.220749][T20563] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 844.226986][T20563] ? _copy_from_user+0xa5/0xe0 [ 844.231743][T20563] ? bpf_test_init+0x119/0x140 [ 844.236513][T20563] ? xdp_convert_md_to_buff+0x5b/0x330 [ 844.241991][T20563] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 844.247383][T20563] ? dev_put+0x80/0x80 [ 844.251464][T20563] ? dev_put+0x80/0x80 [ 844.255525][T20563] bpf_prog_test_run+0x321/0x390 [ 844.260462][T20563] __sys_bpf+0x49d/0x890 [ 844.264703][T20563] ? bpf_link_show_fdinfo+0x390/0x390 [ 844.270078][T20563] ? lock_chain_count+0x20/0x20 [ 844.274933][T20563] __x64_sys_bpf+0x7c/0x90 [ 844.279345][T20563] do_syscall_64+0x55/0xa0 [ 844.283755][T20563] ? clear_bhb_loop+0x40/0x90 [ 844.288423][T20563] ? clear_bhb_loop+0x40/0x90 [ 844.293097][T20563] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 844.298985][T20563] RIP: 0033:0x7f52c999aeb9 [ 844.303394][T20563] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.322998][T20563] RSP: 002b:00007f52ca7e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 844.331456][T20563] RAX: ffffffffffffffda RBX: 00007f52c9c15fa0 RCX: 00007f52c999aeb9 [ 844.339422][T20563] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 844.347396][T20563] RBP: 00007f52ca7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 844.355367][T20563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.363329][T20563] R13: 00007f52c9c16038 R14: 00007f52c9c15fa0 R15: 00007ffdc9721538 [ 844.371306][T20563] [ 844.560778][T20568] IPv6: Can't replace route, no match found [ 844.661057][T20573] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 845.000904][T20583] netlink: 'syz.0.4775': attribute type 28 has an invalid length. [ 845.009690][T20583] netlink: 'syz.0.4775': attribute type 29 has an invalid length. [ 845.034668][T20583] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4775'. [ 845.177212][T20588] netlink: 'syz.2.4777': attribute type 28 has an invalid length. [ 845.200227][T20595] netlink: 'syz.1.4778': attribute type 28 has an invalid length. [ 845.209770][T20588] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4777'. [ 845.221273][T20595] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4778'. [ 845.768561][T20603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4779'. [ 848.091017][T20615] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4781'. [ 848.111011][T20615] validate_nla: 4 callbacks suppressed [ 848.111037][T20615] netlink: 'syz.2.4781': attribute type 10 has an invalid length. [ 848.351659][T20621] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 848.813778][T20629] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.4788'. [ 848.858512][T20631] netlink: 'syz.1.4789': attribute type 28 has an invalid length. [ 848.877500][T20631] netlink: 'syz.1.4789': attribute type 29 has an invalid length. [ 848.892486][T20631] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4789'. [ 848.927571][T20635] netlink: 'syz.0.4790': attribute type 28 has an invalid length. [ 848.935992][T20635] netlink: 'syz.0.4790': attribute type 29 has an invalid length. [ 848.944052][T20635] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4790'. [ 849.650012][T20644] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4791'. [ 849.681597][T20644] netlink: 'syz.3.4791': attribute type 10 has an invalid length. [ 849.947313][T20655] netlink: 'syz.3.4794': attribute type 28 has an invalid length. [ 849.963762][T20655] netlink: 'syz.3.4794': attribute type 29 has an invalid length. [ 849.975282][T20655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4794'. [ 850.182350][T20666] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 851.886191][T20680] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4801'. [ 852.159380][T20689] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 852.335834][T20695] raw_sendmsg: syz.0.4809 forgot to set AF_INET. Fix it! [ 852.433593][T20701] netlink: 'syz.0.4810': attribute type 28 has an invalid length. [ 852.449002][T20701] netlink: 'syz.0.4810': attribute type 29 has an invalid length. [ 852.457720][T20701] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4810'. [ 852.762195][T20706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4811'. [ 853.211443][T20719] validate_nla: 2 callbacks suppressed [ 853.211460][T20719] netlink: 'syz.2.4815': attribute type 39 has an invalid length. [ 853.396866][T20722] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 853.761612][T20730] netlink: 'syz.2.4820': attribute type 28 has an invalid length. [ 853.769816][T20730] netlink: 'syz.2.4820': attribute type 29 has an invalid length. [ 853.778411][T20730] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4820'. [ 853.920398][T20735] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4821'. [ 853.944494][T20735] netlink: 'syz.3.4821': attribute type 10 has an invalid length. [ 855.093184][T20746] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 857.255525][T20773] netlink: 'syz.1.4833': attribute type 1 has an invalid length. [ 857.273833][T20773] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.4833'. [ 857.354657][T20777] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 857.586606][T20781] netlink: 'syz.0.4836': attribute type 28 has an invalid length. [ 857.594736][T20781] netlink: 'syz.0.4836': attribute type 29 has an invalid length. [ 857.615845][T20781] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4836'. [ 857.762101][T20790] netlink: 'syz.1.4838': attribute type 28 has an invalid length. [ 857.787524][T20790] netlink: 'syz.1.4838': attribute type 29 has an invalid length. [ 857.796047][T20790] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4838'. [ 858.443617][T20805] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4842'. [ 859.135809][T20820] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 860.546873][T20845] ref_ctr_offset mismatch. inode: 0x7a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 860.964640][T20853] C: left promiscuous mode [ 861.043503][T20853] team0: Port device C removed [ 861.052439][T20853] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 861.080066][T20865] netlink: 'syz.0.4865': attribute type 28 has an invalid length. [ 861.091924][T20865] netlink: 'syz.0.4865': attribute type 29 has an invalid length. [ 861.101419][T20865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4865'. [ 861.420838][T20876] netlink: 'syz.2.4869': attribute type 28 has an invalid length. [ 861.431510][T20876] netlink: 'syz.2.4869': attribute type 29 has an invalid length. [ 861.440206][T20876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4869'. [ 861.451175][T20878] FAULT_INJECTION: forcing a failure. [ 861.451175][T20878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.470449][T20878] CPU: 0 PID: 20878 Comm: syz.1.4870 Not tainted syzkaller #0 [ 861.477989][T20878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 861.488084][T20878] Call Trace: [ 861.491407][T20878] [ 861.494380][T20878] dump_stack_lvl+0x18c/0x250 [ 861.499118][T20878] ? show_regs_print_info+0x20/0x20 [ 861.504366][T20878] ? load_image+0x400/0x400 [ 861.508909][T20878] ? __might_fault+0xaa/0x120 [ 861.513621][T20878] ? __lock_acquire+0x7d40/0x7d40 [ 861.518692][T20878] ? unix_ioctl+0x261/0x670 [ 861.523237][T20878] should_fail_ex+0x39d/0x4d0 [ 861.527962][T20878] _copy_from_user+0x2f/0xe0 [ 861.532597][T20878] sock_do_ioctl+0x190/0x310 [ 861.537233][T20878] ? sock_show_fdinfo+0xb0/0xb0 [ 861.542384][T20878] sock_ioctl+0x5ba/0x7e0 [ 861.546741][T20878] ? sock_poll+0x3e0/0x3e0 [ 861.551225][T20878] ? bpf_lsm_file_ioctl+0x9/0x10 [ 861.556196][T20878] ? security_file_ioctl+0x80/0xa0 [ 861.561357][T20878] ? sock_poll+0x3e0/0x3e0 [ 861.565810][T20878] __se_sys_ioctl+0xfd/0x170 [ 861.570448][T20878] do_syscall_64+0x55/0xa0 [ 861.574902][T20878] ? clear_bhb_loop+0x40/0x90 [ 861.579614][T20878] ? clear_bhb_loop+0x40/0x90 [ 861.584336][T20878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 861.590267][T20878] RIP: 0033:0x7feb3919aeb9 [ 861.594712][T20878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.614367][T20878] RSP: 002b:00007feb39fee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 861.622839][T20878] RAX: ffffffffffffffda RBX: 00007feb39415fa0 RCX: 00007feb3919aeb9 [ 861.630857][T20878] RDX: 0000200000000080 RSI: 0000000000008914 RDI: 0000000000000009 [ 861.638853][T20878] RBP: 00007feb39fee090 R08: 0000000000000000 R09: 0000000000000000 [ 861.646843][T20878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.654838][T20878] R13: 00007feb39416038 R14: 00007feb39415fa0 R15: 00007ffcf2526398 [ 861.662873][T20878] [ 861.853312][T20889] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 861.908113][T20887] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4872'. [ 861.918756][T20890] netlink: 'syz.1.4872': attribute type 10 has an invalid length. [ 862.012048][T20892] FAULT_INJECTION: forcing a failure. [ 862.012048][T20892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 862.025616][T20892] CPU: 1 PID: 20892 Comm: syz.1.4874 Not tainted syzkaller #0 [ 862.033110][T20892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 862.043174][T20892] Call Trace: [ 862.046442][T20892] [ 862.049361][T20892] dump_stack_lvl+0x18c/0x250 [ 862.054033][T20892] ? show_regs_print_info+0x20/0x20 [ 862.059255][T20892] ? load_image+0x400/0x400 [ 862.063749][T20892] ? __lock_acquire+0x7d40/0x7d40 [ 862.068791][T20892] should_fail_ex+0x39d/0x4d0 [ 862.073462][T20892] _copy_from_user+0x2f/0xe0 [ 862.078039][T20892] __copy_msghdr+0x3bb/0x580 [ 862.082643][T20892] ___sys_sendmsg+0x214/0x360 [ 862.087340][T20892] ? get_pid_task+0x20/0x1e0 [ 862.091957][T20892] ? __sys_sendmsg+0x2a0/0x2a0 [ 862.096773][T20892] ? __lock_acquire+0x7d40/0x7d40 [ 862.101833][T20892] __se_sys_sendmsg+0x1c2/0x2b0 [ 862.106700][T20892] ? __x64_sys_sendmsg+0x80/0x80 [ 862.111641][T20892] ? lockdep_hardirqs_on+0x98/0x150 [ 862.117177][T20892] do_syscall_64+0x55/0xa0 [ 862.121583][T20892] ? clear_bhb_loop+0x40/0x90 [ 862.126261][T20892] ? clear_bhb_loop+0x40/0x90 [ 862.130967][T20892] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 862.136879][T20892] RIP: 0033:0x7feb3919aeb9 [ 862.141308][T20892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.160937][T20892] RSP: 002b:00007feb39fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.169375][T20892] RAX: ffffffffffffffda RBX: 00007feb39415fa0 RCX: 00007feb3919aeb9 [ 862.177369][T20892] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 862.185355][T20892] RBP: 00007feb39fee090 R08: 0000000000000000 R09: 0000000000000000 [ 862.193331][T20892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.201310][T20892] R13: 00007feb39416038 R14: 00007feb39415fa0 R15: 00007ffcf2526398 [ 862.209302][T20892] [ 862.473632][T20904] netlink: 'syz.1.4879': attribute type 28 has an invalid length. [ 862.483467][T20904] netlink: 'syz.1.4879': attribute type 29 has an invalid length. [ 862.492744][T20904] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4879'. [ 864.137992][T20917] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4883'. [ 864.158129][T20917] netlink: 'syz.0.4883': attribute type 10 has an invalid length. [ 864.237536][T20919] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 864.519697][T20932] FAULT_INJECTION: forcing a failure. [ 864.519697][T20932] name failslab, interval 1, probability 0, space 0, times 0 [ 864.532703][T20932] CPU: 1 PID: 20932 Comm: syz.0.4890 Not tainted syzkaller #0 [ 864.540164][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 864.550211][T20932] Call Trace: [ 864.553482][T20932] [ 864.556414][T20932] dump_stack_lvl+0x18c/0x250 [ 864.561085][T20932] ? show_regs_print_info+0x20/0x20 [ 864.566289][T20932] ? load_image+0x400/0x400 [ 864.570816][T20932] ? __lock_acquire+0x7d40/0x7d40 [ 864.575870][T20932] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 864.581843][T20932] should_fail_ex+0x39d/0x4d0 [ 864.586572][T20932] should_failslab+0x9/0x20 [ 864.591090][T20932] slab_pre_alloc_hook+0x59/0x310 [ 864.596125][T20932] ? bpf_test_init+0x9f/0x140 [ 864.600799][T20932] ? bpf_test_init+0x9f/0x140 [ 864.605472][T20932] __kmem_cache_alloc_node+0x53/0x250 [ 864.610879][T20932] ? bpf_test_init+0x9f/0x140 [ 864.615547][T20932] __kmalloc+0xa4/0x230 [ 864.619699][T20932] bpf_test_init+0x9f/0x140 [ 864.624207][T20932] bpf_prog_test_run_xdp+0x4d1/0x10e0 [ 864.629581][T20932] ? dev_put+0x80/0x80 [ 864.633662][T20932] ? dev_put+0x80/0x80 [ 864.637718][T20932] bpf_prog_test_run+0x321/0x390 [ 864.642644][T20932] __sys_bpf+0x49d/0x890 [ 864.646899][T20932] ? bpf_link_show_fdinfo+0x390/0x390 [ 864.652292][T20932] ? lock_chain_count+0x20/0x20 [ 864.657141][T20932] __x64_sys_bpf+0x7c/0x90 [ 864.661548][T20932] do_syscall_64+0x55/0xa0 [ 864.665967][T20932] ? clear_bhb_loop+0x40/0x90 [ 864.670661][T20932] ? clear_bhb_loop+0x40/0x90 [ 864.675356][T20932] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 864.681257][T20932] RIP: 0033:0x7fa04499aeb9 [ 864.685672][T20932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.705297][T20932] RSP: 002b:00007fa045778028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 864.713725][T20932] RAX: ffffffffffffffda RBX: 00007fa044c15fa0 RCX: 00007fa04499aeb9 [ 864.721689][T20932] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 864.729654][T20932] RBP: 00007fa045778090 R08: 0000000000000000 R09: 0000000000000000 [ 864.737621][T20932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.745596][T20932] R13: 00007fa044c16038 R14: 00007fa044c15fa0 R15: 00007ffea8d8c678 [ 864.753613][T20932] [ 864.898614][T20935] netlink: 'syz.3.4891': attribute type 28 has an invalid length. [ 864.907943][T20935] netlink: 'syz.3.4891': attribute type 29 has an invalid length. [ 864.916521][T20935] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4891'. [ 865.315091][T20946] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4893'. [ 865.395006][T20948] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 865.790299][T20957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4897'. [ 866.292883][T15361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 866.301151][T15361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 866.311548][T15361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 866.320178][T15361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 866.330064][T15361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 866.337515][T15361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 866.440259][T14779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.537941][T14779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.628134][T14779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.650383][T20964] chnl_net:caif_netlink_parms(): no params data found [ 866.706497][T14779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.778340][T20964] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.785876][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.793268][T20964] bridge_slave_0: entered allmulticast mode [ 866.800381][T20964] bridge_slave_0: entered promiscuous mode [ 866.811224][T20964] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.818654][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.826152][T20964] bridge_slave_1: entered allmulticast mode [ 866.833029][T20964] bridge_slave_1: entered promiscuous mode [ 866.867308][T20964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.880399][T20964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.920466][T20964] team0: Port device team_slave_0 added [ 866.950873][T20964] team0: Port device team_slave_1 added [ 867.012826][T20964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.032006][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.058597][T20964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.071637][T20964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.079852][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 867.107350][T20964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.212267][T20964] hsr_slave_0: entered promiscuous mode [ 867.230523][T20964] hsr_slave_1: entered promiscuous mode [ 867.238537][T20964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 867.250920][T20964] Cannot create hsr debugfs directory [ 867.956766][T21001] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 868.249263][T21011] validate_nla: 3 callbacks suppressed [ 868.249279][T21011] netlink: 'syz.3.4906': attribute type 9 has an invalid length. [ 868.301991][T21011] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.4906'. [ 868.408612][T15361] Bluetooth: hci1: command tx timeout [ 868.506956][T21012] netlink: 'syz.3.4906': attribute type 9 has an invalid length. [ 868.526189][T21012] netlink: 180300 bytes leftover after parsing attributes in process `syz.3.4906'. [ 868.739068][T20964] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 868.774208][T20964] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 868.807354][T20964] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 868.869407][T20964] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 869.121803][T21045] netlink: 'syz.2.4912': attribute type 28 has an invalid length. [ 869.131802][T21045] netlink: 'syz.2.4912': attribute type 29 has an invalid length. [ 869.151255][T21045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4912'. [ 869.242429][T20964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.327269][T20964] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.345502][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.352719][T14777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.384627][T14780] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.391843][T14780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.418425][T14779] batman_adv: batadv0: Interface deactivated: wlan0 [ 869.442069][T14779] batman_adv: batadv0: Removing interface: wlan0 [ 869.544316][T14779] hsr_slave_0: left promiscuous mode [ 869.558762][T14779] hsr_slave_1: left promiscuous mode [ 869.572454][T14779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.583976][T14779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.595083][T14779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.608367][T14779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.621131][T14779] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿ [ 869.637846][T14779] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 869.650210][T14779] team0: left allmulticast mode [ 869.656902][T14779] C: left allmulticast mode [ 869.661996][T14779] team_slave_1: left allmulticast mode [ 869.673364][T14779] team0: left promiscuous mode [ 869.679872][T14779] C: left promiscuous mode [ 869.684752][T14779] team_slave_1: left promiscuous mode [ 869.691477][T14779] bridge0: port 3(team0) entered disabled state [ 869.701791][T14779] bridge_slave_1: left allmulticast mode [ 869.718647][T14779] bridge_slave_1: left promiscuous mode [ 869.743815][T14779] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.775570][T14779] bridge_slave_0: left allmulticast mode [ 869.781274][T14779] bridge_slave_0: left promiscuous mode [ 869.812890][T14779] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.904573][T14779] veth1_macvtap: left promiscuous mode [ 869.936338][T14779] veth0_macvtap: left promiscuous mode [ 869.952556][T14779] veth1_vlan: left promiscuous mode [ 869.965924][T14779] veth0_vlan: left promiscuous mode [ 870.330591][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.337004][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.485709][T15361] Bluetooth: hci1: command tx timeout [ 870.981574][T14779] team0 (unregistering): Port device team_slave_1 removed [ 871.027707][T14779] team0 (unregistering): Port device C removed [ 871.076919][T14779] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.085805][T14779] bond_slave_1 (unregistering): left promiscuous mode [ 871.143874][T14779] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.153668][T14779] bond_slave_0 (unregistering): left promiscuous mode [ 871.383014][T14779] .` (unregistering): (slave batadv0): Releasing backup interface [ 871.391447][T14779] batadv0 (unregistering): left promiscuous mode [ 871.479962][T14779] .` (unregistering): Released all slaves [ 871.580897][T21074] netlink: 'syz.1.4917': attribute type 2 has an invalid length. [ 871.589290][T21074] netlink: 'syz.1.4917': attribute type 9 has an invalid length. [ 871.597479][T21074] netlink: 'syz.1.4917': attribute type 10 has an invalid length. [ 871.618187][T21074] netlink: 'syz.1.4917': attribute type 11 has an invalid length. [ 871.635680][T21074] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4917'. [ 871.801147][T21097] netlink: 'syz.1.4918': attribute type 9 has an invalid length. [ 871.824853][T20964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 871.832905][T21097] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4918'. [ 872.018507][T20964] veth0_vlan: entered promiscuous mode [ 872.033381][T21100] netlink: 'syz.1.4918': attribute type 9 has an invalid length. [ 872.040670][T20964] veth1_vlan: entered promiscuous mode [ 872.055492][T21100] netlink: 180300 bytes leftover after parsing attributes in process `syz.1.4918'. [ 872.153493][T20964] veth0_macvtap: entered promiscuous mode [ 872.190012][T20964] veth1_macvtap: entered promiscuous mode [ 872.230974][T20964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.245188][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.260367][T20964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 872.274501][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.303604][T20964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.346036][T20964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.362893][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.374564][T20964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.390106][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.401386][T20964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.412996][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.424731][T20964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.439629][T20964] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.449822][T20964] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.460633][T20964] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.473193][T20964] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.565939][T15361] Bluetooth: hci1: command tx timeout [ 872.604207][T20964] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 872.639832][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.660617][T20964] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 872.685284][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.702482][T20964] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 872.722729][T20964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.753062][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.781856][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.866066][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.881780][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.455181][T21149] validate_nla: 1 callbacks suppressed [ 873.487555][T21149] netlink: 'syz.2.4928': attribute type 39 has an invalid length. [ 873.708623][T21152] netlink: 'syz.0.4929': attribute type 9 has an invalid length. [ 873.727283][T21152] netlink: 180300 bytes leftover after parsing attributes in process `syz.0.4929'. [ 873.798848][T21156] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4930'. [ 873.897967][T21156] netlink: 'syz.2.4930': attribute type 10 has an invalid length. [ 873.939110][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 873.997592][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 874.010017][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 874.038502][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 874.047152][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 874.073751][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 874.277405][T21168] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4933'. [ 874.314485][T21168] netlink: 'syz.2.4933': attribute type 10 has an invalid length. [ 874.576814][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.645435][ T51] Bluetooth: hci1: command tx timeout [ 874.677850][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.716582][T21161] chnl_net:caif_netlink_parms(): no params data found [ 874.745322][T21183] netlink: 'syz.3.4939': attribute type 10 has an invalid length. [ 874.763690][T21183] batman_adv: batadv0: Adding interface: team0 [ 874.778194][T21183] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.804461][T21183] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 874.852612][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.032943][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.088762][T21190] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4941'. [ 875.193253][T21190] netlink: 'syz.0.4941': attribute type 10 has an invalid length. [ 875.213805][T21190] batman_adv: batadv0: Adding interface: wlan0 [ 875.224419][T21190] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 875.252222][T21190] batman_adv: batadv0: Interface activated: wlan0 [ 875.314760][T21161] bridge0: port 1(bridge_slave_0) entered blocking state [ 875.325004][T21161] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.338467][T21161] bridge_slave_0: entered allmulticast mode [ 875.346010][T21161] bridge_slave_0: entered promiscuous mode [ 875.360525][T21198] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4944'. [ 875.430751][T21161] bridge0: port 2(bridge_slave_1) entered blocking state [ 875.475589][T21161] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.513400][T21161] bridge_slave_1: entered allmulticast mode [ 875.540369][T21161] bridge_slave_1: entered promiscuous mode [ 875.591632][T21198] netlink: 'syz.3.4944': attribute type 10 has an invalid length. [ 875.708135][T21161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.762503][T21161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.936870][T21161] team0: Port device team_slave_0 added [ 875.963781][T21211] FAULT_INJECTION: forcing a failure. [ 875.963781][T21211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 876.004782][T21211] CPU: 0 PID: 21211 Comm: syz.3.4949 Not tainted syzkaller #0 [ 876.012311][T21211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 876.022410][T21211] Call Trace: [ 876.025701][T21211] [ 876.028658][T21211] dump_stack_lvl+0x18c/0x250 [ 876.033363][T21211] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 876.039538][T21211] ? show_regs_print_info+0x20/0x20 [ 876.044760][T21211] ? load_image+0x400/0x400 [ 876.049302][T21211] should_fail_ex+0x39d/0x4d0 [ 876.054012][T21211] _copy_from_iter+0x1d9/0x12e0 [ 876.058881][T21211] ? __virt_addr_valid+0x18c/0x540 [ 876.064005][T21211] ? __lock_acquire+0x7d40/0x7d40 [ 876.069028][T21211] ? lockdep_hardirqs_on+0x98/0x150 [ 876.074230][T21211] ? copyout_mc+0x70/0x70 [ 876.078560][T21211] ? __virt_addr_valid+0x18c/0x540 [ 876.083673][T21211] ? __virt_addr_valid+0x18c/0x540 [ 876.088786][T21211] ? __virt_addr_valid+0x469/0x540 [ 876.093974][T21211] ? __check_object_size+0x506/0xa20 [ 876.099276][T21211] netlink_sendmsg+0x76b/0xbf0 [ 876.104053][T21211] ? lockdep_hardirqs_on+0x98/0x150 [ 876.109269][T21211] ? netlink_getsockopt+0x590/0x590 [ 876.114474][T21211] ? netlink_getsockopt+0x590/0x590 [ 876.119683][T21211] ? netlink_getsockopt+0x590/0x590 [ 876.124883][T21211] ____sys_sendmsg+0x5ba/0x960 [ 876.129667][T21211] ? __asan_memset+0x22/0x40 [ 876.134263][T21211] ? __sys_sendmsg_sock+0x30/0x30 [ 876.139286][T21211] ? __import_iovec+0x5f2/0x850 [ 876.144154][T21211] ? import_iovec+0x73/0xa0 [ 876.148660][T21211] ___sys_sendmsg+0x2a6/0x360 [ 876.153336][T21211] ? __sys_sendmsg+0x2a0/0x2a0 [ 876.158134][T21211] __se_sys_sendmsg+0x1c2/0x2b0 [ 876.162983][T21211] ? __x64_sys_sendmsg+0x80/0x80 [ 876.167928][T21211] ? syscall_enter_from_user_mode+0x2e/0x80 [ 876.173820][T21211] do_syscall_64+0x55/0xa0 [ 876.178670][T21211] ? clear_bhb_loop+0x40/0x90 [ 876.183345][T21211] ? clear_bhb_loop+0x40/0x90 [ 876.188023][T21211] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 876.193912][T21211] RIP: 0033:0x7f52c999aeb9 [ 876.198325][T21211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.217931][T21211] RSP: 002b:00007f52ca7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 876.226348][T21211] RAX: ffffffffffffffda RBX: 00007f52c9c15fa0 RCX: 00007f52c999aeb9 [ 876.234315][T21211] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 876.242282][T21211] RBP: 00007f52ca7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 876.250256][T21211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 876.258226][T21211] R13: 00007f52c9c16038 R14: 00007f52c9c15fa0 R15: 00007ffdc9721538 [ 876.266213][T21211] [ 876.278533][ T51] Bluetooth: hci4: command tx timeout [ 876.385482][T21207] netlink: 'syz.0.4947': attribute type 39 has an invalid length. [ 876.610447][T21161] team0: Port device team_slave_1 added [ 876.751179][T21217] netlink: 'syz.3.4951': attribute type 10 has an invalid length. [ 876.784715][T21217] team0: Device hsr_slave_0 failed to register rx_handler [ 876.913223][T21161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 876.934831][T21161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.996673][T21161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.086690][T21161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.105167][T21161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 877.168565][T21161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 877.332660][T21161] hsr_slave_0: entered promiscuous mode [ 877.352635][T21161] hsr_slave_1: entered promiscuous mode [ 877.389916][T21161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.405837][T21161] Cannot create hsr debugfs directory [ 877.746754][T21232] netlink: 'syz.2.4953': attribute type 39 has an invalid length. [ 877.755167][T21234] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4959'. [ 877.843510][T21236] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.4952'. [ 878.326480][ T51] Bluetooth: hci4: command tx timeout [ 878.593838][T21261] tap0: tun_chr_ioctl cmd 1074025677 [ 878.619684][T21261] tap0: linktype set to 0 [ 878.626691][ T1137] batman_adv: batadv0: Interface deactivated: wlan0 [ 878.682634][ T1137] batman_adv: batadv0: Removing interface: wlan0 [ 878.867703][ T1137] hsr_slave_0: left promiscuous mode [ 878.878708][ T1137] hsr_slave_1: left promiscuous mode [ 878.956805][T21274] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4962'. [ 879.009950][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 879.025429][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.033478][ T1137] bridge_slave_1: left allmulticast mode [ 879.048859][ T1137] bridge_slave_1: left promiscuous mode [ 879.061967][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.095939][ T1137] bridge_slave_0: left allmulticast mode [ 879.115343][ T1137] bridge_slave_0: left promiscuous mode [ 879.121126][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.190621][ T1137] veth1_macvtap: left promiscuous mode [ 879.197760][ T1137] veth0_macvtap: left promiscuous mode [ 879.203652][ T1137] veth1_vlan: left promiscuous mode [ 879.212771][ T1137] veth0_vlan: left promiscuous mode [ 880.144131][T21302] FAULT_INJECTION: forcing a failure. [ 880.144131][T21302] name failslab, interval 1, probability 0, space 0, times 0 [ 880.158205][T21302] CPU: 1 PID: 21302 Comm: syz.0.4972 Not tainted syzkaller #0 [ 880.165714][T21302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 880.175793][T21302] Call Trace: [ 880.179080][T21302] [ 880.182010][T21302] dump_stack_lvl+0x18c/0x250 [ 880.186684][T21302] ? show_regs_print_info+0x20/0x20 [ 880.191887][T21302] ? load_image+0x400/0x400 [ 880.196385][T21302] ? __might_sleep+0xe0/0xe0 [ 880.200971][T21302] ? __lock_acquire+0x7d40/0x7d40 [ 880.205989][T21302] ? lockdep_hardirqs_on+0x98/0x150 [ 880.211184][T21302] should_fail_ex+0x39d/0x4d0 [ 880.215873][T21302] should_failslab+0x9/0x20 [ 880.220405][T21302] slab_pre_alloc_hook+0x59/0x310 [ 880.225446][T21302] ? slab_pre_alloc_hook+0x1/0x310 [ 880.230550][T21302] ? __get_vm_area_node+0x125/0x370 [ 880.235744][T21302] __kmem_cache_alloc_node+0x53/0x250 [ 880.241122][T21302] ? __get_vm_area_node+0x125/0x370 [ 880.246329][T21302] kmalloc_node_trace+0x26/0xe0 [ 880.251206][T21302] __get_vm_area_node+0x125/0x370 [ 880.256249][T21302] __vmalloc_node_range+0x36e/0x1330 [ 880.261539][T21302] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 880.267080][T21302] ? mark_lock+0x94/0x320 [ 880.271414][T21302] ? __lock_acquire+0x1347/0x7d40 [ 880.276438][T21302] ? verify_lock_unused+0x140/0x140 [ 880.281640][T21302] ? free_vm_area+0x50/0x50 [ 880.286142][T21302] ? end_current_label_crit_section+0x170/0x170 [ 880.292382][T21302] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 880.298363][T21302] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 880.303907][T21302] __vmalloc+0x7a/0x90 [ 880.307980][T21302] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 880.313520][T21302] bpf_prog_alloc_no_stats+0x47/0x440 [ 880.318893][T21302] ? bpf_prog_alloc+0x2b/0x1a0 [ 880.323662][T21302] bpf_prog_alloc+0x3d/0x1a0 [ 880.328259][T21302] bpf_prog_load+0x6eb/0x1670 [ 880.332942][T21302] ? map_freeze+0x420/0x420 [ 880.337442][T21302] ? __might_fault+0xaa/0x120 [ 880.342112][T21302] ? __lock_acquire+0x7d40/0x7d40 [ 880.347132][T21302] ? file_end_write+0x159/0x250 [ 880.351984][T21302] ? __might_fault+0xaa/0x120 [ 880.356653][T21302] ? __might_fault+0xc6/0x120 [ 880.361320][T21302] ? __might_fault+0xaa/0x120 [ 880.365989][T21302] ? bpf_lsm_bpf+0x9/0x10 [ 880.370316][T21302] ? security_bpf+0x7e/0xa0 [ 880.374818][T21302] __sys_bpf+0x5ba/0x890 [ 880.379060][T21302] ? bpf_link_show_fdinfo+0x390/0x390 [ 880.384438][T21302] ? lock_chain_count+0x20/0x20 [ 880.389291][T21302] __x64_sys_bpf+0x7c/0x90 [ 880.393707][T21302] do_syscall_64+0x55/0xa0 [ 880.398122][T21302] ? clear_bhb_loop+0x40/0x90 [ 880.402792][T21302] ? clear_bhb_loop+0x40/0x90 [ 880.407461][T21302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.413355][T21302] RIP: 0033:0x7f127719aeb9 [ 880.417768][T21302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.437376][T21302] RSP: 002b:00007f12780de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.445801][T21302] RAX: ffffffffffffffda RBX: 00007f1277415fa0 RCX: 00007f127719aeb9 [ 880.453791][T21302] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 880.461787][T21302] RBP: 00007f12780de090 R08: 0000000000000000 R09: 0000000000000000 [ 880.469767][T21302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.477731][T21302] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffd03859758 [ 880.485710][T21302] [ 880.501337][ T51] Bluetooth: hci4: command tx timeout [ 880.516486][T21302] syz.0.4972: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 880.537724][T21302] CPU: 1 PID: 21302 Comm: syz.0.4972 Not tainted syzkaller #0 [ 880.545233][T21302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 880.555314][T21302] Call Trace: [ 880.558589][T21302] [ 880.561510][T21302] dump_stack_lvl+0x18c/0x250 [ 880.566185][T21302] ? show_regs_print_info+0x20/0x20 [ 880.571376][T21302] ? load_image+0x400/0x400 [ 880.575871][T21302] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 880.582277][T21302] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 880.588768][T21302] warn_alloc+0x246/0x340 [ 880.593092][T21302] ? __get_vm_area_node+0x125/0x370 [ 880.598302][T21302] ? zone_watermark_ok_safe+0x230/0x230 [ 880.603870][T21302] ? rcu_is_watching+0x15/0xb0 [ 880.608635][T21302] ? __get_vm_area_node+0x356/0x370 [ 880.613831][T21302] __vmalloc_node_range+0x393/0x1330 [ 880.619114][T21302] ? mark_lock+0x94/0x320 [ 880.623434][T21302] ? __lock_acquire+0x1347/0x7d40 [ 880.628472][T21302] ? verify_lock_unused+0x140/0x140 [ 880.633678][T21302] ? free_vm_area+0x50/0x50 [ 880.638173][T21302] ? end_current_label_crit_section+0x170/0x170 [ 880.644402][T21302] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 880.650397][T21302] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 880.655978][T21302] __vmalloc+0x7a/0x90 [ 880.660084][T21302] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 880.665665][T21302] bpf_prog_alloc_no_stats+0x47/0x440 [ 880.671068][T21302] ? bpf_prog_alloc+0x2b/0x1a0 [ 880.675859][T21302] bpf_prog_alloc+0x3d/0x1a0 [ 880.680476][T21302] bpf_prog_load+0x6eb/0x1670 [ 880.685192][T21302] ? map_freeze+0x420/0x420 [ 880.689715][T21302] ? __might_fault+0xaa/0x120 [ 880.694385][T21302] ? __lock_acquire+0x7d40/0x7d40 [ 880.699416][T21302] ? file_end_write+0x159/0x250 [ 880.704281][T21302] ? __might_fault+0xaa/0x120 [ 880.708948][T21302] ? __might_fault+0xc6/0x120 [ 880.713635][T21302] ? __might_fault+0xaa/0x120 [ 880.718305][T21302] ? bpf_lsm_bpf+0x9/0x10 [ 880.722639][T21302] ? security_bpf+0x7e/0xa0 [ 880.727150][T21302] __sys_bpf+0x5ba/0x890 [ 880.731391][T21302] ? bpf_link_show_fdinfo+0x390/0x390 [ 880.736790][T21302] ? lock_chain_count+0x20/0x20 [ 880.741645][T21302] __x64_sys_bpf+0x7c/0x90 [ 880.746079][T21302] do_syscall_64+0x55/0xa0 [ 880.750517][T21302] ? clear_bhb_loop+0x40/0x90 [ 880.755203][T21302] ? clear_bhb_loop+0x40/0x90 [ 880.759877][T21302] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.765770][T21302] RIP: 0033:0x7f127719aeb9 [ 880.770176][T21302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.789874][T21302] RSP: 002b:00007f12780de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 880.798326][T21302] RAX: ffffffffffffffda RBX: 00007f1277415fa0 RCX: 00007f127719aeb9 [ 880.806309][T21302] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 880.814270][T21302] RBP: 00007f12780de090 R08: 0000000000000000 R09: 0000000000000000 [ 880.822230][T21302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.830221][T21302] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffd03859758 [ 880.838210][T21302] [ 880.861082][T21302] Mem-Info: [ 880.864548][T21302] active_anon:14422 inactive_anon:0 isolated_anon:0 [ 880.864548][T21302] active_file:20815 inactive_file:40256 isolated_file:0 [ 880.864548][T21302] unevictable:768 dirty:549 writeback:0 [ 880.864548][T21302] slab_reclaimable:11673 slab_unreclaimable:93864 [ 880.864548][T21302] mapped:24832 shmem:1361 pagetables:546 [ 880.864548][T21302] sec_pagetables:0 bounce:0 [ 880.864548][T21302] kernel_misc_reclaimable:0 [ 880.864548][T21302] free:1334004 free_pcp:8139 free_cma:0 [ 880.910753][T21302] Node 0 active_anon:57688kB inactive_anon:0kB active_file:83260kB inactive_file:160828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99328kB dirty:2192kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10824kB pagetables:2184kB sec_pagetables:0kB all_unreclaimable? no [ 880.943904][T21302] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 880.975687][T21302] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.007387][ T1137] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 881.017298][T21302] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 881.023508][T21302] Node 0 DMA32 free:1415956kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:57648kB inactive_anon:0kB active_file:83260kB inactive_file:160000kB unevictable:1536kB writepending:2188kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:22700kB local_pcp:2420kB free_cma:0kB [ 881.023797][ T1137] batadv_slave_0 (unregistering): left promiscuous mode [ 881.057330][T21302] lowmem_reserve[]: 0 0 0 0 0 [ 881.068040][T21302] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 881.095727][T21302] lowmem_reserve[]: 0 0 0 0 0 [ 881.100977][T21302] Node 1 Normal free:3904696kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:10624kB local_pcp:1952kB free_cma:0kB [ 881.132510][T21302] lowmem_reserve[]: 0 0 0 0 0 [ 881.139278][T21302] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 881.153473][T21302] Node 0 DMA32: 915*4kB (UME) 997*8kB (UME) 770*16kB (UME) 582*32kB (UME) 587*64kB (UME) 364*128kB (UME) 174*256kB (UME) 141*512kB (UME) 63*1024kB (UME) 29*2048kB (UME) 256*4096kB (UM) = 1415956kB [ 881.174373][T21302] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 881.174761][ T1137] team_slave_1 (unregistering): left promiscuous mode [ 881.183719][T21302] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 881.198434][T21302] Node 1 Normal: 216*4kB (U) 51*8kB (UE) 36*16kB (UE) 200*32kB (UE) 68*64kB (UME) 15*128kB (UME) 2*256kB (U) 1*512kB (M) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3904696kB [ 881.218222][T21302] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.221659][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 881.228526][T21302] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.228566][T21302] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 881.228619][T21302] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 881.228668][T21302] 62434 total pagecache pages [ 881.228694][T21302] 0 pages in swap cache [ 881.228739][T21302] Free swap = 124996kB [ 881.228765][T21302] Total swap = 124996kB [ 881.228810][T21302] 2097051 pages RAM [ 881.228836][T21302] 0 pages HighMem/MovableOnly [ 881.228883][T21302] 416922 pages reserved [ 881.228907][T21302] 0 pages cma reserved [ 881.378385][ T1137] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.427034][ T1137] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.437019][ T1137] bond_slave_0 (unregistering): left promiscuous mode [ 881.730847][ T1137] .` (unregistering): (slave batadv0): Releasing backup interface [ 881.739036][ T1137] batadv0 (unregistering): left promiscuous mode [ 881.788983][ T1137] .` (unregistering): (slave team0): Releasing backup interface [ 881.802362][ T1137] team0 (unregistering): left promiscuous mode [ 881.836479][ T1137] .` (unregistering): Released all slaves [ 881.967004][T21279] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.4964'. [ 881.976904][T21282] validate_nla: 2 callbacks suppressed [ 881.976919][T21282] netlink: 'syz.2.4964': attribute type 10 has an invalid length. [ 882.102515][T21161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 882.131967][T21161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 882.170866][T21161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 882.206455][T21161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 882.566354][ T51] Bluetooth: hci4: command tx timeout [ 882.673794][T21336] netlink: 'syz.0.4979': attribute type 28 has an invalid length. [ 882.692759][T21336] netlink: 'syz.0.4979': attribute type 29 has an invalid length. [ 882.713038][T21336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4979'. [ 882.783612][T21161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.983627][T21161] 8021q: adding VLAN 0 to HW filter on device team0 [ 883.035956][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.043147][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.104026][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.111300][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.216583][T21161] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 883.239870][T21161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 883.660379][T21161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 883.768702][T21161] veth0_vlan: entered promiscuous mode [ 883.797351][T21161] veth1_vlan: entered promiscuous mode [ 883.870900][T21161] veth0_macvtap: entered promiscuous mode [ 883.892762][T21161] veth1_macvtap: entered promiscuous mode [ 883.912827][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.924283][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.940116][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.951580][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.966326][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.979189][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.992529][T21161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 884.005022][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.032523][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.047350][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.060199][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.072454][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 884.086688][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.110064][T21161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 884.130503][T21161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.155326][T21161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.164082][T21161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.182370][T21161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.321542][T21161] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 884.332877][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.343546][T21161] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 884.356412][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.367197][T21161] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 884.377442][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 884.430716][T14780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.465047][T14780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.511355][T14780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.523303][T14780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.660775][T21392] netlink: 'syz.1.4927': attribute type 21 has an invalid length. [ 884.839879][T21397] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4983'. [ 884.883126][T21397] netlink: 'syz.1.4983': attribute type 10 has an invalid length. [ 884.896384][T21397] batman_adv: batadv0: Adding interface: wlan0 [ 884.916241][T21397] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.951002][T21397] batman_adv: batadv0: Interface activated: wlan0 [ 885.266599][T21415] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.4988'. [ 885.338902][T21415] netlink: 'syz.1.4988': attribute type 10 has an invalid length. [ 886.904251][T21445] netlink: 'syz.2.4996': attribute type 28 has an invalid length. [ 886.973101][T21445] netlink: 'syz.2.4996': attribute type 29 has an invalid length. [ 886.985744][T21445] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4996'. [ 887.359196][T21458] netlink: 'syz.1.5000': attribute type 28 has an invalid length. [ 887.392240][T21458] netlink: 'syz.1.5000': attribute type 29 has an invalid length. [ 887.407135][T21458] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5000'. [ 890.537982][T15361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 890.570424][T15361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 890.593763][T15361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 890.606012][T15361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 890.669250][T15361] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 890.756542][T15361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 891.498227][T14777] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.622910][T14777] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.722109][T14777] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.838586][T21496] netlink: 'syz.3.5011': attribute type 28 has an invalid length. [ 891.886278][T21496] netlink: 'syz.3.5011': attribute type 29 has an invalid length. [ 891.905953][T14777] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.924348][T21496] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5011'. [ 892.383631][T21515] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5014'. [ 892.401028][T21483] chnl_net:caif_netlink_parms(): no params data found [ 892.493833][T21515] netlink: 'syz.0.5014': attribute type 10 has an invalid length. [ 892.732296][T21483] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.761550][T21483] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.785531][T21483] bridge_slave_0: entered allmulticast mode [ 892.805422][T15361] Bluetooth: hci0: command tx timeout [ 892.805677][T21483] bridge_slave_0: entered promiscuous mode [ 892.861521][T21483] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.883264][T21483] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.907062][T21483] bridge_slave_1: entered allmulticast mode [ 892.928191][T21483] bridge_slave_1: entered promiscuous mode [ 893.031678][T21483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.058331][T21483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 893.108421][T21483] team0: Port device team_slave_0 added [ 893.118750][T21483] team0: Port device team_slave_1 added [ 893.183167][T21483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.192173][T21483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.219269][T21483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.257406][T21483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.264678][T21483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.296415][T21483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.361497][T21483] hsr_slave_0: entered promiscuous mode [ 893.375195][T21483] hsr_slave_1: entered promiscuous mode [ 893.382347][T21483] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.390581][T21483] Cannot create hsr debugfs directory [ 894.194243][T21483] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 894.213367][T14777] batman_adv: batadv0: Interface deactivated: wlan0 [ 894.262434][T14777] batman_adv: batadv0: Removing interface: wlan0 [ 894.284279][T21483] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 894.309290][T21483] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 894.333478][T21483] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 894.369404][T14777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 894.377331][T14777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.385484][T14777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.393078][T14777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.401526][T14777] batman_adv: batadv0: Interface deactivated: ÿÿÿÿÿÿÿ€Ã [ 894.408912][T14777] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿÿ€Ã [ 894.423553][T14777] bond0: left allmulticast mode [ 894.428580][T14777] bond_slave_0: left allmulticast mode [ 894.434221][T14777] bond_slave_1: left allmulticast mode [ 894.442449][T14777] bridge0: port 3(bond0) entered disabled state [ 894.454695][T14777] bridge_slave_1: left allmulticast mode [ 894.463755][T14777] bridge_slave_1: left promiscuous mode [ 894.473105][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.482402][T14777] bridge_slave_0: left allmulticast mode [ 894.500546][T14777] bridge_slave_0: left promiscuous mode [ 894.506641][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.536476][T14777] veth1_macvtap: left promiscuous mode [ 894.543123][T14777] veth1_vlan: left allmulticast mode [ 894.550084][T14777] veth1_vlan: left promiscuous mode [ 894.558197][T14777] veth0_vlan: left promiscuous mode [ 894.895692][T15361] Bluetooth: hci0: command tx timeout [ 896.351450][T14777] team0 (unregistering): Port device team_slave_1 removed [ 896.399114][T14777] team0 (unregistering): Port device C removed [ 896.443910][T14777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 896.454097][T14777] bond_slave_1 (unregistering): left promiscuous mode [ 896.499980][T14777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 896.510913][T14777] bond_slave_0 (unregistering): left promiscuous mode [ 896.837551][T14777] bond0 (unregistering): Released all slaves [ 896.937712][T21580] netlink: 'syz.3.5019': attribute type 21 has an invalid length. [ 896.965525][ T51] Bluetooth: hci0: command tx timeout [ 897.231510][T21483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 897.333635][T21483] 8021q: adding VLAN 0 to HW filter on device team0 [ 897.379631][T14776] bridge0: port 1(bridge_slave_0) entered blocking state [ 897.386845][T14776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 897.407143][T14776] bridge0: port 2(bridge_slave_1) entered blocking state [ 897.414318][T14776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.486460][T21606] netlink: 'syz.1.5025': attribute type 28 has an invalid length. [ 897.494327][T21606] netlink: 'syz.1.5025': attribute type 29 has an invalid length. [ 897.528868][T21606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5025'. [ 897.671526][T21610] netlink: 'syz.3.5026': attribute type 28 has an invalid length. [ 897.693561][T21610] netlink: 'syz.3.5026': attribute type 29 has an invalid length. [ 897.727394][T21610] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5026'. [ 897.954846][T21623] netlink: 'syz.0.5027': attribute type 28 has an invalid length. [ 898.012829][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 898.031481][T21623] netlink: 'syz.0.5027': attribute type 29 has an invalid length. [ 898.053008][T21623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5027'. [ 898.510394][T21483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.587978][T21483] veth0_vlan: entered promiscuous mode [ 898.609312][T21483] veth1_vlan: entered promiscuous mode [ 898.664584][T21483] veth0_macvtap: entered promiscuous mode [ 898.680493][T21483] veth1_macvtap: entered promiscuous mode [ 898.704678][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.720326][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.741341][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.752364][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.765610][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 898.779927][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.792761][T21483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 898.817643][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.828568][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.840822][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.852347][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.862898][T21483] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 898.873803][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 898.885967][T21483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 898.904515][T21483] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.913421][T21483] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.927373][T21483] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.941029][T21483] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 899.041797][T21483] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 899.046274][T15361] Bluetooth: hci0: command tx timeout [ 899.059061][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.070600][T21483] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 899.087764][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.107469][T21483] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 899.119484][T21483] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.140406][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.164748][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.214006][ T5050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.223247][ T5050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.548159][T21661] FAULT_INJECTION: forcing a failure. [ 899.548159][T21661] name failslab, interval 1, probability 0, space 0, times 0 [ 899.566851][T21661] CPU: 1 PID: 21661 Comm: syz.2.5004 Not tainted syzkaller #0 [ 899.574352][T21661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 899.584430][T21661] Call Trace: [ 899.587714][T21661] [ 899.590644][T21661] dump_stack_lvl+0x18c/0x250 [ 899.595336][T21661] ? show_regs_print_info+0x20/0x20 [ 899.600539][T21661] ? load_image+0x400/0x400 [ 899.605051][T21661] ? __lock_acquire+0x7d40/0x7d40 [ 899.610086][T21661] should_fail_ex+0x39d/0x4d0 [ 899.614776][T21661] should_failslab+0x9/0x20 [ 899.619283][T21661] slab_pre_alloc_hook+0x59/0x310 [ 899.624321][T21661] kmem_cache_alloc+0x5a/0x2d0 [ 899.629089][T21661] ? alloc_empty_file+0x9e/0x1d0 [ 899.634039][T21661] alloc_empty_file+0x9e/0x1d0 [ 899.638810][T21661] path_openat+0x113/0x3230 [ 899.643325][T21661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.649483][T21661] ? mark_lock+0x94/0x320 [ 899.653841][T21661] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 899.659851][T21661] ? lock_chain_count+0x20/0x20 [ 899.664715][T21661] ? do_filp_open+0x430/0x430 [ 899.669401][T21661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.675564][T21661] ? lockdep_hardirqs_on+0x98/0x150 [ 899.680766][T21661] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 899.686936][T21661] do_filp_open+0x1f5/0x430 [ 899.691449][T21661] ? vfs_tmpfile+0x490/0x490 [ 899.696072][T21661] ? _raw_spin_unlock+0x28/0x40 [ 899.700922][T21661] ? alloc_fd+0x58f/0x630 [ 899.705277][T21661] do_sys_openat2+0x134/0x1d0 [ 899.709964][T21661] ? do_sys_open+0xe0/0xe0 [ 899.714385][T21661] ? lockdep_hardirqs_on+0x98/0x150 [ 899.719599][T21661] __x64_sys_openat+0x139/0x160 [ 899.724462][T21661] do_syscall_64+0x55/0xa0 [ 899.728884][T21661] ? clear_bhb_loop+0x40/0x90 [ 899.733580][T21661] ? clear_bhb_loop+0x40/0x90 [ 899.738282][T21661] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 899.744191][T21661] RIP: 0033:0x7f48d019aeb9 [ 899.748612][T21661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.768231][T21661] RSP: 002b:00007f48d1056028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 899.776653][T21661] RAX: ffffffffffffffda RBX: 00007f48d0415fa0 RCX: 00007f48d019aeb9 [ 899.784625][T21661] RDX: 0000000000200002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 899.792595][T21661] RBP: 00007f48d1056090 R08: 0000000000000000 R09: 0000000000000000 [ 899.800566][T21661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.808534][T21661] R13: 00007f48d0416038 R14: 00007f48d0415fa0 R15: 00007fffd396c218 [ 899.816528][T21661] [ 900.479457][T15361] Bluetooth: hci4: unexpected subevent 0x19 length: 150 > 28 [ 900.487758][T15361] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 900.595897][T21691] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5033'. [ 900.621165][T21693] FAULT_INJECTION: forcing a failure. [ 900.621165][T21693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.644972][T21693] CPU: 1 PID: 21693 Comm: syz.1.5035 Not tainted syzkaller #0 [ 900.652472][T21693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 900.662521][T21693] Call Trace: [ 900.665790][T21693] [ 900.668706][T21693] dump_stack_lvl+0x18c/0x250 [ 900.673376][T21693] ? show_regs_print_info+0x20/0x20 [ 900.678562][T21693] ? load_image+0x400/0x400 [ 900.683057][T21693] ? __might_fault+0xaa/0x120 [ 900.687716][T21693] ? __lock_acquire+0x7d40/0x7d40 [ 900.692728][T21693] should_fail_ex+0x39d/0x4d0 [ 900.697420][T21693] _copy_from_user+0x2f/0xe0 [ 900.702020][T21693] ___sys_sendmsg+0x1c7/0x360 [ 900.706686][T21693] ? get_pid_task+0x20/0x1e0 [ 900.711267][T21693] ? __sys_sendmsg+0x2a0/0x2a0 [ 900.716034][T21693] ? __lock_acquire+0x7d40/0x7d40 [ 900.721062][T21693] __se_sys_sendmsg+0x1c2/0x2b0 [ 900.725899][T21693] ? __x64_sys_sendmsg+0x80/0x80 [ 900.730832][T21693] ? lockdep_hardirqs_on+0x98/0x150 [ 900.736019][T21693] do_syscall_64+0x55/0xa0 [ 900.740455][T21693] ? clear_bhb_loop+0x40/0x90 [ 900.745113][T21693] ? clear_bhb_loop+0x40/0x90 [ 900.749784][T21693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 900.755685][T21693] RIP: 0033:0x7fe684f9aeb9 [ 900.760097][T21693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 900.779694][T21693] RSP: 002b:00007fe685d81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 900.788099][T21693] RAX: ffffffffffffffda RBX: 00007fe685215fa0 RCX: 00007fe684f9aeb9 [ 900.796065][T21693] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 900.804037][T21693] RBP: 00007fe685d81090 R08: 0000000000000000 R09: 0000000000000000 [ 900.812001][T21693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.819971][T21693] R13: 00007fe685216038 R14: 00007fe685215fa0 R15: 00007ffc08167d58 [ 900.827942][T21693] [ 901.342765][T21700] netlink: 'syz.0.5038': attribute type 10 has an invalid length. [ 901.350970][T21700] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.5038'. [ 901.444530][T21697] netlink: 'syz.1.5037': attribute type 9 has an invalid length. [ 901.453039][T21697] netlink: 399 bytes leftover after parsing attributes in process `syz.1.5037'. [ 901.858388][T21716] netlink: 'syz.2.5041': attribute type 28 has an invalid length. [ 901.872194][T21716] netlink: 'syz.2.5041': attribute type 29 has an invalid length. [ 901.881027][T21716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5041'. [ 902.831050][T21725] netlink: 64855 bytes leftover after parsing attributes in process `syz.3.5042'. [ 902.923850][T21725] netlink: 'syz.3.5042': attribute type 10 has an invalid length. [ 903.064968][T21734] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5045'. [ 903.114986][T21734] netlink: 'syz.0.5045': attribute type 21 has an invalid length. [ 903.125175][T21734] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5045'. [ 903.333700][T21746] FAULT_INJECTION: forcing a failure. [ 903.333700][T21746] name failslab, interval 1, probability 0, space 0, times 0 [ 903.353380][T21746] CPU: 1 PID: 21746 Comm: syz.0.5050 Not tainted syzkaller #0 [ 903.360908][T21746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 903.370989][T21746] Call Trace: [ 903.374289][T21746] [ 903.377229][T21746] dump_stack_lvl+0x18c/0x250 [ 903.381905][T21746] ? show_regs_print_info+0x20/0x20 [ 903.387125][T21746] ? load_image+0x400/0x400 [ 903.391655][T21746] ? __might_sleep+0xe0/0xe0 [ 903.396275][T21746] ? __lock_acquire+0x7d40/0x7d40 [ 903.401327][T21746] ? trace_contention_end+0x39/0xe0 [ 903.406558][T21746] should_fail_ex+0x39d/0x4d0 [ 903.411269][T21746] should_failslab+0x9/0x20 [ 903.415802][T21746] slab_pre_alloc_hook+0x59/0x310 [ 903.420852][T21746] ? mutex_lock_nested+0x20/0x20 [ 903.425819][T21746] ? tcx_link_attach+0x168/0x900 [ 903.430787][T21746] __kmem_cache_alloc_node+0x53/0x250 [ 903.436192][T21746] ? tcx_link_attach+0x168/0x900 [ 903.441159][T21746] kmalloc_trace+0x2a/0xe0 [ 903.445620][T21746] tcx_link_attach+0x168/0x900 [ 903.450418][T21746] ? tcx_prog_query+0x140/0x140 [ 903.455294][T21746] ? __fget_files+0x43d/0x4b0 [ 903.460003][T21746] ? bpf_prog_attach_check_attach_type+0x188/0x440 [ 903.466532][T21746] link_create+0x390/0x720 [ 903.470976][T21746] __sys_bpf+0x4d7/0x890 [ 903.475242][T21746] ? bpf_link_show_fdinfo+0x390/0x390 [ 903.480652][T21746] ? lock_chain_count+0x20/0x20 [ 903.485535][T21746] __x64_sys_bpf+0x7c/0x90 [ 903.487547][T21745] netlink: 142528 bytes leftover after parsing attributes in process `syz.1.5049'. [ 903.489952][T21746] do_syscall_64+0x55/0xa0 [ 903.489979][T21746] ? clear_bhb_loop+0x40/0x90 [ 903.489997][T21746] ? clear_bhb_loop+0x40/0x90 [ 903.490018][T21746] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 903.490037][T21746] RIP: 0033:0x7f127719aeb9 [ 903.490055][T21746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.490071][T21746] RSP: 002b:00007f12780de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 903.490102][T21746] RAX: ffffffffffffffda RBX: 00007f1277415fa0 RCX: 00007f127719aeb9 [ 903.490116][T21746] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 000000000000001c [ 903.490129][T21746] RBP: 00007f12780de090 R08: 0000000000000000 R09: 0000000000000000 [ 903.490141][T21746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.490153][T21746] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffd03859758 [ 903.490185][T21746] [ 903.621279][T21749] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.5052'. [ 903.730047][T21745] netlink: 'syz.1.5049': attribute type 1 has an invalid length. [ 903.968960][T21757] netlink: 'syz.1.5053': attribute type 28 has an invalid length. [ 903.982603][T21757] netlink: 'syz.1.5053': attribute type 29 has an invalid length. [ 903.990951][T21757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5053'. [ 904.667386][T21764] FAULT_INJECTION: forcing a failure. [ 904.667386][T21764] name failslab, interval 1, probability 0, space 0, times 0 [ 904.684421][T21764] CPU: 0 PID: 21764 Comm: syz.0.5054 Not tainted syzkaller #0 [ 904.691931][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 904.702009][T21764] Call Trace: [ 904.705310][T21764] [ 904.708255][T21764] dump_stack_lvl+0x18c/0x250 [ 904.712959][T21764] ? show_regs_print_info+0x20/0x20 [ 904.718182][T21764] ? load_image+0x400/0x400 [ 904.722713][T21764] ? verify_lock_unused+0x140/0x140 [ 904.727939][T21764] ? perf_trace_lock+0xfc/0x3b0 [ 904.732819][T21764] should_fail_ex+0x39d/0x4d0 [ 904.737520][T21764] should_failslab+0x9/0x20 [ 904.742043][T21764] slab_pre_alloc_hook+0x59/0x310 [ 904.747096][T21764] kmem_cache_alloc+0x5a/0x2d0 [ 904.751874][T21764] ? skb_clone+0x1eb/0x370 [ 904.756298][T21764] skb_clone+0x1eb/0x370 [ 904.760556][T21764] __netlink_deliver_tap+0x41c/0x830 [ 904.765879][T21764] ? netlink_deliver_tap+0x2e/0x1b0 [ 904.771105][T21764] netlink_deliver_tap+0x19c/0x1b0 [ 904.776232][T21764] netlink_unicast+0x72c/0x8d0 [ 904.781024][T21764] netlink_sendmsg+0x8d0/0xbf0 [ 904.785802][T21764] ? netlink_getsockopt+0x590/0x590 [ 904.791009][T21764] ? aa_sock_msg_perm+0x94/0x150 [ 904.795946][T21764] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 904.801229][T21764] ? security_socket_sendmsg+0x80/0xa0 [ 904.806682][T21764] ? netlink_getsockopt+0x590/0x590 [ 904.811883][T21764] ____sys_sendmsg+0x5ba/0x960 [ 904.816655][T21764] ? __asan_memset+0x22/0x40 [ 904.821242][T21764] ? __sys_sendmsg_sock+0x30/0x30 [ 904.826262][T21764] ? __import_iovec+0x5f2/0x850 [ 904.831121][T21764] ? import_iovec+0x73/0xa0 [ 904.835627][T21764] ___sys_sendmsg+0x2a6/0x360 [ 904.840304][T21764] ? __sys_sendmsg+0x2a0/0x2a0 [ 904.845081][T21764] ? __lock_acquire+0x7d40/0x7d40 [ 904.850121][T21764] __se_sys_sendmsg+0x1c2/0x2b0 [ 904.854969][T21764] ? __x64_sys_sendmsg+0x80/0x80 [ 904.859917][T21764] ? lockdep_hardirqs_on+0x98/0x150 [ 904.865114][T21764] do_syscall_64+0x55/0xa0 [ 904.869527][T21764] ? clear_bhb_loop+0x40/0x90 [ 904.874197][T21764] ? clear_bhb_loop+0x40/0x90 [ 904.878869][T21764] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 904.884757][T21764] RIP: 0033:0x7f127719aeb9 [ 904.889168][T21764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.908775][T21764] RSP: 002b:00007f12780de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.917190][T21764] RAX: ffffffffffffffda RBX: 00007f1277415fa0 RCX: 00007f127719aeb9 [ 904.925160][T21764] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 904.933131][T21764] RBP: 00007f12780de090 R08: 0000000000000000 R09: 0000000000000000 [ 904.941097][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.949066][T21764] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffd03859758 [ 904.957047][T21764] [ 904.989054][T21768] netlink: 64855 bytes leftover after parsing attributes in process `syz.3.5056'. [ 905.031199][T21768] netlink: 'syz.3.5056': attribute type 10 has an invalid length. [ 906.060232][T21794] netlink: 'syz.2.5065': attribute type 28 has an invalid length. [ 906.072010][T21794] netlink: 'syz.2.5065': attribute type 29 has an invalid length. [ 906.083989][T21794] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5065'. [ 906.391404][T21799] netlink: 64855 bytes leftover after parsing attributes in process `syz.0.5066'. [ 906.413643][T21799] netlink: 'syz.0.5066': attribute type 10 has an invalid length. [ 906.960862][T21805] netlink: 'syz.0.5076': attribute type 29 has an invalid length. [ 907.087870][T21809] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5070'. [ 907.381641][T21826] syzkaller0: entered promiscuous mode [ 907.387397][T21826] syzkaller0: entered allmulticast mode [ 909.314994][T21838] validate_nla: 7 callbacks suppressed [ 909.315005][T21838] netlink: 'syz.2.5079': attribute type 21 has an invalid length. [ 909.331450][T21838] netlink: 'syz.2.5079': attribute type 6 has an invalid length. [ 909.339347][T21838] __nla_validate_parse: 2 callbacks suppressed [ 909.339362][T21838] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5079'. [ 909.471477][T21842] netlink: 'syz.2.5081': attribute type 29 has an invalid length. [ 909.498739][T21842] netlink: 'syz.2.5081': attribute type 29 has an invalid length. [ 909.517093][T21842] netlink: 'syz.2.5081': attribute type 29 has an invalid length. [ 909.526760][T21842] netlink: 'syz.2.5081': attribute type 29 has an invalid length. [ 909.535198][T21842] netlink: 'syz.2.5081': attribute type 29 has an invalid length. [ 909.651003][T21848] FAULT_INJECTION: forcing a failure. [ 909.651003][T21848] name failslab, interval 1, probability 0, space 0, times 0 [ 909.668983][T21848] CPU: 0 PID: 21848 Comm: syz.3.5084 Not tainted syzkaller #0 [ 909.676498][T21848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 909.686552][T21848] Call Trace: [ 909.689828][T21848] [ 909.692753][T21848] dump_stack_lvl+0x18c/0x250 [ 909.697437][T21848] ? show_regs_print_info+0x20/0x20 [ 909.702636][T21848] ? load_image+0x400/0x400 [ 909.707148][T21848] ? __might_sleep+0xe0/0xe0 [ 909.711743][T21848] ? __lock_acquire+0x7d40/0x7d40 [ 909.716767][T21848] should_fail_ex+0x39d/0x4d0 [ 909.721446][T21848] should_failslab+0x9/0x20 [ 909.725947][T21848] slab_pre_alloc_hook+0x59/0x310 [ 909.730976][T21848] kmem_cache_alloc_node+0x60/0x320 [ 909.736175][T21848] ? __alloc_skb+0x103/0x2c0 [ 909.740767][T21848] __alloc_skb+0x103/0x2c0 [ 909.745181][T21848] alloc_skb_with_frags+0xca/0x7b0 [ 909.750288][T21848] ? _raw_spin_unlock+0x40/0x40 [ 909.755136][T21848] ? finish_wait+0xc7/0x1d0 [ 909.759642][T21848] sock_alloc_send_pskb+0x883/0x9a0 [ 909.764852][T21848] ? sock_kzfree_s+0x50/0x50 [ 909.769435][T21848] ? do_raw_spin_lock+0x11f/0x2c0 [ 909.774457][T21848] ? wake_bit_function+0x200/0x200 [ 909.779562][T21848] ? __rwlock_init+0x150/0x150 [ 909.784330][T21848] ? do_raw_spin_unlock+0x121/0x230 [ 909.789531][T21848] unix_dgram_sendmsg+0x5a2/0x16d0 [ 909.794651][T21848] ? verify_lock_unused+0x140/0x140 [ 909.799847][T21848] ? aa_sk_perm+0x83c/0x970 [ 909.804367][T21848] ? unix_dgram_poll+0x680/0x680 [ 909.809301][T21848] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 909.815718][T21848] ? aa_sock_msg_perm+0x94/0x150 [ 909.820660][T21848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 909.825953][T21848] ? security_socket_sendmsg+0x80/0xa0 [ 909.831409][T21848] ? unix_dgram_poll+0x680/0x680 [ 909.836349][T21848] ____sys_sendmsg+0x5ba/0x960 [ 909.841119][T21848] ? __asan_memset+0x22/0x40 [ 909.845707][T21848] ? __sys_sendmsg_sock+0x30/0x30 [ 909.850728][T21848] ? __import_iovec+0x3fa/0x850 [ 909.855585][T21848] ? import_iovec+0x73/0xa0 [ 909.860090][T21848] ___sys_sendmsg+0x2a6/0x360 [ 909.864755][T21848] ? get_pid_task+0x20/0x1e0 [ 909.869345][T21848] ? __sys_sendmsg+0x2a0/0x2a0 [ 909.874122][T21848] ? __lock_acquire+0x7d40/0x7d40 [ 909.879164][T21848] __se_sys_sendmsg+0x1c2/0x2b0 [ 909.884014][T21848] ? __x64_sys_sendmsg+0x80/0x80 [ 909.888956][T21848] ? lockdep_hardirqs_on+0x98/0x150 [ 909.894150][T21848] do_syscall_64+0x55/0xa0 [ 909.898563][T21848] ? clear_bhb_loop+0x40/0x90 [ 909.903238][T21848] ? clear_bhb_loop+0x40/0x90 [ 909.907908][T21848] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 909.913799][T21848] RIP: 0033:0x7f52c999aeb9 [ 909.918212][T21848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 909.937825][T21848] RSP: 002b:00007f52ca7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 909.946244][T21848] RAX: ffffffffffffffda RBX: 00007f52c9c15fa0 RCX: 00007f52c999aeb9 [ 909.954214][T21848] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 909.962264][T21848] RBP: 00007f52ca7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 909.970235][T21848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 909.978199][T21848] R13: 00007f52c9c16038 R14: 00007f52c9c15fa0 R15: 00007ffdc9721538 [ 909.986181][T21848] [ 910.013509][T21858] FAULT_INJECTION: forcing a failure. [ 910.013509][T21858] name failslab, interval 1, probability 0, space 0, times 0 [ 910.039648][T21858] CPU: 0 PID: 21858 Comm: syz.2.5086 Not tainted syzkaller #0 [ 910.047167][T21858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 910.057255][T21858] Call Trace: [ 910.060556][T21858] [ 910.063511][T21858] dump_stack_lvl+0x18c/0x250 [ 910.068235][T21858] ? show_regs_print_info+0x20/0x20 [ 910.073470][T21858] ? load_image+0x400/0x400 [ 910.078011][T21858] ? __might_sleep+0xe0/0xe0 [ 910.082633][T21858] ? __lock_acquire+0x7d40/0x7d40 [ 910.087700][T21858] should_fail_ex+0x39d/0x4d0 [ 910.092426][T21858] should_failslab+0x9/0x20 [ 910.096961][T21858] slab_pre_alloc_hook+0x59/0x310 [ 910.102056][T21858] ? tomoyo_encode+0x28b/0x540 [ 910.106849][T21858] ? tomoyo_encode+0x28b/0x540 [ 910.111639][T21858] __kmem_cache_alloc_node+0x53/0x250 [ 910.117058][T21858] ? tomoyo_encode+0x28b/0x540 [ 910.121847][T21858] __kmalloc+0xa4/0x230 [ 910.126041][T21858] tomoyo_encode+0x28b/0x540 [ 910.130674][T21858] tomoyo_realpath_from_path+0x592/0x5d0 [ 910.136365][T21858] tomoyo_path_number_perm+0x248/0x620 [ 910.141861][T21858] ? tomoyo_path_number_perm+0x217/0x620 [ 910.147539][T21858] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 910.153047][T21858] ? ksys_write+0x1c4/0x260 [ 910.157661][T21858] ? __fget_files+0x28/0x4b0 [ 910.162286][T21858] ? __fget_files+0x28/0x4b0 [ 910.166933][T21858] security_file_ioctl+0x70/0xa0 [ 910.171929][T21858] __se_sys_ioctl+0x48/0x170 [ 910.176567][T21858] do_syscall_64+0x55/0xa0 [ 910.181028][T21858] ? clear_bhb_loop+0x40/0x90 [ 910.185733][T21858] ? clear_bhb_loop+0x40/0x90 [ 910.190448][T21858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 910.196373][T21858] RIP: 0033:0x7f48d019aeb9 [ 910.200820][T21858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.220461][T21858] RSP: 002b:00007f48d1035028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 910.228912][T21858] RAX: ffffffffffffffda RBX: 00007f48d0416090 RCX: 00007f48d019aeb9 [ 910.236905][T21858] RDX: 0000200000000000 RSI: 0000000000008923 RDI: 0000000000000011 [ 910.244900][T21858] RBP: 00007f48d1035090 R08: 0000000000000000 R09: 0000000000000000 [ 910.252894][T21858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.260898][T21858] R13: 00007f48d0416128 R14: 00007f48d0416090 R15: 00007fffd396c218 [ 910.268946][T21858] [ 910.272434][T21859] netlink: 'syz.0.5087': attribute type 9 has an invalid length. [ 910.297656][T21859] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.5087'. [ 910.298715][T21858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 910.313798][T21858] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 910.334761][T21860] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5087'. [ 910.354158][T21860] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 910.683186][T21870] netlink: 'syz.1.5089': attribute type 28 has an invalid length. [ 910.718601][T21870] netlink: 'syz.1.5089': attribute type 29 has an invalid length. [ 910.751214][T21870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5089'. [ 910.860432][T21857] delete_channel: no stack [ 910.920935][T21872] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5091'. [ 911.219180][T21887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5095'. [ 911.228499][T21887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5095'. [ 911.238120][T21886] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5095'. [ 911.247688][T21887] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.5095'. [ 911.298513][T21889] FAULT_INJECTION: forcing a failure. [ 911.298513][T21889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 911.312486][T21889] CPU: 0 PID: 21889 Comm: syz.0.5096 Not tainted syzkaller #0 [ 911.319963][T21889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 911.330014][T21889] Call Trace: [ 911.333287][T21889] [ 911.336205][T21889] dump_stack_lvl+0x18c/0x250 [ 911.340875][T21889] ? show_regs_print_info+0x20/0x20 [ 911.346065][T21889] ? load_image+0x400/0x400 [ 911.350575][T21889] ? __lock_acquire+0x7d40/0x7d40 [ 911.355597][T21889] ? snprintf+0xe9/0x140 [ 911.359829][T21889] should_fail_ex+0x39d/0x4d0 [ 911.364510][T21889] _copy_to_user+0x2f/0xa0 [ 911.368952][T21889] simple_read_from_buffer+0xe7/0x150 [ 911.374390][T21889] proc_fail_nth_read+0x1e8/0x260 [ 911.379442][T21889] ? proc_fault_inject_write+0x360/0x360 [ 911.385104][T21889] ? fsnotify_perm+0x271/0x5e0 [ 911.389884][T21889] ? proc_fault_inject_write+0x360/0x360 [ 911.395526][T21889] vfs_read+0x28b/0x970 [ 911.399702][T21889] ? kernel_read+0x1e0/0x1e0 [ 911.404283][T21889] ? __fget_files+0x28/0x4b0 [ 911.408861][T21889] ? __fget_files+0x28/0x4b0 [ 911.413438][T21889] ? __fget_files+0x43d/0x4b0 [ 911.418123][T21889] ? __fdget_pos+0x2a3/0x330 [ 911.422716][T21889] ? ksys_read+0x75/0x260 [ 911.427039][T21889] ksys_read+0x150/0x260 [ 911.431288][T21889] ? vfs_write+0x990/0x990 [ 911.435707][T21889] ? lockdep_hardirqs_on+0x98/0x150 [ 911.440915][T21889] do_syscall_64+0x55/0xa0 [ 911.445350][T21889] ? clear_bhb_loop+0x40/0x90 [ 911.450034][T21889] ? clear_bhb_loop+0x40/0x90 [ 911.454702][T21889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 911.460584][T21889] RIP: 0033:0x7f127715b78e [ 911.464985][T21889] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 911.484585][T21889] RSP: 002b:00007f12780ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 911.492992][T21889] RAX: ffffffffffffffda RBX: 00007f12780de6c0 RCX: 00007f127715b78e [ 911.500968][T21889] RDX: 000000000000000f RSI: 00007f12780de0a0 RDI: 0000000000000005 [ 911.508935][T21889] RBP: 00007f12780de090 R08: 0000000000000000 R09: 0000000000000000 [ 911.516908][T21889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 911.524898][T21889] R13: 00007f1277416038 R14: 00007f1277415fa0 R15: 00007ffd03859758 [ 911.532873][T21889] [ 911.591511][T21891] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5097'. [ 912.090446][T21905] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 912.161349][T21903] delete_channel: no stack [ 912.362238][T21911] batman_adv: batadv0: Adding interface: wlan0 [ 912.372641][T21911] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.398238][T21911] batman_adv: batadv0: Interface activated: wlan0 [ 914.156121][T21951] sctp: [Deprecated]: syz.1.5123 (pid 21951) Use of struct sctp_assoc_value in delayed_ack socket option. [ 914.156121][T21951] Use struct sctp_sack_info instead [ 914.309526][T21951] pim6reg1: entered allmulticast mode [ 915.717909][T21974] syzkaller0: entered promiscuous mode [ 915.723457][T21974] syzkaller0: entered allmulticast mode [ 915.746632][T21977] FAULT_INJECTION: forcing a failure. [ 915.746632][T21977] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 915.748429][T21973] __nla_validate_parse: 15 callbacks suppressed [ 915.748467][T21973] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.5128'. [ 915.803418][T21978] validate_nla: 17 callbacks suppressed [ 915.803454][T21978] netlink: 'syz.0.5130': attribute type 28 has an invalid length. [ 915.809553][T21977] CPU: 1 PID: 21977 Comm: syz.1.5136 Not tainted syzkaller #0 [ 915.809658][T21977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 915.829194][T21978] netlink: 'syz.0.5130': attribute type 29 has an invalid length. [ 915.834960][T21977] Call Trace: [ 915.834977][T21977] [ 915.834985][T21977] dump_stack_lvl+0x18c/0x250 [ 915.835019][T21977] ? show_regs_print_info+0x20/0x20 [ 915.835041][T21977] ? load_image+0x400/0x400 [ 915.835066][T21977] ? __lock_acquire+0x7d40/0x7d40 [ 915.835088][T21977] ? mark_lock+0x94/0x320 [ 915.835110][T21977] should_fail_ex+0x39d/0x4d0 [ 915.850498][T21979] netlink: 'syz.3.5128': attribute type 10 has an invalid length. [ 915.853780][T21977] prepare_alloc_pages+0x1e2/0x5f0 [ 915.853820][T21977] __alloc_pages+0x134/0x460 [ 915.853845][T21977] ? zone_statistics+0x170/0x170 [ 915.853873][T21977] ? do_wp_page+0x7ca/0x35f0 [ 915.853896][T21977] ? do_wp_page+0xfc5/0x35f0 [ 915.853916][T21977] __folio_alloc+0x10/0x20 [ 915.853931][T21977] vma_alloc_folio+0x47a/0x8f0 [ 915.853958][T21977] do_wp_page+0x1243/0x35f0 [ 915.853989][T21977] ? folio_put+0xd0/0xd0 [ 915.872670][T21978] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5130'. [ 915.873000][T21977] ? do_raw_spin_lock+0x11f/0x2c0 [ 915.873032][T21977] ? __rwlock_init+0x150/0x150 [ 915.873064][T21977] handle_mm_fault+0x135d/0x4c00 [ 915.873085][T21977] ? handle_mm_fault+0xe7/0x4c00 [ 915.955838][T21977] ? numa_migrate_prep+0x350/0x350 [ 915.960975][T21977] ? lock_chain_count+0x20/0x20 [ 915.965836][T21977] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 915.971131][T21977] do_user_addr_fault+0x730/0x12c0 [ 915.976266][T21977] exc_page_fault+0x64/0x100 [ 915.980905][T21977] asm_exc_page_fault+0x26/0x30 [ 915.985760][T21977] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 915.991574][T21977] Code: 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 29 f8 48 01 [ 916.011194][T21977] RSP: 0018:ffffc9000caf7ce0 EFLAGS: 00050202 [ 916.017267][T21977] RAX: ffffffff84295f01 RBX: 000000000014000e RCX: 000000000013a10e [ 916.025260][T21977] RDX: 0000000000000000 RSI: ffff888058a05f00 RDI: 0000200000006000 [ 916.033232][T21977] RBP: ffff888059a00000 R08: 0000000000000005 R09: 0000000000000006 [ 916.041211][T21977] R10: dffffc0000000000 R11: ffffed100b168001 R12: 000020000014010e [ 916.049187][T21977] R13: ffff888058a00000 R14: 0000200000000100 R15: ffff888058a00000 [ 916.057175][T21977] ? _copy_from_user+0x81/0xe0 [ 916.061981][T21977] _copy_to_user+0x85/0xa0 [ 916.066430][T21977] map_get_next_key+0x4fd/0x620 [ 916.071304][T21977] ? map_get_next_key+0x2d7/0x620 [ 916.076345][T21977] __sys_bpf+0x715/0x890 [ 916.080602][T21977] ? bpf_link_show_fdinfo+0x390/0x390 [ 916.085995][T21977] ? lock_chain_count+0x20/0x20 [ 916.090865][T21977] __x64_sys_bpf+0x7c/0x90 [ 916.095291][T21977] do_syscall_64+0x55/0xa0 [ 916.099719][T21977] ? clear_bhb_loop+0x40/0x90 [ 916.104401][T21977] ? clear_bhb_loop+0x40/0x90 [ 916.109095][T21977] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 916.114998][T21977] RIP: 0033:0x7fe684f9aeb9 [ 916.119420][T21977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.139036][T21977] RSP: 002b:00007fe6831f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 916.147461][T21977] RAX: ffffffffffffffda RBX: 00007fe685216090 RCX: 00007fe684f9aeb9 [ 916.155441][T21977] RDX: 0000000000000020 RSI: 0000200000000b80 RDI: 0000000000000004 [ 916.163427][T21977] RBP: 00007fe6831f6090 R08: 0000000000000000 R09: 0000000000000000 [ 916.171409][T21977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 916.179387][T21977] R13: 00007fe685216128 R14: 00007fe685216090 R15: 00007ffc08167d58 [ 916.187388][T21977] [ 916.532409][T21990] netlink: 'syz.3.5132': attribute type 1 has an invalid length. [ 916.556768][T21990] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5132'. [ 916.583997][T21991] netlink: 'syz.3.5132': attribute type 2 has an invalid length. [ 916.602074][T21991] netlink: 'syz.3.5132': attribute type 8 has an invalid length. [ 916.610238][T21991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5132'. [ 916.922518][T22000] netlink: 'syz.1.5135': attribute type 28 has an invalid length. [ 916.930725][T22000] netlink: 'syz.1.5135': attribute type 29 has an invalid length. [ 916.943281][T22000] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5135'. [ 919.023609][T21997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5134'. [ 919.033003][T21997] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5134'. [ 919.130414][T22008] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5138'. [ 919.452281][T22024] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.5144'. [ 919.608291][T22027] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5145'. [ 919.676584][T22027] netlink: 'syz.2.5145': attribute type 10 has an invalid length. [ 920.483763][T22048] FAULT_INJECTION: forcing a failure. [ 920.483763][T22048] name failslab, interval 1, probability 0, space 0, times 0 [ 920.505760][T22048] CPU: 1 PID: 22048 Comm: syz.3.5151 Not tainted syzkaller #0 [ 920.513258][T22048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 920.523331][T22048] Call Trace: [ 920.526609][T22048] [ 920.529535][T22048] dump_stack_lvl+0x18c/0x250 [ 920.534217][T22048] ? show_regs_print_info+0x20/0x20 [ 920.539413][T22048] ? load_image+0x400/0x400 [ 920.543922][T22048] should_fail_ex+0x39d/0x4d0 [ 920.548604][T22048] should_failslab+0x9/0x20 [ 920.553105][T22048] slab_pre_alloc_hook+0x59/0x310 [ 920.558134][T22048] kmem_cache_alloc_node+0x60/0x320 [ 920.563344][T22048] ? __alloc_skb+0x103/0x2c0 [ 920.567940][T22048] __alloc_skb+0x103/0x2c0 [ 920.572355][T22048] skb_segment+0xee2/0x3f50 [ 920.576863][T22048] ? csum_partial+0x153/0x2c0 [ 920.581557][T22048] udp6_ufo_fragment+0x9b7/0xf40 [ 920.586514][T22048] ? udpv6_offload_exit+0x20/0x20 [ 920.591544][T22048] ipv6_gso_segment+0xb8b/0x2140 [ 920.596489][T22048] ? inet6_del_offload+0x50/0x50 [ 920.601419][T22048] ? skb_crc32c_csum_help+0x520/0x520 [ 920.606793][T22048] ? inet6_del_offload+0x50/0x50 [ 920.611727][T22048] skb_mac_gso_segment+0x320/0x640 [ 920.616847][T22048] ? skb_mac_gso_segment+0x185/0x640 [ 920.622132][T22048] ? skb_eth_gso_segment+0x270/0x270 [ 920.627423][T22048] __skb_gso_segment+0x302/0x4a0 [ 920.632362][T22048] validate_xmit_skb+0x565/0xf60 [ 920.637302][T22048] ? validate_xmit_skb_list+0x120/0x120 [ 920.642851][T22048] __dev_queue_xmit+0x14b8/0x36b0 [ 920.647893][T22048] ? __dev_queue_xmit+0x26b/0x36b0 [ 920.653030][T22048] ? netdev_core_pick_tx+0x340/0x340 [ 920.658315][T22048] ? virtio_net_hdr_to_skb+0xa45/0x1510 [ 920.663867][T22048] ? packet_parse_headers+0x7cb/0xac0 [ 920.669253][T22048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 920.675406][T22048] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 920.680959][T22048] ? packet_extra_vlan_len_allowed+0x200/0x200 [ 920.687112][T22048] ? packet_xmit+0x66/0x330 [ 920.691609][T22048] ? packet_sendmsg+0x3a7b/0x4d70 [ 920.696630][T22048] packet_sendmsg+0x3b7a/0x4d70 [ 920.701501][T22048] ? verify_lock_unused+0x140/0x140 [ 920.706709][T22048] ? verify_lock_unused+0x140/0x140 [ 920.711910][T22048] ? aa_sk_perm+0x83c/0x970 [ 920.716415][T22048] ? packet_getsockopt+0xad0/0xad0 [ 920.721536][T22048] ? aa_sock_msg_perm+0x94/0x150 [ 920.726507][T22048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 920.731799][T22048] ? security_socket_sendmsg+0x80/0xa0 [ 920.737252][T22048] ? packet_getsockopt+0xad0/0xad0 [ 920.742359][T22048] ____sys_sendmsg+0x5ba/0x960 [ 920.747124][T22048] ? __lock_acquire+0x7d40/0x7d40 [ 920.752147][T22048] ? __asan_memset+0x22/0x40 [ 920.756752][T22048] ? __sys_sendmsg_sock+0x30/0x30 [ 920.761790][T22048] ? __import_iovec+0x3fa/0x850 [ 920.766658][T22048] ? import_iovec+0x73/0xa0 [ 920.771167][T22048] ___sys_sendmsg+0x2a6/0x360 [ 920.775849][T22048] ? __sys_sendmsg+0x2a0/0x2a0 [ 920.780626][T22048] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 920.786971][T22048] __se_sys_sendmsg+0x1c2/0x2b0 [ 920.791817][T22048] ? __x64_sys_sendmsg+0x80/0x80 [ 920.796756][T22048] ? lockdep_hardirqs_on+0x98/0x150 [ 920.801947][T22048] do_syscall_64+0x55/0xa0 [ 920.806365][T22048] ? clear_bhb_loop+0x40/0x90 [ 920.811032][T22048] ? clear_bhb_loop+0x40/0x90 [ 920.815716][T22048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 920.821603][T22048] RIP: 0033:0x7f52c999aeb9 [ 920.826015][T22048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.845632][T22048] RSP: 002b:00007f52ca7c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.854048][T22048] RAX: ffffffffffffffda RBX: 00007f52c9c16090 RCX: 00007f52c999aeb9 [ 920.862016][T22048] RDX: 0000000000004084 RSI: 0000200000000b00 RDI: 0000000000000004 [ 920.869988][T22048] RBP: 00007f52ca7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 920.877955][T22048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.885920][T22048] R13: 00007f52c9c16128 R14: 00007f52c9c16090 R15: 00007ffdc9721538 [ 920.893899][T22048] [ 921.217054][T22062] __nla_validate_parse: 1 callbacks suppressed [ 921.217091][T22062] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5155'. [ 921.291138][T22065] netlink: 'syz.2.5155': attribute type 10 has an invalid length. [ 921.420132][T22064] netlink: 'syz.3.5156': attribute type 28 has an invalid length. [ 921.446387][T22064] netlink: 'syz.3.5156': attribute type 29 has an invalid length. [ 921.455515][T22064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5156'. [ 924.040796][T22099] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5166'. [ 924.169127][T22099] netlink: 'syz.0.5166': attribute type 10 has an invalid length. [ 924.566019][T22102] FAULT_INJECTION: forcing a failure. [ 924.566019][T22102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 924.660721][T22102] CPU: 0 PID: 22102 Comm: syz.3.5167 Not tainted syzkaller #0 [ 924.668255][T22102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 924.678337][T22102] Call Trace: [ 924.681635][T22102] [ 924.684579][T22102] dump_stack_lvl+0x18c/0x250 [ 924.689394][T22102] ? show_regs_print_info+0x20/0x20 [ 924.694621][T22102] ? load_image+0x400/0x400 [ 924.699165][T22102] ? __might_fault+0xaa/0x120 [ 924.703862][T22102] ? __lock_acquire+0x7d40/0x7d40 [ 924.708905][T22102] should_fail_ex+0x39d/0x4d0 [ 924.713595][T22102] _copy_from_iter+0x1d9/0x12e0 [ 924.718447][T22102] ? __virt_addr_valid+0x18c/0x540 [ 924.723555][T22102] ? __lock_acquire+0x7d40/0x7d40 [ 924.728581][T22102] ? __alloc_skb+0x138/0x2c0 [ 924.733177][T22102] ? copyout_mc+0x70/0x70 [ 924.737503][T22102] ? __virt_addr_valid+0x18c/0x540 [ 924.742612][T22102] ? __virt_addr_valid+0x18c/0x540 [ 924.747720][T22102] ? __virt_addr_valid+0x469/0x540 [ 924.752829][T22102] ? __check_object_size+0x506/0xa20 [ 924.758126][T22102] l2tp_ip_sendmsg+0x350/0x14f0 [ 924.762987][T22102] ? sock_rps_record_flow+0x19/0x3f0 [ 924.768274][T22102] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 924.773555][T22102] ? security_socket_sendmsg+0x80/0xa0 [ 924.779011][T22102] ? inet_send_prepare+0x260/0x260 [ 924.784206][T22102] ____sys_sendmsg+0x5ba/0x960 [ 924.788976][T22102] ? __lock_acquire+0x7d40/0x7d40 [ 924.793997][T22102] ? __asan_memset+0x22/0x40 [ 924.798586][T22102] ? __sys_sendmsg_sock+0x30/0x30 [ 924.803607][T22102] ? __import_iovec+0x5f2/0x850 [ 924.808466][T22102] ? import_iovec+0x73/0xa0 [ 924.812973][T22102] ___sys_sendmsg+0x2a6/0x360 [ 924.817648][T22102] ? __sys_sendmsg+0x2a0/0x2a0 [ 924.822429][T22102] ? trace_call_bpf+0xc3/0x6c0 [ 924.827208][T22102] __se_sys_sendmsg+0x1c2/0x2b0 [ 924.832053][T22102] ? __x64_sys_sendmsg+0x80/0x80 [ 924.836992][T22102] ? lockdep_hardirqs_on+0x98/0x150 [ 924.842191][T22102] do_syscall_64+0x55/0xa0 [ 924.846603][T22102] ? clear_bhb_loop+0x40/0x90 [ 924.851272][T22102] ? clear_bhb_loop+0x40/0x90 [ 924.855952][T22102] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 924.861838][T22102] RIP: 0033:0x7f52c999aeb9 [ 924.866249][T22102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.885855][T22102] RSP: 002b:00007f52ca7e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.894350][T22102] RAX: ffffffffffffffda RBX: 00007f52c9c15fa0 RCX: 00007f52c999aeb9 [ 924.902316][T22102] RDX: 0900000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 924.910282][T22102] RBP: 00007f52ca7e7090 R08: 0000000000000000 R09: 0000000000000000 [ 924.918246][T22102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 924.926209][T22102] R13: 00007f52c9c16038 R14: 00007f52c9c15fa0 R15: 00007ffdc9721538 [ 924.934192][T22102] [ 925.645170][T22112] syz.3.5170[22112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 925.645427][T22112] syz.3.5170[22112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.074595][T22104] bridge0: port 2(bridge_slave_1) entered disabled state [ 926.093876][T22104] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.118931][T22104] bridge0: entered allmulticast mode [ 926.181228][T22105] bridge0: port 2(bridge_slave_1) entered blocking state [ 926.188524][T22105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.196083][T22105] bridge0: port 1(bridge_slave_0) entered blocking state [ 926.203272][T22105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 926.263864][T22105] bridge0: entered promiscuous mode [ 926.603889][T22121] netlink: 'syz.3.5174': attribute type 28 has an invalid length. [ 926.625984][T22121] netlink: 'syz.3.5174': attribute type 29 has an invalid length. [ 926.634320][T22121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5174'. [ 926.682406][T22120] netlink: 'syz.2.5175': attribute type 28 has an invalid length. [ 926.706845][T22120] netlink: 'syz.2.5175': attribute type 29 has an invalid length. [ 926.731577][T22120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5175'. [ 927.405564][T22133] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.5176'. [ 927.461498][T22133] netlink: 'syz.0.5176': attribute type 10 has an invalid length. [ 927.838535][T22141] netlink: 'syz.0.5179': attribute type 1 has an invalid length. [ 927.847818][T22141] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.5179'. [ 928.715599][T22152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5182'. [ 928.735395][T22152] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5182'. [ 929.085235][T22159] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5185'. [ 929.131656][T22160] netlink: 'syz.1.5185': attribute type 10 has an invalid length. [ 929.859315][T22165] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.5195'. [ 929.906113][T22165] netlink: 'syz.1.5195': attribute type 10 has an invalid length. [ 930.105471][T22174] bridge0: port 3(team0) entered blocking state [ 930.144000][T22174] bridge0: port 3(team0) entered disabled state [ 930.190592][T22174] team0: entered allmulticast mode [ 930.264183][T22174] team_slave_0: entered allmulticast mode [ 930.310339][T22174] team_slave_1: entered allmulticast mode [ 930.378998][T22174] team0: entered promiscuous mode [ 930.419842][T22174] team_slave_0: entered promiscuous mode [ 930.453476][T22174] team_slave_1: entered promiscuous mode [ 930.489428][T22174] bridge0: port 3(team0) entered blocking state [ 930.495949][T22174] bridge0: port 3(team0) entered forwarding state [ 931.376366][T22200] netlink: 'syz.1.5197': attribute type 28 has an invalid length. [ 931.435344][T22200] netlink: 'syz.1.5197': attribute type 29 has an invalid length. [ 931.463350][T22200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5197'. [ 932.557823][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.564232][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.660862][T22199] netlink: 'syz.2.5198': attribute type 17 has an invalid length. [ 934.669757][T22199] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5198'. [ 935.834651][T22237] netlink: 'syz.1.5213': attribute type 17 has an invalid length. [ 935.941039][T22237] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5213'. [ 935.962345][T22241] netlink: 'syz.0.5212': attribute type 28 has an invalid length. [ 936.001474][T22241] netlink: 'syz.0.5212': attribute type 29 has an invalid length. [ 936.106525][T22241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5212'. [ 938.675138][T22236] ------------[ cut here ]------------ [ 938.680842][T22236] WARNING: CPU: 1 PID: 22236 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 938.691146][T22236] Modules linked in: [ 938.695071][T22236] CPU: 1 PID: 22236 Comm: syz.0.5212 Not tainted syzkaller #0 [ 938.702585][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 938.712792][T22236] RIP: 0010:perf_pending_task+0x35c/0x470 [ 938.718602][T22236] Code: ff 84 db 75 14 e8 f4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 df d5 ff e8 ab 68 4f ff eb e5 e8 d4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 c8 df d5 ff 48 c7 c7 f0 f2 1c 8d 4c 89 f6 [ 938.738329][T22236] RSP: 0018:ffffc900044ef9c0 EFLAGS: 00010293 [ 938.744418][T22236] RAX: ffffffff81b134dc RBX: ffff88806ad765e8 RCX: ffff888021503c00 [ 938.752481][T22236] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 938.760540][T22236] RBP: 0000000000000001 R08: ffffffff8e8add2f R09: 1ffffffff1d15ba5 [ 938.768562][T22236] R10: dffffc0000000000 R11: fffffbfff1d15ba6 R12: ffff888021503c00 [ 938.776688][T22236] R13: ffff88805d11c930 R14: ffff88806ad763a8 R15: 1ffff1100d5aec75 [ 938.784685][T22236] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 938.794200][T22236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 938.800851][T22236] CR2: 00007fffabf26ab0 CR3: 00000000243ea000 CR4: 00000000003506e0 [ 938.810998][T22236] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 938.820230][T22236] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 938.828308][T22236] Call Trace: [ 938.831605][T22236] [ 938.834556][T22236] task_work_run+0x1d4/0x260 [ 938.839216][T22236] ? task_work_cancel+0x220/0x220 [ 938.844260][T22236] do_exit+0x95a/0x2460 [ 938.848514][T22236] ? lock_chain_count+0x20/0x20 [ 938.853376][T22236] ? put_task_struct+0xc0/0xc0 [ 938.858289][T22236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.864455][T22236] ? lockdep_hardirqs_on+0x98/0x150 [ 938.869699][T22236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 938.875984][T22236] do_group_exit+0x21b/0x2d0 [ 938.880587][T22236] ? _raw_spin_unlock_irq+0x29/0x50 [ 938.885857][T22236] get_signal+0x12fc/0x13f0 [ 938.890401][T22236] arch_do_signal_or_restart+0xc2/0x800 [ 938.896256][T22236] ? lock_chain_count+0x20/0x20 [ 938.901114][T22236] ? get_sigframe_size+0x20/0x20 [ 938.906223][T22236] exit_to_user_mode_loop+0x70/0x110 [ 938.911539][T22236] exit_to_user_mode_prepare+0xee/0x180 [ 938.917155][T22236] syscall_exit_to_user_mode+0x1a/0x50 [ 938.922633][T22236] do_syscall_64+0x61/0xa0 [ 938.927166][T22236] ? clear_bhb_loop+0x40/0x90 [ 938.931862][T22236] ? clear_bhb_loop+0x40/0x90 [ 938.936605][T22236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 938.942510][T22236] RIP: 0033:0x7f127719aeb9 [ 938.947017][T22236] Code: Unable to access opcode bytes at 0x7f127719ae8f. [ 938.954042][T22236] RSP: 002b:00007f12780de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 938.962542][T22236] RAX: fffffffffffffe00 RBX: 00007f1277415fa8 RCX: 00007f127719aeb9 [ 938.970787][T22236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1277415fa8 [ 938.978878][T22236] RBP: 00007f1277415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 938.986940][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 938.995184][T22236] R13: 00007f1277416038 R14: 00007ffd03859670 R15: 00007ffd03859758 [ 939.003272][T22236] [ 939.006354][T22236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 939.013637][T22236] CPU: 1 PID: 22236 Comm: syz.0.5212 Not tainted syzkaller #0 [ 939.021085][T22236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 939.031132][T22236] Call Trace: [ 939.034399][T22236] [ 939.037349][T22236] dump_stack_lvl+0x18c/0x250 [ 939.042037][T22236] ? show_regs_print_info+0x20/0x20 [ 939.047257][T22236] ? load_image+0x400/0x400 [ 939.051752][T22236] panic+0x2dc/0x730 [ 939.055641][T22236] ? bpf_jit_dump+0xd0/0xd0 [ 939.060146][T22236] __warn+0x2e0/0x470 [ 939.064119][T22236] ? perf_pending_task+0x35c/0x470 [ 939.069233][T22236] ? perf_pending_task+0x35c/0x470 [ 939.074357][T22236] report_bug+0x2be/0x4f0 [ 939.078685][T22236] ? perf_pending_task+0x35c/0x470 [ 939.083797][T22236] ? perf_pending_task+0x35c/0x470 [ 939.088902][T22236] ? perf_pending_task+0x35e/0x470 [ 939.094008][T22236] handle_bug+0xcf/0x120 [ 939.098248][T22236] exc_invalid_op+0x1a/0x50 [ 939.102746][T22236] asm_exc_invalid_op+0x1a/0x20 [ 939.107590][T22236] RIP: 0010:perf_pending_task+0x35c/0x470 [ 939.113305][T22236] Code: ff 84 db 75 14 e8 f4 df d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 e0 df d5 ff e8 ab 68 4f ff eb e5 e8 d4 df d5 ff <0f> 0b e9 f3 fe ff ff e8 c8 df d5 ff 48 c7 c7 f0 f2 1c 8d 4c 89 f6 [ 939.132905][T22236] RSP: 0018:ffffc900044ef9c0 EFLAGS: 00010293 [ 939.138965][T22236] RAX: ffffffff81b134dc RBX: ffff88806ad765e8 RCX: ffff888021503c00 [ 939.146929][T22236] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 939.154891][T22236] RBP: 0000000000000001 R08: ffffffff8e8add2f R09: 1ffffffff1d15ba5 [ 939.162852][T22236] R10: dffffc0000000000 R11: fffffbfff1d15ba6 R12: ffff888021503c00 [ 939.170813][T22236] R13: ffff88805d11c930 R14: ffff88806ad763a8 R15: 1ffff1100d5aec75 [ 939.178784][T22236] ? perf_pending_task+0x35c/0x470 [ 939.183907][T22236] task_work_run+0x1d4/0x260 [ 939.188495][T22236] ? task_work_cancel+0x220/0x220 [ 939.193524][T22236] do_exit+0x95a/0x2460 [ 939.197683][T22236] ? lock_chain_count+0x20/0x20 [ 939.202527][T22236] ? put_task_struct+0xc0/0xc0 [ 939.207287][T22236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 939.213434][T22236] ? lockdep_hardirqs_on+0x98/0x150 [ 939.218628][T22236] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 939.224779][T22236] do_group_exit+0x21b/0x2d0 [ 939.229365][T22236] ? _raw_spin_unlock_irq+0x29/0x50 [ 939.234557][T22236] get_signal+0x12fc/0x13f0 [ 939.239067][T22236] arch_do_signal_or_restart+0xc2/0x800 [ 939.244614][T22236] ? lock_chain_count+0x20/0x20 [ 939.249455][T22236] ? get_sigframe_size+0x20/0x20 [ 939.254405][T22236] exit_to_user_mode_loop+0x70/0x110 [ 939.259687][T22236] exit_to_user_mode_prepare+0xee/0x180 [ 939.265226][T22236] syscall_exit_to_user_mode+0x1a/0x50 [ 939.270682][T22236] do_syscall_64+0x61/0xa0 [ 939.275096][T22236] ? clear_bhb_loop+0x40/0x90 [ 939.279763][T22236] ? clear_bhb_loop+0x40/0x90 [ 939.284431][T22236] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 939.290318][T22236] RIP: 0033:0x7f127719aeb9 [ 939.294725][T22236] Code: Unable to access opcode bytes at 0x7f127719ae8f. [ 939.301731][T22236] RSP: 002b:00007f12780de0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 939.310142][T22236] RAX: fffffffffffffe00 RBX: 00007f1277415fa8 RCX: 00007f127719aeb9 [ 939.318103][T22236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1277415fa8 [ 939.326066][T22236] RBP: 00007f1277415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 939.334032][T22236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.341993][T22236] R13: 00007f1277416038 R14: 00007ffd03859670 R15: 00007ffd03859758 [ 939.349968][T22236] [ 939.353364][T22236] Kernel Offset: disabled [ 939.357673][T22236] Rebooting in 86400 seconds..