last executing test programs: 4m8.250741723s ago: executing program 2 (id=1091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m7.640212955s ago: executing program 2 (id=1094): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)='V\n', 0x2}], 0x1}, 0x24000000) syz_clone(0x15140000, &(0x7f0000000280)="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", 0xfd, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="99b211e5a24f88acb9a47c40b73b870a28b5d0be3529583d6bd73156d4baa3aa51950ebfe4d714c29fe08ab0c548db528c54c56cec25c5436a717ad8e3314ff9f9981f5acc42f5b435e5a43778016d099fb985d6776f2d08d03c93d5df1b6d96321fd3a774303d3220ab0f5d5162d9c3ab590ebb05e1913bc612ad44b563f7efc559995f670defe309c0e5739a993d8353961faab0a9360b0ec66b5f3eb10981") sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600290001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb79107005ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16ca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee7de6ccd4d6e4ed6f3d93452a92954b43370e970189f97bb7fabe5163b0fa79c4fe", 0xd8}, {&(0x7f0000000000)="53471adc89df51fab140acfc1ece94af530a", 0x12}], 0x2, 0x0, 0x0, 0x7400}, 0x0) 4m7.041737567s ago: executing program 2 (id=1096): perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x240b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0xb}, 0xe391e4aa703794f6, 0x5, 0x43a5bd72, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90324fc60100c028010000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m5.573619865s ago: executing program 2 (id=1104): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffa62, 0x7fffffffffffffff}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0xfffe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89fe, &(0x7f0000000680)={'ip6gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) r2 = socket$kcm(0xf, 0x6, 0x2) sendmsg$inet(r2, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670007e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0), 0x4) 4m5.092291355s ago: executing program 2 (id=1109): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x2, 0x0, 0x0) socket$kcm(0xf, 0x2, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1ad76, 0x7, 0x9, 0x20000006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x21, 0x2, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r2, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000001980)=""/4096, 0x7f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002a00), 0x2, 0x0, 0xd}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000000040), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x1}}, 0x80, 0x0, 0xfffffe08}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f"], 0xfe33) (fail_nth: 1) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r3, @ANYRES32, @ANYBLOB="0000004ca1029d0000800000309454c9e31d000000000000000084ec2ba8ab3e4315bc26b24b385d3f1749baebd2fba5148fc3a27ca2bb", @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[], 0xfe33) 4m3.169997582s ago: executing program 2 (id=1116): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 3m48.117086455s ago: executing program 32 (id=1116): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 64) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e10500070088a800008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac3788481e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) r4 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$cgroup_pid(r4, &(0x7f0000000300)=r2, 0x12) (async) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 2m42.02083695s ago: executing program 0 (id=1594): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000200)={0x2, 0x4c20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @loopback}}}], 0x20}, 0xe900) write$cgroup_subtree(r0, &(0x7f00000001c0)=ANY=[], 0xfe33) (fail_nth: 26) 2m41.476057111s ago: executing program 0 (id=1598): socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0xa, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) write$cgroup_devices(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="80fd", @ANYRES64=r0], 0xa) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9602, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10301, 0x2, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='~'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m41.037735669s ago: executing program 0 (id=1604): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700368df3757f0086dd6317ce8000377ac9b0e0865a6596aff57b000000000000000000000000007f"], 0xffffffffffffffc7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a00000000a3f500950004000000010045"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd04}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) (fail_nth: 37) 2m40.429043371s ago: executing program 0 (id=1606): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 2m40.223556655s ago: executing program 0 (id=1609): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0xfeed1ec8689b73ee, &(0x7f00000001c0)="df597a13b12d4d6b56f9511003ed28c83b82e719dd5211a0eafd4720371de04457cf0c3d96c61ae25a610442c3845c636729c1c09c38c23de44b8e4daf25e00dbf1e9eebf264ce04c33ec00ae072c547cdca243d8385c9", 0x57, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)="f86ce6828f2aa05e6f5b7b121582e182c4806c6554865003a297d7f0e55068ce67ac5ff1ad41d359424c0bcc151fc1b47767e44decd5374830bc39a87a767ee3") perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xe9, 0xe0, 0x9, 0x81, 0x0, 0x9, 0x400, 0x5, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x55, 0x4}, 0x100001, 0x7, 0x8, 0x8, 0x6, 0xd4, 0x8, 0x0, 0x400, 0x0, 0x4}, r2, 0x10, 0xffffffffffffffff, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 2m39.770115144s ago: executing program 0 (id=1613): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000000000), 0x4) (fail_nth: 7) 2m24.353959383s ago: executing program 33 (id=1613): socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x3ff}, 0x0, 0x8, 0xffffffff, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, &(0x7f0000000000), 0x4) (fail_nth: 7) 4.437539273s ago: executing program 1 (id=2515): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x1200, 0x0, 0x0, 0x0}, 0x50) 4.12964261s ago: executing program 1 (id=2524): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x85c) close(r1) (async) socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0xe4, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$inet(r1, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000280)="42a52163847c8c3d0375e136fbcd671474a48e8ea2d8dbd1df57f7e034595033e2629952626cd3ff07ac01f6a6392ba206aab769ad2e078061e309d8e5fa282bab6a91590ce3aeb628deb8031015eb3b91252456785aa99fbc2438a335c5fbd5448027eacf9b976bd4bd66984029b1fa59865811ebccf6daa7740b12350b2f423f7f944865e0fb53d118", 0x8a}, {&(0x7f0000000340)="50fd282cfa857ad2d9b61bcecc6c6a241e55e681d61cc92e14503a149bfb418aba1a2db2188e707385c3afa09db940a308fcba717ade36c9da2fca547aa4ecb427061f92f456151d3333f7a47911af9e89677c2c4ae6930be1b886c7634688fb6ed3c7d351ec", 0x66}, {&(0x7f0000000500)="85b775d261f44ada8eb0d07e38aacd0710447bc7d38a231e51c0bf5ed24a198117f388fe3a6dbb38bcca8e7dd417658704529e789c511aa850b6fe78d14e012dc538fcbb", 0x44}, {&(0x7f0000000580)="22f474c96a93469ee8dffc1f6cef63a0c7c1ac8559d18aec72700c678455b5ab80c59528d7ca6d7e02608b69c47ec6215748564418bfe44ee934170616472dd8f18f27ac2064d9a855e6ef84c4ecd495a38f3e5be2db88c376cf1f7ed5370152d090da696807af4b5d2df98ff3ce06d5fbeb014a4eff", 0x76}, {&(0x7f0000000640)="940db4fe", 0x4}], 0x5, &(0x7f0000001e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x38}, 0x400c0c4) (async) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x7, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7a}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @alu={0x7, 0x0, 0xa, 0x6, 0xb, 0x10, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x25, r3, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 3.834216275s ago: executing program 1 (id=2519): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000000)=r0, 0x4) sendmsg$kcm(r1, &(0x7f00000002c0)={&(0x7f0000000580)=@in6={0xa, 0xce63, 0x0, @loopback={0xffffff7f00000000}, 0xf5ff}, 0x80, 0x0}, 0x0) 3.467750983s ago: executing program 1 (id=2522): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a042e2315bc28481860a8d8270d0644763c6a9c8b12820e8f03653b548f34798c3481f7b22c81616bb9e2065955c00fe2a763eb2135027502804cc2345a2956f28d751dc2bdeed8dce", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r5, 0x10d, 0x10, &(0x7f0000000040), 0x4) 1.140881788s ago: executing program 3 (id=2539): r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xc) recvmsg$unix(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0xa, 0x1, 0x106) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRES8=r2, @ANYRES8=r6], 0x12) 1.116108169s ago: executing program 5 (id=2540): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800fd000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) 1.01752051s ago: executing program 5 (id=2541): perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x9e, 0x1, 0x8, 0x0, 0x0, 0x9, 0x6e33b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_config_ext={0xe6, 0x42}, 0x8059, 0x80005, 0x43a1fd75, 0x7, 0x7, 0x6, 0x5, 0x0, 0x4, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x10, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x2, 0xff91}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x40009, 0x4, 0x2, 0x0, 0x0, 0x0, 0x200c}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x4, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0xfffffffffffffffc, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) close(r0) socket$kcm(0xa, 0x7, 0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x2, 0x73) socket$kcm(0x10, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x5f, 0x2, 0x3, 0x0, 0x0, 0x3, 0x35a16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x3, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0xab, 0xfffffdf2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8}, 0x94) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000000)) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 989.33118ms ago: executing program 4 (id=2542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000080)=0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) (async) r3 = socket$kcm(0x15, 0x5, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e14060200000e000a00100073350100000000000080", 0x2e}], 0x1}, 0x24040000) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000140)=""/216, 0xd8}, {&(0x7f0000000240)=""/67, 0x43}, {&(0x7f00000002c0)=""/136, 0x88}, {&(0x7f0000000380)}, {&(0x7f0000000380)=""/42, 0x2a}], 0x5, &(0x7f0000000400)=""/89, 0x59}, 0x101) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0xffff, @empty}, 0x10, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x6b}, 0x0) 970.014491ms ago: executing program 3 (id=2543): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000c300000638af8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018240000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x5, 0xe, 0x0, &(0x7f00000000c0)="469dc2d342e2b7000091000000000bcf48f3ac4e19a56ceb0b42c0", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x22) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2141, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8905, &(0x7f0000002280)={'bridge_slave_0\x00', @random="2b0100004ec6"}) r4 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000580)={'a', ' *:* ', 'w\x00'}, 0x8) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0xc, 0x0, 0x400, 0x4156, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10563b, 0x0, 0xfffffffe, 0x6, 0x10000, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) r6 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x890b, &(0x7f0000000000)) 789.656455ms ago: executing program 4 (id=2544): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x3}], 0x10, 0x5}, 0x94) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 771.918795ms ago: executing program 5 (id=2545): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x3, 0x4, 0x0, 0x0, 0x9, 0x641b0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x1, 0x8, 0x0, 0x3, 0x6, 0x2, 0x0, 0x2000, 0x0, 0x4}, 0x0, 0xfffffffffeffdfff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffd}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x2, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006a000000850000005000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, r1}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x20000}, {0x2, 0x0, 0xfffffffe, 0x1}], 0x10, 0xfffffffc}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4004844) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xa, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000000000f7ff000000a0ffff00000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 687.165106ms ago: executing program 3 (id=2546): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000780)='ns/net\x00') (async) syz_open_procfs$namespace(r3, &(0x7f0000000780)='ns/net\x00') r4 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffe3fa, 0x0, r0, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0xffffe3fa, 0x0, r0, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1}, 0x50) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0, r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 603.758188ms ago: executing program 4 (id=2547): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000004"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0a00000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000990200004000580000000000000000000000000000000000b37cb9ceb1c10d7bbf16d11f0cee45413e4fc221263697cdf2a38bc689cd14a09ae99684d6427c7956d08d5c712807ee40dabb3108718e5cc9ecff85365b46abc03d38f8916227a493e4ac602850005fd77b2c176a864bc24578ff5b20cb3714600a17e7b63373d6c693ffd6c0b39e7583ef11904c25d7a621a350330fe9321123f2737e1dbf050067bb09834eed8d96f60e4b19377c449c3f7861490cb56504165d190ff2d7be2ad52fb87d3f03c2cf470433d548f771d3e75747e93d049695c205b8f7fc44022adfdebb030c8fabd72e"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b9040220080006067c09e8fe55a1bc0015400800142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000300)="f4000900062f2c25fe80000000000000dc8b850f238466ccfec07a000000ad6e911b51818462b4002c0033acb74450d245fb0f41e020dce1d5", 0x39}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000203000000000000000000000b0000000000000000000000090200000000005bcd56341e2f47cef1780952ae1be56390928773e21028add732dbb2a730443ad86b69cc517836a593c6e6a7c70d0aadd88e3728ef0a3c4d29c82d9c80dd1499541435df9e4149c7599432f6c4870b84bff072c63886d662e1ac81c4b8f95117fd224ccda0e15ec0d2ffd7f919f52a23f9a4f0178323d5ae6752796ab890b87b7835965da290a620d0d8314392d9705275187672168413fec5"], 0x0, 0x3e}, 0x28) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x22, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)}], 0x1, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8912, &(0x7f0000000080)) 593.936298ms ago: executing program 5 (id=2548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x3, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0xb) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x1, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x114905, 0x4, 0x8, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5424}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0xbf, 0x0, 0x0, 0x8001, 0x2408c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_config_ext={0x2}, 0x10008, 0xca, 0x80000001, 0x9, 0x0, 0x1, 0xdffd, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002980)={&(0x7f00000000c0), &(0x7f00000001c0)=""/104, &(0x7f0000000400)="2b9317014a98b7a52fc9b3a3b6f43a27cee11ef14205cff74d809887792cda533f5f18576203fdf735a0f96a02948c2d8fd729ba676d6cd8d70a307a2d8d95c0c9ccf3485ac486ca3ac5b45e36ee7a4a8ee058d890e1982878fdbf7ec4a370e0510e17ccb77a1e2c87e49d1791186804ec955154eb530872cdcd504a0e0b568eaa04f0f66118a1c911606ab92b1b867f95229b5584cd57f54f459a1a5975845aa6fc9eb5f1f841077c1d14ebd2c2620ef67758213f9739b2dec0a03306156d64e4870f08fe2da24bffaa9c14a8e746939d47ed03bf70ad443a7a1cbc43da72579f7fe3", &(0x7f0000001980)="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", 0xe, 0xffffffffffffffff, 0x4}, 0x38) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x27, 0x8, 0x0, &(0x7f0000000180)="0005000000000001", 0x0, 0x405, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x10f, 0x85, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38dd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x3, 0x8, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r10, &(0x7f0000000180)=ANY=[@ANYRES8=r7, @ANYBLOB="3ee901"], 0x9a) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRES32=r2], 0x9a) 453.052881ms ago: executing program 3 (id=2549): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x11, &(0x7f0000001540)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xde) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000380)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)="02042700ea0e0300000000001eafbcf706e105000000000000001104ee1606d4b8bf4a828bda305775c43824cee8", 0x2e}, {&(0x7f0000000100)="126873159fca3fa38fb198e9a6b363ceb3e6d803ab766b7a38e451d14e0b3457474fe6a51671e4124fcea96a873b10996816e100ed8a93b0a9053db57d60973369f58551c3091cb88d3b", 0x4a}, {&(0x7f0000000280)="1006000000000000ee8de7932b326f8a310f65ae439862807a1589836c734d2341f74276871bf8465fc0583fdc0b8a34bb550ef977b001d46df69747826840d196606f75ef1cbe3bed88eb2291b63c95dbb54b10e45adfc5c5d775", 0x5b}, {&(0x7f0000000480)="df3b46a133000000000000000000000000f1c81c6c11d7481a7db10c98c13aab46d748ad9220643b21529b7794db2bada57127cc43f578a88146a322ddbf202e806e3021395404b70768e90e1431acb438e35f73a89ad465b85f7668696ff41596c91b7b400ef7f0796a401696", 0x6d}, {&(0x7f00000005c0)="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", 0x489}], 0x5}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x3, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000020000000000000000000000180200002020702500000000002020207b0af8ff00000000bda106000000000026010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff01000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="2ca1542bd1a684", 0x7}], 0x1, 0x0, 0x2478}, 0x40000000) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x5865, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030212590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff0000000071102600000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x9, 0x5, 0x202, 0x4, 0x0, 0xffffffffffffffff, 0x100}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xc2, &(0x7f0000000440), 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0xfc, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x8, '\x00', r10, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x50) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000780)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1d, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x9, 0x13, &(0x7f0000000380)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4981}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x91}, @alu={0xd1464383c6f8d07b, 0x1, 0x0, 0x1, 0x3, 0x100, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x5914}], &(0x7f0000000500)='GPL\x00', 0x0, 0x5c, &(0x7f0000000540)=""/92, 0x40f00, 0x38, '\x00', r10, @cgroup_sock=0xd, r11, 0x8, &(0x7f0000000700)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0xb, 0x284, 0xf3d}, 0x10, r12, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000e40)=[{0x0, 0x2, 0x4, 0x6}, {0x1, 0x4, 0x5}, {0x1, 0x1, 0xb, 0x5}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r13, 0x1, 0x32, &(0x7f00000000c0)=r15, 0x4) sendmsg$unix(r14, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r16 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) setsockopt$sock_attach_bpf(r16, 0x6, 0xd, 0x0, 0xc7) 452.252271ms ago: executing program 4 (id=2550): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r3, @ANYRESDEC, @ANYRESHEX], 0x128}, 0x8040055) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a800160020000600046efb8000a007a290457f0189b316212915588ec379eff59a6aea9fef27fee06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775338d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d405b2fb84b6d2d229a63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93454c46560b440db1233ab7dae3", 0xd8}], 0x1}, 0x0) 305.531894ms ago: executing program 5 (id=2551): r0 = socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8004) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, [@exit, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffb64}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x10000, 0x35, &(0x7f0000000100)=""/53, 0x100, 0x2, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000140)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000180)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f00000001c0)=[{0x4, 0x1, 0x8, 0x8}, {0x2, 0x3, 0xe}, {0x2, 0x1, 0xc, 0x6}, {0x0, 0x4, 0x8, 0x7}, {0x4, 0x2, 0xc, 0x6}, {0x2, 0x1, 0xb, 0x8}, {0x1, 0x1, 0x1}, {0x0, 0x5, 0xa, 0x6}, {0x4, 0x4, 0xe, 0x8}], 0x10, 0x7}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000340)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000a80)="d80000001d0081044e81f777db44b904021d080201000000040000a1bc00011f0000000000000e1208000f0100810401a8001600200001400300000803c80cfab94dcf5c0461c16fb4007134cf6ee08000a0e408e8d8ef075c11503c6bbace801bcb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322107c9fd6", 0x81}, {&(0x7f00000006c0)="54f6d4d87eb3f140c5", 0x9}, {&(0x7f0000000980)="027a64c0072ebbb1512b328dda11b4efd4ba07fc642b7e012bea071dbbdea51e41958755533ccce04d3e635cbe848495e723490d8e93db224d82d4fbfe76bd22fd358cd467795ad7febfc220d72f", 0x4e}], 0x3, 0x0, 0x0, 0x7400}, 0x10) 252.684545ms ago: executing program 3 (id=2552): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) (fail_nth: 3) 169.720816ms ago: executing program 1 (id=2553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0xc03e, 0x0}, 0x0) 116.226748ms ago: executing program 4 (id=2554): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0xfffe) 104.524958ms ago: executing program 5 (id=2555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) getpid() r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10305, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)=[{0x2, 0x1, 0x3}], 0x10, 0x5}, 0x94) r2 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 3.17102ms ago: executing program 3 (id=2556): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa1ffb702000008000400b7030000328e0000850000000600000085000000500000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000d000000000000000000000005000000050000d0ca8f324cc2a2720018110000", @ANYRES32=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x10001, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) setsockopt$sock_attach_bpf(r7, 0x0, 0x33, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) socket$kcm(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f020000000200000000000011030000000000"], 0x0, 0x54}, 0x28) 542.81µs ago: executing program 1 (id=2557): r0 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x3, 0x4, 0x0, 0x0, 0x9, 0x641b0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x1, 0x8, 0x0, 0x3, 0x6, 0x2, 0x0, 0x2000, 0x0, 0x4}, 0x0, 0xfffffffffeffdfff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffd}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x2b, 0x2, 0x1000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000008000000850000006a000000850000005000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, r1}, 0xc) r3 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5, 0x0, 0x20000}, {0x2, 0x0, 0xfffffffe, 0x1}], 0x10, 0xfffffffc}, 0x94) sendmsg$inet(r3, &(0x7f00000029c0)={&(0x7f00000001c0)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4004844) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0xa, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000004000000040000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000800000000000f7ff000000a0ffff00000000000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 0s ago: executing program 4 (id=2558): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1ca", 0x2}], 0x1}, 0xfffe) (fail_nth: 1) kernel console output (not intermixed with test programs): 468][T11261] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1784'. [ 381.258676][T11271] FAULT_INJECTION: forcing a failure. [ 381.258676][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 381.272034][T11271] CPU: 0 PID: 11271 Comm: syz.5.1788 Not tainted syzkaller #0 [ 381.279537][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 381.289631][T11271] Call Trace: [ 381.292946][T11271] [ 381.295918][T11271] dump_stack_lvl+0x18c/0x250 [ 381.300664][T11271] ? show_regs_print_info+0x20/0x20 [ 381.305931][T11271] ? load_image+0x420/0x420 [ 381.310500][T11271] ? __might_sleep+0xe0/0xe0 [ 381.315138][T11271] ? __lock_acquire+0x7d80/0x7d80 [ 381.320205][T11271] should_fail_ex+0x394/0x4c0 [ 381.324931][T11271] should_failslab+0x9/0x20 [ 381.329612][T11271] slab_pre_alloc_hook+0x59/0x300 [ 381.334732][T11271] ? lockdep_softirqs_off+0x440/0x440 [ 381.340166][T11271] kmem_cache_alloc+0x5a/0x2c0 [ 381.344983][T11271] ? security_inode_alloc+0x34/0x110 [ 381.350326][T11271] security_inode_alloc+0x34/0x110 [ 381.355491][T11271] inode_init_always+0x914/0xc90 [ 381.360479][T11271] new_inode_pseudo+0x95/0x1d0 [ 381.365287][T11271] __sock_create+0x12d/0x940 [ 381.369934][T11271] __sys_socketpair+0x236/0x550 [ 381.374876][T11271] __x64_sys_socketpair+0x9b/0xb0 [ 381.379956][T11271] do_syscall_64+0x55/0xb0 [ 381.384420][T11271] ? clear_bhb_loop+0x40/0x90 [ 381.389130][T11271] ? clear_bhb_loop+0x40/0x90 [ 381.393864][T11271] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.399801][T11271] RIP: 0033:0x7fe5f079de59 [ 381.404282][T11271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.423934][T11271] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 381.432390][T11271] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 381.440411][T11271] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 381.448431][T11271] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 381.456444][T11271] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 381.464460][T11271] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 381.472483][T11271] [ 381.497480][T11271] socket: no more sockets [ 381.758279][T11278] netlink: 'syz.1.1792': attribute type 2 has an invalid length. [ 381.766300][T11278] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1792'. [ 382.276596][T11290] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1793'. [ 385.510338][T11312] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 385.776074][T11322] netlink: 'syz.3.1801': attribute type 1 has an invalid length. [ 385.800814][T11314] netlink: 'syz.4.1800': attribute type 3 has an invalid length. [ 385.812162][T11322] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1801'. [ 385.826790][T11314] netlink: 101688 bytes leftover after parsing attributes in process `syz.4.1800'. [ 388.095665][T11366] netlink: 'syz.3.1817': attribute type 10 has an invalid length. [ 388.770399][T11375] FAULT_INJECTION: forcing a failure. [ 388.770399][T11375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.801237][T11375] CPU: 0 PID: 11375 Comm: syz.5.1819 Not tainted syzkaller #0 [ 388.808789][T11375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.818893][T11375] Call Trace: [ 388.822217][T11375] [ 388.825193][T11375] dump_stack_lvl+0x18c/0x250 [ 388.829949][T11375] ? show_regs_print_info+0x20/0x20 [ 388.835210][T11375] ? load_image+0x420/0x420 [ 388.839758][T11375] ? __might_fault+0xaa/0x120 [ 388.844478][T11375] ? __lock_acquire+0x7d80/0x7d80 [ 388.849560][T11375] ? __virt_addr_valid+0x10c/0x380 [ 388.854725][T11375] should_fail_ex+0x394/0x4c0 [ 388.859449][T11375] _copy_from_user+0x2f/0xe0 [ 388.864081][T11375] generic_map_update_batch+0x58c/0x800 [ 388.869732][T11375] ? rcu_read_unlock+0xa0/0xa0 [ 388.874557][T11375] ? __fdget+0x180/0x210 [ 388.878843][T11375] ? rcu_read_unlock+0xa0/0xa0 [ 388.883644][T11375] bpf_map_do_batch+0x3f2/0x600 [ 388.888530][T11375] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 388.894916][T11375] __sys_bpf+0x381/0x890 [ 388.899258][T11375] ? bpf_link_show_fdinfo+0x390/0x390 [ 388.904722][T11375] ? lock_chain_count+0x20/0x20 [ 388.909646][T11375] __x64_sys_bpf+0x7c/0x90 [ 388.914105][T11375] do_syscall_64+0x55/0xb0 [ 388.918564][T11375] ? clear_bhb_loop+0x40/0x90 [ 388.923269][T11375] ? clear_bhb_loop+0x40/0x90 [ 388.927985][T11375] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 388.933982][T11375] RIP: 0033:0x7fe5f079de59 [ 388.938449][T11375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.958109][T11375] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 388.966573][T11375] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 388.974602][T11375] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 388.982628][T11375] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 388.990644][T11375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 388.998650][T11375] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 389.006682][T11375] [ 389.276679][T11381] netlink: 'syz.3.1822': attribute type 9 has an invalid length. [ 389.292447][T11381] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1822'. [ 389.648187][T11400] netlink: 'syz.1.1837': attribute type 29 has an invalid length. [ 389.661345][T11400] netlink: 'syz.1.1837': attribute type 29 has an invalid length. [ 390.027010][T11408] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1832'. [ 390.463376][T11420] FAULT_INJECTION: forcing a failure. [ 390.463376][T11420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.489239][T11420] CPU: 1 PID: 11420 Comm: syz.4.1836 Not tainted syzkaller #0 [ 390.496788][T11420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 390.506907][T11420] Call Trace: [ 390.510237][T11420] [ 390.513218][T11420] dump_stack_lvl+0x18c/0x250 [ 390.517963][T11420] ? show_regs_print_info+0x20/0x20 [ 390.523216][T11420] ? load_image+0x420/0x420 [ 390.527790][T11420] ? __might_fault+0xaa/0x120 [ 390.532532][T11420] ? __lock_acquire+0x7d80/0x7d80 [ 390.537790][T11420] ? __virt_addr_valid+0x10c/0x380 [ 390.542976][T11420] should_fail_ex+0x394/0x4c0 [ 390.547718][T11420] _copy_from_user+0x2f/0xe0 [ 390.552370][T11420] generic_map_update_batch+0x58c/0x800 [ 390.558007][T11420] ? rcu_read_unlock+0xa0/0xa0 [ 390.562830][T11420] ? __fdget+0x180/0x210 [ 390.567134][T11420] ? rcu_read_unlock+0xa0/0xa0 [ 390.571953][T11420] bpf_map_do_batch+0x3f2/0x600 [ 390.576864][T11420] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 390.583269][T11420] __sys_bpf+0x381/0x890 [ 390.587560][T11420] ? bpf_link_show_fdinfo+0x390/0x390 [ 390.592997][T11420] ? lock_chain_count+0x20/0x20 [ 390.597908][T11420] __x64_sys_bpf+0x7c/0x90 [ 390.602359][T11420] do_syscall_64+0x55/0xb0 [ 390.606817][T11420] ? clear_bhb_loop+0x40/0x90 [ 390.611523][T11420] ? clear_bhb_loop+0x40/0x90 [ 390.616241][T11420] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 390.622199][T11420] RIP: 0033:0x7fcadf19de59 [ 390.626649][T11420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.646298][T11420] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.654758][T11420] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 390.662758][T11420] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 390.670759][T11420] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 390.678767][T11420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.686768][T11420] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 390.694797][T11420] [ 391.269261][T11436] netlink: 'syz.4.1842': attribute type 9 has an invalid length. [ 391.277157][T11436] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1842'. [ 391.304645][T11436] netlink: 'syz.4.1842': attribute type 10 has an invalid length. [ 391.391710][T11436] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 391.414084][T11439] netlink: 'syz.1.1843': attribute type 10 has an invalid length. [ 391.422735][T11439] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1843'. [ 391.442093][T11439] batman_adv: batadv0: Adding interface: veth0_vlan [ 391.453197][T11439] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.487757][T11439] batman_adv: batadv0: Interface activated: veth0_vlan [ 391.561472][T11441] netlink: 'syz.4.1844': attribute type 10 has an invalid length. [ 391.589249][T11441] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.607419][T11441] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.618651][T11441] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.628016][T11441] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.653431][T11441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.682718][T11441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.701760][T11441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.713777][T11441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.742468][T11441] team0: Port device geneve1 added [ 392.346781][T11465] FAULT_INJECTION: forcing a failure. [ 392.346781][T11465] name failslab, interval 1, probability 0, space 0, times 0 [ 392.364783][T11465] CPU: 1 PID: 11465 Comm: syz.3.1852 Not tainted syzkaller #0 [ 392.372306][T11465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 392.382411][T11465] Call Trace: [ 392.385720][T11465] [ 392.388750][T11465] dump_stack_lvl+0x18c/0x250 [ 392.393488][T11465] ? sctp_sendmsg+0x1519/0x27b0 [ 392.398458][T11465] ? ___sys_sendmsg+0x2a6/0x360 [ 392.403363][T11465] ? show_regs_print_info+0x20/0x20 [ 392.408611][T11465] ? load_image+0x420/0x420 [ 392.413184][T11465] should_fail_ex+0x394/0x4c0 [ 392.417904][T11465] should_failslab+0x9/0x20 [ 392.422443][T11465] slab_pre_alloc_hook+0x59/0x300 [ 392.427518][T11465] ? sctp_add_bind_addr+0x8c/0x360 [ 392.432771][T11465] __kmem_cache_alloc_node+0x53/0x250 [ 392.438188][T11465] ? sctp_add_bind_addr+0x8c/0x360 [ 392.443331][T11465] kmalloc_trace+0x2a/0xe0 [ 392.447794][T11465] sctp_add_bind_addr+0x8c/0x360 [ 392.452783][T11465] sctp_copy_local_addr_list+0x31b/0x4e0 [ 392.458519][T11465] ? sctp_copy_local_addr_list+0xa4/0x4e0 [ 392.464273][T11465] ? sctp_do_8_2_transport_strike+0x910/0x910 [ 392.470404][T11465] ? sctp_v4_is_any+0x35/0x60 [ 392.475123][T11465] ? sctp_copy_one_addr+0x8c/0x350 [ 392.480264][T11465] sctp_bind_addr_copy+0xb3/0x3c0 [ 392.485317][T11465] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 392.491678][T11465] sctp_connect_new_asoc+0x2f9/0x6a0 [ 392.497016][T11465] ? __sctp_connect+0xd80/0xd80 [ 392.501908][T11465] ? __local_bh_enable_ip+0x13a/0x1c0 [ 392.507320][T11465] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 392.512910][T11465] ? security_sctp_bind_connect+0x89/0xb0 [ 392.518660][T11465] sctp_sendmsg+0x1519/0x27b0 [ 392.523389][T11465] ? sctp_getsockopt+0xb60/0xb60 [ 392.528361][T11465] ? aa_af_perm+0x330/0x330 [ 392.532913][T11465] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 392.539390][T11465] ? sock_rps_record_flow+0x19/0x3f0 [ 392.544714][T11465] ? inet_sendmsg+0xce/0x2a0 [ 392.549344][T11465] ? inet_send_prepare+0x250/0x250 [ 392.554496][T11465] ____sys_sendmsg+0x61b/0x980 [ 392.559313][T11465] ? __asan_memset+0x22/0x40 [ 392.563937][T11465] ? __sys_sendmsg_sock+0x30/0x30 [ 392.569001][T11465] ? __import_iovec+0x5f2/0x850 [ 392.573920][T11465] ? import_iovec+0x73/0xa0 [ 392.578464][T11465] ___sys_sendmsg+0x2a6/0x360 [ 392.583193][T11465] ? __sys_sendmsg+0x2b0/0x2b0 [ 392.588029][T11465] ? __lock_acquire+0x7d80/0x7d80 [ 392.593126][T11465] __se_sys_sendmsg+0x1d0/0x2c0 [ 392.598023][T11465] ? __x64_sys_sendmsg+0x80/0x80 [ 392.603023][T11465] ? lockdep_hardirqs_on+0x98/0x150 [ 392.608278][T11465] do_syscall_64+0x55/0xb0 [ 392.612742][T11465] ? clear_bhb_loop+0x40/0x90 [ 392.617455][T11465] ? clear_bhb_loop+0x40/0x90 [ 392.622174][T11465] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 392.628109][T11465] RIP: 0033:0x7f713639de59 [ 392.632576][T11465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.652207][T11465] RSP: 002b:00007f71371f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.660649][T11465] RAX: ffffffffffffffda RBX: 00007f7136625fa0 RCX: 00007f713639de59 [ 392.668657][T11465] RDX: 00000000000000fc RSI: 0000200000000600 RDI: 0000000000000004 [ 392.676674][T11465] RBP: 00007f71371f7090 R08: 0000000000000000 R09: 0000000000000000 [ 392.684680][T11465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 392.692682][T11465] R13: 00007f7136626038 R14: 00007f7136625fa0 R15: 00007ffc2785ded8 [ 392.700728][T11465] [ 393.077243][T11469] netlink: 'syz.4.1853': attribute type 10 has an invalid length. [ 394.292424][T11491] netlink: 'syz.4.1861': attribute type 39 has an invalid length. [ 395.272824][T11505] netlink: 'syz.4.1867': attribute type 10 has an invalid length. [ 395.286790][T11505] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1867'. [ 396.490754][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1867'. [ 397.113158][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.121620][T11536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.139123][T11536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.147061][T11536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.831050][T11561] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1884'. [ 398.698019][T11596] FAULT_INJECTION: forcing a failure. [ 398.698019][T11596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.730797][T11595] À: port 1(vlan0) entered blocking state [ 398.737793][T11595] À: port 1(vlan0) entered disabled state [ 398.744475][T11595] vlan0: entered allmulticast mode [ 398.750334][T11596] CPU: 0 PID: 11596 Comm: syz.1.1896 Not tainted syzkaller #0 [ 398.757862][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 398.767947][T11596] Call Trace: [ 398.771250][T11596] [ 398.774199][T11596] dump_stack_lvl+0x18c/0x250 [ 398.778905][T11596] ? show_regs_print_info+0x20/0x20 [ 398.784120][T11596] ? load_image+0x420/0x420 [ 398.788672][T11596] ? __might_fault+0xaa/0x120 [ 398.793375][T11596] ? __lock_acquire+0x7d80/0x7d80 [ 398.798421][T11596] ? __virt_addr_valid+0x10c/0x380 [ 398.803558][T11596] should_fail_ex+0x394/0x4c0 [ 398.808269][T11596] _copy_from_user+0x2f/0xe0 [ 398.812894][T11596] sctp_setsockopt+0x19e/0x11e0 [ 398.817769][T11596] ? sock_common_recvmsg+0x190/0x190 [ 398.823076][T11596] do_sock_setsockopt+0x175/0x1a0 [ 398.828143][T11596] ? __fdget+0x180/0x210 [ 398.832472][T11596] __x64_sys_setsockopt+0x182/0x200 [ 398.837718][T11596] do_syscall_64+0x55/0xb0 [ 398.842185][T11596] ? clear_bhb_loop+0x40/0x90 [ 398.846879][T11596] ? clear_bhb_loop+0x40/0x90 [ 398.851586][T11596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 398.857510][T11596] RIP: 0033:0x7f95c379de59 [ 398.861959][T11596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.881600][T11596] RSP: 002b:00007f95c4730028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 398.890031][T11596] RAX: ffffffffffffffda RBX: 00007f95c3a26090 RCX: 00007f95c379de59 [ 398.898035][T11596] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000008 [ 398.906023][T11596] RBP: 00007f95c4730090 R08: 0000000000000129 R09: 0000000000000000 [ 398.914015][T11596] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 398.922004][T11596] R13: 00007f95c3a26128 R14: 00007f95c3a26090 R15: 00007ffe1516b368 [ 398.930012][T11596] [ 398.945661][T11595] vlan0: entered promiscuous mode [ 400.406163][T11620] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1906'. [ 400.449331][T11620] netlink: del zone limit has 8 unknown bytes [ 403.732929][T11715] netlink: 'syz.3.1938': attribute type 5 has an invalid length. [ 403.741160][T11715] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1938'. [ 403.819545][T11719] netlink: 'syz.3.1938': attribute type 29 has an invalid length. [ 403.846196][T11719] netlink: 'syz.3.1938': attribute type 29 has an invalid length. [ 403.874914][T11719] netlink: 'syz.3.1938': attribute type 29 has an invalid length. [ 404.204231][T11725] netlink: 'syz.3.1942': attribute type 10 has an invalid length. [ 404.238890][T11725] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1942'. [ 405.295720][T11752] netlink: 'syz.4.1951': attribute type 10 has an invalid length. [ 405.589604][ T5087] Bluetooth: Frame is too long (len 149, expected len 4) [ 405.606199][T11770] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.1957'. [ 405.690684][T11771] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1957'. [ 406.556913][T11796] netlink: 'syz.3.1968': attribute type 10 has an invalid length. [ 406.598911][T11796] netlink: 'syz.3.1968': attribute type 4 has an invalid length. [ 406.641572][T11796] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1968'. [ 406.683274][T11795] FAULT_INJECTION: forcing a failure. [ 406.683274][T11795] name failslab, interval 1, probability 0, space 0, times 0 [ 406.697126][T11795] CPU: 1 PID: 11795 Comm: syz.4.1967 Not tainted syzkaller #0 [ 406.704641][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.714776][T11795] Call Trace: [ 406.718092][T11795] [ 406.721059][T11795] dump_stack_lvl+0x18c/0x250 [ 406.725790][T11795] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 406.731823][T11796] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 406.747340][T11795] ? show_regs_print_info+0x20/0x20 [ 406.747453][T11795] ? load_image+0x420/0x420 [ 406.747503][T11795] should_fail_ex+0x394/0x4c0 [ 406.747540][T11795] should_failslab+0x9/0x20 [ 406.747571][T11795] slab_pre_alloc_hook+0x59/0x300 [ 406.771609][T11795] ? lockdep_init_map_type+0x9c/0x8e0 [ 406.777037][T11795] ? nf_ct_ext_add+0x1ad/0x440 [ 406.781912][T11795] ? nf_ct_ext_add+0x1ad/0x440 [ 406.786702][T11795] __kmem_cache_alloc_node+0x53/0x250 [ 406.792114][T11795] ? nf_ct_ext_add+0x1ad/0x440 [ 406.796928][T11795] __kmalloc_node_track_caller+0xa4/0x230 [ 406.802698][T11795] ? rcu_is_watching+0x15/0xb0 [ 406.807501][T11795] krealloc+0x86/0x120 [ 406.811607][T11795] nf_ct_ext_add+0x1ad/0x440 [ 406.816237][T11795] init_conntrack+0x5e9/0xf40 [ 406.820953][T11795] ? early_drop+0x7f0/0x7f0 [ 406.825475][T11795] ? nf_conntrack_find_get+0x670/0x670 [ 406.831016][T11795] ? __siphash_unaligned+0x25c/0x3d0 [ 406.836328][T11795] nf_conntrack_in+0xc29/0x1630 [ 406.841221][T11795] ? nf_ct_pernet+0x270/0x270 [ 406.845925][T11795] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.852126][T11795] ? lockdep_hardirqs_on+0x98/0x150 [ 406.857367][T11795] ? ipv6_conntrack_in+0x20/0x20 [ 406.862327][T11795] nf_hook_slow+0xbd/0x200 [ 406.866773][T11795] __ip6_local_out+0x784/0x8a0 [ 406.871568][T11795] ? __ip6_local_out+0x60c/0x8a0 [ 406.876529][T11795] ? ip6_dst_hoplimit+0x350/0x350 [ 406.881588][T11795] ? __ip6_local_out+0x8a0/0x8a0 [ 406.886554][T11795] ? read_lock_is_recursive+0x20/0x20 [ 406.891973][T11795] ip6_local_out+0x2a/0x130 [ 406.896500][T11795] ? ip6_send_skb+0x10a/0x380 [ 406.901223][T11795] ip6_send_skb+0x1cd/0x380 [ 406.905748][T11795] udp_v6_send_skb+0xbd8/0x1810 [ 406.910653][T11795] udp_v6_push_pending_frames+0x133/0x220 [ 406.916400][T11795] udpv6_sendmsg+0xdd8/0x2350 [ 406.921226][T11795] ? ip_skb_dst_mtu+0x9c0/0x9c0 [ 406.926103][T11795] ? __might_sleep+0xe0/0xe0 [ 406.930743][T11795] ? udp_v6_early_demux+0xf90/0xf90 [ 406.935975][T11795] ? perf_trace_preemptirq_template+0xac/0x330 [ 406.942197][T11795] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 406.948379][T11795] ? lockdep_hardirqs_on+0x98/0x150 [ 406.953607][T11795] ? sock_rps_record_flow+0x19/0x3f0 [ 406.958915][T11795] ? inet_send_prepare+0x5b/0x250 [ 406.963959][T11795] ? inet6_sendmsg+0x5f/0xd0 [ 406.968577][T11795] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 406.973804][T11795] ____sys_sendmsg+0x61b/0x980 [ 406.978595][T11795] ? __asan_memset+0x22/0x40 [ 406.983223][T11795] ? __sys_sendmsg_sock+0x30/0x30 [ 406.988276][T11795] ? __import_iovec+0x3fa/0x850 [ 406.993162][T11795] ? import_iovec+0x73/0xa0 [ 406.997684][T11795] ___sys_sendmsg+0x2a6/0x360 [ 407.002481][T11795] ? __sys_sendmsg+0x2b0/0x2b0 [ 407.007299][T11795] ? ktime_get+0x7f/0x280 [ 407.011675][T11795] __se_sys_sendmsg+0x1d0/0x2c0 [ 407.016559][T11795] ? __x64_sys_sendmsg+0x80/0x80 [ 407.021554][T11795] do_syscall_64+0x55/0xb0 [ 407.025999][T11795] ? clear_bhb_loop+0x40/0x90 [ 407.030703][T11795] ? clear_bhb_loop+0x40/0x90 [ 407.035395][T11795] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.041315][T11795] RIP: 0033:0x7fcadf19de59 [ 407.045755][T11795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.065412][T11795] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.073985][T11795] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 407.081980][T11795] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000008 [ 407.089968][T11795] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 407.097954][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.105952][T11795] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 407.113964][T11795] [ 407.493067][T11810] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 407.501728][T11810] netlink: 'syz.3.1971': attribute type 4 has an invalid length. [ 407.510484][T11810] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1971'. [ 407.527665][T11810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 407.549449][T11815] FAULT_INJECTION: forcing a failure. [ 407.549449][T11815] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.575153][T11815] CPU: 1 PID: 11815 Comm: syz.1.1974 Not tainted syzkaller #0 [ 407.582675][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.592777][T11815] Call Trace: [ 407.596101][T11815] [ 407.599087][T11815] dump_stack_lvl+0x18c/0x250 [ 407.603851][T11815] ? show_regs_print_info+0x20/0x20 [ 407.609115][T11815] ? load_image+0x420/0x420 [ 407.613685][T11815] ? __might_fault+0xaa/0x120 [ 407.618413][T11815] ? __lock_acquire+0x7d80/0x7d80 [ 407.623523][T11815] should_fail_ex+0x394/0x4c0 [ 407.628277][T11815] _copy_from_user+0x2f/0xe0 [ 407.632928][T11815] ethtool_set_features+0x10a/0x310 [ 407.638192][T11815] ? lockdep_hardirqs_on+0x98/0x150 [ 407.643454][T11815] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 407.649421][T11815] ? ethtool_get_features+0x280/0x280 [ 407.654871][T11815] dev_ethtool+0xe7e/0x18d0 [ 407.659445][T11815] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 407.665749][T11815] ? __lock_acquire+0x7d80/0x7d80 [ 407.670835][T11815] ? __might_fault+0xaa/0x120 [ 407.675558][T11815] ? full_name_hash+0x92/0xe0 [ 407.680310][T11815] ? dev_load+0x21/0x1f0 [ 407.684620][T11815] dev_ioctl+0x392/0x1140 [ 407.689017][T11815] sock_do_ioctl+0x239/0x310 [ 407.693676][T11815] ? sock_show_fdinfo+0xb0/0xb0 [ 407.698611][T11815] sock_ioctl+0x5be/0x7e0 [ 407.703029][T11815] ? sock_poll+0x3e0/0x3e0 [ 407.707537][T11815] ? bpf_lsm_file_ioctl+0x9/0x10 [ 407.712523][T11815] ? security_file_ioctl+0x80/0xa0 [ 407.717690][T11815] ? sock_poll+0x3e0/0x3e0 [ 407.722184][T11815] __se_sys_ioctl+0xfd/0x170 [ 407.726859][T11815] do_syscall_64+0x55/0xb0 [ 407.731346][T11815] ? clear_bhb_loop+0x40/0x90 [ 407.736085][T11815] ? clear_bhb_loop+0x40/0x90 [ 407.740830][T11815] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.746829][T11815] RIP: 0033:0x7f95c379de59 [ 407.751327][T11815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.770995][T11815] RSP: 002b:00007f95c4751028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.779468][T11815] RAX: ffffffffffffffda RBX: 00007f95c3a25fa0 RCX: 00007f95c379de59 [ 407.787491][T11815] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000009 [ 407.795523][T11815] RBP: 00007f95c4751090 R08: 0000000000000000 R09: 0000000000000000 [ 407.803562][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.811580][T11815] R13: 00007f95c3a26038 R14: 00007f95c3a25fa0 R15: 00007ffe1516b368 [ 407.819637][T11815] [ 408.104594][T11825] delete_channel: no stack [ 408.128122][T11825] delete_channel: no stack [ 408.338111][T11817] mac80211_hwsim hwsim30 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 408.349768][T11820] netlink: 16098 bytes leftover after parsing attributes in process `syz.5.1973'. [ 408.367762][T11825] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1976'. [ 408.379971][T11827] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1978'. [ 408.393164][T11827] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 409.093949][T11860] validate_nla: 2 callbacks suppressed [ 409.093966][T11860] netlink: 'syz.3.1987': attribute type 9 has an invalid length. [ 409.171047][T11860] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1987'. [ 409.389208][T11860] netlink: 'syz.3.1987': attribute type 9 has an invalid length. [ 409.397031][T11860] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1987'. [ 410.382663][T11902] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2003'. [ 410.604943][T11908] FAULT_INJECTION: forcing a failure. [ 410.604943][T11908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.632547][T11908] CPU: 0 PID: 11908 Comm: syz.5.2013 Not tainted syzkaller #0 [ 410.640163][T11908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 410.650264][T11908] Call Trace: [ 410.653582][T11908] [ 410.656636][T11908] dump_stack_lvl+0x18c/0x250 [ 410.661391][T11908] ? show_regs_print_info+0x20/0x20 [ 410.666675][T11908] ? load_image+0x420/0x420 [ 410.671234][T11908] ? __might_fault+0xaa/0x120 [ 410.675969][T11908] ? __lock_acquire+0x7d80/0x7d80 [ 410.681061][T11908] ? __virt_addr_valid+0x10c/0x380 [ 410.686239][T11908] should_fail_ex+0x394/0x4c0 [ 410.690991][T11908] _copy_from_user+0x2f/0xe0 [ 410.695633][T11908] ____sys_sendmsg+0x329/0x980 [ 410.700464][T11908] ? __sys_sendmsg_sock+0x30/0x30 [ 410.705546][T11908] ? __import_iovec+0x3fa/0x850 [ 410.710462][T11908] ? import_iovec+0x73/0xa0 [ 410.714990][T11908] ___sys_sendmsg+0x2a6/0x360 [ 410.719706][T11908] ? __sys_sendmsg+0x2b0/0x2b0 [ 410.724507][T11908] ? trace_call_bpf+0xc3/0x6c0 [ 410.729339][T11908] __se_sys_sendmsg+0x1d0/0x2c0 [ 410.734229][T11908] ? perf_trace_preemptirq_template+0x269/0x330 [ 410.740522][T11908] ? __x64_sys_sendmsg+0x80/0x80 [ 410.745536][T11908] ? lockdep_hardirqs_on+0x98/0x150 [ 410.750775][T11908] do_syscall_64+0x55/0xb0 [ 410.755228][T11908] ? clear_bhb_loop+0x40/0x90 [ 410.759954][T11908] ? clear_bhb_loop+0x40/0x90 [ 410.764660][T11908] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 410.770588][T11908] RIP: 0033:0x7fe5f079de59 [ 410.775030][T11908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 410.794662][T11908] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 410.803108][T11908] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 410.811106][T11908] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000004 [ 410.819101][T11908] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.827117][T11908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.835125][T11908] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 410.843133][T11908] [ 411.251434][T11921] FAULT_INJECTION: forcing a failure. [ 411.251434][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 411.292772][T11921] CPU: 0 PID: 11921 Comm: syz.3.2009 Not tainted syzkaller #0 [ 411.300312][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 411.310413][T11921] Call Trace: [ 411.313726][T11921] [ 411.316690][T11921] dump_stack_lvl+0x18c/0x250 [ 411.321432][T11921] ? show_regs_print_info+0x20/0x20 [ 411.326682][T11921] ? load_image+0x420/0x420 [ 411.331251][T11921] ? __might_sleep+0xe0/0xe0 [ 411.335933][T11921] ? __lock_acquire+0x7d80/0x7d80 [ 411.341015][T11921] should_fail_ex+0x394/0x4c0 [ 411.345749][T11921] should_failslab+0x9/0x20 [ 411.350319][T11921] slab_pre_alloc_hook+0x59/0x300 [ 411.355390][T11921] ? tomoyo_encode+0x2ad/0x570 [ 411.360212][T11921] ? tomoyo_encode+0x2ad/0x570 [ 411.365022][T11921] __kmem_cache_alloc_node+0x53/0x250 [ 411.370443][T11921] ? tomoyo_encode+0x2ad/0x570 [ 411.375256][T11921] __kmalloc+0xa7/0x240 [ 411.379460][T11921] tomoyo_encode+0x2ad/0x570 [ 411.384111][T11921] tomoyo_realpath_from_path+0x57c/0x5c0 [ 411.389797][T11921] ? tomoyo_domain+0xd6/0x120 [ 411.394539][T11921] tomoyo_path_number_perm+0x248/0x5e0 [ 411.400062][T11921] ? tomoyo_path_number_perm+0x217/0x5e0 [ 411.405761][T11921] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 411.411302][T11921] ? ksys_write+0x1d2/0x260 [ 411.415957][T11921] ? __fget_files+0x28/0x460 [ 411.420617][T11921] security_file_ioctl+0x70/0xa0 [ 411.425607][T11921] __se_sys_ioctl+0x48/0x170 [ 411.430248][T11921] do_syscall_64+0x55/0xb0 [ 411.434710][T11921] ? clear_bhb_loop+0x40/0x90 [ 411.439436][T11921] ? clear_bhb_loop+0x40/0x90 [ 411.444155][T11921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 411.450097][T11921] RIP: 0033:0x7f713639de59 [ 411.454546][T11921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.474186][T11921] RSP: 002b:00007f71371f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.482643][T11921] RAX: ffffffffffffffda RBX: 00007f7136625fa0 RCX: 00007f713639de59 [ 411.490648][T11921] RDX: 0000200000000080 RSI: 00000000000089f0 RDI: 0000000000000004 [ 411.498653][T11921] RBP: 00007f71371f7090 R08: 0000000000000000 R09: 0000000000000000 [ 411.506666][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.514686][T11921] R13: 00007f7136626038 R14: 00007f7136625fa0 R15: 00007ffc2785ded8 [ 411.522717][T11921] [ 411.551808][T11921] ERROR: Out of memory at tomoyo_realpath_from_path. [ 411.749691][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 411.819220][T11937] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2015'. [ 411.833097][T11937] netlink: 'syz.1.2015': attribute type 2 has an invalid length. [ 412.231342][ T49] wlan1: Trigger new scan to find an IBSS to join [ 412.746110][T11970] FAULT_INJECTION: forcing a failure. [ 412.746110][T11970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.762548][T11970] CPU: 1 PID: 11970 Comm: syz.5.2030 Not tainted syzkaller #0 [ 412.770082][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.780169][T11970] Call Trace: [ 412.783482][T11970] [ 412.786432][T11970] dump_stack_lvl+0x18c/0x250 [ 412.791159][T11970] ? show_regs_print_info+0x20/0x20 [ 412.796394][T11970] ? load_image+0x420/0x420 [ 412.800934][T11970] ? __might_fault+0xaa/0x120 [ 412.805644][T11970] ? __lock_acquire+0x7d80/0x7d80 [ 412.810687][T11970] should_fail_ex+0x394/0x4c0 [ 412.815384][T11970] _copy_from_iter+0x1cd/0x1290 [ 412.820253][T11970] ? rcu_is_watching+0x15/0xb0 [ 412.825040][T11970] ? copyout_mc+0x70/0x70 [ 412.829402][T11970] ? __virt_addr_valid+0x10c/0x380 [ 412.834642][T11970] ? __virt_addr_valid+0x10c/0x380 [ 412.839776][T11970] ? __virt_addr_valid+0x10c/0x380 [ 412.844915][T11970] ? __check_object_size+0x4fc/0xa40 [ 412.850253][T11970] netlink_sendmsg+0x76b/0xbf0 [ 412.855063][T11970] ? netlink_getsockopt+0x590/0x590 [ 412.860283][T11970] ? apparmor_socket_sendmsg+0x8e/0x330 [ 412.865846][T11970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 412.871172][T11970] ? security_socket_sendmsg+0x80/0xa0 [ 412.876659][T11970] ? netlink_getsockopt+0x590/0x590 [ 412.881890][T11970] ____sys_sendmsg+0x61b/0x980 [ 412.886708][T11970] ? __asan_memset+0x22/0x40 [ 412.891339][T11970] ? __sys_sendmsg_sock+0x30/0x30 [ 412.896399][T11970] ? __import_iovec+0x5f2/0x850 [ 412.901297][T11970] ? import_iovec+0x73/0xa0 [ 412.905844][T11970] ___sys_sendmsg+0x2a6/0x360 [ 412.910594][T11970] ? get_pid_task+0x20/0x1e0 [ 412.915217][T11970] ? __sys_sendmsg+0x2b0/0x2b0 [ 412.920028][T11970] ? __lock_acquire+0x7d80/0x7d80 [ 412.925094][T11970] __se_sys_sendmsg+0x1d0/0x2c0 [ 412.929988][T11970] ? perf_trace_preemptirq_template+0x269/0x330 [ 412.936267][T11970] ? __x64_sys_sendmsg+0x80/0x80 [ 412.941264][T11970] ? lockdep_hardirqs_on+0x98/0x150 [ 412.946506][T11970] do_syscall_64+0x55/0xb0 [ 412.950971][T11970] ? clear_bhb_loop+0x40/0x90 [ 412.955677][T11970] ? clear_bhb_loop+0x40/0x90 [ 412.960387][T11970] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.966311][T11970] RIP: 0033:0x7fe5f079de59 [ 412.970764][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.990390][T11970] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.998821][T11970] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 413.006815][T11970] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 413.014827][T11970] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 413.022815][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.030808][T11970] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 413.038813][T11970] [ 413.223503][T11978] IPv6: Can't replace route, no match found [ 413.235963][T11975] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2033'. [ 413.337399][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2034'. [ 413.773554][T11990] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2037'. [ 413.827057][ T5087] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 414.209597][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2041'. [ 414.218794][T11998] FAULT_INJECTION: forcing a failure. [ 414.218794][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 414.236233][T11998] CPU: 0 PID: 11998 Comm: syz.4.2041 Not tainted syzkaller #0 [ 414.243755][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.253860][T11998] Call Trace: [ 414.257164][T11998] [ 414.260133][T11998] dump_stack_lvl+0x18c/0x250 [ 414.264922][T11998] ? show_regs_print_info+0x20/0x20 [ 414.270180][T11998] ? load_image+0x420/0x420 [ 414.274744][T11998] ? __might_sleep+0xe0/0xe0 [ 414.279374][T11998] ? __lock_acquire+0x7d80/0x7d80 [ 414.284434][T11998] ? mark_lock+0x94/0x320 [ 414.288820][T11998] should_fail_ex+0x394/0x4c0 [ 414.293558][T11998] should_failslab+0x9/0x20 [ 414.298105][T11998] slab_pre_alloc_hook+0x59/0x300 [ 414.303194][T11998] ? fib_nl2rule+0x334/0x1b40 [ 414.307965][T11998] ? fib_nl2rule+0x334/0x1b40 [ 414.312713][T11998] __kmem_cache_alloc_node+0x53/0x250 [ 414.318145][T11998] ? fib_nl2rule+0x334/0x1b40 [ 414.322853][T11998] __kmalloc+0xa7/0x240 [ 414.327063][T11998] ? lookup_rules_ops+0x20/0x270 [ 414.332051][T11998] fib_nl2rule+0x334/0x1b40 [ 414.336613][T11998] ? fib_nl_newrule+0x1e40/0x1e40 [ 414.341686][T11998] ? __nla_parse+0x40/0x50 [ 414.346149][T11998] fib_nl_newrule+0x353/0x1e40 [ 414.350981][T11998] ? verify_lock_unused+0x140/0x140 [ 414.356247][T11998] ? fib_rules_seq_read+0xf0/0xf0 [ 414.361335][T11998] ? rcu_is_watching+0x15/0xb0 [ 414.366159][T11998] ? trace_contention_end+0x39/0xe0 [ 414.371443][T11998] ? fib_rules_seq_read+0xf0/0xf0 [ 414.376531][T11998] rtnetlink_rcv_msg+0x843/0xf90 [ 414.381590][T11998] ? rtnetlink_rcv_msg+0x220/0xf90 [ 414.386842][T11998] ? rtnetlink_bind+0x80/0x80 [ 414.391565][T11998] ? perf_trace_preemptirq_template+0xac/0x330 [ 414.397772][T11998] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 414.403801][T11998] ? lock_chain_count+0x20/0x20 [ 414.408702][T11998] ? __local_bh_enable_ip+0x13a/0x1c0 [ 414.414131][T11998] ? lockdep_hardirqs_on+0x98/0x150 [ 414.419385][T11998] ? __local_bh_enable_ip+0x13a/0x1c0 [ 414.424810][T11998] ? _local_bh_enable+0xa0/0xa0 [ 414.429729][T11998] ? __dev_queue_xmit+0x275/0x3630 [ 414.434897][T11998] ? __dev_queue_xmit+0x1bc2/0x3630 [ 414.440162][T11998] ? __dev_queue_xmit+0x275/0x3630 [ 414.445791][T11998] ? ref_tracker_free+0x686/0x830 [ 414.450925][T11998] netlink_rcv_skb+0x235/0x4c0 [ 414.455896][T11998] ? rtnetlink_bind+0x80/0x80 [ 414.460622][T11998] ? netlink_ack+0x1160/0x1160 [ 414.465464][T11998] ? __lock_acquire+0x7d80/0x7d80 [ 414.470546][T11998] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.475812][T11998] netlink_unicast+0x7b1/0x930 [ 414.480637][T11998] netlink_sendmsg+0x8d0/0xbf0 [ 414.485465][T11998] ? netlink_getsockopt+0x590/0x590 [ 414.490713][T11998] ? apparmor_socket_sendmsg+0x8e/0x330 [ 414.496307][T11998] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 414.501638][T11998] ? security_socket_sendmsg+0x80/0xa0 [ 414.507230][T11998] ? netlink_getsockopt+0x590/0x590 [ 414.512490][T11998] ____sys_sendmsg+0x61b/0x980 [ 414.517344][T11998] ? __asan_memset+0x22/0x40 [ 414.521984][T11998] ? __sys_sendmsg_sock+0x30/0x30 [ 414.527060][T11998] ? __import_iovec+0x5f2/0x850 [ 414.531987][T11998] ? import_iovec+0x73/0xa0 [ 414.536538][T11998] ___sys_sendmsg+0x2a6/0x360 [ 414.541274][T11998] ? get_pid_task+0x20/0x1e0 [ 414.545928][T11998] ? __sys_sendmsg+0x2b0/0x2b0 [ 414.550762][T11998] ? __lock_acquire+0x7d80/0x7d80 [ 414.555893][T11998] __se_sys_sendmsg+0x1d0/0x2c0 [ 414.560799][T11998] ? __x64_sys_sendmsg+0x80/0x80 [ 414.565805][T11998] ? lockdep_hardirqs_on+0x98/0x150 [ 414.571077][T11998] do_syscall_64+0x55/0xb0 [ 414.575533][T11998] ? clear_bhb_loop+0x40/0x90 [ 414.580245][T11998] ? clear_bhb_loop+0x40/0x90 [ 414.584978][T11998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 414.590916][T11998] RIP: 0033:0x7fcadf19de59 [ 414.595388][T11998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.615035][T11998] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.623494][T11998] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 414.631496][T11998] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 414.639500][T11998] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 414.647513][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.655521][T11998] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 414.663559][T11998] [ 415.454619][T12015] FAULT_INJECTION: forcing a failure. [ 415.454619][T12015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.470375][T12015] CPU: 0 PID: 12015 Comm: syz.4.2047 Not tainted syzkaller #0 [ 415.477902][T12015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.488021][T12015] Call Trace: [ 415.491325][T12015] [ 415.494298][T12015] dump_stack_lvl+0x18c/0x250 [ 415.499044][T12015] ? show_regs_print_info+0x20/0x20 [ 415.504288][T12015] ? load_image+0x420/0x420 [ 415.508831][T12015] ? __might_fault+0xaa/0x120 [ 415.513551][T12015] ? __lock_acquire+0x7d80/0x7d80 [ 415.518633][T12015] should_fail_ex+0x394/0x4c0 [ 415.523357][T12015] _copy_from_iter+0x1cd/0x1290 [ 415.528251][T12015] ? rep_movs_alternative+0x4a/0x90 [ 415.533507][T12015] ? copyout_mc+0x70/0x70 [ 415.537878][T12015] ? copyout_mc+0x70/0x70 [ 415.542251][T12015] ? __virt_addr_valid+0x10c/0x380 [ 415.547415][T12015] ? page_copy_sane+0x16a/0x270 [ 415.552332][T12015] copy_page_from_iter+0x7b/0x100 [ 415.557397][T12015] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 415.563258][T12015] unix_stream_sendmsg+0x562/0xbf0 [ 415.568510][T12015] ? unix_show_fdinfo+0x280/0x280 [ 415.573616][T12015] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 415.580090][T12015] ? apparmor_socket_sendmsg+0x8e/0x330 [ 415.585702][T12015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 415.591036][T12015] ? security_socket_sendmsg+0x80/0xa0 [ 415.596527][T12015] ? unix_show_fdinfo+0x280/0x280 [ 415.601689][T12015] ____sys_sendmsg+0x61b/0x980 [ 415.606493][T12015] ? __asan_memset+0x22/0x40 [ 415.611119][T12015] ? __sys_sendmsg_sock+0x30/0x30 [ 415.616168][T12015] ? __import_iovec+0x5f2/0x850 [ 415.621057][T12015] ? import_iovec+0x73/0xa0 [ 415.625600][T12015] ___sys_sendmsg+0x2a6/0x360 [ 415.630317][T12015] ? get_pid_task+0x20/0x1e0 [ 415.635038][T12015] ? __sys_sendmsg+0x2b0/0x2b0 [ 415.639872][T12015] ? __lock_acquire+0x7d80/0x7d80 [ 415.644949][T12015] __se_sys_sendmsg+0x1d0/0x2c0 [ 415.649843][T12015] ? __x64_sys_sendmsg+0x80/0x80 [ 415.654830][T12015] ? lockdep_hardirqs_on+0x98/0x150 [ 415.660067][T12015] do_syscall_64+0x55/0xb0 [ 415.664518][T12015] ? clear_bhb_loop+0x40/0x90 [ 415.669236][T12015] ? clear_bhb_loop+0x40/0x90 [ 415.673937][T12015] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.679870][T12015] RIP: 0033:0x7fcadf19de59 [ 415.684309][T12015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.703938][T12015] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.712375][T12015] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 415.720361][T12015] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000004 [ 415.728351][T12015] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 415.736341][T12015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.744332][T12015] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 415.752362][T12015] [ 415.796727][T12019] netlink: 'syz.1.2048': attribute type 9 has an invalid length. [ 415.809206][T12019] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.2048'. [ 416.231396][ T6731] wlan1: Trigger new scan to find an IBSS to join [ 416.312573][T12033] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.2054'. [ 416.721444][T12041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.937086][T12063] netlink: 'syz.1.2065': attribute type 29 has an invalid length. [ 416.956601][T12063] netlink: 'syz.1.2065': attribute type 3 has an invalid length. [ 416.977728][T12063] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2065'. [ 417.030359][T12066] netlink: 'syz.3.2066': attribute type 3 has an invalid length. [ 417.046021][T12066] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2066'. [ 417.207963][ T6729] wlan1: Creating new IBSS network, BSSID fa:4b:41:bd:5e:08 [ 417.811501][T12092] syzkaller0: entered promiscuous mode [ 417.821744][T12092] syzkaller0: entered allmulticast mode [ 420.230223][T12118] FAULT_INJECTION: forcing a failure. [ 420.230223][T12118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.243379][T12118] CPU: 0 PID: 12118 Comm: syz.1.2086 Not tainted syzkaller #0 [ 420.250884][T12118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.260975][T12118] Call Trace: [ 420.264301][T12118] [ 420.267290][T12118] dump_stack_lvl+0x18c/0x250 [ 420.272047][T12118] ? show_regs_print_info+0x20/0x20 [ 420.277298][T12118] ? load_image+0x420/0x420 [ 420.281869][T12118] ? __lock_acquire+0x7d80/0x7d80 [ 420.286936][T12118] ? snprintf+0xe9/0x140 [ 420.291237][T12118] should_fail_ex+0x394/0x4c0 [ 420.295957][T12118] _copy_to_user+0x2f/0xa0 [ 420.300430][T12118] simple_read_from_buffer+0xe7/0x150 [ 420.305859][T12118] proc_fail_nth_read+0x1e8/0x260 [ 420.310942][T12118] ? proc_fault_inject_write+0x360/0x360 [ 420.316635][T12118] ? fsnotify_perm+0x271/0x5e0 [ 420.321436][T12118] ? proc_fault_inject_write+0x360/0x360 [ 420.327101][T12118] vfs_read+0x298/0x990 [ 420.331336][T12118] ? kernel_read+0x1e0/0x1e0 [ 420.335960][T12118] ? __fget_files+0x28/0x460 [ 420.340584][T12118] ? __fget_files+0x3fc/0x460 [ 420.345319][T12118] ? __fdget_pos+0x2a3/0x330 [ 420.349936][T12118] ? ksys_read+0x74/0x260 [ 420.354289][T12118] ksys_read+0x151/0x260 [ 420.358557][T12118] ? vfs_write+0x9a0/0x9a0 [ 420.363018][T12118] ? lockdep_hardirqs_on+0x98/0x150 [ 420.368242][T12118] do_syscall_64+0x55/0xb0 [ 420.372682][T12118] ? clear_bhb_loop+0x40/0x90 [ 420.377380][T12118] ? clear_bhb_loop+0x40/0x90 [ 420.382076][T12118] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.387991][T12118] RIP: 0033:0x7f95c375e68e [ 420.392425][T12118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.412057][T12118] RSP: 002b:00007f95c4750fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.420498][T12118] RAX: ffffffffffffffda RBX: 00007f95c47516c0 RCX: 00007f95c375e68e [ 420.428496][T12118] RDX: 000000000000000f RSI: 00007f95c47510a0 RDI: 0000000000000004 [ 420.436497][T12118] RBP: 00007f95c4751090 R08: 0000000000000000 R09: 0000000000000000 [ 420.444496][T12118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.452485][T12118] R13: 00007f95c3a26038 R14: 00007f95c3a25fa0 R15: 00007ffe1516b368 [ 420.460489][T12118] [ 420.609507][T12125] netlink: 1772 bytes leftover after parsing attributes in process `syz.5.2089'. [ 422.038620][T12148] syzkaller0: entered allmulticast mode [ 422.238362][T12154] netlink: 'syz.1.2102': attribute type 21 has an invalid length. [ 423.498608][T12189] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2110'. [ 423.586544][T12193] netlink: 'syz.4.2116': attribute type 9 has an invalid length. [ 423.613277][T12193] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2116'. [ 423.782406][T12196] netlink: 'syz.4.2116': attribute type 9 has an invalid length. [ 423.802993][T12196] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2116'. [ 424.357810][T12221] netlink: 'syz.1.2127': attribute type 21 has an invalid length. [ 424.365730][T12221] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2127'. [ 424.814874][T12233] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2130'. [ 424.836620][T12233] netlink: 'syz.3.2130': attribute type 10 has an invalid length. [ 425.471710][T12247] netlink: 'syz.1.2135': attribute type 13 has an invalid length. [ 425.484516][T12247] netlink: 'syz.1.2135': attribute type 58 has an invalid length. [ 425.494178][T12247] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2135'. [ 425.806489][T12256] netlink: 'syz.3.2138': attribute type 29 has an invalid length. [ 425.817692][T12256] netlink: 'syz.3.2138': attribute type 29 has an invalid length. [ 425.834062][T12256] netlink: 'syz.3.2138': attribute type 29 has an invalid length. [ 426.317974][T12273] FAULT_INJECTION: forcing a failure. [ 426.317974][T12273] name failslab, interval 1, probability 0, space 0, times 0 [ 426.355537][T12273] CPU: 1 PID: 12273 Comm: syz.1.2145 Not tainted syzkaller #0 [ 426.363067][T12273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.373166][T12273] Call Trace: [ 426.376498][T12273] [ 426.379492][T12273] dump_stack_lvl+0x18c/0x250 [ 426.384237][T12273] ? show_regs_print_info+0x20/0x20 [ 426.389487][T12273] ? load_image+0x420/0x420 [ 426.394045][T12273] ? __might_sleep+0xe0/0xe0 [ 426.398690][T12273] ? __lock_acquire+0x7d80/0x7d80 [ 426.403799][T12273] should_fail_ex+0x394/0x4c0 [ 426.408562][T12273] should_failslab+0x9/0x20 [ 426.413115][T12273] slab_pre_alloc_hook+0x59/0x300 [ 426.418189][T12273] ? __lock_acquire+0x7d80/0x7d80 [ 426.423263][T12273] ? kvmalloc_node+0x70/0x180 [ 426.428011][T12273] ? kvmalloc_node+0x70/0x180 [ 426.432748][T12273] __kmem_cache_alloc_node+0x53/0x250 [ 426.438175][T12273] ? __schedule_delayed_monitor_work+0x200/0x200 [ 426.444568][T12273] ? kvmalloc_node+0x70/0x180 [ 426.449296][T12273] __kmalloc_node+0xa6/0x240 [ 426.453939][T12273] kvmalloc_node+0x70/0x180 [ 426.458504][T12273] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 426.463939][T12273] ? 0xffffffffa00044c0 [ 426.468152][T12273] ? 0xffffffffa00044c0 [ 426.472335][T12273] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 426.478264][T12273] ? xdp_convert_md_to_buff+0x330/0x330 [ 426.483884][T12273] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 426.490170][T12273] ? xdp_convert_md_to_buff+0x5b/0x330 [ 426.495664][T12273] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 426.501072][T12273] ? __lock_acquire+0x7d80/0x7d80 [ 426.506150][T12273] ? dev_put+0x80/0x80 [ 426.510289][T12273] ? dev_put+0x80/0x80 [ 426.514394][T12273] bpf_prog_test_run+0x31f/0x390 [ 426.519392][T12273] __sys_bpf+0x49d/0x890 [ 426.523674][T12273] ? bpf_link_show_fdinfo+0x390/0x390 [ 426.529089][T12273] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 426.535311][T12273] __x64_sys_bpf+0x7c/0x90 [ 426.539755][T12273] do_syscall_64+0x55/0xb0 [ 426.544203][T12273] ? clear_bhb_loop+0x40/0x90 [ 426.548902][T12273] ? clear_bhb_loop+0x40/0x90 [ 426.553602][T12273] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.559533][T12273] RIP: 0033:0x7f95c379de59 [ 426.563983][T12273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.583711][T12273] RSP: 002b:00007f95c4751028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 426.592149][T12273] RAX: ffffffffffffffda RBX: 00007f95c3a25fa0 RCX: 00007f95c379de59 [ 426.600144][T12273] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 426.608146][T12273] RBP: 00007f95c4751090 R08: 0000000000000000 R09: 0000000000000000 [ 426.616158][T12273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.624159][T12273] R13: 00007f95c3a26038 R14: 00007f95c3a25fa0 R15: 00007ffe1516b368 [ 426.632269][T12273] [ 426.688382][T12278] FAULT_INJECTION: forcing a failure. [ 426.688382][T12278] name failslab, interval 1, probability 0, space 0, times 0 [ 426.703093][T12278] CPU: 1 PID: 12278 Comm: syz.5.2147 Not tainted syzkaller #0 [ 426.710639][T12278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.720767][T12278] Call Trace: [ 426.724090][T12278] [ 426.727077][T12278] dump_stack_lvl+0x18c/0x250 [ 426.731834][T12278] ? show_regs_print_info+0x20/0x20 [ 426.737109][T12278] ? load_image+0x420/0x420 [ 426.741673][T12278] ? __might_sleep+0xe0/0xe0 [ 426.746339][T12278] ? __lock_acquire+0x7d80/0x7d80 [ 426.751432][T12278] should_fail_ex+0x394/0x4c0 [ 426.756187][T12278] should_failslab+0x9/0x20 [ 426.760769][T12278] slab_pre_alloc_hook+0x59/0x300 [ 426.765899][T12278] kmem_cache_alloc_lru+0x4d/0x2b0 [ 426.771071][T12278] ? proc_alloc_inode+0x2a/0xb0 [ 426.775981][T12278] proc_alloc_inode+0x2a/0xb0 [ 426.780710][T12278] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 426.787086][T12278] new_inode_pseudo+0x63/0x1d0 [ 426.791903][T12278] new_inode+0x22/0x1d0 [ 426.796120][T12278] proc_pid_make_inode+0x24/0x190 [ 426.801211][T12278] proc_pident_instantiate+0x6d/0x2b0 [ 426.806646][T12278] proc_pident_lookup+0x1b3/0x290 [ 426.811735][T12278] __lookup_slow+0x2a1/0x400 [ 426.816386][T12278] ? lookup_one_len+0x2e0/0x2e0 [ 426.821302][T12278] ? down_read+0x1ac/0x2e0 [ 426.825777][T12278] lookup_slow+0x53/0x70 [ 426.830078][T12278] link_path_walk+0x97c/0xe40 [ 426.834831][T12278] ? handle_lookup_down+0x130/0x130 [ 426.840077][T12278] path_openat+0x291/0x3270 [ 426.844639][T12278] ? do_sys_openat2+0xda/0x1d0 [ 426.849447][T12278] ? __x64_sys_openat+0x139/0x160 [ 426.854527][T12278] ? verify_lock_unused+0x140/0x140 [ 426.859763][T12278] ? do_filp_open+0x430/0x430 [ 426.864523][T12278] do_filp_open+0x1f2/0x430 [ 426.869078][T12278] ? vfs_tmpfile+0x480/0x480 [ 426.873722][T12278] ? noop_direct_IO+0x20/0x20 [ 426.878471][T12278] ? _raw_spin_unlock+0x28/0x40 [ 426.883378][T12278] ? alloc_fd+0x590/0x640 [ 426.887764][T12278] do_sys_openat2+0x134/0x1d0 [ 426.892498][T12278] ? atomic_notifier_call_chain+0x16e/0x180 [ 426.898446][T12278] ? do_sys_open+0xe0/0xe0 [ 426.902904][T12278] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 426.908927][T12278] ? srcu_init_notifier_head+0x90/0x90 [ 426.914435][T12278] ? lock_chain_count+0x20/0x20 [ 426.919332][T12278] __x64_sys_openat+0x139/0x160 [ 426.924230][T12278] do_syscall_64+0x55/0xb0 [ 426.928710][T12278] ? clear_bhb_loop+0x40/0x90 [ 426.933432][T12278] ? clear_bhb_loop+0x40/0x90 [ 426.938157][T12278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 426.944098][T12278] RIP: 0033:0x7fe5f075e68e [ 426.948556][T12278] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 426.968226][T12278] RSP: 002b:00007fe5f168bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.976692][T12278] RAX: ffffffffffffffda RBX: 00007fe5f168c6c0 RCX: 00007fe5f075e68e [ 426.984718][T12278] RDX: 0000000000000002 RSI: 00007fe5f168bf90 RDI: ffffffffffffff9c [ 426.992768][T12278] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 427.000787][T12278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.008799][T12278] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 427.017007][T12278] [ 427.064115][T12281] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2149'. [ 427.649805][T12289] validate_nla: 3 callbacks suppressed [ 427.649823][T12289] netlink: 'syz.4.2151': attribute type 7 has an invalid length. [ 428.119442][T12295] netlink: 'syz.1.2154': attribute type 9 has an invalid length. [ 428.147444][T12295] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2154'. [ 428.728181][T12307] FAULT_INJECTION: forcing a failure. [ 428.728181][T12307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 428.767534][T12307] CPU: 1 PID: 12307 Comm: syz.1.2158 Not tainted syzkaller #0 [ 428.775107][T12307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 428.785223][T12307] Call Trace: [ 428.788573][T12307] [ 428.791570][T12307] dump_stack_lvl+0x18c/0x250 [ 428.796351][T12307] ? show_regs_print_info+0x20/0x20 [ 428.801651][T12307] ? load_image+0x420/0x420 [ 428.806254][T12307] ? __might_fault+0xaa/0x120 [ 428.811022][T12307] ? __lock_acquire+0x7d80/0x7d80 [ 428.816142][T12307] ? __virt_addr_valid+0x10c/0x380 [ 428.821363][T12307] should_fail_ex+0x394/0x4c0 [ 428.826152][T12307] _copy_from_user+0x2f/0xe0 [ 428.830827][T12307] ____sys_sendmsg+0x329/0x980 [ 428.835716][T12307] ? __sys_sendmsg_sock+0x30/0x30 [ 428.840819][T12307] ? __import_iovec+0x3fa/0x850 [ 428.845792][T12307] ? import_iovec+0x73/0xa0 [ 428.850389][T12307] ___sys_sendmsg+0x2a6/0x360 [ 428.855191][T12307] ? __sys_sendmsg+0x2b0/0x2b0 [ 428.860094][T12307] ? __lock_acquire+0x7d80/0x7d80 [ 428.865274][T12307] __se_sys_sendmsg+0x1d0/0x2c0 [ 428.870239][T12307] ? __x64_sys_sendmsg+0x80/0x80 [ 428.875417][T12307] ? lockdep_hardirqs_on+0x98/0x150 [ 428.880717][T12307] do_syscall_64+0x55/0xb0 [ 428.885198][T12307] ? clear_bhb_loop+0x40/0x90 [ 428.889934][T12307] ? clear_bhb_loop+0x40/0x90 [ 428.894701][T12307] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 428.900671][T12307] RIP: 0033:0x7f95c379de59 [ 428.905196][T12307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.924877][T12307] RSP: 002b:00007f95c4751028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 428.933361][T12307] RAX: ffffffffffffffda RBX: 00007f95c3a25fa0 RCX: 00007f95c379de59 [ 428.941395][T12307] RDX: 000000000000ff00 RSI: 0000200000001180 RDI: 0000000000000005 [ 428.949448][T12307] RBP: 00007f95c4751090 R08: 0000000000000000 R09: 0000000000000000 [ 428.957488][T12307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.965528][T12307] R13: 00007f95c3a26038 R14: 00007f95c3a25fa0 R15: 00007ffe1516b368 [ 428.973624][T12307] [ 429.699061][T12327] netlink: 'syz.5.2166': attribute type 10 has an invalid length. [ 429.719589][T12327] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2166'. [ 429.912675][T12333] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 429.920590][T12333] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2169'. [ 429.930412][T12333] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 431.025627][T12362] FAULT_INJECTION: forcing a failure. [ 431.025627][T12362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.047816][T12362] CPU: 1 PID: 12362 Comm: syz.1.2180 Not tainted syzkaller #0 [ 431.055369][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.065474][T12362] Call Trace: [ 431.068782][T12362] [ 431.071736][T12362] dump_stack_lvl+0x18c/0x250 [ 431.076462][T12362] ? show_regs_print_info+0x20/0x20 [ 431.081705][T12362] ? load_image+0x420/0x420 [ 431.086240][T12362] ? __lock_acquire+0x7d80/0x7d80 [ 431.091301][T12362] ? snprintf+0xe9/0x140 [ 431.095575][T12362] should_fail_ex+0x394/0x4c0 [ 431.100296][T12362] _copy_to_user+0x2f/0xa0 [ 431.104749][T12362] simple_read_from_buffer+0xe7/0x150 [ 431.110176][T12362] proc_fail_nth_read+0x1e8/0x260 [ 431.115248][T12362] ? proc_fault_inject_write+0x360/0x360 [ 431.120919][T12362] ? fsnotify_perm+0x271/0x5e0 [ 431.125736][T12362] ? proc_fault_inject_write+0x360/0x360 [ 431.131400][T12362] vfs_read+0x298/0x990 [ 431.135615][T12362] ? kernel_read+0x1e0/0x1e0 [ 431.140234][T12362] ? __fget_files+0x28/0x460 [ 431.144855][T12362] ? __fget_files+0x3fc/0x460 [ 431.149565][T12362] ? __fdget_pos+0x2a3/0x330 [ 431.154177][T12362] ? ksys_read+0x74/0x260 [ 431.158541][T12362] ksys_read+0x151/0x260 [ 431.162820][T12362] ? vfs_write+0x9a0/0x9a0 [ 431.167270][T12362] ? lockdep_hardirqs_on+0x98/0x150 [ 431.172504][T12362] do_syscall_64+0x55/0xb0 [ 431.176954][T12362] ? clear_bhb_loop+0x40/0x90 [ 431.181672][T12362] ? clear_bhb_loop+0x40/0x90 [ 431.186370][T12362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 431.192305][T12362] RIP: 0033:0x7f95c375e68e [ 431.196747][T12362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 431.216383][T12362] RSP: 002b:00007f95c4750fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 431.224826][T12362] RAX: ffffffffffffffda RBX: 00007f95c47516c0 RCX: 00007f95c375e68e [ 431.232820][T12362] RDX: 000000000000000f RSI: 00007f95c47510a0 RDI: 0000000000000008 [ 431.240805][T12362] RBP: 00007f95c4751090 R08: 0000000000000000 R09: 0000000000000000 [ 431.248790][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 431.256793][T12362] R13: 00007f95c3a26038 R14: 00007f95c3a25fa0 R15: 00007ffe1516b368 [ 431.264801][T12362] [ 432.119952][T12382] delete_channel: no stack [ 432.187900][T12388] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2188'. [ 432.703774][T12402] netlink: 'syz.5.2194': attribute type 13 has an invalid length. [ 432.727084][T12402] netlink: 'syz.5.2194': attribute type 58 has an invalid length. [ 432.746473][T12402] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2194'. [ 432.862638][T12406] netlink: 'syz.5.2194': attribute type 4 has an invalid length. [ 433.738091][T12416] netlink: 'syz.3.2199': attribute type 21 has an invalid length. [ 433.756868][T12416] netlink: 'syz.3.2199': attribute type 6 has an invalid length. [ 433.777997][T12416] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2199'. [ 433.809091][T12416] netlink: 'syz.3.2199': attribute type 16 has an invalid length. [ 433.818131][T12416] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2199'. [ 434.204976][T12443] netlink: 'syz.4.2208': attribute type 7 has an invalid length. [ 434.213007][T12443] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2208'. [ 434.363091][T12448] delete_channel: no stack [ 434.371727][T12448] delete_channel: no stack [ 434.379464][T12448] netlink: 'syz.3.2210': attribute type 17 has an invalid length. [ 434.387687][T12448] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2210'. [ 436.447545][T12496] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2225'. [ 436.467028][T12496] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 437.036686][T12506] netlink: 'syz.5.2228': attribute type 21 has an invalid length. [ 437.044931][T12506] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2228'. [ 437.061740][T12506] netlink: 6783 bytes leftover after parsing attributes in process `syz.5.2228'. [ 437.585517][T12515] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.2232'. [ 437.687267][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 437.698716][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 437.707113][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 437.716075][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 437.725752][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 437.734559][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 437.740091][T12523] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2234'. [ 437.891972][ T6719] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.030213][ T6719] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.145969][ T6719] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.259911][ T6719] team0: Port device netdevsim0 removed [ 438.270444][ T6719] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.303567][T12545] netlink: 'syz.5.2239': attribute type 7 has an invalid length. [ 438.317535][T12545] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2239'. [ 438.412146][T12522] chnl_net:caif_netlink_parms(): no params data found [ 438.836840][T12522] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.851251][T12522] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.860005][T12522] bridge_slave_0: entered allmulticast mode [ 438.868050][T12522] bridge_slave_0: entered promiscuous mode [ 438.881160][T12522] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.888703][T12522] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.896125][T12522] bridge_slave_1: entered allmulticast mode [ 438.926907][T12522] bridge_slave_1: entered promiscuous mode [ 439.271575][T12522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.384938][T12522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.592023][T12522] team0: Port device team_slave_0 added [ 439.623317][T12522] team0: Port device team_slave_1 added [ 439.759858][T12522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.766875][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.797224][T12573] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.2246'. [ 439.807145][T12573] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 439.824570][T12522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.837038][ T5087] Bluetooth: hci0: command tx timeout [ 439.889972][T12522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.927584][T12522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.969759][T12522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.030010][ T6719] gretap0 (unregistering): left allmulticast mode [ 440.036816][ T6719] gretap0 (unregistering): left promiscuous mode [ 440.054966][ T6719] Ÿë: port 1(gretap0) entered disabled state [ 440.085972][T12581] netlink: 'syz.4.2248': attribute type 13 has an invalid length. [ 440.104293][T12581] netlink: 'syz.4.2248': attribute type 58 has an invalid length. [ 440.128798][T12581] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2248'. [ 440.553438][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.560569][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.907743][ T5087] Bluetooth: hci0: command tx timeout [ 442.326832][T12581] netlink: 'syz.4.2248': attribute type 4 has an invalid length. [ 442.446831][T12522] hsr_slave_0: entered promiscuous mode [ 442.472416][T12522] hsr_slave_1: entered promiscuous mode [ 442.485057][T12522] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.493059][T12522] Cannot create hsr debugfs directory [ 442.705993][T12597] netlink: 'syz.3.2251': attribute type 7 has an invalid length. [ 442.762921][T12597] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2251'. [ 443.987580][ T5087] Bluetooth: hci0: command tx timeout [ 446.067501][ T5087] Bluetooth: hci0: command tx timeout [ 446.414640][T12654] FAULT_INJECTION: forcing a failure. [ 446.414640][T12654] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 446.433951][T12654] CPU: 1 PID: 12654 Comm: syz.5.2264 Not tainted syzkaller #0 [ 446.441475][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 446.451579][T12654] Call Trace: [ 446.454892][T12654] [ 446.457855][T12654] dump_stack_lvl+0x18c/0x250 [ 446.462596][T12654] ? show_regs_print_info+0x20/0x20 [ 446.467850][T12654] ? load_image+0x420/0x420 [ 446.472396][T12654] ? __lock_acquire+0x7d80/0x7d80 [ 446.477467][T12654] should_fail_ex+0x394/0x4c0 [ 446.482186][T12654] prepare_alloc_pages+0x1e1/0x5b0 [ 446.487350][T12654] __alloc_pages+0x134/0x460 [ 446.491986][T12654] ? zone_statistics+0x170/0x170 [ 446.496978][T12654] ? alloc_pages+0x4e1/0x740 [ 446.501652][T12654] ? do_raw_spin_unlock+0x121/0x230 [ 446.506907][T12654] __get_free_pages+0xc/0x30 [ 446.511542][T12654] kasan_populate_vmalloc_pte+0x35/0x100 [ 446.517283][T12654] __apply_to_page_range+0x860/0xdd0 [ 446.522646][T12654] ? kasan_populate_vmalloc+0x70/0x70 [ 446.528061][T12654] ? apply_to_page_range+0x50/0x50 [ 446.533216][T12654] ? do_raw_spin_unlock+0x121/0x230 [ 446.538468][T12654] alloc_vmap_area+0x1d26/0x1e50 [ 446.543471][T12654] ? vm_map_ram+0xcf0/0xcf0 [ 446.548081][T12654] ? rcu_is_watching+0x15/0xb0 [ 446.552911][T12654] __get_vm_area_node+0x162/0x370 [ 446.557980][T12654] __vmalloc_node_range+0x36f/0x1320 [ 446.563320][T12654] ? htab_map_alloc+0x3d7/0xeb0 [ 446.568207][T12654] ? _raw_spin_unlock+0x40/0x40 [ 446.573122][T12654] ? pcpu_alloc+0x11e7/0x1880 [ 446.577843][T12654] ? free_vm_area+0x50/0x50 [ 446.582433][T12654] bpf_map_area_alloc+0xf1/0x110 [ 446.587406][T12654] ? htab_map_alloc+0x3d7/0xeb0 [ 446.592290][T12654] htab_map_alloc+0x3d7/0xeb0 [ 446.597016][T12654] ? htab_map_alloc_check+0x350/0x440 [ 446.602441][T12654] map_create+0x877/0x12f0 [ 446.606907][T12654] __sys_bpf+0x651/0x890 [ 446.611228][T12654] ? bpf_link_show_fdinfo+0x390/0x390 [ 446.616655][T12654] ? lock_chain_count+0x20/0x20 [ 446.621574][T12654] __x64_sys_bpf+0x7c/0x90 [ 446.626036][T12654] do_syscall_64+0x55/0xb0 [ 446.630524][T12654] ? clear_bhb_loop+0x40/0x90 [ 446.635264][T12654] ? clear_bhb_loop+0x40/0x90 [ 446.639983][T12654] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 446.645934][T12654] RIP: 0033:0x7fe5f079de59 [ 446.650385][T12654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.670031][T12654] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 446.678490][T12654] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 446.686511][T12654] RDX: 0000000000000050 RSI: 0000200000000500 RDI: 0000000000000000 [ 446.694521][T12654] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 446.702530][T12654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.710541][T12654] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 446.718543][T12654] [ 446.796152][T12656] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2263'. [ 446.811108][T12656] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 446.888634][T12656] openvswitch: netlink: Message has 1 unknown bytes. [ 447.139106][ T6719] veth0_to_team: left allmulticast mode [ 447.144782][ T6719] veth0_to_team: left promiscuous mode [ 447.193322][ T6719] Ÿë: port 2(veth0_to_team) entered disabled state [ 447.232550][ T6719] vlan0: left allmulticast mode [ 447.247684][T12677] FAULT_INJECTION: forcing a failure. [ 447.247684][T12677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.255340][ T6744] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 447.262575][ T6719] veth0_vlan: left allmulticast mode [ 447.285275][ T6719] vlan0: left promiscuous mode [ 447.290766][T12677] CPU: 1 PID: 12677 Comm: syz.4.2269 Not tainted syzkaller #0 [ 447.298287][T12677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 447.308387][T12677] Call Trace: [ 447.311723][T12677] [ 447.314704][T12677] dump_stack_lvl+0x18c/0x250 [ 447.319455][T12677] ? show_regs_print_info+0x20/0x20 [ 447.324733][T12677] ? load_image+0x420/0x420 [ 447.329308][T12677] ? __might_fault+0xaa/0x120 [ 447.334039][T12677] ? __lock_acquire+0x7d80/0x7d80 [ 447.339139][T12677] should_fail_ex+0x394/0x4c0 [ 447.343905][T12677] _copy_from_iter+0x1cd/0x1290 [ 447.348825][T12677] ? rep_movs_alternative+0x4a/0x90 [ 447.354082][T12677] ? copyout_mc+0x70/0x70 [ 447.358463][T12677] ? copyout_mc+0x70/0x70 [ 447.362818][T12677] ? __virt_addr_valid+0x10c/0x380 [ 447.367972][T12677] ? page_copy_sane+0x16a/0x270 [ 447.372859][T12677] copy_page_from_iter+0x7b/0x100 [ 447.377925][T12677] skb_copy_datagram_from_iter+0x2ea/0x6f0 [ 447.383799][T12677] tun_get_user+0xc84/0x3d70 [ 447.388499][T12677] ? trace_event_raw_event_lock+0x150/0x240 [ 447.394431][T12677] ? aa_file_perm+0x3e3/0xee0 [ 447.399140][T12677] ? rcu_read_unlock+0xa0/0xa0 [ 447.403978][T12677] ? tun_get+0x1c/0x2e0 [ 447.408179][T12677] ? __lock_acquire+0x7d80/0x7d80 [ 447.413239][T12677] ? tun_get+0x1c/0x2e0 [ 447.417430][T12677] tun_chr_write_iter+0x119/0x200 [ 447.422485][T12677] vfs_write+0x474/0x9a0 [ 447.426777][T12677] ? file_end_write+0x250/0x250 [ 447.431685][T12677] ? __fget_files+0x3fc/0x460 [ 447.436423][T12677] ? __fdget_pos+0x1d8/0x330 [ 447.441050][T12677] ? ksys_write+0x74/0x260 [ 447.445509][T12677] ksys_write+0x151/0x260 [ 447.449886][T12677] ? __ia32_sys_read+0x90/0x90 [ 447.454702][T12677] ? lockdep_hardirqs_on+0x98/0x150 [ 447.459999][T12677] do_syscall_64+0x55/0xb0 [ 447.464472][T12677] ? clear_bhb_loop+0x40/0x90 [ 447.469189][T12677] ? clear_bhb_loop+0x40/0x90 [ 447.473901][T12677] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 447.479828][T12677] RIP: 0033:0x7fcadf19de59 [ 447.484272][T12677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.503909][T12677] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.512351][T12677] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 447.520342][T12677] RDX: 000000000000cfa4 RSI: 00002000000006c0 RDI: 00000000000000c8 [ 447.528337][T12677] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 447.536332][T12677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 447.544332][T12677] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 447.552388][T12677] [ 447.560121][ T6719] À: port 1(vlan0) entered disabled state [ 447.712295][ T6719] hsr_slave_0: left promiscuous mode [ 447.720703][ T6719] hsr_slave_1: left promiscuous mode [ 447.732451][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.745190][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.756503][ T6719] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.770199][ T6719] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.783941][ T6719] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 447.807509][ T6719] batman_adv: batadv0: Removing interface: veth0_vlan [ 447.887057][ T6719] veth1_macvtap: left promiscuous mode [ 447.899527][ T6719] veth0_macvtap: left promiscuous mode [ 447.905219][ T6719] veth1_vlan: left promiscuous mode [ 447.913240][ T6719] veth0_vlan: left promiscuous mode [ 448.390261][T12705] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2275'. [ 451.820263][ T6719] team0 (unregistering): Port device team_slave_1 removed [ 451.900020][ T6719] .` (unregistering): (slave cÙ): Releasing backup interface [ 451.942665][ T6719] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 452.274818][ T6719] .` (unregistering): Released all slaves [ 452.441572][T12522] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.501514][T12522] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.541701][T12522] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.596411][T12522] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.870733][T12522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.939113][T12522] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.007187][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.014528][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.121000][ T6729] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.128234][ T6729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.113804][T12751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2285'. [ 454.204174][T12522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.386934][T12758] netlink: 'syz.3.2286': attribute type 153 has an invalid length. [ 454.436582][T12758] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2286'. [ 454.557255][T12758] netlink: 12518 bytes leftover after parsing attributes in process `syz.3.2286'. [ 454.908252][T12522] veth0_vlan: entered promiscuous mode [ 454.966063][T12522] veth1_vlan: entered promiscuous mode [ 455.085698][T12522] veth0_macvtap: entered promiscuous mode [ 455.131134][T12522] veth1_macvtap: entered promiscuous mode [ 455.171429][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.202015][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.232524][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.253764][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.287855][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.314345][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.336578][T12522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.379018][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.417408][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.442875][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.464636][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.492094][T12522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.517945][T12522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.532507][T12522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.554474][T12522] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.572811][T12522] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.585528][T12522] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.618904][T12522] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.662797][T12782] FAULT_INJECTION: forcing a failure. [ 455.662797][T12782] name failslab, interval 1, probability 0, space 0, times 0 [ 455.687936][T12782] CPU: 1 PID: 12782 Comm: syz.3.2291 Not tainted syzkaller #0 [ 455.695481][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.705588][T12782] Call Trace: [ 455.708909][T12782] [ 455.711892][T12782] dump_stack_lvl+0x18c/0x250 [ 455.716638][T12782] ? show_regs_print_info+0x20/0x20 [ 455.721904][T12782] ? load_image+0x420/0x420 [ 455.726472][T12782] ? __might_sleep+0xe0/0xe0 [ 455.731145][T12782] ? __lock_acquire+0x7d80/0x7d80 [ 455.736255][T12782] should_fail_ex+0x394/0x4c0 [ 455.741005][T12782] should_failslab+0x9/0x20 [ 455.745568][T12782] slab_pre_alloc_hook+0x59/0x300 [ 455.750662][T12782] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 455.756019][T12782] __kmem_cache_alloc_node+0x53/0x250 [ 455.761454][T12782] ? __asan_memset+0x22/0x40 [ 455.766103][T12782] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 455.771464][T12782] kmalloc_trace+0x2a/0xe0 [ 455.775952][T12782] __xdp_reg_mem_model+0x1e3/0x5a0 [ 455.781123][T12782] ? kvmalloc_node+0x70/0x180 [ 455.785900][T12782] ? kvmalloc_node+0x70/0x180 [ 455.790643][T12782] ? xdp_reg_mem_model+0x40/0x40 [ 455.795651][T12782] xdp_reg_mem_model+0x22/0x40 [ 455.800479][T12782] bpf_test_run_xdp_live+0x262/0x1b30 [ 455.805915][T12782] ? 0xffffffffa00044c0 [ 455.810116][T12782] ? 0xffffffffa00044c0 [ 455.814321][T12782] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 455.820284][T12782] ? xdp_convert_md_to_buff+0x330/0x330 [ 455.825936][T12782] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 455.832238][T12782] ? _copy_from_user+0xa5/0xe0 [ 455.837050][T12782] ? bpf_test_init+0x119/0x140 [ 455.841868][T12782] ? xdp_convert_md_to_buff+0x5b/0x330 [ 455.847374][T12782] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 455.852789][T12782] ? __lock_acquire+0x7d80/0x7d80 [ 455.857879][T12782] ? dev_put+0x80/0x80 [ 455.862022][T12782] ? dev_put+0x80/0x80 [ 455.866156][T12782] bpf_prog_test_run+0x31f/0x390 [ 455.871152][T12782] __sys_bpf+0x49d/0x890 [ 455.875444][T12782] ? bpf_link_show_fdinfo+0x390/0x390 [ 455.880878][T12782] ? lock_chain_count+0x20/0x20 [ 455.885799][T12782] __x64_sys_bpf+0x7c/0x90 [ 455.890305][T12782] do_syscall_64+0x55/0xb0 [ 455.894786][T12782] ? clear_bhb_loop+0x40/0x90 [ 455.899521][T12782] ? clear_bhb_loop+0x40/0x90 [ 455.904252][T12782] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 455.910202][T12782] RIP: 0033:0x7f713639de59 [ 455.914657][T12782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.934313][T12782] RSP: 002b:00007f71371d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.942783][T12782] RAX: ffffffffffffffda RBX: 00007f7136626090 RCX: 00007f713639de59 [ 455.950800][T12782] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 000000000000000a [ 455.958826][T12782] RBP: 00007f71371d6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.966841][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.974861][T12782] R13: 00007f7136626128 R14: 00007f7136626090 R15: 00007ffc2785ded8 [ 455.983304][T12782] [ 456.239069][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.247074][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.444571][ T6729] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.496120][ T6729] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.674774][T12794] netlink: 'syz.3.2295': attribute type 3 has an invalid length. [ 456.767520][T12794] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2295'. [ 456.975625][T12800] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2227'. [ 457.147588][T12801] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2227'. [ 457.761988][T12826] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2301'. [ 460.340351][T12872] FAULT_INJECTION: forcing a failure. [ 460.340351][T12872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.429381][T12872] CPU: 1 PID: 12872 Comm: syz.3.2308 Not tainted syzkaller #0 [ 460.436924][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.447034][T12872] Call Trace: [ 460.450366][T12872] [ 460.453348][T12872] dump_stack_lvl+0x18c/0x250 [ 460.458088][T12872] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.464308][T12872] ? show_regs_print_info+0x20/0x20 [ 460.469609][T12872] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 460.475859][T12872] should_fail_ex+0x394/0x4c0 [ 460.480625][T12872] _copy_to_iter+0x1ce/0x1110 [ 460.485353][T12872] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 460.491377][T12872] ? lock_chain_count+0x20/0x20 [ 460.496275][T12872] ? iov_iter_init+0x1e0/0x1e0 [ 460.501083][T12872] ? __local_bh_enable_ip+0x13a/0x1c0 [ 460.506495][T12872] ? lockdep_hardirqs_on+0x98/0x150 [ 460.511758][T12872] ? page_copy_sane+0x16a/0x270 [ 460.516661][T12872] copy_page_to_iter+0xa7/0x150 [ 460.521568][T12872] __sk_msg_recvmsg+0x32b/0xde0 [ 460.526545][T12872] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 460.532510][T12872] unix_bpf_recvmsg+0x5b0/0xdd0 [ 460.537412][T12872] ? unix_stream_bpf_update_proto+0x310/0x310 [ 460.543502][T12872] ? wait_woken+0x180/0x180 [ 460.548032][T12872] ? aa_sock_msg_perm+0x94/0x150 [ 460.552994][T12872] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 460.558302][T12872] ? security_socket_recvmsg+0x89/0xb0 [ 460.563787][T12872] ? unix_dgram_recvmsg+0x71/0xd0 [ 460.568838][T12872] ? unix_dgram_sendmsg+0x16e0/0x16e0 [ 460.574237][T12872] ____sys_recvmsg+0x2bd/0x5d0 [ 460.579035][T12872] ? __sys_recvmsg_sock+0x50/0x50 [ 460.584093][T12872] ? import_iovec+0x73/0xa0 [ 460.588620][T12872] ___sys_recvmsg+0x214/0x590 [ 460.593329][T12872] ? __sys_recvmsg+0x2a0/0x2a0 [ 460.598119][T12872] ? ksys_write+0x1d2/0x260 [ 460.602664][T12872] ? __fget_files+0x3fc/0x460 [ 460.607385][T12872] __x64_sys_recvmsg+0x21e/0x2f0 [ 460.612341][T12872] ? ___sys_recvmsg+0x590/0x590 [ 460.617217][T12872] ? lockdep_hardirqs_on+0x98/0x150 [ 460.622542][T12872] do_syscall_64+0x55/0xb0 [ 460.627011][T12872] ? clear_bhb_loop+0x40/0x90 [ 460.631724][T12872] ? clear_bhb_loop+0x40/0x90 [ 460.636433][T12872] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.642361][T12872] RIP: 0033:0x7f713639de59 [ 460.646795][T12872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.666436][T12872] RSP: 002b:00007f71371f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 460.674886][T12872] RAX: ffffffffffffffda RBX: 00007f7136625fa0 RCX: 00007f713639de59 [ 460.682888][T12872] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000004 [ 460.690899][T12872] RBP: 00007f71371f7090 R08: 0000000000000000 R09: 0000000000000000 [ 460.698893][T12872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.706896][T12872] R13: 00007f7136626038 R14: 00007f7136625fa0 R15: 00007ffc2785ded8 [ 460.714917][T12872] [ 462.146515][T12912] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2319'. [ 463.635319][T12939] netlink: 'syz.5.2329': attribute type 4 has an invalid length. [ 463.696364][T12939] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2329'. [ 465.311381][T12959] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2333'. [ 466.215492][T12976] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2342'. [ 466.315476][T12976] team0: Port device team_slave_0 removed [ 466.358295][T12976] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 466.554930][T12984] netlink: 'syz.1.2343': attribute type 2 has an invalid length. [ 466.583739][T12984] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2343'. [ 466.950574][T12993] netlink: 'syz.1.2345': attribute type 10 has an invalid length. [ 467.001520][T12993] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.035301][T12993] bond0: (slave team0): Enslaving as an active interface with an up link [ 467.244400][T12998] FAULT_INJECTION: forcing a failure. [ 467.244400][T12998] name failslab, interval 1, probability 0, space 0, times 0 [ 467.258555][T12998] CPU: 1 PID: 12998 Comm: syz.4.2349 Not tainted syzkaller #0 [ 467.266085][T12998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 467.276191][T12998] Call Trace: [ 467.279521][T12998] [ 467.282494][T12998] dump_stack_lvl+0x18c/0x250 [ 467.287230][T12998] ? show_regs_print_info+0x20/0x20 [ 467.292536][T12998] ? load_image+0x420/0x420 [ 467.297126][T12998] ? __might_sleep+0xe0/0xe0 [ 467.301771][T12998] ? __lock_acquire+0x7d80/0x7d80 [ 467.306862][T12998] should_fail_ex+0x394/0x4c0 [ 467.311606][T12998] should_failslab+0x9/0x20 [ 467.316163][T12998] slab_pre_alloc_hook+0x59/0x300 [ 467.321251][T12998] ? sk_prot_alloc+0xe7/0x210 [ 467.325991][T12998] ? sk_prot_alloc+0xe7/0x210 [ 467.330734][T12998] __kmem_cache_alloc_node+0x53/0x250 [ 467.336162][T12998] ? sk_prot_alloc+0xe7/0x210 [ 467.340895][T12998] __kmalloc+0xa7/0x240 [ 467.345095][T12998] sk_prot_alloc+0xe7/0x210 [ 467.349674][T12998] ? sk_alloc+0x24/0x350 [ 467.353985][T12998] sk_alloc+0x3a/0x350 [ 467.358088][T12998] ? bpf_ctx_init+0x154/0x190 [ 467.362818][T12998] bpf_prog_test_run_skb+0x371/0x18f0 [ 467.368239][T12998] ? __fget_files+0x28/0x460 [ 467.372882][T12998] ? __fget_files+0x3fc/0x460 [ 467.377609][T12998] ? cpu_online+0x60/0x60 [ 467.381988][T12998] bpf_prog_test_run+0x31f/0x390 [ 467.386994][T12998] __sys_bpf+0x49d/0x890 [ 467.391293][T12998] ? bpf_link_show_fdinfo+0x390/0x390 [ 467.396707][T12998] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 467.402919][T12998] __x64_sys_bpf+0x7c/0x90 [ 467.407387][T12998] do_syscall_64+0x55/0xb0 [ 467.411851][T12998] ? clear_bhb_loop+0x40/0x90 [ 467.416557][T12998] ? clear_bhb_loop+0x40/0x90 [ 467.421280][T12998] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 467.427223][T12998] RIP: 0033:0x7fcadf19de59 [ 467.431693][T12998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.451343][T12998] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 467.459799][T12998] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 467.467816][T12998] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 467.475817][T12998] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 467.483922][T12998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.491907][T12998] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 467.499909][T12998] [ 469.403018][T13035] netlink: 'syz.3.2359': attribute type 10 has an invalid length. [ 469.414515][T13035] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2359'. [ 469.564012][T13037] netlink: 'syz.3.2361': attribute type 10 has an invalid length. [ 469.615238][T13038] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2361'. [ 469.633305][T13038] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2361'. [ 469.653507][T13037] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2361'. [ 469.731238][T13040] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2362'. [ 469.957156][T13045] netlink: 'syz.3.2364': attribute type 21 has an invalid length. [ 469.965125][T13045] netlink: 'syz.3.2364': attribute type 1 has an invalid length. [ 469.990291][T13045] netlink: 'syz.3.2364': attribute type 22 has an invalid length. [ 469.999229][T13045] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.2364'. [ 470.326283][T13047] FAULT_INJECTION: forcing a failure. [ 470.326283][T13047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.350164][T13047] CPU: 0 PID: 13047 Comm: syz.5.2365 Not tainted syzkaller #0 [ 470.357719][T13047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.367813][T13047] Call Trace: [ 470.371132][T13047] [ 470.374109][T13047] dump_stack_lvl+0x18c/0x250 [ 470.378864][T13047] ? show_regs_print_info+0x20/0x20 [ 470.384128][T13047] ? load_image+0x420/0x420 [ 470.388681][T13047] ? __might_fault+0xaa/0x120 [ 470.393414][T13047] ? __lock_acquire+0x7d80/0x7d80 [ 470.398486][T13047] should_fail_ex+0x394/0x4c0 [ 470.403214][T13047] _copy_to_iter+0x1ce/0x1110 [ 470.407932][T13047] ? __lock_acquire+0x7d80/0x7d80 [ 470.413023][T13047] ? mark_lock+0x94/0x320 [ 470.417429][T13047] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 470.423461][T13047] ? iov_iter_init+0x1e0/0x1e0 [ 470.428275][T13047] ? __virt_addr_valid+0x10c/0x380 [ 470.433444][T13047] ? __virt_addr_valid+0x10c/0x380 [ 470.438609][T13047] ? __check_object_size+0x4fc/0xa40 [ 470.443955][T13047] __skb_datagram_iter+0xdb/0x780 [ 470.449035][T13047] ? wait_woken+0x180/0x180 [ 470.453588][T13047] ? skb_copy_datagram_iter+0x200/0x200 [ 470.459192][T13047] skb_copy_datagram_iter+0xb1/0x200 [ 470.464534][T13047] tipc_recvstream+0x6f6/0xe70 [ 470.469461][T13047] ? tipc_sendstream+0x70/0x70 [ 470.474276][T13047] ____sys_recvmsg+0x2bd/0x5d0 [ 470.479100][T13047] ? __sys_recvmsg_sock+0x50/0x50 [ 470.484224][T13047] ? import_iovec+0x73/0xa0 [ 470.488782][T13047] ___sys_recvmsg+0x214/0x590 [ 470.493505][T13047] ? __sys_recvmsg+0x2a0/0x2a0 [ 470.498311][T13047] ? trace_call_bpf+0xc3/0x6c0 [ 470.503132][T13047] ? trace_call_bpf+0x5e9/0x6c0 [ 470.508046][T13047] ? __fget_files+0x3fc/0x460 [ 470.512776][T13047] __x64_sys_recvmsg+0x21e/0x2f0 [ 470.517772][T13047] ? perf_trace_preemptirq_template+0x269/0x330 [ 470.524076][T13047] ? ___sys_recvmsg+0x590/0x590 [ 470.528981][T13047] ? lockdep_hardirqs_on+0x98/0x150 [ 470.534236][T13047] do_syscall_64+0x55/0xb0 [ 470.538708][T13047] ? clear_bhb_loop+0x40/0x90 [ 470.543439][T13047] ? clear_bhb_loop+0x40/0x90 [ 470.548157][T13047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 470.554104][T13047] RIP: 0033:0x7fe5f079de59 [ 470.558563][T13047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.578206][T13047] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 470.586663][T13047] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 470.594685][T13047] RDX: 0000000000000100 RSI: 0000200000000400 RDI: 0000000000000005 [ 470.602693][T13047] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 470.610724][T13047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 470.618728][T13047] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 470.626760][T13047] [ 471.232347][T13061] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 471.258072][T13060] netlink: 'syz.3.2369': attribute type 1 has an invalid length. [ 471.265885][T13060] netlink: 'syz.3.2369': attribute type 3 has an invalid length. [ 471.266086][T13061] netlink: 'syz.3.2369': attribute type 3 has an invalid length. [ 471.288564][T13061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2369'. [ 471.303835][T13060] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2369'. [ 471.306401][T13063] FAULT_INJECTION: forcing a failure. [ 471.306401][T13063] name failslab, interval 1, probability 0, space 0, times 0 [ 471.327276][T13063] CPU: 0 PID: 13063 Comm: syz.5.2370 Not tainted syzkaller #0 [ 471.334790][T13063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.344885][T13063] Call Trace: [ 471.348198][T13063] [ 471.351161][T13063] dump_stack_lvl+0x18c/0x250 [ 471.355915][T13063] ? show_regs_print_info+0x20/0x20 [ 471.361170][T13063] ? load_image+0x420/0x420 [ 471.365724][T13063] ? __might_sleep+0xe0/0xe0 [ 471.370362][T13063] ? __lock_acquire+0x7d80/0x7d80 [ 471.375432][T13063] should_fail_ex+0x394/0x4c0 [ 471.380142][T13063] should_failslab+0x9/0x20 [ 471.384660][T13063] slab_pre_alloc_hook+0x59/0x300 [ 471.389708][T13063] kmem_cache_alloc_lru+0x4d/0x2b0 [ 471.394852][T13063] ? proc_alloc_inode+0x2a/0xb0 [ 471.399727][T13063] proc_alloc_inode+0x2a/0xb0 [ 471.404428][T13063] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 471.410776][T13063] new_inode_pseudo+0x63/0x1d0 [ 471.415560][T13063] new_inode+0x22/0x1d0 [ 471.419764][T13063] proc_pid_make_inode+0x24/0x190 [ 471.424848][T13063] proc_pident_instantiate+0x6d/0x2b0 [ 471.430265][T13063] proc_pident_lookup+0x1b3/0x290 [ 471.435333][T13063] __lookup_slow+0x2a1/0x400 [ 471.439958][T13063] ? lookup_one_len+0x2e0/0x2e0 [ 471.444848][T13063] ? down_read+0x1ac/0x2e0 [ 471.449327][T13063] lookup_slow+0x53/0x70 [ 471.453606][T13063] link_path_walk+0x97c/0xe40 [ 471.458338][T13063] ? handle_lookup_down+0x130/0x130 [ 471.463597][T13063] path_openat+0x291/0x3270 [ 471.468216][T13063] ? do_sys_openat2+0xda/0x1d0 [ 471.473013][T13063] ? __x64_sys_openat+0x139/0x160 [ 471.478061][T13063] ? verify_lock_unused+0x140/0x140 [ 471.483284][T13063] ? do_filp_open+0x430/0x430 [ 471.487998][T13063] do_filp_open+0x1f2/0x430 [ 471.492529][T13063] ? vfs_tmpfile+0x480/0x480 [ 471.497174][T13063] ? noop_direct_IO+0x20/0x20 [ 471.501898][T13063] ? _raw_spin_unlock+0x28/0x40 [ 471.506778][T13063] ? alloc_fd+0x590/0x640 [ 471.511142][T13063] do_sys_openat2+0x134/0x1d0 [ 471.515872][T13063] ? atomic_notifier_call_chain+0x16e/0x180 [ 471.521805][T13063] ? do_sys_open+0xe0/0xe0 [ 471.526265][T13063] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 471.532301][T13063] ? srcu_init_notifier_head+0x90/0x90 [ 471.537795][T13063] ? lock_chain_count+0x20/0x20 [ 471.542687][T13063] __x64_sys_openat+0x139/0x160 [ 471.547584][T13063] do_syscall_64+0x55/0xb0 [ 471.552049][T13063] ? clear_bhb_loop+0x40/0x90 [ 471.556759][T13063] ? clear_bhb_loop+0x40/0x90 [ 471.561464][T13063] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 471.567407][T13063] RIP: 0033:0x7fe5f075e68e [ 471.571856][T13063] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 471.591501][T13063] RSP: 002b:00007fe5f168bec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 471.599930][T13063] RAX: ffffffffffffffda RBX: 00007fe5f168c6c0 RCX: 00007fe5f075e68e [ 471.607916][T13063] RDX: 0000000000000002 RSI: 00007fe5f168bf90 RDI: ffffffffffffff9c [ 471.615925][T13063] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 471.623944][T13063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.631944][T13063] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 471.639966][T13063] [ 473.584627][T13060] netlink: 'syz.3.2369': attribute type 46 has an invalid length. [ 473.594965][T13060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2369'. [ 474.130774][T13086] team0: Device hsr_slave_0 failed to register rx_handler [ 474.696855][ T6729] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.834647][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 474.844922][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 474.855477][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.866335][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.890403][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 474.900735][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.019556][ T6729] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.130910][ T6729] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.226652][T13114] syz.4.2383[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.226911][T13114] syz.4.2383[13114] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.246601][ T6729] team0: Port device netdevsim0 removed [ 475.273132][ T6729] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.763692][T13106] chnl_net:caif_netlink_parms(): no params data found [ 475.984916][T13106] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.995971][T13106] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.003862][T13106] bridge_slave_0: entered allmulticast mode [ 476.021917][T13106] bridge_slave_0: entered promiscuous mode [ 476.050720][T13106] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.087743][T13106] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.095271][T13106] bridge_slave_1: entered allmulticast mode [ 476.148683][T13106] bridge_slave_1: entered promiscuous mode [ 476.383809][T13106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.481440][T13106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.514984][T13145] validate_nla: 1 callbacks suppressed [ 476.515358][T13145] netlink: 'syz.4.2391': attribute type 1 has an invalid length. [ 476.579787][T13145] netlink: 'syz.4.2391': attribute type 2 has an invalid length. [ 476.612198][T13145] netlink: 'syz.4.2391': attribute type 2 has an invalid length. [ 476.668360][T13106] team0: Port device team_slave_0 added [ 476.683927][T13145] netlink: 'syz.4.2391': attribute type 3 has an invalid length. [ 476.718370][T13145] netlink: 'syz.4.2391': attribute type 4 has an invalid length. [ 476.726383][T13145] netlink: 'syz.4.2391': attribute type 5 has an invalid length. [ 476.744740][T13106] team0: Port device team_slave_1 added [ 476.788405][T13145] netlink: 'syz.4.2391': attribute type 6 has an invalid length. [ 476.837777][T13145] netlink: 'syz.4.2391': attribute type 7 has an invalid length. [ 476.877893][T13145] netlink: 'syz.4.2391': attribute type 9 has an invalid length. [ 476.908058][T13145] netlink: 'syz.4.2391': attribute type 10 has an invalid length. [ 476.932591][T13106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.942319][T13145] netlink: 126304 bytes leftover after parsing attributes in process `syz.4.2391'. [ 476.956879][ T51] Bluetooth: hci1: command tx timeout [ 476.963279][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.991922][T13106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.009962][T13106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.016962][T13106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 477.043289][T13106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.181108][T13106] hsr_slave_0: entered promiscuous mode [ 477.198677][T13106] hsr_slave_1: entered promiscuous mode [ 477.236208][T13106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.262311][T13106] Cannot create hsr debugfs directory [ 477.440942][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2394'. [ 477.496122][T13154] netlink: 14334 bytes leftover after parsing attributes in process `syz.5.2395'. [ 477.692927][T13162] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2394'. [ 479.027876][ T51] Bluetooth: hci1: command tx timeout [ 480.362017][T13232] bridge_slave_1: left allmulticast mode [ 480.372757][T13232] bridge_slave_1: left promiscuous mode [ 480.385130][T13232] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.494308][T13232] bridge_slave_0: left allmulticast mode [ 480.507696][T13232] bridge_slave_0: left promiscuous mode [ 480.529539][T13232] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.015637][T13236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2411'. [ 481.109502][ T51] Bluetooth: hci1: command tx timeout [ 481.351275][ T6730] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 481.381521][T13106] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 481.465959][T13106] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 481.509532][T13106] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 481.619513][T13106] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 481.762972][T13250] validate_nla: 3 callbacks suppressed [ 481.763019][T13250] netlink: 'syz.4.2416': attribute type 10 has an invalid length. [ 481.829202][T13250] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2416'. [ 483.172317][T13106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.187524][ T51] Bluetooth: hci1: command tx timeout [ 483.286031][ T6729] veth0_to_team: left allmulticast mode [ 483.316830][ T6729] veth0_to_team: left promiscuous mode [ 483.329566][ T6729] Ÿë: port 1(veth0_to_team) entered disabled state [ 483.343151][ T6729] vlan0: left allmulticast mode [ 483.357424][ T6729] vlan0: left promiscuous mode [ 483.371704][ T6729] À: port 1(vlan0) entered disabled state [ 483.503723][ T6729] veth1_vlan: left promiscuous mode [ 483.514636][T13286] netlink: 'syz.5.2425': attribute type 29 has an invalid length. [ 483.525247][ T6729] veth0_vlan: left promiscuous mode [ 484.302143][ T6729] team0 (unregistering): Port device hsr_slave_0 removed [ 484.492488][ T6729] team0 (unregistering): Port device team_slave_1 removed [ 484.988579][T13288] netlink: 'syz.1.2424': attribute type 10 has an invalid length. [ 485.006053][T13288] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2424'. [ 485.079688][T13286] netlink: 'syz.5.2425': attribute type 29 has an invalid length. [ 485.113669][T13106] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.156073][ T6730] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.163335][ T6730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 485.231640][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.238880][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 485.555048][T13303] netlink: 'syz.1.2427': attribute type 10 has an invalid length. [ 485.570004][T13303] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.2427'. [ 485.871077][T13106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.051103][T13319] bridge_slave_1: left allmulticast mode [ 486.092416][T13319] bridge_slave_1: left promiscuous mode [ 486.115734][T13319] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.803248][T13319] bridge_slave_0: left allmulticast mode [ 486.809482][T13319] bridge_slave_0: left promiscuous mode [ 486.816153][T13319] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.011833][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2431'. [ 487.045670][T13106] veth0_vlan: entered promiscuous mode [ 487.063063][T13106] veth1_vlan: entered promiscuous mode [ 487.174564][T13106] veth0_macvtap: entered promiscuous mode [ 487.194037][T13106] veth1_macvtap: entered promiscuous mode [ 487.220284][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.231387][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.241863][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.254902][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.265190][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.276340][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.286672][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.300186][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.313786][T13106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.332241][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.343914][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.354198][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.364934][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.375676][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.386290][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.397873][T13106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.409079][T13106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.422374][T13106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.439660][T13106] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.449361][T13106] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.461062][T13106] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.471999][T13106] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.593430][ T6731] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.613453][ T6731] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.653969][ T6731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.664392][ T6731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.795024][T13335] FAULT_INJECTION: forcing a failure. [ 487.795024][T13335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.819969][T13335] CPU: 1 PID: 13335 Comm: syz.5.2445 Not tainted syzkaller #0 [ 487.827550][T13335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 487.837652][T13335] Call Trace: [ 487.840992][T13335] [ 487.843950][T13335] dump_stack_lvl+0x18c/0x250 [ 487.848689][T13335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.854885][T13335] ? show_regs_print_info+0x20/0x20 [ 487.860115][T13335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.866311][T13335] should_fail_ex+0x394/0x4c0 [ 487.871050][T13335] _copy_from_user+0x2f/0xe0 [ 487.875692][T13335] generic_map_update_batch+0x53e/0x800 [ 487.881297][T13335] ? rcu_read_unlock+0xa0/0xa0 [ 487.886114][T13335] ? __fdget+0x180/0x210 [ 487.890394][T13335] ? rcu_read_unlock+0xa0/0xa0 [ 487.895179][T13335] bpf_map_do_batch+0x3f2/0x600 [ 487.900121][T13335] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 487.906493][T13335] __sys_bpf+0x381/0x890 [ 487.910765][T13335] ? bpf_link_show_fdinfo+0x390/0x390 [ 487.916166][T13335] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.922367][T13335] __x64_sys_bpf+0x7c/0x90 [ 487.926814][T13335] do_syscall_64+0x55/0xb0 [ 487.931273][T13335] ? clear_bhb_loop+0x40/0x90 [ 487.935980][T13335] ? clear_bhb_loop+0x40/0x90 [ 487.940692][T13335] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 487.946625][T13335] RIP: 0033:0x7fe5f079de59 [ 487.951067][T13335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.970701][T13335] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 487.979144][T13335] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 487.987145][T13335] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 487.995143][T13335] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 488.003141][T13335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.011168][T13335] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 488.019198][T13335] [ 488.846804][T13351] netlink: 'syz.3.2440': attribute type 10 has an invalid length. [ 488.857636][T13351] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.2440'. [ 490.732480][T13359] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2444'. [ 491.829823][T13377] FAULT_INJECTION: forcing a failure. [ 491.829823][T13377] name failslab, interval 1, probability 0, space 0, times 0 [ 491.848762][T13377] CPU: 1 PID: 13377 Comm: syz.3.2451 Not tainted syzkaller #0 [ 491.856314][T13377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 491.866443][T13377] Call Trace: [ 491.869785][T13377] [ 491.872782][T13377] dump_stack_lvl+0x18c/0x250 [ 491.877544][T13377] ? show_regs_print_info+0x20/0x20 [ 491.882811][T13377] ? load_image+0x420/0x420 [ 491.887397][T13377] ? verify_lock_unused+0x140/0x140 [ 491.892666][T13377] ? perf_trace_lock+0x303/0x3b0 [ 491.897708][T13377] should_fail_ex+0x394/0x4c0 [ 491.902510][T13377] should_failslab+0x9/0x20 [ 491.907113][T13377] slab_pre_alloc_hook+0x59/0x300 [ 491.912244][T13377] kmem_cache_alloc+0x5a/0x2c0 [ 491.917121][T13377] ? skb_clone+0x1eb/0x370 [ 491.921624][T13377] skb_clone+0x1eb/0x370 [ 491.925974][T13377] __netlink_deliver_tap+0x411/0x7f0 [ 491.931345][T13377] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.936621][T13377] netlink_deliver_tap+0x19c/0x1b0 [ 491.941791][T13377] netlink_unicast+0x77b/0x930 [ 491.946634][T13377] netlink_sendmsg+0x8d0/0xbf0 [ 491.951467][T13377] ? netlink_getsockopt+0x590/0x590 [ 491.956718][T13377] ? apparmor_socket_sendmsg+0x8e/0x330 [ 491.962313][T13377] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 491.967643][T13377] ? security_socket_sendmsg+0x80/0xa0 [ 491.973148][T13377] ? netlink_getsockopt+0x590/0x590 [ 491.978393][T13377] ____sys_sendmsg+0x61b/0x980 [ 491.983220][T13377] ? __asan_memset+0x22/0x40 [ 491.987862][T13377] ? __sys_sendmsg_sock+0x30/0x30 [ 491.992938][T13377] ? __import_iovec+0x5f2/0x850 [ 491.997851][T13377] ? import_iovec+0x73/0xa0 [ 492.002417][T13377] ___sys_sendmsg+0x2a6/0x360 [ 492.007153][T13377] ? __sys_sendmsg+0x2b0/0x2b0 [ 492.012025][T13377] ? __lock_acquire+0x7d80/0x7d80 [ 492.017186][T13377] __se_sys_sendmsg+0x1d0/0x2c0 [ 492.022097][T13377] ? __x64_sys_sendmsg+0x80/0x80 [ 492.027143][T13377] ? lockdep_hardirqs_on+0x98/0x150 [ 492.032477][T13377] do_syscall_64+0x55/0xb0 [ 492.036966][T13377] ? clear_bhb_loop+0x40/0x90 [ 492.041681][T13377] ? clear_bhb_loop+0x40/0x90 [ 492.046398][T13377] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.052355][T13377] RIP: 0033:0x7f7a60d9de59 [ 492.056812][T13377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.076468][T13377] RSP: 002b:00007f7a61c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 492.084929][T13377] RAX: ffffffffffffffda RBX: 00007f7a61025fa0 RCX: 00007f7a60d9de59 [ 492.092929][T13377] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 492.100934][T13377] RBP: 00007f7a61c37090 R08: 0000000000000000 R09: 0000000000000000 [ 492.108952][T13377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.116974][T13377] R13: 00007f7a61026038 R14: 00007f7a61025fa0 R15: 00007fff738cc478 [ 492.125027][T13377] [ 493.670447][ T5087] Bluetooth: hci5: command 0x0406 tx timeout [ 494.105378][T13395] netlink: 'syz.5.2456': attribute type 10 has an invalid length. [ 494.127644][T13395] netlink: 65015 bytes leftover after parsing attributes in process `syz.5.2456'. [ 494.495719][T13406] FAULT_INJECTION: forcing a failure. [ 494.495719][T13406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.534422][T13406] CPU: 0 PID: 13406 Comm: syz.3.2462 Not tainted syzkaller #0 [ 494.542056][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 494.552323][T13406] Call Trace: [ 494.555631][T13406] [ 494.558598][T13406] dump_stack_lvl+0x18c/0x250 [ 494.563335][T13406] ? show_regs_print_info+0x20/0x20 [ 494.568597][T13406] ? load_image+0x420/0x420 [ 494.573141][T13406] ? __might_fault+0xaa/0x120 [ 494.577860][T13406] ? __lock_acquire+0x7d80/0x7d80 [ 494.582949][T13406] should_fail_ex+0x394/0x4c0 [ 494.587677][T13406] _copy_to_iter+0x1ce/0x1110 [ 494.592430][T13406] ? __lock_acquire+0x7d80/0x7d80 [ 494.597516][T13406] ? lockdep_hardirqs_on+0x98/0x150 [ 494.602758][T13406] ? iov_iter_init+0x1e0/0x1e0 [ 494.607555][T13406] ? __virt_addr_valid+0x10c/0x380 [ 494.612705][T13406] ? __virt_addr_valid+0x10c/0x380 [ 494.617862][T13406] ? __check_object_size+0x4fc/0xa40 [ 494.623202][T13406] __skb_datagram_iter+0xdb/0x780 [ 494.628270][T13406] ? wait_woken+0x180/0x180 [ 494.632838][T13406] ? skb_copy_datagram_iter+0x200/0x200 [ 494.638421][T13406] skb_copy_datagram_iter+0xb1/0x200 [ 494.643744][T13406] tipc_recvstream+0x6f6/0xe70 [ 494.648559][T13406] ? tipc_sendstream+0x70/0x70 [ 494.653373][T13406] ____sys_recvmsg+0x2bd/0x5d0 [ 494.658204][T13406] ? __sys_recvmsg_sock+0x50/0x50 [ 494.663287][T13406] ? import_iovec+0x73/0xa0 [ 494.667839][T13406] ___sys_recvmsg+0x214/0x590 [ 494.672561][T13406] ? __sys_recvmsg+0x2a0/0x2a0 [ 494.677388][T13406] ? __fget_files+0x3fc/0x460 [ 494.682119][T13406] __x64_sys_recvmsg+0x21e/0x2f0 [ 494.687110][T13406] ? ___sys_recvmsg+0x590/0x590 [ 494.692019][T13406] ? syscall_enter_from_user_mode+0x2e/0x80 [ 494.697960][T13406] do_syscall_64+0x55/0xb0 [ 494.702425][T13406] ? clear_bhb_loop+0x40/0x90 [ 494.707139][T13406] ? clear_bhb_loop+0x40/0x90 [ 494.711883][T13406] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 494.717832][T13406] RIP: 0033:0x7f7a60d9de59 [ 494.722325][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.741972][T13406] RSP: 002b:00007f7a61c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 494.750433][T13406] RAX: ffffffffffffffda RBX: 00007f7a61025fa0 RCX: 00007f7a60d9de59 [ 494.758442][T13406] RDX: 0000000000000100 RSI: 0000200000000400 RDI: 0000000000000006 [ 494.766455][T13406] RBP: 00007f7a61c37090 R08: 0000000000000000 R09: 0000000000000000 [ 494.774474][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.782475][T13406] R13: 00007f7a61026038 R14: 00007f7a61025fa0 R15: 00007fff738cc478 [ 494.790505][T13406] [ 494.884542][T13419] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 494.892866][T13419] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 494.905931][T13418] netlink: 'syz.4.2465': attribute type 29 has an invalid length. [ 495.145327][T13421] netlink: 'syz.4.2466': attribute type 29 has an invalid length. [ 495.190482][T13423] netlink: 'syz.4.2466': attribute type 29 has an invalid length. [ 495.207925][T13421] netlink: 'syz.4.2466': attribute type 29 has an invalid length. [ 495.872179][T13434] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.2469'. [ 498.700230][T13456] netlink: 'syz.5.2476': attribute type 10 has an invalid length. [ 498.751897][T13456] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 499.083873][T13462] netlink: 'syz.4.2479': attribute type 15 has an invalid length. [ 501.961314][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.971007][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.189792][T13487] lo: entered promiscuous mode [ 503.727006][T13512] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2494'. [ 503.764494][T13512] netlink: 'syz.4.2494': attribute type 29 has an invalid length. [ 503.785652][T13512] netlink: 'syz.4.2494': attribute type 3 has an invalid length. [ 503.811644][T13512] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2494'. [ 505.033999][T13524] FAULT_INJECTION: forcing a failure. [ 505.033999][T13524] name failslab, interval 1, probability 0, space 0, times 0 [ 505.134017][T13524] CPU: 1 PID: 13524 Comm: syz.5.2497 Not tainted syzkaller #0 [ 505.141552][T13524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.151667][T13524] Call Trace: [ 505.154983][T13524] [ 505.157945][T13524] dump_stack_lvl+0x18c/0x250 [ 505.162690][T13524] ? show_regs_print_info+0x20/0x20 [ 505.167933][T13524] ? load_image+0x420/0x420 [ 505.172479][T13524] ? __might_sleep+0xe0/0xe0 [ 505.177117][T13524] ? __lock_acquire+0x7d80/0x7d80 [ 505.182202][T13524] should_fail_ex+0x394/0x4c0 [ 505.186937][T13524] should_failslab+0x9/0x20 [ 505.191510][T13524] slab_pre_alloc_hook+0x59/0x300 [ 505.196598][T13524] kmem_cache_alloc+0x5a/0x2c0 [ 505.201408][T13524] ? __kernfs_new_node+0xe5/0x7f0 [ 505.206511][T13524] __kernfs_new_node+0xe5/0x7f0 [ 505.211420][T13524] ? kernfs_new_node+0x260/0x260 [ 505.216425][T13524] ? up_write+0x1be/0x410 [ 505.220800][T13524] kernfs_new_node+0x14c/0x260 [ 505.225607][T13524] __kernfs_create_file+0x4b/0x2e0 [ 505.230773][T13524] sysfs_add_file_mode_ns+0x237/0x2f0 [ 505.236199][T13524] internal_create_group+0x431/0xd10 [ 505.241525][T13524] ? kernfs_add_one+0x149/0x6b0 [ 505.246436][T13524] ? sysfs_create_group+0x20/0x20 [ 505.251506][T13524] ? up_write+0x1be/0x410 [ 505.255898][T13524] sysfs_create_groups+0x59/0x120 [ 505.260974][T13524] device_add_attrs+0xdf/0x830 [ 505.265780][T13524] ? device_add_class_symlinks+0x240/0x240 [ 505.271618][T13524] ? device_add_class_symlinks+0x21f/0x240 [ 505.277454][T13524] device_add+0x51a/0xc40 [ 505.281812][T13524] netdev_register_kobject+0x188/0x320 [ 505.287307][T13524] register_netdevice+0x12aa/0x1ba0 [ 505.292593][T13524] ? netif_stacked_transfer_operstate+0x210/0x210 [ 505.299075][T13524] ? __lock_acquire+0x7d80/0x7d80 [ 505.304123][T13524] ? kvmalloc_node+0x70/0x180 [ 505.308857][T13524] ? dev_addr_check+0x20/0x240 [ 505.313654][T13524] ? __asan_memset+0x22/0x40 [ 505.318275][T13524] ? ipip6_tunnel_create+0x84/0x450 [ 505.323518][T13524] ipip6_tunnel_create+0x111/0x450 [ 505.328665][T13524] ipip6_tunnel_locate+0x524/0x740 [ 505.333819][T13524] ? check_6rd+0x660/0x660 [ 505.338271][T13524] ? bpf_lsm_capable+0x9/0x10 [ 505.342994][T13524] ipip6_tunnel_ctl+0x6aa/0x9e0 [ 505.347953][T13524] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 505.353557][T13524] ? ip_tunnel_update+0xae0/0xae0 [ 505.358632][T13524] ? __mutex_trylock_common+0x160/0x270 [ 505.364208][T13524] ipip6_tunnel_siocdevprivate+0x362/0x16e0 [ 505.370133][T13524] ? rcu_is_watching+0x15/0xb0 [ 505.374925][T13524] ? sit_tunnel_xmit+0x2390/0x2390 [ 505.380070][T13524] ? trace_contention_end+0x39/0xe0 [ 505.385293][T13524] ? __mutex_lock+0x30d/0xc80 [ 505.390009][T13524] ? dev_load+0x21/0x1f0 [ 505.394270][T13524] ? dev_ioctl+0x83c/0x1140 [ 505.398798][T13524] ? __lock_acquire+0x7d80/0x7d80 [ 505.403853][T13524] ? mutex_lock_nested+0x20/0x20 [ 505.408806][T13524] ? full_name_hash+0x92/0xe0 [ 505.413533][T13524] ? dev_ifsioc+0x957/0xc40 [ 505.418068][T13524] dev_ioctl+0x84c/0x1140 [ 505.422443][T13524] sock_ioctl+0x74c/0x7e0 [ 505.426803][T13524] ? sock_poll+0x3e0/0x3e0 [ 505.431288][T13524] ? bpf_lsm_file_ioctl+0x9/0x10 [ 505.436269][T13524] ? security_file_ioctl+0x80/0xa0 [ 505.441413][T13524] ? sock_poll+0x3e0/0x3e0 [ 505.445857][T13524] __se_sys_ioctl+0xfd/0x170 [ 505.450501][T13524] do_syscall_64+0x55/0xb0 [ 505.454951][T13524] ? clear_bhb_loop+0x40/0x90 [ 505.459664][T13524] ? clear_bhb_loop+0x40/0x90 [ 505.464366][T13524] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.470295][T13524] RIP: 0033:0x7fe5f079de59 [ 505.474766][T13524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.494431][T13524] RSP: 002b:00007fe5f168c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.502874][T13524] RAX: ffffffffffffffda RBX: 00007fe5f0a25fa0 RCX: 00007fe5f079de59 [ 505.510864][T13524] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 505.518865][T13524] RBP: 00007fe5f168c090 R08: 0000000000000000 R09: 0000000000000000 [ 505.526856][T13524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 505.534872][T13524] R13: 00007fe5f0a26038 R14: 00007fe5f0a25fa0 R15: 00007ffe0aebd818 [ 505.542873][T13524] [ 505.605497][T13527] netlink: 'syz.4.2500': attribute type 29 has an invalid length. [ 505.639422][T13527] netlink: 'syz.4.2500': attribute type 29 has an invalid length. [ 505.662226][T13533] netlink: 'syz.4.2500': attribute type 29 has an invalid length. [ 505.682573][T13527] netlink: 'syz.4.2500': attribute type 29 has an invalid length. [ 505.712883][T13527] netlink: 'syz.4.2500': attribute type 29 has an invalid length. [ 505.769654][T13523] delete_channel: no stack [ 508.093348][T13575] netlink: 'syz.5.2513': attribute type 3 has an invalid length. [ 508.670015][T13587] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2524'. [ 508.869574][T13590] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2518'. [ 510.621153][T13630] netlink: 'syz.5.2531': attribute type 10 has an invalid length. [ 510.702069][T13630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.754956][T13630] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 511.271709][T13635] SÛ÷: renamed from bond_slave_0 (while UP) [ 511.363266][T13640] netlink: 'syz.3.2535': attribute type 39 has an invalid length. [ 511.684346][ T51] Bluetooth: hci1: unexpected event 0x20 length: 15 > 7 [ 511.790512][T13655] netlink: 'syz.4.2542': attribute type 16 has an invalid length. [ 511.812801][T13655] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2542'. [ 511.839864][T13650] tap0: tun_chr_ioctl cmd 2147767520 [ 512.220534][ T51] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 512.306546][T13677] netlink: 'syz.4.2550': attribute type 21 has an invalid length. [ 512.370200][T13677] netlink: 'syz.4.2550': attribute type 6 has an invalid length. [ 512.417835][T13677] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2550'. [ 512.481887][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 512.709247][ T29] INFO: task syz.0.1613:10742 blocked for more than 143 seconds. [ 512.727370][ T29] Not tainted syzkaller #0 [ 512.732396][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 512.778107][ T29] task:syz.0.1613 state:D stack:25480 pid:10742 ppid:5779 flags:0x00004002 [ 512.798260][ T29] Call Trace: [ 512.801761][ T29] [ 512.804819][ T29] __schedule+0x15ae/0x4660 [ 512.815916][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 512.821377][ T29] ? asan.module_dtor+0x20/0x20 [ 512.826411][ T29] ? trace_contention_end+0x39/0xe0 [ 512.829254][T13695] FAULT_INJECTION: forcing a failure. [ 512.829254][T13695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.840485][ T29] ? task_work_cancel+0xa5/0x220 [ 512.856281][ T29] ? task_work_cancel_func+0x210/0x210 [ 512.865427][ T29] schedule+0xbd/0x170 [ 512.875331][T13695] CPU: 0 PID: 13695 Comm: syz.4.2558 Not tainted syzkaller #0 [ 512.875533][ T29] ? _free_event+0x10d/0xfb0 [ 512.882833][T13695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.882847][T13695] Call Trace: [ 512.882856][T13695] [ 512.882864][T13695] dump_stack_lvl+0x18c/0x250 [ 512.882899][T13695] ? show_regs_print_info+0x20/0x20 [ 512.882927][T13695] ? load_image+0x420/0x420 [ 512.882954][T13695] ? __might_fault+0xaa/0x120 [ 512.882976][T13695] ? __lock_acquire+0x7d80/0x7d80 [ 512.905487][ T29] _free_event+0x176/0xfb0 [ 512.908567][T13695] should_fail_ex+0x394/0x4c0 [ 512.908602][T13695] _copy_from_user+0x2f/0xe0 [ 512.908626][T13695] ___sys_sendmsg+0x1c7/0x360 [ 512.908656][T13695] ? get_pid_task+0x20/0x1e0 [ 512.928961][ T29] perf_event_release_kernel+0x7c8/0x850 [ 512.932552][T13695] ? __sys_sendmsg+0x2b0/0x2b0 [ 512.947675][ T29] ? __might_sleep+0xe0/0xe0 [ 512.951167][T13695] ? __lock_acquire+0x7d80/0x7d80 [ 512.951264][T13695] __se_sys_sendmsg+0x1d0/0x2c0 [ 512.976211][T13695] ? __x64_sys_sendmsg+0x80/0x80 [ 512.981205][T13695] ? lockdep_hardirqs_on+0x98/0x150 [ 512.986433][T13695] do_syscall_64+0x55/0xb0 [ 512.990886][T13695] ? clear_bhb_loop+0x40/0x90 [ 512.995606][T13695] ? clear_bhb_loop+0x40/0x90 [ 513.000309][T13695] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.006238][T13695] RIP: 0033:0x7fcadf19de59 [ 513.010680][T13695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.030332][T13695] RSP: 002b:00007fcae00b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.038782][T13695] RAX: ffffffffffffffda RBX: 00007fcadf425fa0 RCX: 00007fcadf19de59 [ 513.046778][T13695] RDX: 000000000000fffe RSI: 0000200000000500 RDI: 0000000000000003 [ 513.054796][T13695] RBP: 00007fcae00b1090 R08: 0000000000000000 R09: 0000000000000000 [ 513.062787][T13695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.070806][T13695] R13: 00007fcadf426038 R14: 00007fcadf425fa0 R15: 00007fffea2a75a8 [ 513.078818][T13695] [ 513.085184][ T29] ? calc_timer_values+0x400/0x400 [ 513.096225][ T29] ? perf_mmap+0x15e0/0x15e0 [ 513.101021][ T29] perf_release+0x3b/0x40 [ 513.105423][ T29] __fput+0x221/0x940 [ 513.117527][ T29] task_work_run+0x1d4/0x260 [ 513.122293][ T29] ? task_work_cancel+0x220/0x220 [ 513.128805][ T29] do_exit+0x986/0x2530 [ 513.133046][ T29] ? put_task_struct+0xc0/0xc0 [ 513.139618][ T29] ? preempt_schedule+0xc0/0xd0 [ 513.144638][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 513.151640][ T29] do_group_exit+0x22d/0x2f0 [ 513.156559][ T29] __x64_sys_exit_group+0x3f/0x40 [ 513.166996][ T29] do_syscall_64+0x55/0xb0 [ 513.171650][ T29] ? clear_bhb_loop+0x40/0x90 [ 513.183055][ T29] ? clear_bhb_loop+0x40/0x90 [ 513.188158][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.194365][ T29] RIP: 0033:0x7fb74399de59 [ 513.203163][ T29] RSP: 002b:00007fb74492ff38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 513.212076][ T29] RAX: ffffffffffffffda RBX: 00007fb743a0a3f8 RCX: 00007fb74399de59 [ 513.220382][ T29] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 513.228704][ T29] RBP: 000000000000000e R08: 0000000000000000 R09: 00007fb743c26038 [ 513.236789][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.244944][ T29] R13: 00007fb743c26038 R14: 00007fb743c25fa0 R15: 00007ffcf50be838 [ 513.258550][ T29] [ 513.261803][ T29] [ 513.261803][ T29] Showing all locks held in the system: [ 513.283176][ T29] 1 lock held by khungtaskd/29: [ 513.291185][ T29] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 513.302263][ T29] 2 locks held by getty/5531: [ 513.307081][ T29] #0: ffff88814c85e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 513.322423][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 513.332886][ T29] 3 locks held by kworker/u4:23/6716: [ 513.338516][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.352242][ T29] #1: ffffc900197cfd00 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.366329][ T29] #2: ffff88804aef8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 513.376645][ T29] 3 locks held by kworker/u4:33/6730: [ 513.382232][ T29] #0: ffff88801b2b8138 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.393746][ T29] #1: ffffc9001989fd00 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.408753][ T29] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: cfg80211_dfs_channels_update_work+0xcc/0x620 [ 513.419798][ T29] 3 locks held by kworker/u4:34/6731: [ 513.425221][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 513.435590][ T29] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x19e/0x730 [ 513.445423][ T29] #2: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 513.455861][ T29] 5 locks held by kworker/u4:40/6737: [ 513.461319][ T29] #0: ffff8880b8f3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 513.474691][ T29] #1: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x19e/0x730 [ 513.484502][ T29] #2: ffff8880b8f295d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x6cf/0xd60 [ 513.493844][ T29] #3: ffffffff97578c60 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x6c/0x500 [ 513.504922][ T29] #4: ffffffff8cfe1dc8 (text_mutex){+.+.}-{3:3}, at: arch_jump_label_transform_apply+0x17/0x30 [ 513.515829][ T29] 3 locks held by kworker/1:4/9208: [ 513.521272][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.532661][ T29] #1: ffffc9001a04fd00 (set_printk_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.543424][ T29] #2: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: trace_set_clr_event+0xc2/0x130 [ 513.553482][ T29] 2 locks held by kworker/1:5/10170: [ 513.558974][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.570359][ T29] #1: ffffc900034ffd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 513.582721][ T29] 1 lock held by syz.5.2555/13686: [ 513.592546][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 513.601974][ T29] 1 lock held by syz.3.2556/13690: [ 513.607754][ T29] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 513.617456][ T29] 4 locks held by syz.3.2556/13697: [ 513.622857][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: wext_ioctl_dispatch+0x106/0x650 [ 513.632813][ T29] #1: ffff88804aef8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wext_siwmode+0x1d3/0x2c0 [ 513.643519][ T29] #2: ffff88804aefaab0 (&local->key_mtx){+.+.}-{3:3}, at: ieee80211_free_keys+0xfe/0x5c0 [ 513.653874][ T29] #3: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 513.665155][ T29] 1 lock held by syz.3.2556/13699: [ 513.676218][ T29] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x7a4/0x1140 [ 513.685211][ T29] 2 locks held by syz.1.2557/13692: [ 513.690623][ T29] #0: ffffffff8d187ee8 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 513.701322][ T29] #1: ffffffff8d137778 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 513.713042][ T29] [ 513.715500][ T29] ============================================= [ 513.715500][ T29] [ 513.733838][ T29] NMI backtrace for cpu 0 [ 513.738232][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 513.745472][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.755589][ T29] Call Trace: [ 513.758924][ T29] [ 513.761900][ T29] dump_stack_lvl+0x18c/0x250 [ 513.766618][ T29] ? __wake_up_klogd+0xd9/0x100 [ 513.771507][ T29] ? show_regs_print_info+0x20/0x20 [ 513.776757][ T29] ? load_image+0x420/0x420 [ 513.781323][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 513.786306][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 513.792510][ T29] ? load_image+0x420/0x420 [ 513.797052][ T29] ? wq_watchdog_touch+0xef/0x170 [ 513.802103][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 513.808246][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 513.814273][ T29] watchdog+0xf59/0xfa0 [ 513.818477][ T29] ? watchdog+0x1e1/0xfa0 [ 513.822842][ T29] kthread+0x2fa/0x390 [ 513.826930][ T29] ? hungtask_pm_notify+0x50/0x50 [ 513.832021][ T29] ? kthread_blkcg+0xd0/0xd0 [ 513.836654][ T29] ret_from_fork+0x48/0x80 [ 513.841124][ T29] ? kthread_blkcg+0xd0/0xd0 [ 513.845768][ T29] ret_from_fork_asm+0x11/0x20 [ 513.850653][ T29] [ 513.854749][ T29] Sending NMI from CPU 0 to CPUs 1: [ 513.860135][ C1] NMI backtrace for cpu 1 [ 513.860145][ C1] CPU: 1 PID: 6731 Comm: kworker/u4:34 Not tainted syzkaller #0 [ 513.860161][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.860172][ C1] Workqueue: bat_events batadv_nc_worker [ 513.860266][ C1] RIP: 0010:kasan_check_range+0x1bc/0x290 [ 513.860289][ C1] Code: dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 6b 49 ff c3 49 ff cc 75 f2 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 0f 85 91 00 00 00 41 f7 c7 00 ff [ 513.860303][ C1] RSP: 0018:ffffc900198af978 EFLAGS: 00000256 [ 513.860316][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff81688636 [ 513.860327][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8c6b28 [ 513.860337][ C1] RBP: ffffc900198afaa8 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 513.860349][ C1] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: ffffffff8a539260 [ 513.860361][ C1] R13: dffffc0000000000 R14: fffffbfff1d18d66 R15: 1ffffffff1d18d65 [ 513.860373][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 513.860391][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 513.860402][ C1] CR2: 0000000100000000 CR3: 000000006b50a000 CR4: 00000000003506e0 [ 513.860416][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000200000000300 [ 513.860427][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 513.860437][ C1] Call Trace: [ 513.860443][ C1] [ 513.860450][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 513.860467][ C1] lock_release+0xa6/0x8c0 [ 513.860489][ C1] ? do_raw_spin_lock+0x11f/0x2b0 [ 513.860509][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 513.860527][ C1] ? __rwlock_init+0x150/0x150 [ 513.860545][ C1] ? __local_bh_enable_ip+0x13a/0x1c0 [ 513.860578][ C1] ? _local_bh_enable+0xa0/0xa0 [ 513.860597][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 513.860614][ C1] _raw_spin_unlock_bh+0x1b/0x40 [ 513.860637][ C1] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 513.860653][ C1] batadv_nc_purge_paths+0x300/0x3a0 [ 513.860671][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 513.860693][ C1] batadv_nc_worker+0x322/0x600 [ 513.860711][ C1] ? process_scheduled_works+0x975/0x1600 [ 513.860734][ C1] process_scheduled_works+0xa60/0x1600 [ 513.860781][ C1] ? worker_attach_to_pool+0x370/0x370 [ 513.860804][ C1] ? assign_work+0x3cc/0x5d0 [ 513.860826][ C1] worker_thread+0xa5e/0xfe0 [ 513.860858][ C1] kthread+0x2fa/0x390 [ 513.860872][ C1] ? pr_cont_work+0x550/0x550 [ 513.860892][ C1] ? kthread_blkcg+0xd0/0xd0 [ 513.860907][ C1] ret_from_fork+0x48/0x80 [ 513.860926][ C1] ? kthread_blkcg+0xd0/0xd0 [ 513.860941][ C1] ret_from_fork_asm+0x11/0x20 [ 513.860970][ C1] [ 513.864039][T13699] sit0: entered allmulticast mode [ 514.006652][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 514.006702][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 514.006765][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.006807][ T29] Call Trace: [ 514.006830][ T29] [ 514.006852][ T29] dump_stack_lvl+0x18c/0x250 [ 514.175650][ T29] ? show_regs_print_info+0x20/0x20 [ 514.180924][ T29] ? load_image+0x420/0x420 [ 514.185490][ T29] panic+0x2ca/0x720 [ 514.189438][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 514.193982][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 514.199579][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 514.205007][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 514.211317][ T29] watchdog+0xf98/0xfa0 [ 514.215536][ T29] ? watchdog+0x1e1/0xfa0 [ 514.219916][ T29] kthread+0x2fa/0x390 [ 514.224018][ T29] ? hungtask_pm_notify+0x50/0x50 [ 514.229111][ T29] ? kthread_blkcg+0xd0/0xd0 [ 514.229576][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 514.239730][ T29] ret_from_fork+0x48/0x80 [ 514.244197][ T29] ? kthread_blkcg+0xd0/0xd0 [ 514.248838][ T29] ret_from_fork_asm+0x11/0x20 [ 514.253673][ T29] [ 514.257316][ T29] Kernel Offset: disabled [ 514.261661][ T29] Rebooting in 86400 seconds..