last executing test programs: 25.974557966s ago: executing program 1 (id=2560): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fcffffff0000000000000000850000003600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffefffb702000008000000b703000001800000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="178d048604bf0bfb1945d7430008", 0x0, 0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x4, 0xc1, 0xffffffffffffffff, 0x1000000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000840)={r1, &(0x7f0000000580), &(0x7f0000000940)=""/208}, 0x20) 25.732695001s ago: executing program 1 (id=2561): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x1, 0x4}, 0x20) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 25.466205166s ago: executing program 1 (id=2562): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000004000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1848000002000000000000000000000095000000000000003d7b000200000000ed600cf8dd1f5e6e171fcd61a34e1e3599a1b1a69d78cb3d5348"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) socket$kcm(0x2, 0x1, 0x84) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f0000001100)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x10000000, 0x3, 0x3, 0x5}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 25.042350025s ago: executing program 1 (id=2569): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.79754297s ago: executing program 1 (id=2571): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x1, 0x4}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 24.534388936s ago: executing program 1 (id=2573): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x19a, 0x19a, 0x3, [@func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x6, 0x3}, {0xc}, {0x2, 0x4}, {0x0, 0x3}, {0x0, 0x4}, {0xa, 0x2}, {0xb, 0x1}, {0x10, 0x5}, {0x4, 0x5}]}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @func={0xa, 0x0, 0x0, 0xc, 0x1}, @enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0xe, 0x101}, {0x7, 0x3}, {0xe, 0xc84}, {0x7, 0x4}]}, @datasec={0xd, 0x6, 0x0, 0xf, 0x1, [{0x3, 0x9, 0x9}, {0x2, 0x100, 0x5}, {0x3, 0x9, 0x1}, {0x1, 0x7f, 0x2}, {0x1, 0x2, 0x6296}, {0x2, 0x6, 0x6}], "e2"}, @var={0x6, 0x0, 0x0, 0xe, 0x1, 0x1}, @typedef={0xc, 0x0, 0x0, 0x8, 0x5}, @const={0x100, 0x0, 0x0, 0xa, 0x3}, @typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @datasec={0x6, 0x9, 0x0, 0xf, 0x1, [{0x5, 0x4, 0x8}, {0x5, 0x1ff}, {0x3, 0xc, 0x73}, {0x3, 0x4, 0x2}, {0x5, 0xffffffff, 0x4}, {0x4, 0x10000, 0x1ff}, {0x1, 0x9, 0x1ff}, {0x5, 0x80000001, 0x6}, {0x1, 0x4, 0x3}], "f3"}]}, {0x0, [0x5f]}}, &(0x7f0000000b00)=""/129, 0x1b7, 0x81, 0x0, 0x7ff}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x1b, &(0x7f0000000800)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3d874015}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @generic={0x4, 0x2, 0x1, 0x8000, 0x5}], &(0x7f0000000900)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x17, r2, 0x8, &(0x7f0000000c00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x0, 0x1, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000c80)=[r1, r1], &(0x7f0000000cc0)=[{0x4, 0x4, 0x0, 0xc}]}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r3}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002340)={r6, 0x58, &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$inet(r4, &(0x7f0000002400)={&(0x7f0000000540)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000002240)=[{&(0x7f0000000dc0)="a5ed3d5de752412a16a250a057d0209617d6ba6b4a37c1318ac96a576e3dde7dec2364d9c1e61f9324e060e8fa277a7da7d95462454b78cc47895501971c3a66c7ccd7aee6b010964c0b878d72475d5212b355a4c77a72d5020d575aa72d5247725bc82cbb70866a1586f01f06e63ad50e347886faf6127c5fb607cb1f345d5c39c997413029e606693fc0a9f0be9b5726036fc0a769c30ffc35b6dc58218b85ed5513a1d00797398a7155db2a191ce6f646322d814f98e0a014f8cba0454360c471f11a73dd02fd30", 0xc9}, {&(0x7f0000000ec0)="98bc70c5e59b71e612e3fe8b25", 0xd}, {&(0x7f0000000f00)="992fd832b42f1baaf90ac2390056857d9171e7dd28c96b4f674c2acd0afba706d3ed79c4", 0x24}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="0ee25dc923b26ab76ce69de4dd4677ad59b777bbde8e914a1f86af9c8dcf2ce841aef8f43ad47008f609d706db076614b93bd3d832f7bc0ad43da9c0a92e539deb1418291be1a6c7b65f5d3593517f53bc7a48c7f6a5f4d0f5d6ba7058f52c1942d44f33870f03e13bf9b7bd584a929fcf0f56441ea97d4ed3c4a6a581c2032942374b0de210ef1253543d31b7b46350cd3e67ca810d8543d5073f6b2ac5c833c3f9c3fcbc4ef05a017e2a12791d9562ed440853f6b24f15a037c05e240159110d7d7dcf2cd3e49c7a9dfd52182a986c8501d25547dd935db20ae4ef12f73caba1c2a966a8c42de633b15e9720e860", 0xef}, {&(0x7f0000002040)="4111209913e7038a9fec564040822bb2e803fd17865873e87c5cc3127536273d96fcce1c961152896803d14988a4766c2c86183c164aac5281eafcd57cd1d89e224771357c0502b3af757775e80e7981201520c52ee7a2678e5218f28dfc5273716fa3cd185261e5026005340a5478ddedd76dee43befff09d2fb7b56adced01aeb92dca2c455e892d11e1ab33b1ef9100516dee59698aae7a290799aea7fb6f700d44f0d525d0ce59bb545e18567a", 0xaf}, {&(0x7f0000002100)="a3bf795fce75f50caf0ac511d94600da5772", 0x12}, {&(0x7f0000002140)="fc6febdb731448e872c0591537a2af95826583596795493718ade7b8fb81385190807579afa7244af2f00c0b90e3ccdfaafcb3b6176b42af9d4c58df60396f50501c415ec3a4e4dfbad647548bdb95cd6589d02843dcbd49a4bf143d61b6ac816159fa14df6d0b2a8208c112c1cb5019bac3284d038ab0e14366c91406768bfc8eb26dc485e68a731c9e067f626bb8e7d2678c587e17979e509872d0af13ceeb9a5c9c4850e29cdfaf3c95220d848539fecae0a67de2630cef99cc66ff396244ae8c2bfee39dab8be6f6e88e9ed3224e3590081848bfecedc36a324929", 0xdd}], 0x8, &(0x7f0000002380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x35}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x50}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r6}, &(0x7f00000007c0), &(0x7f0000000640)=r5}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r8, 0x0, &(0x7f0000000580)=""/157}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x0, 0x400007, 0x9, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9}, 0x50) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r10 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0xf, &(0x7f00000000c0), 0x4) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000740)={&(0x7f00000003c0)="f9dd827fa2e9bd0d562e72fdb2f410422af5e70f10e142fd3bb261f990daeb06e67235b79465f74f0274b790dfefbb70230d7425", &(0x7f0000000400)=""/92, &(0x7f0000000500), &(0x7f00000006c0)="798a0d0768f7e87ed92abfffaed8514f83c35a10d8c7c499d87af0ee1879cc82ddac389a6f42608a1cca66294d34069c1513aae046ad6fc9bce4569d4636eb0429f27c6628f1fc70e72cc7211596ca8d8f4524bfe1dbcc5978acea9a64ffa652a8374cd407b0f9abf25e759fad69ab23fbacce2c143d59417094", 0x4, r6}, 0x38) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r10, 0x1, 0x31, &(0x7f0000000640)=r9, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f00000001c0)='\x00') r11 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000f01000000648c2594f91a24fc60", 0x14}], 0x1, 0x0, 0x0, 0x1400}, 0x0) 17.113296748s ago: executing program 3 (id=2621): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.057864519s ago: executing program 2 (id=2622): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@call={0x85, 0x0, 0x0, 0x23}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.910607722s ago: executing program 3 (id=2623): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000004000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1848000002000000000000000000000095000000000000003d7b000200000000ed600cf8dd1f5e6e171fcd61a34e1e3599a1b1a69d78cb3d5348"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) socket$kcm(0x2, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000001100)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x10000000, 0x3, 0x3, 0x5}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 16.884549393s ago: executing program 2 (id=2625): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 16.656945218s ago: executing program 3 (id=2626): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x1, 0x4}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.468604882s ago: executing program 3 (id=2628): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000095000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x8, [@var={0x2, 0x0, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x40}}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0xb, 0x1, 0x0, 0x4, 0x1, 0x142, [{0x1, 0x3, 0x6}]}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x5, 0x2}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000640)=""/39, 0xc0, 0x27, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r8}, 0x20) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000007c46000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000012006b949e3de3d86e6c1dffff137e030000005e8d0000ce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011050000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 16.444339932s ago: executing program 2 (id=2629): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0x2, 0x4, 0xd, 0x9, 0x0, 0xffffffffffffffff, 0x800}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000000010000000000", @ANYRES32=r3, @ANYBLOB="0000ef27201ffd5649", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000403000000000000000000000000000000000007ff000007ff"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r6 = socket$kcm(0xa, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080200000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r7}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210}, 0x22) recvmsg(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001000)=""/189, 0xbd}, 0x40000064) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x28) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000040)="e05ddce33f000b35d25a806c8c6f94f91534d78724fc6010000a001a00020005358288fdebfa0b10", 0x28}, {&(0x7f0000000bc0)="a336efdd76be5b75c7f6252ee5b8de65004768f7bc5b17c22a11007b553b1bc42bdeaeda12de00b4344233d18dac1c87513fcae7d2ca9dba696ccb801ae601abbb537849a899d50e7847b5346d8f7affd5e594c25eeefbd235c3712cf2d6a7951e88cf03fce483b51c", 0x69}, {&(0x7f0000000dc0)="74c6ee70e13fd8c615a04dc09d85a82018dac3c6465bd72dad8642b9979d5d9fac7b8548a0dc4204b7c07fd0e1fcbb3f7c2d5d532e269a822d8a6f80d2618f8124c48da7ba64bd414b4ac7e19093d3c0f0bfe956dc262f5be4edb5cec04c63a202acd0395ac5e2e3ca48ff2bf70b5487731ac1da993b10d88a920395be028c5f0eb7cf075e2f7cf4a54d11bd632717270b532fc9c780cab75d20867d7fc31565e02a272ae643b7c451f09df5966e49dc", 0xb0}, {&(0x7f0000000e80)="5d14bf21b058dbf7d8635adb11ca491496b3ff9a30d6c88e75e54dd89aab48a54d4e66a45b476389f78f828ca51876e295c83f356647f7d3f27364efcef80a789361125716cecb370a7e3308d6e7997819cca52ecb222d997390c496311ad5ad432aec3e25", 0x65}], 0x4}, 0x4000010) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x2}, 0x4846, 0x0, 0x0, 0x5, 0x20001}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r10, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000680)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000740)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) r14 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={r4, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="00001b6cddd0a97e32a80000000000008500000286000000b76c12ffffffffffff8af8ff00000000b708000023d32788fc59696c11f7ffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186400000e00000000000000060000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x6, 0x6e, &(0x7f0000000540)=""/110, 0x40f00, 0x44, '\x00', r13, 0x25, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x2, 0x4, 0x3ff, 0x1}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a40)=[r4, r5, r1, r3, r5, r4, r15, r4, r3], &(0x7f0000000a80)=[{0x4, 0x5, 0x0, 0x6}, {0x3, 0x2, 0x3, 0xc}, {0x4, 0x1, 0x0, 0x7}, {0x4, 0x1, 0x9, 0xc}, {0x2, 0x2, 0x8, 0x4}, {0x2, 0x4, 0x5, 0x9}, {0x4, 0x5, 0xf, 0x7}], 0x10, 0x1}, 0x94) gettid() 16.148990648s ago: executing program 2 (id=2630): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 16.08263221s ago: executing program 2 (id=2631): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xfff5) r0 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/229, 0xe5}], 0x1}, 0x22) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc60100c084002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x1, 0x1, 0x10, 0x0, 0x0, 0x820a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext={0x3, 0x7}, 0xc85c, 0x200000000000c8, 0x9, 0x9, 0xfffffffffffffff8, 0x80000000, 0xfffb, 0x0, 0xfffffffc, 0x0, 0xfffffffffffffffb}, 0x0, 0xa, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB="5c707b0ab4a7f9d1954822e6968b1b065c55de3f90969f6ec2c304a3803de32068b30094eb6c40036b8562259d6cbb3aed65a7fd4084b2b1e46a81898073b4ecdf930aaab8b188170e1b23f7a69f939ec9d3ded4db646f6202a4972c2681c7a7d25070b0e289aa8ede0720cba931af13dee81143e716f9bfd450c9b11aaff74e255aeeaddb063d3e7f339def10646574b4c4942c229f434986d68199ee69049c9973a6d4f59245863fe798b18d18dc47d29299f0e528526d77e78ad243c4b8caa2c94d8d6d2f146f2d10d1e7e3ef10c346a2c62fb5c78c3b564b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x25, 0x1, 0x0) write$cgroup_devices(r5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xd040, 0x10000}, 0x14403, 0xfffc, 0x0, 0x5, 0x582, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000200)='devices.deny\x00', 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_bp={&(0x7f0000000400), 0x6}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xb, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x39, 0x0, &(0x7f0000000680)="5dc8c9a5cb2fb050490f7f86ddc401b7061f3d82d01e20fc515121d0718af67e43a2b89d84c0e9bd5031ebc5a9db256f7c445a26051a0cea06", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twrr'], 0x68) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(r5, &(0x7f0000000100)=ANY=[], 0xa) 15.798882335s ago: executing program 3 (id=2633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000004000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="1848000002000000000000000000000095000000000000003d7b000200000000ed600cf8dd1f5e6e171fcd61a34e1e3599a1b1a69d78cb3d5348"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) socket$kcm(0x2, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f0000001100)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5a2119bf86ff29ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x10000000, 0x3, 0x3, 0x5}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 15.682683488s ago: executing program 0 (id=2634): r0 = socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x3, 0x1ff}, 0x20, 0x10000, 0x9e6, 0x7, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000580)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x80, 0x0}, 0x20000906) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0x3, 0x0, 0x5, 0x0, 0x9, 0x84000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x87, 0x6, 0x68, 0x9, 0x5, 0xfffeffff, 0xa55, 0x0, 0x9, 0x0, 0x800}, 0x0, 0x5, r1, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7a0a00ff000000007110bf0000000000950000000000000093609284a6304d0051031210a1ac6aeb329641381d486ac0aed88a2ab8e1d14faf9685fda5"], 0x0}, 0x94) recvmsg$unix(r2, 0x0, 0x81) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000001bc0), 0x0, &(0x7f0000001b40)}, 0x8004) r4 = socket$kcm(0x25, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) 15.58024735s ago: executing program 0 (id=2635): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@fallback, 0xffffffffffffffff, 0x1, 0x4}, 0x20) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3ff, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.57311474s ago: executing program 3 (id=2636): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 15.458836412s ago: executing program 0 (id=2637): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000ffff07000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 15.453235752s ago: executing program 0 (id=2638): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e367091fd0000000000006704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb027aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae105004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000694f540000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f72f3ced846891180604b6dd2499d16d7c9158ff1effff00000000ef069dc42749a89f854797fa9d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f440624aa70300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6df53cf95819079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca060000000000000008f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b5087880000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e98a224f97855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0f16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673c1079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb75b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695f0fe4a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604c9b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000000000000000249e00000000000083a5765d06da91165d24bc316607e1d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838e911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aaa2efa3a4f87fc14f180e353615b3cb925cf5ea843014a277c3694a5a83266f73ef039dd731187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867bf0ffe37d79f2614104e9a578aad05ce3ea8b0d66638d2f1fffc43b3bc56ac59389b4060b502557a598eef7bf5ddbfc9c503f2c6d8abe65cf98224b312dfb06ae1d8b1d9362f021f9a56b24f0b2a5ccb1c366235af5c6a548120437572bef6fe1fe75233cf3e8fc4c1c9d045ee8c8bbeecfc168b514e58f33696fce42b3d770c5ace395c3ec849ca4c25330b1e82c4be9cf00cbe449b70e2f26074d747d838f3ef56c82a10bca76a3f2368192edfc2d9e32dec544885a00645d106b0b4be9ce3d900febe533dfb05cdae58f573d045c609bb4e1542e48e25ed7b6a9c21fc1c8bc098ee6f65815b034cbff62976d0d1a20429b725d43fecd7da7fd4cf7c08fc9f8f23ae12b19694ef91e3eebbd613ba1ddc96042060cdb0cc48d363e0f8e9a559252fbdb354e8ba89df9ac02082040578966d73bf268d1c87f1518cb75057f1d4b174a1310f4c895e4970fc300afbfba7d3341c55eec92ffcb832fae7ba5deffd9d0bade63eaf59017a92a3e28a948f16cc8123c6727471ef0482563e3aa52d46f00000000421a8dcc04d69ea92f19782694bbf952342584bcad221001b4da955edab26045cb88ad6d519dff54f59b8a1f79eea20cf4f0f0e13761a352034a26cf14a5e78e45c69273e26630a3f00e92ae63eced3da5d66cedaf489def12baec4ed8f42b3d0e0f29a94b198062af5996e7f95f303da9b546ffe8c35ef25d5afaaca9a18bd7706db682ed59c3f2d1e98d6d71c50a732e02da361959a0917d50819e5260578b6f5779ea3c44ffaa0e20b9420b7f99c09057eb9aebb5cd482159b087f688ddbb7b9a03f96805a78be5581e9f516019d0a6df7dc4a2e03c29a8ecfba95f04c509315556254bcf350e3e77a845d1a4190ee536425ce0759ef5"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x2000000, 0xf, 0x0, &(0x7f0000000080)="5cdd3086ddff006633c9bbac88a886", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 15.400454404s ago: executing program 0 (id=2639): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000100), 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000008f000000000000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000076090100fffffff69500000000000000180100002020732500000000002020207b9af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f0ffffffc500000006000000a500f4fffcffffffbf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x1000, &(0x7f00000009c0)=""/4096, 0x41100, 0x2f}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) (async, rerun: 32) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000040000000a00396ae07e32cb0b94280ea172000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000100"/28], 0x48) (async) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f0000000180)=r5, 0x4) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r6, &(0x7f0000000580)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x4, @mcast2, 0x9}, 0x80, 0x0}, 0x4000080) 15.286540756s ago: executing program 0 (id=2640): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x8, [@var={0x2, 0x0, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x40}}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0xb, 0x1, 0x0, 0x4, 0x1, 0x142, [{0x1, 0x3, 0x6}]}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x5, 0x2}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000640)=""/39, 0xc0, 0x27, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r8}, 0x20) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000007c46000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000012006b949e3de3d86e6c1dffff137e030000005e8d0000ce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011050000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.163248799s ago: executing program 2 (id=2641): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000cc0)={&(0x7f0000000780)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="a8291eee9000fe3e9b087636e51aa50de2534c1f4a7e8f1f43e675d0e1895b67811959d8b9ba0f4e30ee842b76272430c1cd5863175cbc112642b6c7ec790bb9632ca52b9b4963fed4a65737f04fa646be9893c4599fd22d9aae8fa5ea72a4e946937939bba473eb42c08cffabf6a32915bdd1206ba467ea8457be3e", 0x7c}, {&(0x7f00000008c0)="59dc4200f1f66c03cfb48ae808a090b8ae825ee9e0da34974ab4563cf50d6aa3d055", 0x22}, {&(0x7f0000000900)="047be6228d28bdfe1fab0c52bfce78b12d9820492adaa2b43dd511c57fe03188f093a9a9d9233e0450321281bf94aba067f1d49957f84099a538231eecb49deb5386e7d8", 0x44}, {&(0x7f0000000980)="5493281886a4f9725b1efca12abec7527bbcd5f1588533fcc15bd5fcaa8750579789b6bdde6e102307c8e783569943f6a292c733bf6cd3e034bbadc67c3a452cb2640f0495423149106598a5de5bb1e9308db44004dae1682ffc121ed08230fad42bfa19fa5eb32fd6e9be352c47af6d684c23265977bcb998f87e439ae15d82a30a01822ff88dd110eadb11268f8fb884a8ae0e2853bee3ea2809e2436e6022a44de58ccff19ead652495ef2c82a0cdefd4f05bf8305bcebaeb0a5a99cffed05b74835b70f638654779c3c1a323a41375eeed158a0569eb8043c610024e42793ae461b3c7e7fd1aadfcd88eecfc2f83f067", 0xf2}, {&(0x7f0000000a80)="68efa53839a2739ce572e646cc7ba49c0b1479b0fca4f8a359d81310af5bd2f10059f9490323f45fb8099735744df82b23507cfc90fbbea4a38ebbb96918993eabf93563390580d1ffbf95c71f718e33466928f4d0f65bbe72a84af2b8966f72d0bd09254bf74505fd7164d8636e8333bedc2dd0b955701b73565bfa3a1677c1247ca1c0d7e7fdd135bee65382f13109acc4dc0417879d8681572d642d6568034952658bcbf929411513bb2fabcdded0f5ac21fb46e51a088625270f1e589ef0fb97ca", 0xc3}, {&(0x7f0000000b80)="94c4d2d9d7be3e7a361990c41f2859be37f4485ea4bace196ca203707220ebecaf0464afa4bf6b92162b48d7895725aab195590d805bfd07bb8f09e7ef101a00a74376e5", 0x44}], 0x7}, 0x24000084) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0xb1}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x3, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, r1, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000", @ANYRES32], 0xfe33) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x4, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000b6217dfd00000000000000000000002200000000008d993a82c84b1bed0632d56c78ed27c413115072bc80f2771e5bc7a9d979b5ffd6a705f7be8d4acfe3f891233acbca4800cfa0e9a7f9076a61d18ee281cc8b2540313c984da82651d07ddfc7ff86fd55139b3baef8f66e04c60532606e3b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000008850000002a000000b7080000000000007baaf8ff00000000b5080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000000100000f0ffffffb702000008b68428364b29b5166f3bdadc6f7100000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x2, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8918, &(0x7f0000000000)={r11}) socketpair(0x1d, 0x1, 0x2, &(0x7f0000000200)) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYRES32], 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="f037f827666a67e1a0bd8fc519275f3f6c0f6b8360c0703bc9b3183ef6adfd01c3108984e4eece7a39cd912063267a861f0542893da16efb63c76fdebebfca83c0e9657c7752a8dd087f60fe2151ec77eb0cf3eeb6822454f20697ea8a496cc9858fd93b0ac8f3483ad500b54e270a09a7bc659bf278425a1ff9757750f46cc141dad0cefce7fa9250a00834ce562de9bf9fb963c3df86bee39298ca33fb721a0febea6d5dc2ce5a657e037418ec2fa6558d5b2afa89071880dde72ffb7e7be524dccc28932707966cb669c1e58383c5b6eb9ded219315", 0xd7}, {&(0x7f00000001c0)="684a66e56c66b33771f353fdae84f8d125ee5d426fbe8205d2ae0110fc2253ff70e3bcd221753947c62471749fc8bfd658f53868af92883d7b541307bd10917c36a9de16ab0e2e2c2ad899bc46486241cb50ccaae35283e5e56c9e6586b29f4bb009530280c89e32", 0x68}, {&(0x7f0000000480)="28ab8205ce75500831f5867e8fdad8582cccb3c0633a8e631f4947876e0739789e8dcf401cb0402d5a1e0990da0b9f1a21297a5bfa9f1ec10d0d75f650718e49917b235f2ec23be1de7d2f7a2da8482ebbf142b373e86632eb2193fcb699800c6930e4315e517da44bad48d9f6f35811ebe9cec7fe74ac0a5b6f53257454c6545600733e2bfc038be8c13eb35cac3f1e764d9dd4500c74b925432af234fe8bde74", 0xa1}, {&(0x7f0000000280)="e8b84894b13fdf55157aad02b0c9a6fe0f318ef0d9206371fbe831281c3f68d5d11b6c3c0ba88db18a15f5fffb2dc17844321b146a6df218345ba666bda793da08ef7b45fce5d140f3dc13de1542b0a25dbeab97735367a63f25b416eefd724b9d36a4fce58e611254448b37df452066981167336509e5be77b74043bf0e6d71502854b5c25fb557f3f168fae9da56", 0x8f}, {&(0x7f0000000340)="a7ed2b5be119195ef08de89b6347ec1a02453c942d7a39daaf30b78cdeebce0d81faac623e18e0aa1f9bd698fac214710ab71e630da0efa54f0231bd22ebc849dbc7101432d7b331fe21043424a3c7b3c3d31464170f8a0f473e", 0x5a}, {&(0x7f00000003c0)="6db3a34df8f7a90218842aa82619089d3ddc84dbcae60f02caac98c26b6532", 0x1f}], 0x6}, 0x0) 123.197227ms ago: executing program 32 (id=2640): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x56, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r4}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000008000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000003000000fdfffffffeffffff00000000000000000000000700000000000000000000000900000000000000000000000904000000000000000000000906"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x10000}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x8, [@var={0x2, 0x0, 0x0, 0xe, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x40}}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @typedef={0x10, 0x0, 0x0, 0x8, 0x4}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x1}, @struct={0xb, 0x1, 0x0, 0x4, 0x1, 0x142, [{0x1, 0x3, 0x6}]}, @union={0xa, 0x1, 0x0, 0x5, 0x1, 0x1, [{0x8, 0x5, 0x2}]}, @const={0x7, 0x0, 0x0, 0xa, 0x1}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @typedef={0x2, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0, 0x2e, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000640)=""/39, 0xc0, 0x27, 0x0, 0x6, 0x10000, @value=r6}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) r11 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)=r8}, 0x20) setsockopt$sock_attach_bpf(r11, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000007c46000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="5c00000012006b949e3de3d86e6c1dffff137e030000005e8d0000ce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011050000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 60.608339ms ago: executing program 33 (id=2641): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000cc0)={&(0x7f0000000780)=@pptp={0x18, 0x2, {0x1, @broadcast}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000800)}, {&(0x7f0000000840)="a8291eee9000fe3e9b087636e51aa50de2534c1f4a7e8f1f43e675d0e1895b67811959d8b9ba0f4e30ee842b76272430c1cd5863175cbc112642b6c7ec790bb9632ca52b9b4963fed4a65737f04fa646be9893c4599fd22d9aae8fa5ea72a4e946937939bba473eb42c08cffabf6a32915bdd1206ba467ea8457be3e", 0x7c}, {&(0x7f00000008c0)="59dc4200f1f66c03cfb48ae808a090b8ae825ee9e0da34974ab4563cf50d6aa3d055", 0x22}, {&(0x7f0000000900)="047be6228d28bdfe1fab0c52bfce78b12d9820492adaa2b43dd511c57fe03188f093a9a9d9233e0450321281bf94aba067f1d49957f84099a538231eecb49deb5386e7d8", 0x44}, {&(0x7f0000000980)="5493281886a4f9725b1efca12abec7527bbcd5f1588533fcc15bd5fcaa8750579789b6bdde6e102307c8e783569943f6a292c733bf6cd3e034bbadc67c3a452cb2640f0495423149106598a5de5bb1e9308db44004dae1682ffc121ed08230fad42bfa19fa5eb32fd6e9be352c47af6d684c23265977bcb998f87e439ae15d82a30a01822ff88dd110eadb11268f8fb884a8ae0e2853bee3ea2809e2436e6022a44de58ccff19ead652495ef2c82a0cdefd4f05bf8305bcebaeb0a5a99cffed05b74835b70f638654779c3c1a323a41375eeed158a0569eb8043c610024e42793ae461b3c7e7fd1aadfcd88eecfc2f83f067", 0xf2}, {&(0x7f0000000a80)="68efa53839a2739ce572e646cc7ba49c0b1479b0fca4f8a359d81310af5bd2f10059f9490323f45fb8099735744df82b23507cfc90fbbea4a38ebbb96918993eabf93563390580d1ffbf95c71f718e33466928f4d0f65bbe72a84af2b8966f72d0bd09254bf74505fd7164d8636e8333bedc2dd0b955701b73565bfa3a1677c1247ca1c0d7e7fdd135bee65382f13109acc4dc0417879d8681572d642d6568034952658bcbf929411513bb2fabcdded0f5ac21fb46e51a088625270f1e589ef0fb97ca", 0xc3}, {&(0x7f0000000b80)="94c4d2d9d7be3e7a361990c41f2859be37f4485ea4bace196ca203707220ebecaf0464afa4bf6b92162b48d7895725aab195590d805bfd07bb8f09e7ef101a00a74376e5", 0x44}], 0x7}, 0x24000084) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x9010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8, 0xb1}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x3, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x5, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0xffffffffffffffff, 0x1, r1, 0x1) r2 = socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000001280), 0x4) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="13100000", @ANYRES32], 0xfe33) recvmsg(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10000) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x4, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000b6217dfd00000000000000000000002200000000008d993a82c84b1bed0632d56c78ed27c413115072bc80f2771e5bc7a9d979b5ffd6a705f7be8d4acfe3f891233acbca4800cfa0e9a7f9076a61d18ee281cc8b2540313c984da82651d07ddfc7ff86fd55139b3baef8f66e04c60532606e3b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000008850000002a000000b7080000000000007baaf8ff00000000b5080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000000100000f0ffffffb702000008b68428364b29b5166f3bdadc6f7100000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0x2, 0xa, 0xa}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) recvmsg$unix(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000070000009500"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, r8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r10) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r11, 0x8918, &(0x7f0000000000)={r11}) socketpair(0x1d, 0x1, 0x2, &(0x7f0000000200)) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[@ANYRES32], 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="f037f827666a67e1a0bd8fc519275f3f6c0f6b8360c0703bc9b3183ef6adfd01c3108984e4eece7a39cd912063267a861f0542893da16efb63c76fdebebfca83c0e9657c7752a8dd087f60fe2151ec77eb0cf3eeb6822454f20697ea8a496cc9858fd93b0ac8f3483ad500b54e270a09a7bc659bf278425a1ff9757750f46cc141dad0cefce7fa9250a00834ce562de9bf9fb963c3df86bee39298ca33fb721a0febea6d5dc2ce5a657e037418ec2fa6558d5b2afa89071880dde72ffb7e7be524dccc28932707966cb669c1e58383c5b6eb9ded219315", 0xd7}, {&(0x7f00000001c0)="684a66e56c66b33771f353fdae84f8d125ee5d426fbe8205d2ae0110fc2253ff70e3bcd221753947c62471749fc8bfd658f53868af92883d7b541307bd10917c36a9de16ab0e2e2c2ad899bc46486241cb50ccaae35283e5e56c9e6586b29f4bb009530280c89e32", 0x68}, {&(0x7f0000000480)="28ab8205ce75500831f5867e8fdad8582cccb3c0633a8e631f4947876e0739789e8dcf401cb0402d5a1e0990da0b9f1a21297a5bfa9f1ec10d0d75f650718e49917b235f2ec23be1de7d2f7a2da8482ebbf142b373e86632eb2193fcb699800c6930e4315e517da44bad48d9f6f35811ebe9cec7fe74ac0a5b6f53257454c6545600733e2bfc038be8c13eb35cac3f1e764d9dd4500c74b925432af234fe8bde74", 0xa1}, {&(0x7f0000000280)="e8b84894b13fdf55157aad02b0c9a6fe0f318ef0d9206371fbe831281c3f68d5d11b6c3c0ba88db18a15f5fffb2dc17844321b146a6df218345ba666bda793da08ef7b45fce5d140f3dc13de1542b0a25dbeab97735367a63f25b416eefd724b9d36a4fce58e611254448b37df452066981167336509e5be77b74043bf0e6d71502854b5c25fb557f3f168fae9da56", 0x8f}, {&(0x7f0000000340)="a7ed2b5be119195ef08de89b6347ec1a02453c942d7a39daaf30b78cdeebce0d81faac623e18e0aa1f9bd698fac214710ab71e630da0efa54f0231bd22ebc849dbc7101432d7b331fe21043424a3c7b3c3d31464170f8a0f473e", 0x5a}, {&(0x7f00000003c0)="6db3a34df8f7a90218842aa82619089d3ddc84dbcae60f02caac98c26b6532", 0x1f}], 0x6}, 0x0) 0s ago: executing program 34 (id=2636): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000900142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 248225fa0 RCX: 00007fb247f9de59 [ 314.469466][T10697] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 314.477435][T10697] RBP: 00007fb248f2a090 R08: 0000000000000000 R09: 0000000000000000 [ 314.485406][T10697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.493379][T10697] R13: 00007fb248226038 R14: 00007fb248225fa0 R15: 00007ffd3985e848 [ 314.501365][T10697] [ 314.662883][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 314.698281][ T11] tipc: Subscription rejected, illegal request [ 315.431302][T10721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1840'. [ 315.455576][T10721] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.1840'. [ 315.567130][ T5779] Bluetooth: hci3: unexpected event 0x17 length: 15 > 6 [ 315.609211][T10727] netlink: 703 bytes leftover after parsing attributes in process `syz.3.1843'. [ 315.637173][T10729] netlink: 'syz.1.1844': attribute type 21 has an invalid length. [ 315.652159][T10729] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1844'. [ 315.674099][T10729] netlink: 'syz.1.1844': attribute type 4 has an invalid length. [ 315.688188][T10730] netlink: 'syz.1.1844': attribute type 21 has an invalid length. [ 315.702279][T10730] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1844'. [ 315.711560][T10730] netlink: 'syz.1.1844': attribute type 4 has an invalid length. [ 315.981810][T10730] syz.1.1844: vmalloc error: size 2363392, failed to allocated page array size 4616, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 316.001842][T10730] CPU: 1 PID: 10730 Comm: syz.1.1844 Not tainted syzkaller #0 [ 316.009355][T10730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 316.019441][T10730] Call Trace: [ 316.022731][T10730] [ 316.025668][T10730] dump_stack_lvl+0x18c/0x250 [ 316.030373][T10730] ? show_regs_print_info+0x20/0x20 [ 316.035677][T10730] ? load_image+0x420/0x420 [ 316.040196][T10730] ? __rcu_read_unlock+0x7c/0xd0 [ 316.045146][T10730] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.051571][T10730] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 316.058078][T10730] warn_alloc+0x246/0x340 [ 316.062425][T10730] ? zone_watermark_ok_safe+0x230/0x230 [ 316.068014][T10730] ? _raw_spin_unlock+0x28/0x40 [ 316.073061][T10730] __vmalloc_node_range+0x661/0x1320 [ 316.078393][T10730] ? free_vm_area+0x50/0x50 [ 316.082906][T10730] ? kvmalloc_node+0x70/0x180 [ 316.087593][T10730] ? rcu_is_watching+0x15/0xb0 [ 316.092367][T10730] ? kvmalloc_node+0x70/0x180 [ 316.097050][T10730] ? trace_kmalloc+0x1f/0xa0 [ 316.101648][T10730] ? __kmalloc_node+0x154/0x240 [ 316.106509][T10730] ? bpf_check+0x245/0xec30 [ 316.111103][T10730] vzalloc+0x79/0x90 [ 316.115009][T10730] ? bpf_check+0x245/0xec30 [ 316.119515][T10730] bpf_check+0x245/0xec30 [ 316.123871][T10730] ? mark_lock+0x94/0x320 [ 316.128221][T10730] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 316.134217][T10730] ? verify_lock_unused+0x140/0x140 [ 316.139511][T10730] ? cgroup_rstat_updated+0xd5/0x360 [ 316.144834][T10730] ? bpf_get_btf_vmlinux+0x20/0x20 [ 316.149950][T10730] ? __lock_acquire+0x7d80/0x7d80 [ 316.154985][T10730] ? lock_chain_count+0x20/0x20 [ 316.159888][T10730] ? mark_lock+0x94/0x320 [ 316.164261][T10730] ? __lock_acquire+0x1336/0x7d80 [ 316.169335][T10730] ? verify_lock_unused+0x140/0x140 [ 316.174570][T10730] ? perf_trace_preemptirq_template+0xac/0x330 [ 316.180746][T10730] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 316.186737][T10730] ? lock_chain_count+0x20/0x20 [ 316.191605][T10730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.197862][T10730] ? lockdep_hardirqs_on+0x98/0x150 [ 316.203068][T10730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 316.209244][T10730] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 316.215583][T10730] ? seqcount_lockdep_reader_access+0x19a/0x1d0 [ 316.221835][T10730] ? ktime_get_real_ts64+0x440/0x440 [ 316.227158][T10730] ? bpf_obj_name_cpy+0x194/0x1e0 [ 316.232198][T10730] bpf_prog_load+0x10fa/0x1610 [ 316.237161][T10730] ? map_freeze+0x420/0x420 [ 316.241689][T10730] ? __might_fault+0xaa/0x120 [ 316.246460][T10730] ? __might_fault+0xc6/0x120 [ 316.251138][T10730] ? __might_fault+0xaa/0x120 [ 316.255817][T10730] ? bpf_lsm_bpf+0x9/0x10 [ 316.260154][T10730] ? security_bpf+0x7e/0xa0 [ 316.264665][T10730] __sys_bpf+0x5ba/0x890 [ 316.268918][T10730] ? bpf_link_show_fdinfo+0x390/0x390 [ 316.274323][T10730] ? lock_chain_count+0x20/0x20 [ 316.279191][T10730] __x64_sys_bpf+0x7c/0x90 [ 316.283624][T10730] do_syscall_64+0x55/0xb0 [ 316.288048][T10730] ? clear_bhb_loop+0x40/0x90 [ 316.292729][T10730] ? clear_bhb_loop+0x40/0x90 [ 316.297411][T10730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 316.303325][T10730] RIP: 0033:0x7f2d4959de59 [ 316.307748][T10730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.327366][T10730] RSP: 002b:00007f2d4a528028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 316.335794][T10730] RAX: ffffffffffffffda RBX: 00007f2d49826090 RCX: 00007f2d4959de59 [ 316.343771][T10730] RDX: 0000000000000022 RSI: 000020000000e000 RDI: 0000000000000005 [ 316.351745][T10730] RBP: 00007f2d49633e6f R08: 0000000000000000 R09: 0000000000000000 [ 316.359721][T10730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.367695][T10730] R13: 00007f2d49826128 R14: 00007f2d49826090 R15: 00007ffea3ccf4a8 [ 316.375713][T10730] [ 316.411701][T10730] Mem-Info: [ 316.426714][T10730] active_anon:6108 inactive_anon:0 isolated_anon:0 [ 316.426714][T10730] active_file:19202 inactive_file:40042 isolated_file:0 [ 316.426714][T10730] unevictable:768 dirty:60 writeback:0 [ 316.426714][T10730] slab_reclaimable:10553 slab_unreclaimable:94065 [ 316.426714][T10730] mapped:24830 shmem:1361 pagetables:531 [ 316.426714][T10730] sec_pagetables:0 bounce:0 [ 316.426714][T10730] kernel_misc_reclaimable:0 [ 316.426714][T10730] free:1348367 free_pcp:7887 free_cma:0 [ 316.508080][T10730] Node 0 active_anon:24532kB inactive_anon:0kB active_file:76808kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99320kB dirty:240kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10284kB pagetables:2124kB sec_pagetables:0kB all_unreclaimable? no [ 316.561245][T10730] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 316.596626][T10730] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 316.662771][T10730] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 316.669892][T10730] Node 0 DMA32 free:1483352kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:24496kB inactive_anon:0kB active_file:76808kB inactive_file:159144kB unevictable:1536kB writepending:240kB present:3129332kB managed:2586848kB mlocked:0kB bounce:0kB free_pcp:7892kB local_pcp:2812kB free_cma:0kB [ 316.762633][T10730] lowmem_reserve[]: 0 0 0 0 0 [ 316.768270][T10730] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 316.833004][T10730] lowmem_reserve[]: 0 0 0 0 0 [ 316.838219][T10730] Node 1 Normal free:3894756kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:23392kB local_pcp:10048kB free_cma:0kB [ 316.873701][T10730] lowmem_reserve[]: 0 0 0 0 0 [ 316.879706][T10730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 316.905747][T10730] Node 0 DMA32: 1136*4kB (UME) 1611*8kB (UME) 1298*16kB (UME) 1085*32kB (UME) 390*64kB (UME) 92*128kB (UME) 38*256kB (UME) 18*512kB (UME) 11*1024kB (UME) 10*2048kB (UME) 323*4096kB (UM) = 1483352kB [ 316.929870][T10730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 316.948778][T10730] Node 1 Normal: 233*4kB (UM) 70*8kB (UME) 41*16kB (UME) 30*32kB (UME) 15*64kB (UME) 8*128kB (UME) 2*256kB (UM) 0*512kB 0*1024kB 1*2048kB (U) 949*4096kB (M) = 3894756kB [ 317.023074][T10730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.058971][T10730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.074857][T10730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.103344][T10730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.136415][T10730] 60605 total pagecache pages [ 317.141587][T10730] 0 pages in swap cache [ 317.161757][T10730] Free swap = 124996kB [ 317.185815][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 317.187958][T10730] Total swap = 124996kB [ 317.215222][T10749] netlink: 'syz.2.1852': attribute type 10 has an invalid length. [ 317.237149][T10730] 2097051 pages RAM [ 317.241572][T10730] 0 pages HighMem/MovableOnly [ 317.245976][T10749] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1852'. [ 317.255690][T10730] 416953 pages reserved [ 317.255870][T10730] 0 pages cma reserved [ 317.378559][T10754] netlink: 'syz.0.1853': attribute type 3 has an invalid length. [ 317.404863][T10754] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1853'. [ 317.419358][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.419483][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.526188][T10759] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1855'. [ 317.606755][T10760] netlink: 'syz.1.1854': attribute type 17 has an invalid length. [ 318.353725][T10772] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1857'. [ 318.414263][T10772] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1857'. [ 318.499551][T10766] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 318.518184][T10766] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 318.537905][T10766] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.596092][T10766] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 318.751855][T10783] C: renamed from team_slave_0 [ 318.849445][T10783] netlink: 'syz.2.1863': attribute type 3 has an invalid length. [ 318.869768][T10783] netlink: 'syz.2.1863': attribute type 1 has an invalid length. [ 319.186700][T10796] delete_channel: no stack [ 319.311351][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 322.410587][T10824] __nla_validate_parse: 6 callbacks suppressed [ 322.410604][T10824] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1875'. [ 322.441714][T10824] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1875'. [ 322.461678][T10819] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1875'. [ 322.498825][T10824] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1875'. [ 322.624829][T10819] netlink: 'syz.3.1875': attribute type 10 has an invalid length. [ 322.634509][T10819] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1875'. [ 322.653441][T10819] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 322.661090][T10819] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.690016][T10819] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 323.175519][T10835] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1881'. [ 323.271968][T10835] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.1881'. [ 323.344283][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 323.794979][T10849] FAULT_INJECTION: forcing a failure. [ 323.794979][T10849] name failslab, interval 1, probability 0, space 0, times 0 [ 323.815781][T10849] CPU: 0 PID: 10849 Comm: syz.3.1885 Not tainted syzkaller #0 [ 323.823293][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.833434][T10849] Call Trace: [ 323.836744][T10849] [ 323.839692][T10849] dump_stack_lvl+0x18c/0x250 [ 323.844402][T10849] ? show_regs_print_info+0x20/0x20 [ 323.849624][T10849] ? load_image+0x420/0x420 [ 323.854156][T10849] ? skb_network_protocol+0x529/0x790 [ 323.859569][T10849] should_fail_ex+0x394/0x4c0 [ 323.864284][T10849] should_failslab+0x9/0x20 [ 323.868805][T10849] slab_pre_alloc_hook+0x59/0x300 [ 323.873880][T10849] kmem_cache_alloc+0x5a/0x2c0 [ 323.878665][T10849] ? skb_clone+0x1eb/0x370 [ 323.883118][T10849] skb_clone+0x1eb/0x370 [ 323.887373][T10849] ? dev_queue_xmit_nit+0x204/0xba0 [ 323.892620][T10849] dev_queue_xmit_nit+0x23f/0xba0 [ 323.897660][T10849] ? dev_queue_xmit_nit+0x2d/0xba0 [ 323.902808][T10849] dev_hard_start_xmit+0x150/0x790 [ 323.907994][T10849] ? __dev_queue_xmit+0x275/0x3630 [ 323.913141][T10849] __dev_queue_xmit+0x198c/0x3630 [ 323.918194][T10849] ? __dev_queue_xmit+0x275/0x3630 [ 323.923369][T10849] ? netdev_core_pick_tx+0x370/0x370 [ 323.928671][T10849] ? ref_tracker_alloc+0x347/0x4b0 [ 323.933842][T10849] ? __copy_skb_header+0xa3/0x4a0 [ 323.938896][T10849] ? __asan_memcpy+0x40/0x70 [ 323.943519][T10849] ? __skb_clone+0x5c/0x6c0 [ 323.948072][T10849] ? __skb_clone+0x446/0x6c0 [ 323.952710][T10849] ? skb_clone+0x21f/0x370 [ 323.957149][T10849] __netlink_deliver_tap+0x579/0x7f0 [ 323.962483][T10849] ? netlink_deliver_tap+0x2e/0x1b0 [ 323.967704][T10849] netlink_deliver_tap+0x19c/0x1b0 [ 323.972850][T10849] netlink_unicast+0x77b/0x930 [ 323.977673][T10849] netlink_sendmsg+0x8d0/0xbf0 [ 323.982479][T10849] ? netlink_getsockopt+0x590/0x590 [ 323.987788][T10849] ? apparmor_socket_sendmsg+0x8e/0x330 [ 323.993356][T10849] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 323.998656][T10849] ? security_socket_sendmsg+0x80/0xa0 [ 324.004131][T10849] ? netlink_getsockopt+0x590/0x590 [ 324.009375][T10849] ____sys_sendmsg+0x61b/0x980 [ 324.014180][T10849] ? __asan_memset+0x22/0x40 [ 324.018790][T10849] ? __sys_sendmsg_sock+0x30/0x30 [ 324.023924][T10849] ? __import_iovec+0x5f2/0x850 [ 324.028841][T10849] ? import_iovec+0x73/0xa0 [ 324.033371][T10849] ___sys_sendmsg+0x2a6/0x360 [ 324.038086][T10849] ? __sys_sendmsg+0x2b0/0x2b0 [ 324.043035][T10849] ? trace_call_bpf+0xc3/0x6c0 [ 324.047885][T10849] __se_sys_sendmsg+0x1d0/0x2c0 [ 324.052794][T10849] ? __x64_sys_sendmsg+0x80/0x80 [ 324.057795][T10849] ? lockdep_hardirqs_on+0x98/0x150 [ 324.063020][T10849] do_syscall_64+0x55/0xb0 [ 324.067461][T10849] ? clear_bhb_loop+0x40/0x90 [ 324.072163][T10849] ? clear_bhb_loop+0x40/0x90 [ 324.076917][T10849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.082845][T10849] RIP: 0033:0x7f42aef9de59 [ 324.087284][T10849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.106918][T10849] RSP: 002b:00007f42afe1f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.115376][T10849] RAX: ffffffffffffffda RBX: 00007f42af226090 RCX: 00007f42aef9de59 [ 324.123365][T10849] RDX: 0000000000000800 RSI: 0000200000000100 RDI: 0000000000000003 [ 324.131356][T10849] RBP: 00007f42afe1f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.139347][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.147335][T10849] R13: 00007f42af226128 R14: 00007f42af226090 R15: 00007fff220587b8 [ 324.155368][T10849] [ 324.193279][T10849] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1885'. [ 328.076810][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 328.186401][T10880] veth1_to_bond: entered allmulticast mode [ 328.647919][T10885] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1900'. [ 328.659804][T10885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1900'. [ 332.435417][T10922] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1911'. [ 332.487099][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1911'. [ 332.610921][T10930] netlink: 'syz.1.1913': attribute type 9 has an invalid length. [ 332.619242][T10930] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1913'. [ 332.644574][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 333.196869][T10935] netlink: 'syz.1.1915': attribute type 9 has an invalid length. [ 333.215049][T10935] netlink: 148156 bytes leftover after parsing attributes in process `syz.1.1915'. [ 334.156204][T10942] net_ratelimit: 99 callbacks suppressed [ 334.156222][T10942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 335.659554][T10957] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1923'. [ 338.396224][T10957] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.1923'. [ 338.406378][T10957] tipc: Started in network mode [ 338.411478][T10957] tipc: Node identity b, cluster identity 73 [ 338.421849][T10957] tipc: Node number set to 11 [ 338.498700][T10965] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1926'. [ 338.529426][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'. [ 338.708907][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 339.699806][T10986] netlink: 'syz.2.1931': attribute type 9 has an invalid length. [ 339.733918][T10986] netlink: 148156 bytes leftover after parsing attributes in process `syz.2.1931'. [ 340.073394][T10992] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1935'. [ 340.138223][T10997] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1934'. [ 340.153216][T10998] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 340.179009][T10997] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.1934'. [ 340.197028][T10997] tipc: Started in network mode [ 340.215429][T10997] tipc: Node identity b, cluster identity 73 [ 340.225590][T10997] tipc: Node number set to 11 [ 342.309304][T11006] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1940'. [ 342.319721][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1940'. [ 342.508272][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 343.449732][T11022] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1945'. [ 345.315223][T11035] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1950'. [ 345.338634][T11035] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.1950'. [ 345.355951][T11035] tipc: Started in network mode [ 345.366740][T11035] tipc: Node identity b, cluster identity 73 [ 345.385346][T11035] tipc: Node number set to 11 [ 345.401640][T11037] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1952'. [ 345.432403][T11037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1952'. [ 346.340506][T11051] FAULT_INJECTION: forcing a failure. [ 346.340506][T11051] name failslab, interval 1, probability 0, space 0, times 0 [ 346.355479][T11051] CPU: 1 PID: 11051 Comm: syz.3.1957 Not tainted syzkaller #0 [ 346.362985][T11051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.373047][T11051] Call Trace: [ 346.376325][T11051] [ 346.379269][T11051] dump_stack_lvl+0x18c/0x250 [ 346.383994][T11051] ? show_regs_print_info+0x20/0x20 [ 346.389203][T11051] ? load_image+0x420/0x420 [ 346.393711][T11051] ? __might_sleep+0xe0/0xe0 [ 346.398303][T11051] ? __lock_acquire+0x7d80/0x7d80 [ 346.403342][T11051] should_fail_ex+0x394/0x4c0 [ 346.408052][T11051] should_failslab+0x9/0x20 [ 346.412563][T11051] slab_pre_alloc_hook+0x59/0x300 [ 346.417630][T11051] ? rxrpc_alloc_bundle+0x78/0x580 [ 346.422786][T11051] __kmem_cache_alloc_node+0x53/0x250 [ 346.428186][T11051] ? __lock_acquire+0x7d80/0x7d80 [ 346.433227][T11051] ? rxrpc_alloc_bundle+0x78/0x580 [ 346.438387][T11051] kmalloc_trace+0x2a/0xe0 [ 346.442818][T11051] rxrpc_alloc_bundle+0x78/0x580 [ 346.447762][T11051] rxrpc_look_up_bundle+0x3a2/0x950 [ 346.452962][T11051] ? _raw_spin_unlock+0x28/0x40 [ 346.457829][T11051] rxrpc_new_client_call+0xbe2/0x1400 [ 346.463297][T11051] rxrpc_do_sendmsg+0xe03/0x12d0 [ 346.468256][T11051] ? rxrpc_propose_abort+0x1f0/0x1f0 [ 346.473571][T11051] ? __local_bh_enable_ip+0x13a/0x1c0 [ 346.478958][T11051] ? rxrpc_sendmsg+0x373/0x5b0 [ 346.483741][T11051] ? rxrpc_getsockopt+0x150/0x150 [ 346.488806][T11051] ____sys_sendmsg+0x61b/0x980 [ 346.493605][T11051] ? __sys_sendmsg_sock+0x30/0x30 [ 346.498639][T11051] ? __import_iovec+0x3fa/0x850 [ 346.503541][T11051] ? import_iovec+0x73/0xa0 [ 346.508057][T11051] ___sys_sendmsg+0x2a6/0x360 [ 346.512750][T11051] ? __sys_sendmsg+0x2b0/0x2b0 [ 346.517625][T11051] ? __lock_acquire+0x7d80/0x7d80 [ 346.522671][T11051] __se_sys_sendmsg+0x1d0/0x2c0 [ 346.527556][T11051] ? __x64_sys_sendmsg+0x80/0x80 [ 346.532542][T11051] ? lockdep_hardirqs_on+0x98/0x150 [ 346.537776][T11051] do_syscall_64+0x55/0xb0 [ 346.542229][T11051] ? clear_bhb_loop+0x40/0x90 [ 346.546903][T11051] ? clear_bhb_loop+0x40/0x90 [ 346.551665][T11051] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.557642][T11051] RIP: 0033:0x7f42aef9de59 [ 346.562172][T11051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.581870][T11051] RSP: 002b:00007f42afe40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.590641][T11051] RAX: ffffffffffffffda RBX: 00007f42af225fa0 RCX: 00007f42aef9de59 [ 346.598636][T11051] RDX: 000000000000fcc0 RSI: 0000200000000080 RDI: 0000000000000003 [ 346.606604][T11051] RBP: 00007f42afe40090 R08: 0000000000000000 R09: 0000000000000000 [ 346.614750][T11051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 346.622716][T11051] R13: 00007f42af226038 R14: 00007f42af225fa0 R15: 00007fff220587b8 [ 346.630698][T11051] [ 346.714391][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 348.904941][T11070] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1964'. [ 348.930003][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1964'. [ 348.941150][T11076] lo: entered promiscuous mode [ 349.017079][T11075] netlink: 'syz.3.1966': attribute type 9 has an invalid length. [ 349.025800][T11075] netlink: 148156 bytes leftover after parsing attributes in process `syz.3.1966'. [ 349.536149][T11087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1970'. [ 349.705591][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 352.789368][T11109] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1977'. [ 352.816979][T11109] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1977'. [ 352.921212][T11118] netlink: 'syz.3.1978': attribute type 17 has an invalid length. [ 353.628301][ T5779] Bluetooth: hci0: SCO packet for unknown connection handle 5 [ 356.652886][T11146] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1989'. [ 356.713097][T11146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1989'. [ 360.292731][T11180] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2003'. [ 360.310133][T11180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 360.677738][T11192] netlink: 'syz.0.2007': attribute type 17 has an invalid length. [ 361.153019][T11207] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2013'. [ 361.168864][T11207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 362.846225][T11215] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2017'. [ 362.884471][ T5779] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 363.118984][T11221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2018'. [ 363.162389][T11221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2018'. [ 363.189054][T11217] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2018'. [ 363.211890][T11230] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2018'. [ 363.302389][T11233] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.2022'. [ 364.261586][T11247] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2027'. [ 364.271530][T11247] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'. [ 364.932402][ T5779] Bluetooth: hci2: command 0x0406 tx timeout [ 365.748256][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 366.711452][T11276] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2039'. [ 366.757235][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2039'. [ 369.141164][T11289] __nla_validate_parse: 2 callbacks suppressed [ 369.141179][T11289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2044'. [ 369.157992][T11289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2044'. [ 369.176645][T11289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2044'. [ 369.201450][T11289] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2044'. [ 369.351071][T11298] netlink: 'syz.0.2048': attribute type 2 has an invalid length. [ 369.375289][T11298] netlink: 'syz.0.2048': attribute type 8 has an invalid length. [ 369.403204][T11298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2048'. [ 369.463917][ T5779] Bluetooth: hci1: SCO packet for unknown connection handle 5 [ 369.713574][T11304] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2048'. [ 370.520908][T11316] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2052'. [ 370.554120][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2052'. [ 371.343273][T11323] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.2054'. [ 371.371361][T11325] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 371.384008][T11325] bridge0: left allmulticast mode [ 371.394789][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 371.445596][T11325] netlink: 'syz.3.2055': attribute type 4 has an invalid length. [ 371.706717][ T5779] Bluetooth: hci2: SCO packet for unknown connection handle 5 [ 374.121851][ T5779] Bluetooth: hci0: SCO packet for unknown connection handle 5 [ 374.677089][T11361] netlink: 'syz.2.2065': attribute type 6 has an invalid length. [ 374.859648][T11361] __nla_validate_parse: 5 callbacks suppressed [ 374.859669][T11361] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2065'. [ 377.192669][T11366] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2067'. [ 377.324561][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2072'. [ 377.343137][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2072'. [ 377.357185][T11374] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2072'. [ 377.496119][T11379] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2073'. [ 378.479073][T11394] raw_sendmsg: syz.3.2076 forgot to set AF_INET. Fix it! [ 378.636250][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 378.860027][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.875448][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.132626][T11400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.667780][T11408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 380.677303][T11408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 380.689017][T11408] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2081'. [ 381.869277][T11428] netlink: 'syz.3.2086': attribute type 2 has an invalid length. [ 381.909656][T11428] netlink: 'syz.3.2086': attribute type 8 has an invalid length. [ 381.942351][T11428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2086'. [ 382.076645][T11428] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2086'. [ 382.706224][T11429] sit0: entered allmulticast mode [ 382.776127][T11431] sit0: entered promiscuous mode [ 383.063040][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 383.810895][T11444] netlink: 'syz.3.2090': attribute type 3 has an invalid length. [ 383.847878][T11444] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2090'. [ 386.311705][ T5779] Bluetooth: hci1: SCO packet for unknown connection handle 5 [ 387.975047][T11462] netlink: 'syz.3.2095': attribute type 6 has an invalid length. [ 387.995970][T11462] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2095'. [ 388.172516][ T5779] Bluetooth: hci1: SCO packet for unknown connection handle 5 [ 388.346742][T11475] sit0: entered allmulticast mode [ 388.397372][T11480] FAULT_INJECTION: forcing a failure. [ 388.397372][T11480] name failslab, interval 1, probability 0, space 0, times 0 [ 388.410497][T11480] CPU: 0 PID: 11480 Comm: syz.0.2104 Not tainted syzkaller #0 [ 388.418014][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 388.428120][T11480] Call Trace: [ 388.431443][T11480] [ 388.434416][T11480] dump_stack_lvl+0x18c/0x250 [ 388.439167][T11480] ? show_regs_print_info+0x20/0x20 [ 388.444534][T11480] ? load_image+0x420/0x420 [ 388.449127][T11480] should_fail_ex+0x394/0x4c0 [ 388.453863][T11480] ? __sigqueue_alloc+0x32/0x520 [ 388.458864][T11480] should_failslab+0x9/0x20 [ 388.463424][T11480] slab_pre_alloc_hook+0x59/0x300 [ 388.466658][T11475] sit0: entered promiscuous mode [ 388.468476][T11480] ? __lock_acquire+0x7d80/0x7d80 [ 388.478580][T11480] ? __sigqueue_alloc+0x32/0x520 [ 388.483571][T11480] kmem_cache_alloc+0x5a/0x2c0 [ 388.488388][T11480] ? __sigqueue_alloc+0x40c/0x520 [ 388.493460][T11480] ? __sigqueue_alloc+0x32/0x520 [ 388.498464][T11480] __sigqueue_alloc+0x40c/0x520 [ 388.503382][T11480] __send_signal_locked+0x22f/0xe00 [ 388.508647][T11480] force_sig_info_to_task+0x347/0x490 [ 388.514090][T11480] force_sig_fault+0xf1/0x150 [ 388.518821][T11480] ? 0xffffffffff600000 [ 388.523033][T11480] ? force_sig_fault_to_task+0x140/0x140 [ 388.528728][T11480] ? 0xffffffffff600000 [ 388.532946][T11480] ? 0xffffffffff600000 [ 388.537670][T11480] ? __bad_area_nosemaphore+0x31e/0x690 [ 388.543276][T11480] ? 0xffffffffff600000 [ 388.547649][T11480] exc_page_fault+0x64/0x100 [ 388.552283][T11480] ? clear_bhb_loop+0x40/0x90 [ 388.557006][T11480] asm_exc_page_fault+0x26/0x30 [ 388.561918][T11480] RIP: 0033:0x7fb247f7cbf9 [ 388.566476][T11480] Code: f8 77 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 89 f8 48 89 fa c5 f9 ef c0 25 ff 0f 00 00 3d e0 0f 00 00 0f 87 27 01 00 00 fd 74 0f c5 fd d7 c1 85 c0 74 5b f3 0f bc c0 e9 30 01 00 00 66 [ 388.586141][T11480] RSP: 002b:00007fb248f298a8 EFLAGS: 00010283 [ 388.592260][T11480] RAX: 0000000000000000 RBX: 00007fb248f29de0 RCX: 2f666c65732f636f [ 388.600288][T11480] RDX: ffffffffff600000 RSI: 00007fb24805e580 RDI: ffffffffff600000 [ 388.608328][T11480] RBP: ffffffffff600000 R08: 00007fb248f2a010 R09: 00000000ffffffff [ 388.616352][T11480] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 388.624457][T11480] R13: 0000000000000073 R14: 00007fb2480331dd R15: 00007fb248f29ea0 [ 388.632490][T11480] ? 0xffffffffff600000 [ 388.636776][T11480] ? 0xffffffffff600000 [ 388.640981][T11480] ? 0xffffffffff600000 [ 388.645191][T11480] [ 391.837080][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 395.317398][T11542] sit0: entered allmulticast mode [ 395.360601][T11543] sit0: entered promiscuous mode [ 395.436864][T11545] netlink: 'syz.3.2123': attribute type 27 has an invalid length. [ 395.719533][T11553] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2125'. [ 395.731087][T11552] FAULT_INJECTION: forcing a failure. [ 395.731087][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 395.743801][T11552] CPU: 0 PID: 11552 Comm: syz.3.2127 Not tainted syzkaller #0 [ 395.751292][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.761379][T11552] Call Trace: [ 395.764691][T11552] [ 395.767645][T11552] dump_stack_lvl+0x18c/0x250 [ 395.772371][T11552] ? show_regs_print_info+0x20/0x20 [ 395.777606][T11552] ? load_image+0x420/0x420 [ 395.782155][T11552] should_fail_ex+0x394/0x4c0 [ 395.786869][T11552] should_failslab+0x9/0x20 [ 395.791409][T11552] slab_pre_alloc_hook+0x59/0x300 [ 395.796475][T11552] ? ip6_pol_route+0x171/0x1230 [ 395.801369][T11552] kmem_cache_alloc+0x5a/0x2c0 [ 395.806154][T11552] ? dst_alloc+0x105/0x170 [ 395.810601][T11552] ? ipv6_sysctl_rtcache_flush+0xf0/0xf0 [ 395.816247][T11552] dst_alloc+0x105/0x170 [ 395.820492][T11552] ip6_pol_route+0x94f/0x1230 [ 395.825170][T11552] ? ip6_pol_route+0x171/0x1230 [ 395.830056][T11552] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 395.835699][T11552] ? __lock_acquire+0x1262/0x7d80 [ 395.840726][T11552] fib6_rule_lookup+0x35d/0x580 [ 395.845575][T11552] ? skb_header_pointer+0x120/0x120 [ 395.850772][T11552] ? fib6_lookup+0x2d0/0x2d0 [ 395.855363][T11552] ? read_lock_is_recursive+0x20/0x20 [ 395.860736][T11552] ? __lock_acquire+0x1262/0x7d80 [ 395.865759][T11552] ? verify_lock_unused+0x140/0x140 [ 395.870958][T11552] ip6_route_output_flags+0x364/0x5d0 [ 395.876329][T11552] ? ip6_route_output_flags+0x2e/0x5d0 [ 395.881786][T11552] ip6_dst_lookup_tail+0x1a5/0x1660 [ 395.887019][T11552] ? ip6_dst_lookup+0x60/0x60 [ 395.891702][T11552] ? l2tp_ip6_sendmsg+0x940/0x1680 [ 395.896813][T11552] ? __lock_acquire+0x7d80/0x7d80 [ 395.901843][T11552] ip6_dst_lookup_flow+0x48/0xe0 [ 395.906785][T11552] l2tp_ip6_sendmsg+0xf48/0x1680 [ 395.911728][T11552] ? verify_lock_unused+0x140/0x140 [ 395.916954][T11552] ? l2tp_ip6_destroy_sock+0x60/0x60 [ 395.922363][T11552] ? tomoyo_socket_sendmsg_permission+0x216/0x2f0 [ 395.928779][T11552] ? sock_rps_record_flow+0x19/0x3f0 [ 395.934064][T11552] ? inet_sendmsg+0x7e/0x2a0 [ 395.938657][T11552] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 395.943940][T11552] ? inet_send_prepare+0x250/0x250 [ 395.949058][T11552] ____sys_sendmsg+0x61b/0x980 [ 395.953862][T11552] ? __asan_memset+0x22/0x40 [ 395.958453][T11552] ? __sys_sendmsg_sock+0x30/0x30 [ 395.963495][T11552] ? __import_iovec+0x3fa/0x850 [ 395.968353][T11552] ? import_iovec+0x73/0xa0 [ 395.972856][T11552] ___sys_sendmsg+0x2a6/0x360 [ 395.977532][T11552] ? get_pid_task+0x20/0x1e0 [ 395.982227][T11552] ? __sys_sendmsg+0x2b0/0x2b0 [ 395.987006][T11552] ? __lock_acquire+0x7d80/0x7d80 [ 395.992046][T11552] __se_sys_sendmsg+0x1d0/0x2c0 [ 395.996908][T11552] ? __x64_sys_sendmsg+0x80/0x80 [ 396.001858][T11552] ? lockdep_hardirqs_on+0x98/0x150 [ 396.007059][T11552] do_syscall_64+0x55/0xb0 [ 396.011480][T11552] ? clear_bhb_loop+0x40/0x90 [ 396.016234][T11552] ? clear_bhb_loop+0x40/0x90 [ 396.020912][T11552] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 396.026808][T11552] RIP: 0033:0x7f42aef9de59 [ 396.031219][T11552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.050817][T11552] RSP: 002b:00007f42afe40028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.059229][T11552] RAX: ffffffffffffffda RBX: 00007f42af225fa0 RCX: 00007f42aef9de59 [ 396.067194][T11552] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 396.075157][T11552] RBP: 00007f42afe40090 R08: 0000000000000000 R09: 0000000000000000 [ 396.083119][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.091086][T11552] R13: 00007f42af226038 R14: 00007f42af225fa0 R15: 00007fff220587b8 [ 396.099074][T11552] [ 396.361253][T11564] batadv0: left allmulticast mode [ 396.375684][T11564] batadv0: left promiscuous mode [ 396.393197][T11564] bridge0: port 3(batadv0) entered disabled state [ 399.171967][T11564] bridge_slave_1: left allmulticast mode [ 399.187693][T11564] bridge_slave_1: left promiscuous mode [ 399.198656][T11564] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.208865][T11564] bridge_slave_0: left promiscuous mode [ 399.219143][T11564] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.273357][T11564] .`: (slave bridge0): Releasing backup interface [ 399.370281][T11582] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2135'. [ 403.398586][T11608] netlink: 'syz.2.2144': attribute type 21 has an invalid length. [ 403.600217][T11602] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2143'. [ 403.976705][T11618] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2147'. [ 404.020356][T11618] netlink: zone id is out of range [ 405.754582][T11655] netlink: 'syz.3.2158': attribute type 21 has an invalid length. [ 405.810198][T11657] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2161'. [ 406.123200][T11664] netlink: 206468 bytes leftover after parsing attributes in process `syz.1.2163'. [ 406.145693][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 408.455753][T11696] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2175'. [ 408.712919][T11702] netlink: 'syz.0.2173': attribute type 21 has an invalid length. [ 408.777759][T11708] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.2178'. [ 410.392274][T11743] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2187'. [ 410.680953][T11750] netlink: 'syz.1.2192': attribute type 21 has an invalid length. [ 411.172865][T11755] netlink: 'syz.0.2194': attribute type 27 has an invalid length. [ 411.203952][T11755] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2194'. [ 411.242981][T11755] netlink: 'syz.0.2194': attribute type 21 has an invalid length. [ 411.251010][T11755] netlink: 14548 bytes leftover after parsing attributes in process `syz.0.2194'. [ 412.241539][T11772] FAULT_INJECTION: forcing a failure. [ 412.241539][T11772] name failslab, interval 1, probability 0, space 0, times 0 [ 412.254576][T11772] CPU: 1 PID: 11772 Comm: syz.2.2201 Not tainted syzkaller #0 [ 412.262102][T11772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.272203][T11772] Call Trace: [ 412.275513][T11772] [ 412.278477][T11772] dump_stack_lvl+0x18c/0x250 [ 412.283205][T11772] ? show_regs_print_info+0x20/0x20 [ 412.288453][T11772] ? load_image+0x420/0x420 [ 412.293004][T11772] ? __might_sleep+0xe0/0xe0 [ 412.297646][T11772] ? __lock_acquire+0x7d80/0x7d80 [ 412.302723][T11772] should_fail_ex+0x394/0x4c0 [ 412.307453][T11772] should_failslab+0x9/0x20 [ 412.311996][T11772] slab_pre_alloc_hook+0x59/0x300 [ 412.317082][T11772] ? __lock_acquire+0x7d80/0x7d80 [ 412.322153][T11772] ? kvmalloc_node+0x70/0x180 [ 412.326882][T11772] ? kvmalloc_node+0x70/0x180 [ 412.331616][T11772] __kmem_cache_alloc_node+0x53/0x250 [ 412.337037][T11772] ? __schedule_delayed_monitor_work+0x200/0x200 [ 412.343435][T11772] ? kvmalloc_node+0x70/0x180 [ 412.348157][T11772] __kmalloc_node+0xa6/0x240 [ 412.352776][T11772] kvmalloc_node+0x70/0x180 [ 412.357298][T11772] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 412.362695][T11772] ? 0xffffffffa0004740 [ 412.366859][T11772] ? 0xffffffffa0004740 [ 412.371017][T11772] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 412.376933][T11772] ? xdp_convert_md_to_buff+0x330/0x330 [ 412.382536][T11772] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 412.388902][T11772] ? _copy_from_user+0xa5/0xe0 [ 412.393700][T11772] ? bpf_test_init+0x119/0x140 [ 412.398495][T11772] ? xdp_convert_md_to_buff+0x5b/0x330 [ 412.403981][T11772] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 412.409379][T11772] ? __lock_acquire+0x7d80/0x7d80 [ 412.414460][T11772] ? dev_put+0x80/0x80 [ 412.418557][T11772] ? dev_put+0x80/0x80 [ 412.422647][T11772] bpf_prog_test_run+0x31f/0x390 [ 412.427604][T11772] __sys_bpf+0x49d/0x890 [ 412.431864][T11772] ? bpf_link_show_fdinfo+0x390/0x390 [ 412.437292][T11772] ? lock_chain_count+0x20/0x20 [ 412.442162][T11772] __x64_sys_bpf+0x7c/0x90 [ 412.446586][T11772] do_syscall_64+0x55/0xb0 [ 412.451016][T11772] ? clear_bhb_loop+0x40/0x90 [ 412.455707][T11772] ? clear_bhb_loop+0x40/0x90 [ 412.460566][T11772] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 412.466470][T11772] RIP: 0033:0x7f154339de59 [ 412.470893][T11772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.490513][T11772] RSP: 002b:00007f15441d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 412.498948][T11772] RAX: ffffffffffffffda RBX: 00007f1543625fa0 RCX: 00007f154339de59 [ 412.507012][T11772] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 412.514989][T11772] RBP: 00007f15441d5090 R08: 0000000000000000 R09: 0000000000000000 [ 412.522967][T11772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.530945][T11772] R13: 00007f1543626038 R14: 00007f1543625fa0 R15: 00007ffc401e6d38 [ 412.538946][T11772] [ 413.134818][T11784] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2203'. [ 413.862345][T11788] netlink: 'syz.3.2206': attribute type 21 has an invalid length. [ 415.208161][T11812] FAULT_INJECTION: forcing a failure. [ 415.208161][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 415.225157][T11812] CPU: 0 PID: 11812 Comm: syz.3.2217 Not tainted syzkaller #0 [ 415.232682][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.242760][T11812] Call Trace: [ 415.246039][T11812] [ 415.249406][T11812] dump_stack_lvl+0x18c/0x250 [ 415.254098][T11812] ? show_regs_print_info+0x20/0x20 [ 415.259322][T11812] ? load_image+0x420/0x420 [ 415.263829][T11812] ? __might_sleep+0xe0/0xe0 [ 415.268512][T11812] ? __lock_acquire+0x7d80/0x7d80 [ 415.273539][T11812] should_fail_ex+0x394/0x4c0 [ 415.278224][T11812] should_failslab+0x9/0x20 [ 415.282730][T11812] slab_pre_alloc_hook+0x59/0x300 [ 415.287759][T11812] ? sk_prot_alloc+0xe7/0x210 [ 415.292436][T11812] ? sk_prot_alloc+0xe7/0x210 [ 415.297118][T11812] __kmem_cache_alloc_node+0x53/0x250 [ 415.302512][T11812] ? sk_prot_alloc+0xe7/0x210 [ 415.307188][T11812] __kmalloc+0xa7/0x240 [ 415.311359][T11812] sk_prot_alloc+0xe7/0x210 [ 415.315864][T11812] ? sk_alloc+0x24/0x350 [ 415.320112][T11812] sk_alloc+0x3a/0x350 [ 415.324184][T11812] ? bpf_ctx_init+0x154/0x190 [ 415.328863][T11812] bpf_prog_test_run_skb+0x371/0x18f0 [ 415.334413][T11812] ? __fget_files+0x28/0x460 [ 415.339009][T11812] ? __fget_files+0x3fc/0x460 [ 415.343701][T11812] ? cpu_online+0x60/0x60 [ 415.348037][T11812] bpf_prog_test_run+0x31f/0x390 [ 415.352980][T11812] __sys_bpf+0x49d/0x890 [ 415.357223][T11812] ? bpf_link_show_fdinfo+0x390/0x390 [ 415.362607][T11812] ? lock_chain_count+0x20/0x20 [ 415.367465][T11812] __x64_sys_bpf+0x7c/0x90 [ 415.371880][T11812] do_syscall_64+0x55/0xb0 [ 415.376304][T11812] ? clear_bhb_loop+0x40/0x90 [ 415.380978][T11812] ? clear_bhb_loop+0x40/0x90 [ 415.385745][T11812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 415.391644][T11812] RIP: 0033:0x7f42aef9de59 [ 415.396056][T11812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.415675][T11812] RSP: 002b:00007f42afe40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 415.424102][T11812] RAX: ffffffffffffffda RBX: 00007f42af225fa0 RCX: 00007f42aef9de59 [ 415.432074][T11812] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 415.440049][T11812] RBP: 00007f42afe40090 R08: 0000000000000000 R09: 0000000000000000 [ 415.448019][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.455990][T11812] R13: 00007f42af226038 R14: 00007f42af225fa0 R15: 00007fff220587b8 [ 415.463973][T11812] [ 415.832459][ T5779] Bluetooth: hci1: SCO packet for unknown connection handle 5 [ 416.784978][T11837] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 416.813027][T11837] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 416.839888][T11837] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 416.863917][T11837] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 416.901357][T11837] netlink: 'syz.1.2228': attribute type 10 has an invalid length. [ 416.922369][T11837] hsr0: left allmulticast mode [ 416.927319][T11837] hsr_slave_0: left allmulticast mode [ 416.951777][T11837] hsr_slave_1: left allmulticast mode [ 416.963111][T11837] bridge0: port 3(hsr0) entered disabled state [ 416.988677][T11837] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 417.083189][T11848] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2232'. [ 417.818831][ T5779] Bluetooth: hci3: SCO packet for unknown connection handle 5 [ 418.466343][T11872] netlink: 'syz.3.2239': attribute type 10 has an invalid length. [ 418.483529][T11872] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.502469][T11872] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.511554][T11872] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.541808][T11872] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.934430][T11888] ±ÿ: renamed from lo (while UP) [ 421.941709][T11891] netlink: 'syz.1.2244': attribute type 21 has an invalid length. [ 421.972796][T11891] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2244'. [ 422.155593][T11900] FAULT_INJECTION: forcing a failure. [ 422.155593][T11900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.173652][T11900] CPU: 0 PID: 11900 Comm: syz.1.2247 Not tainted syzkaller #0 [ 422.181273][T11900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 422.191405][T11900] Call Trace: [ 422.194702][T11900] [ 422.197637][T11900] dump_stack_lvl+0x18c/0x250 [ 422.202348][T11900] ? show_regs_print_info+0x20/0x20 [ 422.207552][T11900] ? load_image+0x420/0x420 [ 422.212088][T11900] ? __lock_acquire+0x7d80/0x7d80 [ 422.217118][T11900] ? snprintf+0xe9/0x140 [ 422.221373][T11900] should_fail_ex+0x394/0x4c0 [ 422.226082][T11900] _copy_to_user+0x2f/0xa0 [ 422.230500][T11900] simple_read_from_buffer+0xe7/0x150 [ 422.235970][T11900] proc_fail_nth_read+0x1e8/0x260 [ 422.241087][T11900] ? proc_fault_inject_write+0x360/0x360 [ 422.246724][T11900] ? fsnotify_perm+0x271/0x5e0 [ 422.251483][T11900] ? proc_fault_inject_write+0x360/0x360 [ 422.257114][T11900] vfs_read+0x298/0x990 [ 422.261283][T11900] ? kernel_read+0x1e0/0x1e0 [ 422.265904][T11900] ? __fget_files+0x28/0x460 [ 422.270519][T11900] ? __fget_files+0x3fc/0x460 [ 422.275222][T11900] ? __fdget_pos+0x2a3/0x330 [ 422.279819][T11900] ? ksys_read+0x74/0x260 [ 422.284160][T11900] ksys_read+0x151/0x260 [ 422.288411][T11900] ? vfs_write+0x9a0/0x9a0 [ 422.292831][T11900] ? lockdep_hardirqs_on+0x98/0x150 [ 422.298125][T11900] do_syscall_64+0x55/0xb0 [ 422.302550][T11900] ? clear_bhb_loop+0x40/0x90 [ 422.307224][T11900] ? clear_bhb_loop+0x40/0x90 [ 422.311906][T11900] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.317805][T11900] RIP: 0033:0x7f2d4955e68e [ 422.322230][T11900] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 422.341860][T11900] RSP: 002b:00007f2d4a548fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 422.350371][T11900] RAX: ffffffffffffffda RBX: 00007f2d4a5496c0 RCX: 00007f2d4955e68e [ 422.358346][T11900] RDX: 000000000000000f RSI: 00007f2d4a5490a0 RDI: 0000000000000005 [ 422.366316][T11900] RBP: 00007f2d4a549090 R08: 0000000000000000 R09: 0000000000000000 [ 422.374286][T11900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.382255][T11900] R13: 00007f2d49826038 R14: 00007f2d49825fa0 R15: 00007ffea3ccf4a8 [ 422.390328][T11900] [ 423.615424][T11926] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2254'. [ 423.651700][T11926] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 425.164019][T11949] FAULT_INJECTION: forcing a failure. [ 425.164019][T11949] name failslab, interval 1, probability 0, space 0, times 0 [ 425.199616][T11949] CPU: 0 PID: 11949 Comm: syz.2.2263 Not tainted syzkaller #0 [ 425.207167][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.217279][T11949] Call Trace: [ 425.220612][T11949] [ 425.223590][T11949] dump_stack_lvl+0x18c/0x250 [ 425.228351][T11949] ? show_regs_print_info+0x20/0x20 [ 425.233626][T11949] ? load_image+0x420/0x420 [ 425.238216][T11949] ? __might_sleep+0xe0/0xe0 [ 425.242993][T11949] ? __lock_acquire+0x7d80/0x7d80 [ 425.248081][T11949] should_fail_ex+0x394/0x4c0 [ 425.252831][T11949] should_failslab+0x9/0x20 [ 425.257384][T11949] slab_pre_alloc_hook+0x59/0x300 [ 425.262465][T11949] ? prepend_path+0x8a7/0x950 [ 425.267190][T11949] ? tomoyo_encode+0x2ad/0x570 [ 425.272004][T11949] ? tomoyo_encode+0x2ad/0x570 [ 425.276811][T11949] __kmem_cache_alloc_node+0x53/0x250 [ 425.282277][T11949] ? tomoyo_encode+0x2ad/0x570 [ 425.287098][T11949] __kmalloc+0xa7/0x240 [ 425.291302][T11949] tomoyo_encode+0x2ad/0x570 [ 425.295974][T11949] tomoyo_realpath_from_path+0x57c/0x5c0 [ 425.301646][T11949] ? tomoyo_domain+0xd6/0x120 [ 425.306392][T11949] tomoyo_path_number_perm+0x248/0x5e0 [ 425.311862][T11949] ? tomoyo_path_number_perm+0x217/0x5e0 [ 425.317514][T11949] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 425.322975][T11949] ? ksys_write+0x1d2/0x260 [ 425.327507][T11949] ? __fget_files+0x28/0x460 [ 425.332132][T11949] security_file_ioctl+0x70/0xa0 [ 425.337076][T11949] __se_sys_ioctl+0x48/0x170 [ 425.341669][T11949] do_syscall_64+0x55/0xb0 [ 425.346088][T11949] ? clear_bhb_loop+0x40/0x90 [ 425.350759][T11949] ? clear_bhb_loop+0x40/0x90 [ 425.355435][T11949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 425.361333][T11949] RIP: 0033:0x7f154339de59 [ 425.365748][T11949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.385448][T11949] RSP: 002b:00007f15441d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 425.393860][T11949] RAX: ffffffffffffffda RBX: 00007f1543625fa0 RCX: 00007f154339de59 [ 425.401829][T11949] RDX: 000000110e22fff6 RSI: 00000000c004743e RDI: 0000000000000004 [ 425.409887][T11949] RBP: 00007f15441d5090 R08: 0000000000000000 R09: 0000000000000000 [ 425.417858][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.425822][T11949] R13: 00007f1543626038 R14: 00007f1543625fa0 R15: 00007ffc401e6d38 [ 425.433807][T11949] [ 425.446409][T11949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 426.029189][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2268'. [ 426.056214][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2268'. [ 426.078239][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2268'. [ 430.682543][T12042] netlink: 'syz.3.2295': attribute type 21 has an invalid length. [ 431.615475][T12050] netlink: 'syz.1.2297': attribute type 21 has an invalid length. [ 433.239160][T12083] netlink: 'syz.2.2309': attribute type 21 has an invalid length. [ 435.852839][T12111] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2320'. [ 435.902947][T12111] ±ÿ: entered allmulticast mode [ 436.152471][T12124] netlink: 'syz.2.2322': attribute type 21 has an invalid length. [ 436.854494][T12141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2327'. [ 437.048517][T12132] syzkaller0: entered promiscuous mode [ 437.060313][T12132] syzkaller0: entered allmulticast mode [ 437.361430][T12153] netlink: 'syz.3.2330': attribute type 3 has an invalid length. [ 437.378302][T12153] netlink: 135832 bytes leftover after parsing attributes in process `syz.3.2330'. [ 437.929130][T12152] netlink: 'syz.0.2331': attribute type 10 has an invalid length. [ 439.869528][T12170] netlink: 'syz.0.2335': attribute type 21 has an invalid length. [ 439.898313][T12167] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2336'. [ 439.942625][T12167] openvswitch: netlink: Key type 4112 is out of range max 32 [ 440.174878][T12177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 440.188914][T12177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 440.262785][T12177] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2339'. [ 440.298542][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.305281][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.864738][T12214] netlink: 'syz.0.2349': attribute type 21 has an invalid length. [ 443.043093][T12230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2355'. [ 443.074442][T12230] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2355'. [ 443.587593][T12251] netlink: 'syz.1.2362': attribute type 21 has an invalid length. [ 444.143066][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2366'. [ 444.152349][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2366'. [ 444.166256][T12264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2366'. [ 444.212826][T12262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2366'. [ 444.278859][T12266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.405918][T12274] FAULT_INJECTION: forcing a failure. [ 444.405918][T12274] name failslab, interval 1, probability 0, space 0, times 0 [ 444.419569][T12274] CPU: 1 PID: 12274 Comm: syz.3.2371 Not tainted syzkaller #0 [ 444.427074][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 444.437240][T12274] Call Trace: [ 444.440540][T12274] [ 444.443488][T12274] dump_stack_lvl+0x18c/0x250 [ 444.448204][T12274] ? show_regs_print_info+0x20/0x20 [ 444.453447][T12274] ? load_image+0x420/0x420 [ 444.457977][T12274] ? __might_sleep+0xe0/0xe0 [ 444.462590][T12274] ? __lock_acquire+0x7d80/0x7d80 [ 444.467645][T12274] should_fail_ex+0x394/0x4c0 [ 444.472349][T12274] should_failslab+0x9/0x20 [ 444.476883][T12274] slab_pre_alloc_hook+0x59/0x300 [ 444.481955][T12274] ? __lock_acquire+0x7d80/0x7d80 [ 444.487004][T12274] ? kvmalloc_node+0x70/0x180 [ 444.491708][T12274] ? kvmalloc_node+0x70/0x180 [ 444.496389][T12274] __kmem_cache_alloc_node+0x53/0x250 [ 444.501768][T12274] ? __schedule_delayed_monitor_work+0x200/0x200 [ 444.508107][T12274] ? kvmalloc_node+0x70/0x180 [ 444.512789][T12274] __kmalloc_node+0xa6/0x240 [ 444.517397][T12274] kvmalloc_node+0x70/0x180 [ 444.521904][T12274] bpf_test_run_xdp_live+0x1c2/0x1b30 [ 444.527289][T12274] ? 0xffffffffa0004740 [ 444.531442][T12274] ? 0xffffffffa0004740 [ 444.535600][T12274] ? bpf_dispatcher_change_prog+0xc94/0xf10 [ 444.541502][T12274] ? xdp_convert_md_to_buff+0x330/0x330 [ 444.547074][T12274] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 444.553342][T12274] ? _copy_from_user+0xa5/0xe0 [ 444.558132][T12274] ? bpf_test_init+0x119/0x140 [ 444.562904][T12274] ? xdp_convert_md_to_buff+0x5b/0x330 [ 444.568369][T12274] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 444.573744][T12274] ? __lock_acquire+0x7d80/0x7d80 [ 444.578780][T12274] ? dev_put+0x80/0x80 [ 444.582872][T12274] ? dev_put+0x80/0x80 [ 444.586970][T12274] bpf_prog_test_run+0x31f/0x390 [ 444.591925][T12274] __sys_bpf+0x49d/0x890 [ 444.596177][T12274] ? bpf_link_show_fdinfo+0x390/0x390 [ 444.601654][T12274] ? lock_chain_count+0x20/0x20 [ 444.606528][T12274] __x64_sys_bpf+0x7c/0x90 [ 444.610944][T12274] do_syscall_64+0x55/0xb0 [ 444.615364][T12274] ? clear_bhb_loop+0x40/0x90 [ 444.620059][T12274] ? clear_bhb_loop+0x40/0x90 [ 444.624752][T12274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.630829][T12274] RIP: 0033:0x7f42aef9de59 [ 444.635268][T12274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.654980][T12274] RSP: 002b:00007f42afe40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.663398][T12274] RAX: ffffffffffffffda RBX: 00007f42af225fa0 RCX: 00007f42aef9de59 [ 444.671366][T12274] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 444.679342][T12274] RBP: 00007f42afe40090 R08: 0000000000000000 R09: 0000000000000000 [ 444.687397][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.695365][T12274] R13: 00007f42af226038 R14: 00007f42af225fa0 R15: 00007fff220587b8 [ 444.703366][T12274] [ 445.105014][T12292] netlink: 'syz.1.2375': attribute type 21 has an invalid length. [ 447.095730][T12335] netlink: 'syz.3.2388': attribute type 21 has an invalid length. [ 448.092204][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.101043][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.109487][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.119813][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.129196][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 448.136880][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 448.401518][T12346] chnl_net:caif_netlink_parms(): no params data found [ 449.225698][T12346] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.243228][T12346] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.250594][T12346] bridge_slave_0: entered allmulticast mode [ 449.272489][T12346] bridge_slave_0: entered promiscuous mode [ 449.308144][ T2939] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.334589][T12346] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.341815][T12346] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.351081][T12346] bridge_slave_1: entered allmulticast mode [ 449.363993][T12346] bridge_slave_1: entered promiscuous mode [ 449.428749][ T2939] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.510815][T12346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.545537][ T2939] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.564669][T12346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.696116][ T2939] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.767286][T12346] team0: Port device team_slave_0 added [ 449.798328][T12346] team0: Port device team_slave_1 added [ 449.812943][T12383] netlink: 'syz.1.2402': attribute type 21 has an invalid length. [ 449.940857][T12346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.981390][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.059374][T12346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.105972][T12346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.119348][T12346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.164192][T12346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.453644][ T5779] Bluetooth: hci4: command tx timeout [ 450.649930][T12346] hsr_slave_0: entered promiscuous mode [ 450.669233][T12346] hsr_slave_1: entered promiscuous mode [ 450.681520][T12346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.699883][T12346] Cannot create hsr debugfs directory [ 452.532348][ T5779] Bluetooth: hci4: command tx timeout [ 454.135722][T12412] netlink: 'syz.0.2413': attribute type 10 has an invalid length. [ 454.214773][T12412] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 454.234646][ T2939] tipc: Left network mode [ 454.304585][T12408] syzkaller0: entered promiscuous mode [ 454.325539][T12408] syzkaller0: entered allmulticast mode [ 454.612467][ T5779] Bluetooth: hci4: command tx timeout [ 455.115260][T12408] syzkaller0: mtu greater than device maximum [ 455.432538][T12438] netlink: 'syz.1.2415': attribute type 21 has an invalid length. [ 455.778359][T12443] netlink: set zone limit has 8 unknown bytes [ 456.733524][ T5779] Bluetooth: hci4: command tx timeout [ 457.228530][T12457] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2419'. [ 458.621336][T12346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 458.679285][T12346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 458.724706][T12346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 458.873380][T12346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 458.924223][T12490] netlink: 'syz.1.2426': attribute type 3 has an invalid length. [ 458.949626][T12490] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2426'. [ 459.222994][T12346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.347496][T12346] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.397861][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.405135][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.504487][T11579] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.512750][T11579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.798680][ T2939] hsr_slave_0: left promiscuous mode [ 459.829956][ T2939] hsr_slave_1: left promiscuous mode [ 459.849874][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.870919][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.903063][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.910552][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.947039][ T2939] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 459.957916][ T2939] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 459.971376][ T2939] hsr0: left allmulticast mode [ 459.981481][ T2939] bridge0: port 4(hsr0) entered disabled state [ 460.754251][ T2939] bridge0: port 3(team0) entered disabled state [ 460.765964][ T2939] bridge_slave_1: left allmulticast mode [ 460.778060][ T2939] bridge_slave_1: left promiscuous mode [ 460.786428][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.828647][ T2939] bridge_slave_0: left allmulticast mode [ 460.834598][ T2939] bridge_slave_0: left promiscuous mode [ 460.841287][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.871853][ T2939] veth1_macvtap: left promiscuous mode [ 460.878070][ T2939] veth0_macvtap: left promiscuous mode [ 460.884298][ T2939] veth1_vlan: left promiscuous mode [ 460.890061][ T2939] veth0_vlan: left promiscuous mode [ 460.991728][T12535] netlink: 'syz.1.2432': attribute type 28 has an invalid length. [ 460.999883][T12535] netlink: 'syz.1.2432': attribute type 29 has an invalid length. [ 461.017922][T12535] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2432'. [ 461.480759][ T2939] team_slave_1 (unregistering): left promiscuous mode [ 461.490817][ T2939] team_slave_1 (unregistering): left allmulticast mode [ 461.500477][ T2939] team0 (unregistering): Port device team_slave_1 removed [ 461.573221][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.616374][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.938348][ T2939] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 461.948327][ T2939] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 461.959911][ T2939] bond0 (unregistering): Released all slaves [ 462.050358][T12511] syzkaller0: entered promiscuous mode [ 462.056113][T12511] syzkaller0: entered allmulticast mode [ 462.062506][T12515] syzkaller0: mtu greater than device maximum [ 462.094341][T12534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2432'. [ 462.271601][T12542] netlink: set zone limit has 8 unknown bytes [ 462.969244][T12346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.098950][T12552] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2435'. [ 463.154883][T12346] veth0_vlan: entered promiscuous mode [ 463.199724][T12346] veth1_vlan: entered promiscuous mode [ 463.397101][T12346] veth0_macvtap: entered promiscuous mode [ 463.459645][T12346] veth1_macvtap: entered promiscuous mode [ 463.595184][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.652615][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.709356][T12346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.773573][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.825308][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.869466][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.912613][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.924864][T12346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.935713][T12346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.958255][T12346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.040197][T12346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.076820][T12346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.099642][T12346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.129539][T12346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.344717][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.368431][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.439104][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.469877][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.530966][T12586] FAULT_INJECTION: forcing a failure. [ 464.530966][T12586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.573385][T12586] CPU: 1 PID: 12586 Comm: syz.1.2440 Not tainted syzkaller #0 [ 464.578869][T12584] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2439'. [ 464.580892][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 464.580908][T12586] Call Trace: [ 464.580917][T12586] [ 464.580925][T12586] dump_stack_lvl+0x18c/0x250 [ 464.580959][T12586] ? show_regs_print_info+0x20/0x20 [ 464.616727][T12586] ? load_image+0x420/0x420 [ 464.621255][T12586] ? __might_fault+0xaa/0x120 [ 464.626021][T12586] ? __lock_acquire+0x7d80/0x7d80 [ 464.631044][T12586] ? __virt_addr_valid+0x10c/0x380 [ 464.636169][T12586] should_fail_ex+0x394/0x4c0 [ 464.640852][T12586] _copy_from_user+0x2f/0xe0 [ 464.645533][T12586] ____sys_sendmsg+0x329/0x980 [ 464.650318][T12586] ? __sys_sendmsg_sock+0x30/0x30 [ 464.655343][T12586] ? __import_iovec+0x3fa/0x850 [ 464.660198][T12586] ? import_iovec+0x73/0xa0 [ 464.664708][T12586] ___sys_sendmsg+0x2a6/0x360 [ 464.669384][T12586] ? get_pid_task+0x20/0x1e0 [ 464.673977][T12586] ? __sys_sendmsg+0x2b0/0x2b0 [ 464.678763][T12586] ? __lock_acquire+0x7d80/0x7d80 [ 464.683804][T12586] __se_sys_sendmsg+0x1d0/0x2c0 [ 464.688667][T12586] ? __x64_sys_sendmsg+0x80/0x80 [ 464.693623][T12586] ? lockdep_hardirqs_on+0x98/0x150 [ 464.698828][T12586] do_syscall_64+0x55/0xb0 [ 464.703240][T12586] ? clear_bhb_loop+0x40/0x90 [ 464.707911][T12586] ? clear_bhb_loop+0x40/0x90 [ 464.712593][T12586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.718494][T12586] RIP: 0033:0x7f2d4959de59 [ 464.722918][T12586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.742611][T12586] RSP: 002b:00007f2d4a549028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.751108][T12586] RAX: ffffffffffffffda RBX: 00007f2d49825fa0 RCX: 00007f2d4959de59 [ 464.759075][T12586] RDX: 0000000020048811 RSI: 00002000000001c0 RDI: 0000000000000005 [ 464.767129][T12586] RBP: 00007f2d4a549090 R08: 0000000000000000 R09: 0000000000000000 [ 464.775189][T12586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.783166][T12586] R13: 00007f2d49826038 R14: 00007f2d49825fa0 R15: 00007ffea3ccf4a8 [ 464.791150][T12586] [ 464.847901][T12584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2439'. [ 465.384363][T12603] netlink: 'syz.3.2443': attribute type 28 has an invalid length. [ 465.406121][T12603] netlink: 'syz.3.2443': attribute type 29 has an invalid length. [ 465.443928][T12605] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2443'. [ 465.472425][T12603] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2443'. [ 465.668370][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.679409][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.688071][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.696538][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.705582][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 465.715378][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.150234][T12612] chnl_net:caif_netlink_parms(): no params data found [ 466.516503][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.558144][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.573578][T12612] bridge_slave_0: entered allmulticast mode [ 466.595941][T12612] bridge_slave_0: entered promiscuous mode [ 466.657834][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.667406][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.677778][T12612] bridge_slave_1: entered allmulticast mode [ 466.688966][T12612] bridge_slave_1: entered promiscuous mode [ 466.714212][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 466.717690][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.738035][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.804359][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 466.809773][T12633] netlink: set zone limit has 8 unknown bytes [ 466.837867][T12628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2448'. [ 466.923841][T12635] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.2451'. [ 466.941752][T12612] team0: Port device team_slave_0 added [ 466.992897][T12635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2451'. [ 467.009033][T12612] team0: Port device team_slave_1 added [ 467.359739][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.405849][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.521529][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.599791][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.620658][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.718294][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.452849][ T5084] Bluetooth: hci1: command tx timeout [ 468.751615][T12612] hsr_slave_0: entered promiscuous mode [ 468.771488][T12612] hsr_slave_1: entered promiscuous mode [ 468.807855][T12612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.815664][T12612] Cannot create hsr debugfs directory [ 469.043367][T12612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.185399][T12612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.280261][T12612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.379956][T12653] FAULT_INJECTION: forcing a failure. [ 469.379956][T12653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.437479][T12653] CPU: 1 PID: 12653 Comm: syz.3.2458 Not tainted syzkaller #0 [ 469.444988][T12653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.455232][T12653] Call Trace: [ 469.458544][T12653] [ 469.461486][T12653] dump_stack_lvl+0x18c/0x250 [ 469.466274][T12653] ? show_regs_print_info+0x20/0x20 [ 469.471501][T12653] ? load_image+0x420/0x420 [ 469.476015][T12653] ? __might_fault+0xaa/0x120 [ 469.480726][T12653] ? __lock_acquire+0x7d80/0x7d80 [ 469.485800][T12653] ? __virt_addr_valid+0x10c/0x380 [ 469.490937][T12653] should_fail_ex+0x394/0x4c0 [ 469.495636][T12653] _copy_from_user+0x2f/0xe0 [ 469.500230][T12653] generic_map_update_batch+0x53e/0x800 [ 469.505791][T12653] ? rcu_read_unlock+0xa0/0xa0 [ 469.510565][T12653] ? __fdget+0x180/0x210 [ 469.515084][T12653] ? rcu_read_unlock+0xa0/0xa0 [ 469.519859][T12653] bpf_map_do_batch+0x3f2/0x600 [ 469.524714][T12653] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 469.531066][T12653] __sys_bpf+0x381/0x890 [ 469.535329][T12653] ? bpf_link_show_fdinfo+0x390/0x390 [ 469.540858][T12653] ? lock_chain_count+0x20/0x20 [ 469.545744][T12653] __x64_sys_bpf+0x7c/0x90 [ 469.550179][T12653] do_syscall_64+0x55/0xb0 [ 469.554606][T12653] ? clear_bhb_loop+0x40/0x90 [ 469.559287][T12653] ? clear_bhb_loop+0x40/0x90 [ 469.563970][T12653] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 469.569872][T12653] RIP: 0033:0x7f42aef9de59 [ 469.574294][T12653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.594268][T12653] RSP: 002b:00007f42afe40028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.602693][T12653] RAX: ffffffffffffffda RBX: 00007f42af225fa0 RCX: 00007f42aef9de59 [ 469.610764][T12653] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 469.618741][T12653] RBP: 00007f42afe40090 R08: 0000000000000000 R09: 0000000000000000 [ 469.626725][T12653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.634701][T12653] R13: 00007f42af226038 R14: 00007f42af225fa0 R15: 00007fff220587b8 [ 469.643515][T12653] [ 469.704938][T12612] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.720763][T12659] netlink: 'syz.2.2457': attribute type 28 has an invalid length. [ 469.781814][T12659] netlink: 'syz.2.2457': attribute type 29 has an invalid length. [ 469.795971][T12659] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2457'. [ 469.920835][T12658] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2457'. [ 470.026821][ T145] tipc: Left network mode [ 470.375066][T12612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 470.404280][T12612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 470.542439][ T5084] Bluetooth: hci1: command tx timeout [ 470.631409][T12612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 470.656021][T12673] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2465'. [ 470.673303][T12674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2465'. [ 470.802631][T12612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 470.827734][T12677] netlink: 135856 bytes leftover after parsing attributes in process `syz.2.2466'. [ 470.856873][T12677] netlink: 8442 bytes leftover after parsing attributes in process `syz.2.2466'. [ 470.990785][T12679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2467'. [ 472.904786][ T5084] Bluetooth: hci1: command tx timeout [ 473.663900][T12612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.914283][T12612] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.958106][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.965383][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.991693][T12730] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.998972][T12730] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.526131][T12763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2476'. [ 474.591890][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.660461][ T145] hsr_slave_0: left promiscuous mode [ 474.707825][ T145] hsr_slave_1: left promiscuous mode [ 474.728646][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.740864][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.758619][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.769219][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.886159][ T145] veth1_macvtap: left promiscuous mode [ 474.891985][ T145] veth0_macvtap: left promiscuous mode [ 474.942511][ T5084] Bluetooth: hci1: command tx timeout [ 475.786900][ T145] team0 (unregistering): Port device team_slave_1 removed [ 475.867444][ T145] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.912857][ T145] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.958907][ T145] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 476.239349][ T145] .` (unregistering): Released all slaves [ 476.285574][T12774] netlink: 'syz.3.2478': attribute type 21 has an invalid length. [ 476.299585][T12774] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2478'. [ 476.310539][T12774] netlink: 'syz.3.2478': attribute type 5 has an invalid length. [ 476.318699][T12774] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2478'. [ 476.328925][T12771] syzkaller0: entered promiscuous mode [ 476.337828][T12771] syzkaller0: entered allmulticast mode [ 476.539363][T12612] veth0_vlan: entered promiscuous mode [ 476.556108][T12612] veth1_vlan: entered promiscuous mode [ 476.641291][T12612] veth0_macvtap: entered promiscuous mode [ 476.702953][T12612] veth1_macvtap: entered promiscuous mode [ 476.767533][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.780604][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.791618][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.803649][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.817162][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.836440][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.848545][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.865985][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.876601][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.891215][T12612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.901893][T12612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.914642][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.925585][T12612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.934897][T12612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.952009][T12612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.961562][T12612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.987535][T12797] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2483'. [ 477.035334][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 477.056080][T12799] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 477.066303][T12802] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 477.080256][T12799] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 477.099974][T12799] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 477.121174][T12803] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2485'. [ 477.140282][T12799] netlink: 'syz.1.2484': attribute type 29 has an invalid length. [ 477.266015][T12714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.288965][T12714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.367221][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.385101][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.733804][T12814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2441'. [ 478.273255][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 478.289176][ T5779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 478.299286][ T5779] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 478.308466][ T5779] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 478.317407][ T5779] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 478.325649][ T5779] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 478.868989][T12829] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2495'. [ 478.954144][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2495'. [ 479.065914][T12817] chnl_net:caif_netlink_parms(): no params data found [ 479.178159][T12837] FAULT_INJECTION: forcing a failure. [ 479.178159][T12837] name failslab, interval 1, probability 0, space 0, times 0 [ 479.212269][T12837] CPU: 1 PID: 12837 Comm: syz.2.2498 Not tainted syzkaller #0 [ 479.219872][T12837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 479.229929][T12837] Call Trace: [ 479.233206][T12837] [ 479.236137][T12837] dump_stack_lvl+0x18c/0x250 [ 479.240818][T12837] ? show_regs_print_info+0x20/0x20 [ 479.246012][T12837] ? load_image+0x420/0x420 [ 479.250526][T12837] ? __might_sleep+0xe0/0xe0 [ 479.255142][T12837] ? __lock_acquire+0x7d80/0x7d80 [ 479.260175][T12837] should_fail_ex+0x394/0x4c0 [ 479.264946][T12837] should_failslab+0x9/0x20 [ 479.269448][T12837] slab_pre_alloc_hook+0x59/0x300 [ 479.274478][T12837] ? sk_prot_alloc+0xe7/0x210 [ 479.279156][T12837] ? sk_prot_alloc+0xe7/0x210 [ 479.283826][T12837] __kmem_cache_alloc_node+0x53/0x250 [ 479.289199][T12837] ? sk_prot_alloc+0xe7/0x210 [ 479.293875][T12837] __kmalloc+0xa7/0x240 [ 479.298210][T12837] sk_prot_alloc+0xe7/0x210 [ 479.302714][T12837] ? sk_alloc+0x24/0x350 [ 479.306953][T12837] sk_alloc+0x3a/0x350 [ 479.311016][T12837] ? bpf_ctx_init+0x154/0x190 [ 479.315692][T12837] bpf_prog_test_run_skb+0x371/0x18f0 [ 479.321066][T12837] ? __fget_files+0x28/0x460 [ 479.325655][T12837] ? __fget_files+0x3fc/0x460 [ 479.330334][T12837] ? cpu_online+0x60/0x60 [ 479.334663][T12837] bpf_prog_test_run+0x31f/0x390 [ 479.339598][T12837] __sys_bpf+0x49d/0x890 [ 479.343842][T12837] ? bpf_link_show_fdinfo+0x390/0x390 [ 479.349400][T12837] ? lock_chain_count+0x20/0x20 [ 479.354259][T12837] __x64_sys_bpf+0x7c/0x90 [ 479.358671][T12837] do_syscall_64+0x55/0xb0 [ 479.363133][T12837] ? clear_bhb_loop+0x40/0x90 [ 479.367806][T12837] ? clear_bhb_loop+0x40/0x90 [ 479.372478][T12837] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 479.378370][T12837] RIP: 0033:0x7f616519de59 [ 479.382804][T12837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.402420][T12837] RSP: 002b:00007f6166014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 479.410925][T12837] RAX: ffffffffffffffda RBX: 00007f6165425fa0 RCX: 00007f616519de59 [ 479.418902][T12837] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 479.426875][T12837] RBP: 00007f6166014090 R08: 0000000000000000 R09: 0000000000000000 [ 479.434927][T12837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.442927][T12837] R13: 00007f6165426038 R14: 00007f6165425fa0 R15: 00007fff5788c248 [ 479.450908][T12837] [ 480.373545][ T5779] Bluetooth: hci3: command tx timeout [ 480.402278][T12842] FAULT_INJECTION: forcing a failure. [ 480.402278][T12842] name failslab, interval 1, probability 0, space 0, times 0 [ 480.415360][T12842] CPU: 1 PID: 12842 Comm: syz.0.2499 Not tainted syzkaller #0 [ 480.422847][T12842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 480.432937][T12842] Call Trace: [ 480.436234][T12842] [ 480.439172][T12842] dump_stack_lvl+0x18c/0x250 [ 480.443868][T12842] ? show_regs_print_info+0x20/0x20 [ 480.449100][T12842] ? load_image+0x420/0x420 [ 480.453634][T12842] ? verify_lock_unused+0x140/0x140 [ 480.458853][T12842] should_fail_ex+0x394/0x4c0 [ 480.463552][T12842] should_failslab+0x9/0x20 [ 480.468062][T12842] slab_pre_alloc_hook+0x59/0x300 [ 480.473104][T12842] ? nsim_fib_event_nb+0x187/0x1040 [ 480.478309][T12842] __kmem_cache_alloc_node+0x53/0x250 [ 480.483791][T12842] ? nsim_fib_event_nb+0x187/0x1040 [ 480.488989][T12842] kmalloc_trace+0x2a/0xe0 [ 480.493409][T12842] nsim_fib_event_nb+0x187/0x1040 [ 480.498434][T12842] ? read_lock_is_recursive+0x20/0x20 [ 480.503811][T12842] notifier_call_chain+0x18f/0x380 [ 480.508924][T12842] ? atomic_notifier_call_chain+0x26/0x180 [ 480.514764][T12842] atomic_notifier_call_chain+0xda/0x180 [ 480.520399][T12842] call_fib_notifiers+0x31/0x60 [ 480.525252][T12842] fib6_del+0xfb1/0x1590 [ 480.529498][T12842] ? fib6_del+0x5c1/0x1590 [ 480.533929][T12842] ? fib6_locate_1+0x6b0/0x6b0 [ 480.538701][T12842] ? do_raw_spin_lock+0x11f/0x2b0 [ 480.543730][T12842] ? __lock_acquire+0x7d80/0x7d80 [ 480.548751][T12842] ? fib6_locate_1+0x669/0x6b0 [ 480.553518][T12842] ? __ip6_del_rt+0x8c/0x170 [ 480.558109][T12842] __ip6_del_rt+0x97/0x170 [ 480.562527][T12842] ip6_route_del+0x133f/0x14f0 [ 480.567302][T12842] ? ip6_route_del+0xe3/0x14f0 [ 480.572079][T12842] ? ipv6_route_ioctl+0x31d/0x500 [ 480.577107][T12842] ? mutex_lock_nested+0x20/0x20 [ 480.582069][T12842] ? ipv6_route_ioctl+0x500/0x500 [ 480.587104][T12842] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 480.592834][T12842] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 480.598564][T12842] ipv6_route_ioctl+0x384/0x500 [ 480.603526][T12842] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 480.609089][T12842] ? __might_fault+0xaa/0x120 [ 480.613947][T12842] ? __might_fault+0xc6/0x120 [ 480.618641][T12842] ? __might_fault+0xaa/0x120 [ 480.623332][T12842] inet6_ioctl+0x247/0x2d0 [ 480.627758][T12842] ? inet6_getname+0x670/0x670 [ 480.632529][T12842] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 480.638003][T12842] sock_do_ioctl+0xfc/0x310 [ 480.642510][T12842] ? sock_show_fdinfo+0xb0/0xb0 [ 480.647398][T12842] sock_ioctl+0x5be/0x7e0 [ 480.651750][T12842] ? sock_poll+0x3e0/0x3e0 [ 480.656185][T12842] ? bpf_lsm_file_ioctl+0x9/0x10 [ 480.661128][T12842] ? security_file_ioctl+0x80/0xa0 [ 480.666251][T12842] ? sock_poll+0x3e0/0x3e0 [ 480.670667][T12842] __se_sys_ioctl+0xfd/0x170 [ 480.675267][T12842] do_syscall_64+0x55/0xb0 [ 480.679689][T12842] ? clear_bhb_loop+0x40/0x90 [ 480.684366][T12842] ? clear_bhb_loop+0x40/0x90 [ 480.689045][T12842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 480.694943][T12842] RIP: 0033:0x7f3610d9de59 [ 480.699354][T12842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 480.718959][T12842] RSP: 002b:00007f3611ca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 480.727461][T12842] RAX: ffffffffffffffda RBX: 00007f3611026090 RCX: 00007f3610d9de59 [ 480.735432][T12842] RDX: 0000200000000000 RSI: 000000000000890c RDI: 0000000000000003 [ 480.743413][T12842] RBP: 00007f3611ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 480.751380][T12842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.759349][T12842] R13: 00007f3611026128 R14: 00007f3611026090 R15: 00007ffd70445c48 [ 480.767332][T12842] [ 480.978860][T12856] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2504'. [ 481.018859][T12817] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.026840][T12817] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.039565][T12817] bridge_slave_0: entered allmulticast mode [ 481.048804][T12817] bridge_slave_0: entered promiscuous mode [ 481.062426][T12856] FAULT_INJECTION: forcing a failure. [ 481.062426][T12856] name failslab, interval 1, probability 0, space 0, times 0 [ 481.063340][T12817] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.087597][T12817] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.087702][T12856] CPU: 0 PID: 12856 Comm: syz.0.2504 Not tainted syzkaller #0 [ 481.096183][T12817] bridge_slave_1: entered allmulticast mode [ 481.102084][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 481.102098][T12856] Call Trace: [ 481.102105][T12856] [ 481.102112][T12856] dump_stack_lvl+0x18c/0x250 [ 481.102145][T12856] ? show_regs_print_info+0x20/0x20 [ 481.110300][T12817] bridge_slave_1: entered promiscuous mode [ 481.118064][T12856] ? load_image+0x420/0x420 [ 481.118103][T12856] should_fail_ex+0x394/0x4c0 [ 481.118130][T12856] should_failslab+0x9/0x20 [ 481.153617][T12856] slab_pre_alloc_hook+0x59/0x300 [ 481.158664][T12856] kmem_cache_alloc+0x5a/0x2c0 [ 481.163432][T12856] ? skb_clone+0x1eb/0x370 [ 481.167863][T12856] skb_clone+0x1eb/0x370 [ 481.172114][T12856] __netlink_deliver_tap+0x411/0x7f0 [ 481.177409][T12856] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.182636][T12856] netlink_deliver_tap+0x19c/0x1b0 [ 481.187755][T12856] netlink_dump+0x95b/0xec0 [ 481.192270][T12856] ? netlink_lookup+0x200/0x200 [ 481.197136][T12856] ? slab_free_freelist_hook+0x130/0x1a0 [ 481.202861][T12856] ? netlink_recvmsg+0x5e7/0xe60 [ 481.207793][T12856] ? kmem_cache_free+0xf8/0x290 [ 481.212642][T12856] netlink_recvmsg+0x693/0xe60 [ 481.217584][T12856] ? netlink_sendmsg+0xbf0/0xbf0 [ 481.222545][T12856] ? aa_af_perm+0x330/0x330 [ 481.227049][T12856] ? __lock_acquire+0x1262/0x7d80 [ 481.232087][T12856] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 481.237367][T12856] ? security_socket_recvmsg+0x89/0xb0 [ 481.242823][T12856] ? netlink_sendmsg+0xbf0/0xbf0 [ 481.247765][T12856] ____sys_recvmsg+0x2bd/0x5d0 [ 481.252532][T12856] ? __sys_recvmsg_sock+0x50/0x50 [ 481.257565][T12856] ? import_iovec+0x73/0xa0 [ 481.262072][T12856] ___sys_recvmsg+0x214/0x590 [ 481.266774][T12856] ? __sys_recvmsg+0x2a0/0x2a0 [ 481.271543][T12856] ? ksys_write+0x1d2/0x260 [ 481.276101][T12856] ? __fget_files+0x3fc/0x460 [ 481.280868][T12856] __x64_sys_recvmsg+0x21e/0x2f0 [ 481.285806][T12856] ? ___sys_recvmsg+0x590/0x590 [ 481.290662][T12856] ? lockdep_hardirqs_on+0x98/0x150 [ 481.295951][T12856] do_syscall_64+0x55/0xb0 [ 481.300371][T12856] ? clear_bhb_loop+0x40/0x90 [ 481.305057][T12856] ? clear_bhb_loop+0x40/0x90 [ 481.309729][T12856] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 481.315624][T12856] RIP: 0033:0x7f3610d9de59 [ 481.320057][T12856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.339661][T12856] RSP: 002b:00007f3611cc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 481.348073][T12856] RAX: ffffffffffffffda RBX: 00007f3611025fa0 RCX: 00007f3610d9de59 [ 481.356048][T12856] RDX: 0000000000000080 RSI: 0000200000000900 RDI: 0000000000000003 [ 481.364025][T12856] RBP: 00007f3611cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.372087][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.380061][T12856] R13: 00007f3611026038 R14: 00007f3611025fa0 R15: 00007ffd70445c48 [ 481.388040][T12856] [ 481.546590][ T4534] bond0: (slave netdevsim0): Releasing backup interface [ 481.591588][T12817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.633693][T12817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.453203][ T5779] Bluetooth: hci3: command tx timeout [ 482.509135][T12867] netlink: 'syz.2.2508': attribute type 21 has an invalid length. [ 482.535541][T12867] __nla_validate_parse: 3 callbacks suppressed [ 482.535557][T12867] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2508'. [ 482.573107][T12867] netlink: 'syz.2.2508': attribute type 5 has an invalid length. [ 482.580892][T12867] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2508'. [ 482.639468][T12817] team0: Port device team_slave_0 added [ 482.680783][T12817] team0: Port device team_slave_1 added [ 482.748190][T12817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.772122][T12817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.807813][T12817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.821999][T12817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.829618][T12817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.898891][T12817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.144262][T12817] hsr_slave_0: entered promiscuous mode [ 483.195855][T12817] hsr_slave_1: entered promiscuous mode [ 483.231052][T12817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.252391][T12817] Cannot create hsr debugfs directory [ 484.532454][ T5779] Bluetooth: hci3: command tx timeout [ 486.360963][ T4534] tipc: Left network mode [ 486.612347][ T5779] Bluetooth: hci3: command tx timeout [ 487.261828][T12918] netlink: 'syz.0.2520': attribute type 21 has an invalid length. [ 487.289404][T12918] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2520'. [ 487.322761][T12918] netlink: 'syz.0.2520': attribute type 5 has an invalid length. [ 487.330880][T12918] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2520'. [ 487.478261][T12925] netlink: 'syz.1.2523': attribute type 21 has an invalid length. [ 488.122664][T12945] FAULT_INJECTION: forcing a failure. [ 488.122664][T12945] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.164279][T12945] CPU: 0 PID: 12945 Comm: syz.2.2526 Not tainted syzkaller #0 [ 488.171905][T12945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 488.181985][T12945] Call Trace: [ 488.185278][T12945] [ 488.188232][T12945] dump_stack_lvl+0x18c/0x250 [ 488.192951][T12945] ? show_regs_print_info+0x20/0x20 [ 488.198187][T12945] ? load_image+0x420/0x420 [ 488.202810][T12945] ? __might_fault+0xaa/0x120 [ 488.207516][T12945] ? __lock_acquire+0x7d80/0x7d80 [ 488.212568][T12945] should_fail_ex+0x394/0x4c0 [ 488.217368][T12945] _copy_from_user+0x2f/0xe0 [ 488.222074][T12945] __sys_bpf+0x23e/0x890 [ 488.226346][T12945] ? bpf_link_show_fdinfo+0x390/0x390 [ 488.231849][T12945] ? lock_chain_count+0x20/0x20 [ 488.236736][T12945] __x64_sys_bpf+0x7c/0x90 [ 488.241177][T12945] do_syscall_64+0x55/0xb0 [ 488.245625][T12945] ? clear_bhb_loop+0x40/0x90 [ 488.250326][T12945] ? clear_bhb_loop+0x40/0x90 [ 488.255027][T12945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 488.260952][T12945] RIP: 0033:0x7f616519de59 [ 488.265390][T12945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.285196][T12945] RSP: 002b:00007f6166014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 488.293641][T12945] RAX: ffffffffffffffda RBX: 00007f6165425fa0 RCX: 00007f616519de59 [ 488.301726][T12945] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 000000000000000f [ 488.309734][T12945] RBP: 00007f6166014090 R08: 0000000000000000 R09: 0000000000000000 [ 488.317732][T12945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.325727][T12945] R13: 00007f6165426038 R14: 00007f6165425fa0 R15: 00007fff5788c248 [ 488.333825][T12945] [ 488.415428][T12951] netlink: 'syz.1.2527': attribute type 7 has an invalid length. [ 488.777925][T12817] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 488.813354][T12817] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 488.847608][T12817] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 488.941589][T12817] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.231160][T12969] netlink: 'syz.2.2534': attribute type 21 has an invalid length. [ 489.330837][T12974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2536'. [ 489.344121][T12974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2536'. [ 489.475809][T12971] netlink: 'syz.1.2535': attribute type 9 has an invalid length. [ 489.491989][T12974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2536'. [ 489.502826][T12971] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2535'. [ 489.624666][T12817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.139352][T12817] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.219294][T12728] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.226513][T12728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.261336][T12728] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.268593][T12728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.936152][T13014] netlink: 'syz.2.2545': attribute type 21 has an invalid length. [ 491.171814][T13018] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2546'. [ 491.228078][ T4534] hsr_slave_0: left promiscuous mode [ 491.263125][ T4534] hsr_slave_1: left promiscuous mode [ 491.273129][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.300547][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.326899][ T4534] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.352262][ T4534] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.376044][ T4534] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 491.396416][ T4534] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 491.969510][T13039] FAULT_INJECTION: forcing a failure. [ 491.969510][T13039] name failslab, interval 1, probability 0, space 0, times 0 [ 491.995547][T13039] CPU: 0 PID: 13039 Comm: syz.1.2549 Not tainted syzkaller #0 [ 492.003075][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.013158][T13039] Call Trace: [ 492.016453][T13039] [ 492.019397][T13039] dump_stack_lvl+0x18c/0x250 [ 492.024114][T13039] ? show_regs_print_info+0x20/0x20 [ 492.029428][T13039] ? load_image+0x420/0x420 [ 492.033960][T13039] ? __might_sleep+0xe0/0xe0 [ 492.038568][T13039] ? __lock_acquire+0x7d80/0x7d80 [ 492.043622][T13039] should_fail_ex+0x394/0x4c0 [ 492.048345][T13039] should_failslab+0x9/0x20 [ 492.052875][T13039] slab_pre_alloc_hook+0x59/0x300 [ 492.057909][T13039] ? tcp_fastopen_reset_cipher+0x5e/0x390 [ 492.063629][T13039] __kmem_cache_alloc_node+0x53/0x250 [ 492.069005][T13039] ? tcp_fastopen_reset_cipher+0x5e/0x390 [ 492.074722][T13039] kmalloc_trace+0x2a/0xe0 [ 492.079142][T13039] tcp_fastopen_reset_cipher+0x5e/0x390 [ 492.084690][T13039] do_tcp_setsockopt+0x63a/0x1c50 [ 492.089718][T13039] ? tcp_set_window_clamp+0x4e0/0x4e0 [ 492.095092][T13039] ? __mptcp_nmpc_sk+0x592/0x720 [ 492.100041][T13039] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 492.106808][T13039] ? tcp_setsockopt+0x3d/0xe0 [ 492.111482][T13039] ? mptcp_setsockopt+0xf90/0x3370 [ 492.116599][T13039] mptcp_setsockopt+0xfb0/0x3370 [ 492.121539][T13039] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 492.127021][T13039] ? __fget_files+0x28/0x460 [ 492.131611][T13039] ? pm_nl_exit_net+0x230/0x230 [ 492.136465][T13039] ? aa_af_perm+0x330/0x330 [ 492.141024][T13039] ? __fget_files+0x28/0x460 [ 492.145616][T13039] ? aa_sock_opt_perm+0x74/0x100 [ 492.150553][T13039] ? sock_common_setsockopt+0x36/0xc0 [ 492.155963][T13039] ? sock_common_recvmsg+0x190/0x190 [ 492.161255][T13039] do_sock_setsockopt+0x175/0x1a0 [ 492.166387][T13039] ? __fdget+0x180/0x210 [ 492.170656][T13039] __x64_sys_setsockopt+0x182/0x200 [ 492.175863][T13039] do_syscall_64+0x55/0xb0 [ 492.180276][T13039] ? clear_bhb_loop+0x40/0x90 [ 492.184944][T13039] ? clear_bhb_loop+0x40/0x90 [ 492.189615][T13039] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.195513][T13039] RIP: 0033:0x7f2d4959de59 [ 492.200012][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.219618][T13039] RSP: 002b:00007f2d4a549028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.228061][T13039] RAX: ffffffffffffffda RBX: 00007f2d49825fa0 RCX: 00007f2d4959de59 [ 492.236031][T13039] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000005 [ 492.244015][T13039] RBP: 00007f2d4a549090 R08: 0000000000000020 R09: 0000000000000000 [ 492.251984][T13039] R10: 0000200000001540 R11: 0000000000000246 R12: 0000000000000001 [ 492.259965][T13039] R13: 00007f2d49826038 R14: 00007f2d49825fa0 R15: 00007ffea3ccf4a8 [ 492.267948][T13039] [ 492.339967][ T4534] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 492.348308][ T4534] batman_adv: batadv0: Removing interface: virt_wifi0 [ 492.365182][ T4534] batadv0: left allmulticast mode [ 492.370885][ T4534] batadv0: left promiscuous mode [ 492.414737][ T4534] bridge0: port 3(batadv0) entered disabled state [ 492.431051][ T4534] bridge_slave_1: left allmulticast mode [ 492.437551][ T4534] bridge_slave_1: left promiscuous mode [ 492.450061][ T4534] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.460997][ T4534] bridge_slave_0: left promiscuous mode [ 492.466968][ T4534] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.500987][ T4534] veth1_macvtap: left promiscuous mode [ 492.508432][ T4534] veth0_macvtap: left promiscuous mode [ 492.517782][ T4534] veth1_vlan: left promiscuous mode [ 492.532467][ T4534] veth0_vlan: left promiscuous mode [ 492.919493][ T4534] team0 (unregistering): Port device geneve1 removed [ 493.497886][ T4534] team0 (unregistering): Port device team_slave_1 removed [ 493.546617][ T4534] team0 (unregistering): Port device team_slave_0 removed [ 493.597057][ T4534] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.999103][ T4534] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 494.008576][ T4534] bond0 (unregistering): Released all slaves [ 494.113936][T13051] netlink: 'syz.2.2554': attribute type 21 has an invalid length. [ 494.127573][T13058] veth1_macvtap: left promiscuous mode [ 494.231716][T12817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.380347][T13067] netlink: 'syz.1.2565': attribute type 21 has an invalid length. [ 494.498959][T12817] veth0_vlan: entered promiscuous mode [ 494.553602][T12817] veth1_vlan: entered promiscuous mode [ 494.624152][T13073] netlink: 'syz.0.2558': attribute type 3 has an invalid length. [ 494.677239][T13073] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2558'. [ 494.760305][T13076] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2558'. [ 495.073110][T12817] veth0_macvtap: entered promiscuous mode [ 495.109474][T12817] veth1_macvtap: entered promiscuous mode [ 495.246791][T12817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.288199][T12817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.308455][T12817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.337493][T12817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.364875][T12817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.408181][T12817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.462127][T12817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.488322][T12817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.542118][T12817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.557872][T12817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.568762][T12817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.580852][T12817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.625407][T12817] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.643399][T12817] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.661950][T12817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.671474][T12817] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.805803][T13109] netlink: 'syz.2.2568': attribute type 21 has an invalid length. [ 496.063967][T12728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.084148][T12728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.181841][T13121] netlink: 'syz.0.2570': attribute type 10 has an invalid length. [ 496.316270][T13128] netlink: 'syz.2.2572': attribute type 2 has an invalid length. [ 496.353997][T12728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.361877][T12728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.593244][T13139] FAULT_INJECTION: forcing a failure. [ 496.593244][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 496.626099][T13139] CPU: 1 PID: 13139 Comm: syz.0.2575 Not tainted syzkaller #0 [ 496.633631][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 496.643720][T13139] Call Trace: [ 496.647062][T13139] [ 496.650021][T13139] dump_stack_lvl+0x18c/0x250 [ 496.654740][T13139] ? show_regs_print_info+0x20/0x20 [ 496.660163][T13139] ? load_image+0x420/0x420 [ 496.664703][T13139] ? __might_sleep+0xe0/0xe0 [ 496.669325][T13139] ? __lock_acquire+0x7d80/0x7d80 [ 496.674365][T13139] should_fail_ex+0x394/0x4c0 [ 496.679082][T13139] should_failslab+0x9/0x20 [ 496.683633][T13139] slab_pre_alloc_hook+0x59/0x300 [ 496.688690][T13139] ? fib6_info_alloc+0x30/0xf0 [ 496.693486][T13139] ? fib6_info_alloc+0x30/0xf0 [ 496.698277][T13139] __kmem_cache_alloc_node+0x53/0x250 [ 496.703764][T13139] ? fib6_info_alloc+0x30/0xf0 [ 496.708563][T13139] __kmalloc+0xa7/0x240 [ 496.712754][T13139] fib6_info_alloc+0x30/0xf0 [ 496.717384][T13139] ip6_route_info_create+0x455/0x1260 [ 496.722778][T13139] ? mutex_lock_nested+0x20/0x20 [ 496.727754][T13139] ip6_route_add+0x28/0x160 [ 496.732283][T13139] ipv6_route_ioctl+0x3af/0x500 [ 496.737592][T13139] ? rt6_purge_dflt_routers+0xb20/0xb20 [ 496.743160][T13139] ? __might_fault+0xaa/0x120 [ 496.747837][T13139] ? __might_fault+0xc6/0x120 [ 496.752537][T13139] ? __might_fault+0xaa/0x120 [ 496.757217][T13139] inet6_ioctl+0x247/0x2d0 [ 496.761634][T13139] ? inet6_getname+0x670/0x670 [ 496.766400][T13139] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 496.771955][T13139] sock_do_ioctl+0xfc/0x310 [ 496.776467][T13139] ? sock_show_fdinfo+0xb0/0xb0 [ 496.781327][T13139] sock_ioctl+0x5be/0x7e0 [ 496.785666][T13139] ? sock_poll+0x3e0/0x3e0 [ 496.790085][T13139] ? bpf_lsm_file_ioctl+0x9/0x10 [ 496.795107][T13139] ? security_file_ioctl+0x80/0xa0 [ 496.800222][T13139] ? sock_poll+0x3e0/0x3e0 [ 496.804633][T13139] __se_sys_ioctl+0xfd/0x170 [ 496.809229][T13139] do_syscall_64+0x55/0xb0 [ 496.813650][T13139] ? clear_bhb_loop+0x40/0x90 [ 496.818320][T13139] ? clear_bhb_loop+0x40/0x90 [ 496.823001][T13139] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.828895][T13139] RIP: 0033:0x7f3610d9de59 [ 496.833331][T13139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.852942][T13139] RSP: 002b:00007f3611cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 496.861356][T13139] RAX: ffffffffffffffda RBX: 00007f3611025fa0 RCX: 00007f3610d9de59 [ 496.869331][T13139] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000003 [ 496.877304][T13139] RBP: 00007f3611cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 496.885299][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.893269][T13139] R13: 00007f3611026038 R14: 00007f3611025fa0 R15: 00007ffd70445c48 [ 496.901253][T13139] [ 497.519120][T13152] netlink: 'syz.2.2579': attribute type 21 has an invalid length. [ 497.755089][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 497.777647][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 497.787517][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 497.814601][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 497.835390][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 497.844130][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.938038][T12728] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.035842][T13172] netlink: 'syz.2.2583': attribute type 3 has an invalid length. [ 498.072188][T13172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2583'. [ 499.902568][ T5084] Bluetooth: hci0: command tx timeout [ 500.081851][T12728] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.135041][T13183] netlink: 'syz.0.2588': attribute type 21 has an invalid length. [ 500.153142][T13183] netlink: 'syz.0.2588': attribute type 6 has an invalid length. [ 500.172319][T13183] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2588'. [ 500.225320][T12728] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.329791][T12728] bond0: (slave netdevsim0): Releasing backup interface [ 500.353420][T12728] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.891904][T13160] chnl_net:caif_netlink_parms(): no params data found [ 500.976933][T13210] netlink: 'syz.2.2596': attribute type 21 has an invalid length. [ 501.303745][T13227] netlink: 'syz.0.2600': attribute type 29 has an invalid length. [ 501.337167][T13227] netlink: 'syz.0.2600': attribute type 29 has an invalid length. [ 501.402459][T13229] netlink: 'syz.0.2600': attribute type 29 has an invalid length. [ 501.536561][T13160] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.560403][T13160] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.571468][T13160] bridge_slave_0: entered allmulticast mode [ 501.584238][T13160] bridge_slave_0: entered promiscuous mode [ 501.740526][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.748776][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.792398][T13160] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.799607][T13160] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.843034][T13160] bridge_slave_1: entered allmulticast mode [ 501.853187][T13160] bridge_slave_1: entered promiscuous mode [ 501.965358][T13160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.974981][ T5084] Bluetooth: hci0: command tx timeout [ 502.009616][T13160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.252897][T13255] netlink: 'syz.2.2608': attribute type 21 has an invalid length. [ 502.291661][T13160] team0: Port device team_slave_0 added [ 502.316933][T13160] team0: Port device team_slave_1 added [ 502.451701][T13160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.460264][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.487614][T13160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.502020][T13160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.510131][T13160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.542414][T13160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.362021][T13277] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2617'. [ 503.553489][T13160] hsr_slave_0: entered promiscuous mode [ 503.582611][T13160] hsr_slave_1: entered promiscuous mode [ 503.612466][T13160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.636190][T13160] Cannot create hsr debugfs directory [ 503.728415][T13290] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 504.052363][ T5084] Bluetooth: hci0: command tx timeout [ 504.088671][T13304] netlink: 'syz.2.2625': attribute type 21 has an invalid length. [ 504.827991][T13327] netlink: 'syz.2.2631': attribute type 8 has an invalid length. [ 504.839631][T13327] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2631'. [ 504.967814][T12728] hsr_slave_0: left promiscuous mode [ 504.985121][T12728] hsr_slave_1: left promiscuous mode [ 504.991461][T12728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.014163][T12728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.033326][T12728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.047942][T12728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.062938][T12728] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 505.080765][T12728] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 505.095354][T12728] bridge0: port 4(team0) entered disabled state [ 505.115668][T12728] bridge_slave_1: left allmulticast mode [ 505.121380][T12728] bridge_slave_1: left promiscuous mode [ 505.139172][T12728] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.149103][T12728] bridge_slave_0: left promiscuous mode [ 505.160631][T12728] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.180412][T12728] veth0_macvtap: left promiscuous mode [ 506.143474][ T5084] Bluetooth: hci0: command tx timeout [ 521.168431][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 521.179402][ T5779] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 521.187916][ T5779] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 521.197379][ T5779] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 521.205150][ T5779] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 521.215536][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 521.262649][ T5779] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 521.272576][ T5779] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 521.283128][ T5779] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 521.293574][ T5779] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 521.302566][ T5779] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 521.310859][ T5779] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 521.398695][ T5084] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 521.407921][ T5084] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 521.417402][ T5084] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 521.427189][ T5084] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 521.437169][ T5084] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 521.445856][ T5084] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 523.252890][ T5084] Bluetooth: hci2: command tx timeout [ 523.342336][ T5084] Bluetooth: hci5: command tx timeout [ 523.492574][ T5084] Bluetooth: hci6: command tx timeout [ 525.332282][ T5084] Bluetooth: hci2: command tx timeout [ 525.422717][ T5084] Bluetooth: hci5: command tx timeout [ 525.572277][ T5084] Bluetooth: hci6: command tx timeout [ 527.412248][ T5084] Bluetooth: hci2: command tx timeout [ 527.502298][ T5084] Bluetooth: hci5: command tx timeout [ 527.652272][ T5084] Bluetooth: hci6: command tx timeout [ 529.492213][ T5084] Bluetooth: hci2: command tx timeout [ 529.572194][ T5084] Bluetooth: hci5: command tx timeout [ 529.732256][ T5084] Bluetooth: hci6: command tx timeout [ 558.130111][ T5779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 558.139751][ T5779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 558.147935][ T5779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 558.157067][ T5779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 558.169057][ T5779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 558.176607][ T5779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 560.222354][ T5084] Bluetooth: hci7: command tx timeout [ 562.292393][ T5084] Bluetooth: hci7: command tx timeout [ 563.176636][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183161][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.372217][ T5084] Bluetooth: hci7: command tx timeout [ 566.452345][ T5084] Bluetooth: hci7: command tx timeout [ 575.492232][ T5779] Bluetooth: hci4: command 0x0406 tx timeout [ 581.482327][ T5779] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 581.496114][ T5779] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 581.505262][ T5779] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 581.514202][ T5779] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 581.521976][ T5779] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 581.532375][ T5779] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 581.551961][T13358] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 581.557060][T13380] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 581.562821][T13358] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 581.575679][T13358] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 581.576335][T13380] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 581.584555][T13358] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 581.598144][T13358] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 581.607016][T13358] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 581.615762][T13358] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 581.623686][T13358] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 581.631130][T13358] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 581.641041][T13358] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 583.652985][T13358] Bluetooth: hci8: command tx timeout [ 583.736614][T13358] Bluetooth: hci10: command tx timeout [ 583.736659][ T5779] Bluetooth: hci9: command tx timeout [ 585.732166][ T5779] Bluetooth: hci8: command tx timeout [ 585.812157][ T5779] Bluetooth: hci10: command tx timeout [ 585.823087][ T5779] Bluetooth: hci9: command tx timeout [ 587.812289][ T5779] Bluetooth: hci8: command tx timeout [ 587.902197][ T5779] Bluetooth: hci9: command tx timeout [ 587.907682][T13358] Bluetooth: hci10: command tx timeout [ 589.892320][ T5779] Bluetooth: hci8: command tx timeout [ 589.978197][ T5779] Bluetooth: hci10: command tx timeout [ 589.978246][T13377] Bluetooth: hci9: command tx timeout [ 590.852217][T13377] Bluetooth: hci1: command 0x0406 tx timeout [ 601.093569][T13377] Bluetooth: hci3: command 0x0406 tx timeout [ 618.332445][T13377] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 618.346711][T13377] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 618.355397][T13377] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 618.365927][T13377] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 618.380130][T13377] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 618.388395][T13377] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 620.458151][T13377] Bluetooth: hci11: command tx timeout [ 621.572332][T13377] Bluetooth: hci0: command 0x0406 tx timeout [ 622.532203][T13358] Bluetooth: hci11: command tx timeout [ 624.617004][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.619927][T13358] Bluetooth: hci11: command tx timeout [ 624.623621][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.692344][T13358] Bluetooth: hci11: command tx timeout [ 641.527966][T13377] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 641.538002][T13377] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 641.548192][T13377] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 641.559767][T13377] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 641.578378][T13377] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 641.586104][T13377] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 641.811149][T13377] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 641.820547][T13377] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 641.830689][T13377] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 641.839787][T13377] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 641.850460][T13377] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 641.853159][T13382] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 641.868723][T13377] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 641.869729][T13382] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 641.885387][T13382] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 641.895275][T13382] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 641.904660][T13382] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 641.912723][T13382] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 643.652380][T13382] Bluetooth: hci12: command tx timeout [ 643.972339][T13382] Bluetooth: hci13: command tx timeout [ 643.978469][T13382] Bluetooth: hci14: command tx timeout [ 645.732311][T13358] Bluetooth: hci12: command tx timeout [ 646.052187][T13358] Bluetooth: hci13: command tx timeout [ 646.052204][ T5084] Bluetooth: hci14: command tx timeout [ 647.176043][ T5084] Bluetooth: hci5: command 0x0406 tx timeout [ 647.176073][T13358] Bluetooth: hci2: command 0x0406 tx timeout [ 647.184237][ T5084] Bluetooth: hci6: command 0x0406 tx timeout [ 647.812296][ T5779] Bluetooth: hci12: command tx timeout [ 648.132215][ T5779] Bluetooth: hci13: command tx timeout [ 648.138604][T13382] Bluetooth: hci14: command tx timeout [ 649.893626][T13382] Bluetooth: hci12: command tx timeout [ 650.212246][T13382] Bluetooth: hci14: command tx timeout [ 650.212319][ T5779] Bluetooth: hci13: command tx timeout [ 666.852299][ T28] INFO: task kworker/0:2:173 blocked for more than 143 seconds. [ 666.859999][ T28] Not tainted syzkaller #0 [ 666.871909][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 666.880770][ T28] task:kworker/0:2 state:D stack:25320 pid:173 ppid:2 flags:0x00004000 [ 666.890376][ T28] Workqueue: events switchdev_deferred_process_work [ 666.897050][ T28] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 666.900445][ T28] [ 666.903440][ T28] __schedule+0x15ae/0x4660 [ 666.908155][ T28] ? mark_lock+0x94/0x320 [ 666.924574][ T28] ? asan.module_dtor+0x20/0x20 [ 666.929506][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 666.942103][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 666.947733][ T28] schedule+0xbd/0x170 [ 666.951860][ T28] schedule_preempt_disabled+0x13/0x20 [ 666.972093][ T28] __mutex_lock+0x673/0xc80 [ 666.976669][ T28] ? __mutex_lock+0x4d2/0xc80 [ 666.981383][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 667.002091][ T28] ? mutex_lock_nested+0x20/0x20 [ 667.007097][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.012553][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.018308][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.024098][ T28] switchdev_deferred_process_work+0xe/0x20 [ 667.030024][ T28] process_scheduled_works+0xa60/0x1600 [ 667.035900][ T28] ? worker_attach_to_pool+0x370/0x370 [ 667.041401][ T28] ? assign_work+0x3cc/0x5d0 [ 667.046066][ T28] worker_thread+0xa5e/0xfe0 [ 667.051075][ T28] ? _raw_spin_unlock+0x40/0x40 [ 667.056021][ T28] ? __kthread_parkme+0x71/0x1c0 [ 667.060991][ T28] kthread+0x2fa/0x390 [ 667.065129][ T28] ? pr_cont_work+0x550/0x550 [ 667.069833][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.074498][ T28] ret_from_fork+0x48/0x80 [ 667.078941][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.083658][ T28] ret_from_fork_asm+0x11/0x20 [ 667.088473][ T28] [ 667.091646][ T28] INFO: task dhcpcd:5433 blocked for more than 143 seconds. [ 667.100648][ T28] Not tainted syzkaller #0 [ 667.106198][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.119030][ T28] task:dhcpcd state:D stack:25256 pid:5433 ppid:1 flags:0x00004002 [ 667.128607][ T28] Call Trace: [ 667.150589][ T28] [ 667.167913][ T28] __schedule+0x15ae/0x4660 [ 667.175894][ T28] ? do_syscall_64+0x55/0xb0 [ 667.180571][ T28] ? asan.module_dtor+0x20/0x20 [ 667.205518][ T28] ? __mutex_lock+0x66e/0xc80 [ 667.210286][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 667.222159][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 667.228758][ T28] schedule+0xbd/0x170 [ 667.233334][ T28] schedule_preempt_disabled+0x13/0x20 [ 667.238839][ T28] __mutex_lock+0x673/0xc80 [ 667.243423][ T28] ? __mutex_lock+0x4d2/0xc80 [ 667.248114][ T28] ? vlan_ioctl_handler+0xf1/0x630 [ 667.253722][ T28] ? mutex_lock_nested+0x20/0x20 [ 667.258692][ T28] ? __might_fault+0xaa/0x120 [ 667.263458][ T28] ? __might_fault+0xc6/0x120 [ 667.268152][ T28] ? __might_fault+0xaa/0x120 [ 667.273053][ T28] vlan_ioctl_handler+0xf1/0x630 [ 667.278072][ T28] ? sock_ioctl+0x632/0x7e0 [ 667.282762][ T28] ? net_generic+0x240/0x240 [ 667.287378][ T28] ? do_readv+0x37c/0x460 [ 667.291739][ T28] ? net_generic+0x240/0x240 [ 667.296589][ T28] sock_ioctl+0x652/0x7e0 [ 667.300938][ T28] ? perf_trace_preemptirq_template+0xac/0x330 [ 667.307172][ T28] ? sock_poll+0x3e0/0x3e0 [ 667.311603][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 667.316724][ T28] ? security_file_ioctl+0x80/0xa0 [ 667.321855][ T28] ? sock_poll+0x3e0/0x3e0 [ 667.326496][ T28] __se_sys_ioctl+0xfd/0x170 [ 667.331306][ T28] do_syscall_64+0x55/0xb0 [ 667.335834][ T28] ? clear_bhb_loop+0x40/0x90 [ 667.340554][ T28] ? clear_bhb_loop+0x40/0x90 [ 667.347988][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 667.354416][ T28] RIP: 0033:0x7f6e68768378 [ 667.359171][ T28] RSP: 002b:00007ffc3aeb3858 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.367762][ T28] RAX: ffffffffffffffda RBX: 000055eb0a66d690 RCX: 00007f6e68768378 [ 667.375815][ T28] RDX: 00007ffc3aeb3860 RSI: 0000000000008982 RDI: 000000000000000f [ 667.383960][ T28] RBP: 00007ffc3aeb3860 R08: 0000000000000000 R09: 0000000000000000 [ 667.391959][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 667.400019][ T28] R13: 000055eb0a7b0e40 R14: 00007ffc3aec3c70 R15: 000055eb0a66d690 [ 667.408036][ T28] [ 667.411118][ T28] INFO: task kworker/u4:13:12714 blocked for more than 143 seconds. [ 667.419245][ T28] Not tainted syzkaller #0 [ 667.424322][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.433078][ T28] task:kworker/u4:13 state:D stack:24272 pid:12714 ppid:2 flags:0x00004000 [ 667.442348][ T28] Workqueue: events_unbound linkwatch_event [ 667.448271][ T28] Call Trace: [ 667.451558][ T28] [ 667.454651][ T28] __schedule+0x15ae/0x4660 [ 667.459528][ T28] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 667.468646][ T28] ? asan.module_dtor+0x20/0x20 [ 667.475127][ T28] ? __mutex_lock+0x66e/0xc80 [ 667.479824][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 667.487620][ T28] ? kthread_data+0x4f/0xc0 [ 667.494402][ T28] ? wq_worker_sleeping+0x63/0x240 [ 667.499621][ T28] schedule+0xbd/0x170 [ 667.504636][ T28] schedule_preempt_disabled+0x13/0x20 [ 667.510129][ T28] __mutex_lock+0x673/0xc80 [ 667.514774][ T28] ? __mutex_lock+0x4d2/0xc80 [ 667.519489][ T28] ? linkwatch_event+0xe/0x60 [ 667.524225][ T28] ? mutex_lock_nested+0x20/0x20 [ 667.531758][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.538535][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.546611][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.553936][ T28] linkwatch_event+0xe/0x60 [ 667.558474][ T28] process_scheduled_works+0xa60/0x1600 [ 667.565085][ T28] ? worker_attach_to_pool+0x370/0x370 [ 667.570588][ T28] ? assign_work+0x3cc/0x5d0 [ 667.575401][ T28] worker_thread+0xa5e/0xfe0 [ 667.580042][ T28] kthread+0x2fa/0x390 [ 667.584271][ T28] ? pr_cont_work+0x550/0x550 [ 667.588977][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.593673][ T28] ret_from_fork+0x48/0x80 [ 667.598116][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.602778][ T28] ret_from_fork_asm+0x11/0x20 [ 667.607564][ T28] [ 667.610612][ T28] INFO: task kworker/u4:23:12736 blocked for more than 144 seconds. [ 667.619037][ T28] Not tainted syzkaller #0 [ 667.624052][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.632783][ T28] task:kworker/u4:23 state:D stack:22184 pid:12736 ppid:2 flags:0x00004000 [ 667.642015][ T28] Workqueue: ipv6_addrconf addrconf_dad_work [ 667.648114][ T28] Call Trace: [ 667.651399][ T28] [ 667.654489][ T28] __schedule+0x15ae/0x4660 [ 667.659265][ T28] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 667.667148][ T28] ? lock_chain_count+0x20/0x20 [ 667.672099][ T28] ? asan.module_dtor+0x20/0x20 [ 667.676985][ T28] ? __mutex_lock+0x66e/0xc80 [ 667.681713][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 667.687228][ T28] ? kthread_data+0x4f/0xc0 [ 667.691760][ T28] ? wq_worker_sleeping+0x63/0x240 [ 667.697081][ T28] schedule+0xbd/0x170 [ 667.701190][ T28] schedule_preempt_disabled+0x13/0x20 [ 667.706890][ T28] __mutex_lock+0x673/0xc80 [ 667.711443][ T28] ? __mutex_lock+0x4d2/0xc80 [ 667.716366][ T28] ? addrconf_dad_work+0xce/0x1550 [ 667.721513][ T28] ? mutex_lock_nested+0x20/0x20 [ 667.726779][ T28] addrconf_dad_work+0xce/0x1550 [ 667.731773][ T28] ? ipv6_get_saddr_eval+0xee0/0xee0 [ 667.737122][ T28] ? read_lock_is_recursive+0x20/0x20 [ 667.742580][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 667.747801][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.753643][ T28] ? process_scheduled_works+0x975/0x1600 [ 667.759457][ T28] process_scheduled_works+0xa60/0x1600 [ 667.765452][ T28] ? worker_attach_to_pool+0x370/0x370 [ 667.770949][ T28] ? assign_work+0x3cc/0x5d0 [ 667.775624][ T28] worker_thread+0xa5e/0xfe0 [ 667.780245][ T28] kthread+0x2fa/0x390 [ 667.784384][ T28] ? pr_cont_work+0x550/0x550 [ 667.789090][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.793784][ T28] ret_from_fork+0x48/0x80 [ 667.798244][ T28] ? kthread_blkcg+0xd0/0xd0 [ 667.803063][ T28] ret_from_fork_asm+0x11/0x20 [ 667.807870][ T28] [ 667.810904][ T28] INFO: task syz-executor:13160 blocked for more than 144 seconds. [ 667.820275][ T28] Not tainted syzkaller #0 [ 667.825419][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 667.834346][ T28] task:syz-executor state:D stack:22344 pid:13160 ppid:1 flags:0x00004006 [ 667.843790][ T28] Call Trace: [ 667.847099][ T28] [ 667.850048][ T28] __schedule+0x15ae/0x4660 [ 667.854671][ T28] ? stack_trace_snprint+0xf0/0xf0 [ 667.859807][ T28] ? __stack_depot_save+0x1f/0x660 [ 667.867987][ T28] ? asan.module_dtor+0x20/0x20 [ 667.872981][ T28] ? __mutex_lock+0x66e/0xc80 [ 667.877868][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 667.883469][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 667.889734][ T28] schedule+0xbd/0x170 [ 667.893934][ T28] schedule_preempt_disabled+0x13/0x20 [ 667.899452][ T28] __mutex_lock+0x673/0xc80 [ 667.904027][ T28] ? __mutex_lock+0x4d2/0xc80 [ 667.908740][ T28] ? nsim_destroy+0x3f/0x180 [ 667.913539][ T28] ? mutex_lock_nested+0x20/0x20 [ 667.918510][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 667.923789][ T28] nsim_destroy+0x3f/0x180 [ 667.928232][ T28] __nsim_dev_port_del+0x14d/0x1b0 [ 667.933458][ T28] nsim_dev_reload_destroy+0x283/0x480 [ 667.938967][ T28] nsim_drv_remove+0x58/0x170 [ 667.943840][ T28] ? nsim_bus_probe+0x20/0x20 [ 667.948538][ T28] device_release_driver_internal+0x408/0x6f0 [ 667.954739][ T28] bus_remove_device+0x43b/0x520 [ 667.959715][ T28] ? bus_probe_device+0x260/0x260 [ 667.965031][ T28] ? up_write+0x1be/0x410 [ 667.969833][ T28] ? kernfs_remove_by_name_ns+0x117/0x150 [ 667.976062][ T28] device_del+0x51f/0x910 [ 667.980427][ T28] ? kill_device+0x160/0x160 [ 667.985464][ T28] ? __virt_addr_valid+0x10c/0x380 [ 667.990600][ T28] device_unregister+0x20/0xc0 [ 667.995477][ T28] del_device_store+0x2b6/0x370 [ 668.000345][ T28] ? del_port_store+0x170/0x170 [ 668.005261][ T28] ? sysfs_kf_write+0x187/0x2a0 [ 668.010127][ T28] ? sysfs_kf_read+0x310/0x310 [ 668.014989][ T28] kernfs_fop_write_iter+0x3a4/0x520 [ 668.020330][ T28] vfs_write+0x474/0x9a0 [ 668.027488][ T28] ? file_end_write+0x250/0x250 [ 668.033257][ T28] ? do_sys_openat2+0x170/0x1d0 [ 668.038131][ T28] ? __fdget_pos+0x2ba/0x330 [ 668.045784][ T28] ksys_write+0x151/0x260 [ 668.050156][ T28] ? __ia32_sys_read+0x90/0x90 [ 668.055861][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 668.061100][ T28] do_syscall_64+0x55/0xb0 [ 668.065686][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.070389][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.076670][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.082654][ T28] RIP: 0033:0x7fc9dd75e68e [ 668.087090][ T28] RSP: 002b:00007ffd4a99b7d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 668.095612][ T28] RAX: ffffffffffffffda RBX: 0000555577ae3500 RCX: 00007fc9dd75e68e [ 668.103650][ T28] RDX: 0000000000000001 RSI: 00007ffd4a99b860 RDI: 0000000000000005 [ 668.111645][ T28] RBP: 00007fc9dd8346f2 R08: 0000000000000000 R09: 0000000000000000 [ 668.119721][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.127752][ T28] R13: 00007ffd4a99b860 R14: 00007fc9de554620 R15: 0000000000000003 [ 668.135989][ T28] [ 668.139050][ T28] INFO: task syz.3.2636:13338 blocked for more than 144 seconds. [ 668.146909][ T28] Not tainted syzkaller #0 [ 668.151863][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.160595][ T28] task:syz.3.2636 state:D stack:26600 pid:13338 ppid:12817 flags:0x00004004 [ 668.169913][ T28] Call Trace: [ 668.173272][ T28] [ 668.176530][ T28] __schedule+0x15ae/0x4660 [ 668.181066][ T28] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 668.187810][ T28] ? asan.module_dtor+0x20/0x20 [ 668.192723][ T28] ? __mutex_lock+0x66e/0xc80 [ 668.197427][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 668.205961][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 668.212616][ T28] schedule+0xbd/0x170 [ 668.216760][ T28] schedule_preempt_disabled+0x13/0x20 [ 668.222662][ T28] __mutex_lock+0x673/0xc80 [ 668.227191][ T28] ? __mutex_lock+0x4d2/0xc80 [ 668.231887][ T28] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 668.237049][ T28] ? mutex_lock_nested+0x20/0x20 [ 668.242111][ T28] rtnetlink_rcv_msg+0x7ed/0xf90 [ 668.247082][ T28] ? rtnetlink_rcv_msg+0x220/0xf90 [ 668.252931][ T28] ? rtnetlink_bind+0x80/0x80 [ 668.257682][ T28] ? perf_trace_lock_acquire+0x105/0x400 [ 668.263782][ T28] ? perf_trace_preemptirq_template+0xac/0x330 [ 668.269962][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 668.276028][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 668.281535][ T28] ? lock_chain_count+0x20/0x20 [ 668.286486][ T28] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 668.298501][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 668.303799][ T28] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 668.309725][ T28] ? _raw_spin_unlock+0x40/0x40 [ 668.314896][ T28] ? __dev_queue_xmit+0x275/0x3630 [ 668.320057][ T28] ? rcu_preempt_deferred_qs_irqrestore+0x83b/0xc30 [ 668.326975][ T28] netlink_rcv_skb+0x235/0x4c0 [ 668.331780][ T28] ? rtnetlink_bind+0x80/0x80 [ 668.336821][ T28] ? netlink_ack+0x1160/0x1160 [ 668.341637][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 668.347037][ T28] ? __rcu_read_unlock+0x7c/0xd0 [ 668.351995][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 668.357393][ T28] netlink_unicast+0x7b1/0x930 [ 668.362415][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 668.367243][ T28] ? netlink_getsockopt+0x590/0x590 [ 668.372550][ T28] ? apparmor_socket_sendmsg+0x8e/0x330 [ 668.378279][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 668.384081][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 668.389591][ T28] ? netlink_getsockopt+0x590/0x590 [ 668.394984][ T28] ____sys_sendmsg+0x61b/0x980 [ 668.399923][ T28] ? __asan_memset+0x22/0x40 [ 668.404614][ T28] ? __sys_sendmsg_sock+0x30/0x30 [ 668.409787][ T28] ? __import_iovec+0x5f2/0x850 [ 668.414728][ T28] ? import_iovec+0x73/0xa0 [ 668.419391][ T28] ___sys_sendmsg+0x2a6/0x360 [ 668.424157][ T28] ? __sys_sendmsg+0x2b0/0x2b0 [ 668.428987][ T28] __se_sys_sendmsg+0x1d0/0x2c0 [ 668.434034][ T28] ? __x64_sys_sendmsg+0x80/0x80 [ 668.439136][ T28] ? lockdep_hardirqs_on+0x98/0x150 [ 668.444472][ T28] do_syscall_64+0x55/0xb0 [ 668.449056][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.453817][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.458554][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.464650][ T28] RIP: 0033:0x7f0ed6d9de59 [ 668.469259][ T28] RSP: 002b:00007f0ed7d07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 668.477855][ T28] RAX: ffffffffffffffda RBX: 00007f0ed7025fa0 RCX: 00007f0ed6d9de59 [ 668.486389][ T28] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000004 [ 668.494449][ T28] RBP: 00007f0ed6e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 668.502614][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.510612][ T28] R13: 00007f0ed7026038 R14: 00007f0ed7025fa0 R15: 00007ffe4a9d2398 [ 668.518670][ T28] [ 668.521850][ T28] INFO: task syz.0.2640:13347 blocked for more than 145 seconds. [ 668.529812][ T28] Not tainted syzkaller #0 [ 668.534904][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.544215][ T28] task:syz.0.2640 state:D stack:24936 pid:13347 ppid:12612 flags:0x00004004 [ 668.553785][ T28] Call Trace: [ 668.557086][ T28] [ 668.560025][ T28] __schedule+0x15ae/0x4660 [ 668.565101][ T28] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 668.572026][ T28] ? asan.module_dtor+0x20/0x20 [ 668.577119][ T28] ? __mutex_lock+0x66e/0xc80 [ 668.582028][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 668.588376][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 668.594646][ T28] schedule+0xbd/0x170 [ 668.598891][ T28] schedule_preempt_disabled+0x13/0x20 [ 668.604432][ T28] __mutex_lock+0x673/0xc80 [ 668.609072][ T28] ? __mutex_lock+0x4d2/0xc80 [ 668.613840][ T28] ? devinet_ioctl+0x2fc/0x1d70 [ 668.618985][ T28] ? mutex_lock_nested+0x20/0x20 [ 668.624017][ T28] ? bpf_lsm_capable+0x9/0x10 [ 668.628750][ T28] ? security_capable+0x89/0xb0 [ 668.633958][ T28] devinet_ioctl+0x2fc/0x1d70 [ 668.638670][ T28] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 668.645194][ T28] ? _copy_from_user+0x51/0xe0 [ 668.649997][ T28] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 668.655257][ T28] ? _copy_from_user+0xa5/0xe0 [ 668.660048][ T28] ? get_user_ifreq+0x12b/0x180 [ 668.665005][ T28] inet_ioctl+0x42b/0x560 [ 668.669379][ T28] ? tomoyo_path_number_perm+0x217/0x5e0 [ 668.675088][ T28] ? inet_shutdown+0x370/0x370 [ 668.679878][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 668.685837][ T28] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 668.691878][ T28] ? __kmem_cache_free+0xba/0x1f0 [ 668.697746][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 668.703304][ T28] sock_do_ioctl+0xfc/0x310 [ 668.707961][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 668.712895][ T28] sock_ioctl+0x5be/0x7e0 [ 668.717249][ T28] ? sock_poll+0x3e0/0x3e0 [ 668.721699][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 668.727048][ T28] ? security_file_ioctl+0x80/0xa0 [ 668.732708][ T28] ? sock_poll+0x3e0/0x3e0 [ 668.737160][ T28] __se_sys_ioctl+0xfd/0x170 [ 668.741784][ T28] do_syscall_64+0x55/0xb0 [ 668.746264][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.751105][ T28] ? clear_bhb_loop+0x40/0x90 [ 668.755861][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 668.761905][ T28] RIP: 0033:0x7f3610d9de59 [ 668.766405][ T28] RSP: 002b:00007f3611cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 668.775073][ T28] RAX: ffffffffffffffda RBX: 00007f3611025fa0 RCX: 00007f3610d9de59 [ 668.783122][ T28] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 000000000000000b [ 668.791420][ T28] RBP: 00007f3610e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 668.799587][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.807767][ T28] R13: 00007f3611026038 R14: 00007f3611025fa0 R15: 00007ffd70445c48 [ 668.815835][ T28] [ 668.819131][ T28] INFO: task syz.2.2641:13350 blocked for more than 145 seconds. [ 668.827387][ T28] Not tainted syzkaller #0 [ 668.832702][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 668.841570][ T28] task:syz.2.2641 state:D stack:23432 pid:13350 ppid:12346 flags:0x00004004 [ 668.850861][ T28] Call Trace: [ 668.854401][ T28] [ 668.857390][ T28] __schedule+0x15ae/0x4660 [ 668.861951][ T28] ? asan.module_dtor+0x20/0x20 [ 668.866870][ T28] ? __mutex_lock+0x66e/0xc80 [ 668.871565][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 668.877094][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 668.883299][ T28] schedule+0xbd/0x170 [ 668.887388][ T28] schedule_preempt_disabled+0x13/0x20 [ 668.893289][ T28] __mutex_lock+0x673/0xc80 [ 668.897928][ T28] ? __mutex_lock+0x4d2/0xc80 [ 668.902672][ T28] ? addrconf_set_dstaddr+0xef/0x320 [ 668.907990][ T28] ? mutex_lock_nested+0x20/0x20 [ 668.913115][ T28] ? __might_fault+0xaa/0x120 [ 668.917817][ T28] ? __might_fault+0xc6/0x120 [ 668.922562][ T28] ? __might_fault+0xaa/0x120 [ 668.927332][ T28] addrconf_set_dstaddr+0xef/0x320 [ 668.933448][ T28] ? do_vfs_ioctl+0x156c/0x1cc0 [ 668.938335][ T28] ? ipv6_inherit_eui64+0x1a0/0x1a0 [ 668.943593][ T28] ? __ia32_compat_sys_ioctl+0x8a0/0x8a0 [ 668.949260][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 668.954365][ T28] ? slab_free_freelist_hook+0x130/0x1a0 [ 668.960029][ T28] inet6_ioctl+0x164/0x2d0 [ 668.964530][ T28] ? inet6_getname+0x670/0x670 [ 668.969586][ T28] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 668.975293][ T28] ? tomoyo_path_number_perm+0x217/0x5e0 [ 668.980949][ T28] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 668.986482][ T28] sock_do_ioctl+0xfc/0x310 [ 668.991048][ T28] ? sock_show_fdinfo+0xb0/0xb0 [ 668.996508][ T28] sock_ioctl+0x5be/0x7e0 [ 669.000870][ T28] ? sock_poll+0x3e0/0x3e0 [ 669.005370][ T28] ? bpf_lsm_file_ioctl+0x9/0x10 [ 669.010419][ T28] ? security_file_ioctl+0x80/0xa0 [ 669.015677][ T28] ? sock_poll+0x3e0/0x3e0 [ 669.020127][ T28] __se_sys_ioctl+0xfd/0x170 [ 669.024942][ T28] do_syscall_64+0x55/0xb0 [ 669.029397][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.034159][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.038849][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.045473][ T28] RIP: 0033:0x7f616519de59 [ 669.049921][ T28] RSP: 002b:00007f6166014028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.062002][ T28] RAX: ffffffffffffffda RBX: 00007f6165425fa0 RCX: 00007f616519de59 [ 669.070770][ T28] RDX: 0000200000000000 RSI: 0000000000008918 RDI: 0000000000000000 [ 669.082507][ T28] RBP: 00007f6165233e6f R08: 0000000000000000 R09: 0000000000000000 [ 669.090503][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.099733][ T28] R13: 00007f6165426038 R14: 00007f6165425fa0 R15: 00007fff5788c248 [ 669.107844][ T28] [ 669.110892][ T28] INFO: task syz-executor:13355 blocked for more than 145 seconds. [ 669.118845][ T28] Not tainted syzkaller #0 [ 669.123839][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.132708][ T28] task:syz-executor state:D stack:25384 pid:13355 ppid:1 flags:0x00004004 [ 669.141946][ T28] Call Trace: [ 669.145277][ T28] [ 669.148235][ T28] __schedule+0x15ae/0x4660 [ 669.152859][ T28] ? asan.module_dtor+0x20/0x20 [ 669.157744][ T28] ? __mutex_lock+0x66e/0xc80 [ 669.162498][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 669.167984][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 669.174214][ T28] schedule+0xbd/0x170 [ 669.178306][ T28] schedule_preempt_disabled+0x13/0x20 [ 669.186914][ T28] __mutex_lock+0x673/0xc80 [ 669.191455][ T28] ? __mutex_lock+0x4d2/0xc80 [ 669.196525][ T28] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 669.201997][ T28] ? mutex_lock_nested+0x20/0x20 [ 669.207340][ T28] rtnetlink_rcv_msg+0x7ed/0xf90 [ 669.212365][ T28] ? rtnetlink_rcv_msg+0x220/0xf90 [ 669.217856][ T28] ? rtnetlink_bind+0x80/0x80 [ 669.222995][ T28] ? mark_lock+0x94/0x320 [ 669.227367][ T28] ? __lock_acquire+0x1262/0x7d80 [ 669.232773][ T28] ? mark_lock+0x94/0x320 [ 669.237130][ T28] ? mark_lock+0x94/0x320 [ 669.241485][ T28] ? __lock_acquire+0x1262/0x7d80 [ 669.246983][ T28] ? kmalloc_reserve+0x95/0x240 [ 669.251865][ T28] ? verify_lock_unused+0x140/0x140 [ 669.257544][ T28] ? verify_lock_unused+0x140/0x140 [ 669.263060][ T28] netlink_rcv_skb+0x235/0x4c0 [ 669.267856][ T28] ? rtnetlink_bind+0x80/0x80 [ 669.272953][ T28] ? netlink_ack+0x1160/0x1160 [ 669.277747][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 669.283225][ T28] ? net_generic+0x1e/0x240 [ 669.287762][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.293430][ T28] netlink_unicast+0x7b1/0x930 [ 669.298242][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 669.303766][ T28] ? netlink_getsockopt+0x590/0x590 [ 669.309005][ T28] ? apparmor_socket_sendmsg+0x8e/0x330 [ 669.315002][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 669.320412][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 669.325954][ T28] __sys_sendto+0x4a9/0x6b0 [ 669.330660][ T28] ? __ia32_sys_getpeername+0x90/0x90 [ 669.342375][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 669.347469][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.353637][ T28] ? lock_chain_count+0x20/0x20 [ 669.358509][ T28] ? lock_chain_count+0x20/0x20 [ 669.363433][ T28] __x64_sys_sendto+0xde/0xf0 [ 669.368230][ T28] do_syscall_64+0x55/0xb0 [ 669.372748][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.377453][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.382199][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.388144][ T28] RIP: 0033:0x7f6c9895e68e [ 669.392657][ T28] RSP: 002b:00007ffde7e38a38 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.401101][ T28] RAX: ffffffffffffffda RBX: 0000555564124500 RCX: 00007f6c9895e68e [ 669.409689][ T28] RDX: 0000000000000028 RSI: 00007f6c99754670 RDI: 0000000000000003 [ 669.417823][ T28] RBP: 0000000000000001 R08: 00007ffde7e38ab4 R09: 000000000000000c [ 669.426112][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 669.434436][ T28] R13: 0000000000000000 R14: 00007f6c99754670 R15: 0000000000000000 [ 669.442718][ T28] [ 669.445761][ T28] INFO: task syz-executor:13359 blocked for more than 145 seconds. [ 669.455005][ T28] Not tainted syzkaller #0 [ 669.459969][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 669.468807][ T28] task:syz-executor state:D stack:25384 pid:13359 ppid:1 flags:0x00004004 [ 669.478181][ T28] Call Trace: [ 669.481463][ T28] [ 669.484559][ T28] __schedule+0x15ae/0x4660 [ 669.489100][ T28] ? asan.module_dtor+0x20/0x20 [ 669.494032][ T28] ? __mutex_lock+0x66e/0xc80 [ 669.498738][ T28] ? __mutex_trylock_common+0x8a/0x270 [ 669.504296][ T28] ? trace_raw_output_contention_end+0xd0/0xd0 [ 669.510981][ T28] schedule+0xbd/0x170 [ 669.517287][ T28] schedule_preempt_disabled+0x13/0x20 [ 669.524271][ T28] __mutex_lock+0x673/0xc80 [ 669.528806][ T28] ? __mutex_lock+0x4d2/0xc80 [ 669.534032][ T28] ? rtnetlink_rcv_msg+0x7ed/0xf90 [ 669.539317][ T28] ? mutex_lock_nested+0x20/0x20 [ 669.545860][ T28] rtnetlink_rcv_msg+0x7ed/0xf90 [ 669.550813][ T28] ? rtnetlink_rcv_msg+0x220/0xf90 [ 669.558547][ T28] ? rtnetlink_bind+0x80/0x80 [ 669.564845][ T28] ? mark_lock+0x94/0x320 [ 669.569185][ T28] ? __lock_acquire+0x1262/0x7d80 [ 669.576947][ T28] ? mark_lock+0x94/0x320 [ 669.581301][ T28] ? mark_lock+0x94/0x320 [ 669.587289][ T28] ? __lock_acquire+0x1262/0x7d80 [ 669.595139][ T28] ? kmalloc_reserve+0x95/0x240 [ 669.600024][ T28] ? verify_lock_unused+0x140/0x140 [ 669.606918][ T28] ? verify_lock_unused+0x140/0x140 [ 669.615282][ T28] netlink_rcv_skb+0x235/0x4c0 [ 669.620091][ T28] ? rtnetlink_bind+0x80/0x80 [ 669.626393][ T28] ? netlink_ack+0x1160/0x1160 [ 669.631196][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 669.638546][ T28] ? net_generic+0x1e/0x240 [ 669.644781][ T28] ? netlink_deliver_tap+0x2e/0x1b0 [ 669.650099][ T28] netlink_unicast+0x7b1/0x930 [ 669.658612][ T28] netlink_sendmsg+0x8d0/0xbf0 [ 669.664500][ T28] ? netlink_getsockopt+0x590/0x590 [ 669.669741][ T28] ? apparmor_socket_sendmsg+0x8e/0x330 [ 669.675433][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 669.680752][ T28] ? security_socket_sendmsg+0x80/0xa0 [ 669.686394][ T28] __sys_sendto+0x4a9/0x6b0 [ 669.690931][ T28] ? __ia32_sys_getpeername+0x90/0x90 [ 669.696393][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 669.701456][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 669.707536][ T28] ? lock_chain_count+0x20/0x20 [ 669.712906][ T28] ? lock_chain_count+0x20/0x20 [ 669.717807][ T28] __x64_sys_sendto+0xde/0xf0 [ 669.722995][ T28] do_syscall_64+0x55/0xb0 [ 669.727446][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.732284][ T28] ? clear_bhb_loop+0x40/0x90 [ 669.737256][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 669.743235][ T28] RIP: 0033:0x7fdd7c75e68e [ 669.747660][ T28] RSP: 002b:00007ffef4b66df8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 669.756175][ T28] RAX: ffffffffffffffda RBX: 0000555569917500 RCX: 00007fdd7c75e68e [ 669.764216][ T28] RDX: 0000000000000028 RSI: 00007fdd7d554670 RDI: 0000000000000003 [ 669.773416][ T28] RBP: 0000000000000001 R08: 00007ffef4b66e74 R09: 000000000000000c [ 669.781436][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 669.789570][ T28] R13: 0000000000000000 R14: 00007fdd7d554670 R15: 0000000000000000 [ 669.797889][ T28] [ 669.800931][ T28] Future hung task reports are suppressed, see sysctl kernel.hung_task_warnings [ 669.810037][ T28] [ 669.810037][ T28] Showing all locks held in the system: [ 669.818369][ T28] 1 lock held by khungtaskd/28: [ 669.823341][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 669.834190][ T28] 3 locks held by kworker/0:2/173: [ 669.839341][ T28] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 669.850372][ T28] #1: ffffc90002ed7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 669.861581][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 669.872087][ T28] 1 lock held by klogd/5128: [ 669.876726][ T28] #0: ffff8880b8e3c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x29/0x130 [ 669.889496][ T28] 2 locks held by dhcpcd/5433: [ 669.894424][ T28] #0: ffffffff8e3bab48 (vlan_ioctl_mutex){+.+.}-{3:3}, at: sock_ioctl+0x632/0x7e0 [ 669.904036][ T28] #1: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: vlan_ioctl_handler+0xf1/0x630 [ 669.913864][ T28] 2 locks held by getty/5536: [ 669.918915][ T28] #0: ffff888031dd20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 669.928775][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 669.938962][ T28] 3 locks held by kworker/1:5/11597: [ 669.944371][ T28] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 669.956847][ T28] #1: ffffc900031c7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 669.968020][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 669.977687][ T28] 3 locks held by kworker/u4:13/12714: [ 669.983196][ T28] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 669.994962][ T28] #1: ffffc90003687d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 670.006031][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 670.015191][ T28] 4 locks held by kworker/u4:20/12728: [ 670.021034][ T28] 3 locks held by kworker/u4:23/12736: [ 670.026544][ T28] #0: ffff88802c886d38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 670.038197][ T28] #1: ffffc90003817d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 670.051078][ T28] #2: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xce/0x1550 [ 670.060910][ T28] 7 locks held by syz-executor/13160: [ 670.066471][ T28] #0: ffff88802cfc0418 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x21e/0x9a0 [ 670.075889][ T28] #1: ffff88807b3a8888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1dc/0x520 [ 670.085718][ T28] #2: ffff8881427be8c0 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x236/0x520 [ 670.096024][ T28] #3: ffffffff8dcb6aa8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd7/0x370 [ 670.106350][ T28] #4: ffff88805ed96130 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa7/0x6f0 [ 670.116959][ T28] #5: ffff88805ed97250 (&devlink->lock_key#2){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x170 [ 670.127650][ T28] #6: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3f/0x180 [ 670.136882][ T28] 1 lock held by syz.3.2636/13338: [ 670.142020][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.151781][ T28] 1 lock held by syz.0.2640/13347: [ 670.157386][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2fc/0x1d70 [ 670.166733][ T28] 1 lock held by syz.2.2641/13350: [ 670.171862][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_set_dstaddr+0xef/0x320 [ 670.181795][ T28] 1 lock held by syz-executor/13355: [ 670.187154][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.196763][ T28] 1 lock held by syz-executor/13359: [ 670.202093][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.211633][ T28] 1 lock held by syz-executor/13362: [ 670.217036][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.227236][ T28] 1 lock held by syz-executor/13365: [ 670.232712][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.242207][ T28] 1 lock held by syz-executor/13372: [ 670.247503][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.257013][ T28] 1 lock held by syz-executor/13376: [ 670.265254][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.275741][ T28] 1 lock held by syz-executor/13374: [ 670.281057][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.290665][ T28] 1 lock held by syz-executor/13388: [ 670.296039][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.305507][ T28] 1 lock held by syz-executor/13396: [ 670.310792][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.320254][ T28] 1 lock held by syz-executor/13400: [ 670.325885][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.335453][ T28] 1 lock held by syz-executor/13402: [ 670.340839][ T28] #0: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7ed/0xf90 [ 670.350448][ T28] [ 670.352849][ T28] ============================================= [ 670.352849][ T28] [ 670.361288][ T28] NMI backtrace for cpu 1 [ 670.365711][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 670.373102][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.383170][ T28] Call Trace: [ 670.386448][ T28] [ 670.389416][ T28] dump_stack_lvl+0x18c/0x250 [ 670.394098][ T28] ? __wake_up_klogd+0xd9/0x100 [ 670.398949][ T28] ? show_regs_print_info+0x20/0x20 [ 670.404145][ T28] ? load_image+0x420/0x420 [ 670.408653][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 670.413584][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 670.419759][ T28] ? load_image+0x420/0x420 [ 670.424274][ T28] ? wq_watchdog_touch+0xef/0x170 [ 670.429311][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 670.435389][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 670.441373][ T28] watchdog+0xf59/0xfa0 [ 670.445541][ T28] ? watchdog+0x1e1/0xfa0 [ 670.449878][ T28] kthread+0x2fa/0x390 [ 670.453971][ T28] ? hungtask_pm_notify+0x50/0x50 [ 670.459018][ T28] ? kthread_blkcg+0xd0/0xd0 [ 670.463608][ T28] ret_from_fork+0x48/0x80 [ 670.468024][ T28] ? kthread_blkcg+0xd0/0xd0 [ 670.472614][ T28] ret_from_fork_asm+0x11/0x20 [ 670.477389][ T28] [ 670.481055][ T28] Sending NMI from CPU 1 to CPUs 0: [ 670.486589][ C0] NMI backtrace for cpu 0 [ 670.486600][ C0] CPU: 0 PID: 13117 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 670.486618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.486628][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 670.486650][ C0] RIP: 0010:unwind_next_frame+0x24b/0x2990 [ 670.486668][ C0] Code: f0 4c 8d 24 85 7c 6d b4 8f 4c 89 e0 48 c1 e8 03 48 bb 00 00 00 00 00 fc ff df 0f b6 04 18 84 c0 0f 85 03 22 00 00 45 8b 24 24 <44> 89 f0 ff c0 48 8d 2c 85 7c 6d b4 8f 48 89 e8 48 c1 e8 03 0f b6 [ 670.486680][ C0] RSP: 0018:ffffc900046c7158 EFLAGS: 00000246 [ 670.486692][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 670.486703][ C0] RDX: ffff888024d70000 RSI: 000000000008ff9e RDI: 000000000009c000 [ 670.486713][ C0] RBP: 000000000009c000 R08: ffffc900046c72f0 R09: 0000000000000004 [ 670.486723][ C0] R10: 0000000000000004 R11: 0000000000000000 R12: 000000000019ac47 [ 670.486732][ C0] R13: 000000000009c001 R14: 000000000008ff9e R15: 0000000000000001 [ 670.486742][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 670.486754][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 670.486764][ C0] CR2: 00007f54a124b28a CR3: 000000000cf32000 CR4: 00000000003506f0 [ 670.486777][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 670.486786][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 670.486795][ C0] Call Trace: [ 670.486800][ C0] [ 670.486810][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x4b6/0x2dc0 [ 670.486826][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 670.486842][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 670.486857][ C0] ? stack_trace_save+0x100/0x100 [ 670.486874][ C0] arch_stack_walk+0x144/0x190 [ 670.486891][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 670.486909][ C0] stack_trace_save+0xaa/0x100 [ 670.486925][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 670.486940][ C0] ? mark_lock+0x94/0x320 [ 670.486957][ C0] ? __lock_acquire+0x1336/0x7d80 [ 670.486975][ C0] kasan_set_track+0x4e/0x70 [ 670.486991][ C0] ? kasan_set_track+0x4e/0x70 [ 670.487005][ C0] ? __kasan_kmalloc+0x8f/0xa0 [ 670.487020][ C0] ? __kmalloc+0xb7/0x240 [ 670.487037][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 670.487057][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 670.487100][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 670.487121][ C0] __kasan_kmalloc+0x8f/0xa0 [ 670.487137][ C0] ? ieee802_11_parse_elems_full+0xb9/0x20c0 [ 670.487157][ C0] __kmalloc+0xb7/0x240 [ 670.487176][ C0] ieee802_11_parse_elems_full+0xb9/0x20c0 [ 670.487198][ C0] ? trace_raw_output_contention_end+0xd0/0xd0 [ 670.487215][ C0] ? rcu_is_watching+0x15/0xb0 [ 670.487233][ C0] ? trace_contention_end+0x39/0xe0 [ 670.487247][ C0] ? __mutex_lock+0x30d/0xc80 [ 670.487267][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x123/0x2dc0 [ 670.487287][ C0] ? mutex_lock_nested+0x20/0x20 [ 670.487304][ C0] ? ieee80211_queue_delayed_work+0x150/0x150 [ 670.487329][ C0] ieee80211_ibss_rx_queued_mgmt+0x4b7/0x2dc0 [ 670.487345][ C0] ? verify_lock_unused+0x140/0x140 [ 670.487363][ C0] ? verify_lock_unused+0x140/0x140 [ 670.487385][ C0] ? ieee80211_ibss_rx_no_sta+0x790/0x790 [ 670.487404][ C0] ? mark_lock+0x94/0x320 [ 670.487420][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 670.487437][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 670.487458][ C0] ? lock_chain_count+0x20/0x20 [ 670.487473][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 670.487494][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 670.487512][ C0] ? skb_dequeue+0x124/0x160 [ 670.487529][ C0] ieee80211_iface_work+0x730/0xc90 [ 670.487549][ C0] cfg80211_wiphy_work+0x228/0x260 [ 670.487569][ C0] ? process_scheduled_works+0x975/0x1600 [ 670.487588][ C0] process_scheduled_works+0xa60/0x1600 [ 670.487618][ C0] ? worker_attach_to_pool+0x370/0x370 [ 670.487638][ C0] ? assign_work+0x3cc/0x5d0 [ 670.487657][ C0] worker_thread+0xa5e/0xfe0 [ 670.487679][ C0] ? _raw_spin_unlock+0x40/0x40 [ 670.487695][ C0] ? __kthread_parkme+0x71/0x1c0 [ 670.487713][ C0] kthread+0x2fa/0x390 [ 670.487726][ C0] ? pr_cont_work+0x550/0x550 [ 670.487742][ C0] ? kthread_blkcg+0xd0/0xd0 [ 670.487756][ C0] ret_from_fork+0x48/0x80 [ 670.487772][ C0] ? kthread_blkcg+0xd0/0xd0 [ 670.487787][ C0] ret_from_fork_asm+0x11/0x20 [ 670.487812][ C0] [ 670.532248][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 670.532264][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 670.532283][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 670.532293][ T28] Call Trace: [ 670.532301][ T28] [ 670.532308][ T28] dump_stack_lvl+0x18c/0x250 [ 670.532340][ T28] ? show_regs_print_info+0x20/0x20 [ 670.532363][ T28] ? load_image+0x420/0x420 [ 670.532393][ T28] panic+0x2ca/0x720 [ 670.532417][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 670.532436][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 670.532463][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 670.532487][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 670.532510][ T28] watchdog+0xf98/0xfa0 [ 670.532533][ T28] ? watchdog+0x1e1/0xfa0 [ 670.532558][ T28] kthread+0x2fa/0x390 [ 670.532574][ T28] ? hungtask_pm_notify+0x50/0x50 [ 670.532594][ T28] ? kthread_blkcg+0xd0/0xd0 [ 670.532610][ T28] ret_from_fork+0x48/0x80 [ 670.532629][ T28] ? kthread_blkcg+0xd0/0xd0 [ 670.532646][ T28] ret_from_fork_asm+0x11/0x20 [ 670.532678][ T28] [ 670.546239][ T28] Kernel Offset: disabled [ 671.032681][ T28] Rebooting in 86400 seconds..