last executing test programs: 22.620843289s ago: executing program 0 (id=2474): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018"], 0x0, 0x4}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) 22.398218136s ago: executing program 0 (id=2476): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000001580)=ANY=[@ANYRESDEC], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 21.364365518s ago: executing program 1 (id=2482): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 21.250729702s ago: executing program 0 (id=2483): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x7, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000060000001824a1c1789c4706f63e4ed9e60241f074696dd4a652d702bbdbbad9feba74de22fdd940f266a71e0d2bc0a9e6a2f8c65e59ef5ec31034e8cf7d560dd719b2c3fec958866eae0a341c99dbf93dd1f6d77f5767c083edf36ba09d79ada5a6d05fc389ed8000c50af4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffe7a}, 0x94) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000100000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce"], 0xfdef) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r5 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000004b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000200000eb778a5574000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000780)={r3, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x15, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x33b}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @map_val={0x18, 0x5, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe73}, 0x94) r7 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xc}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) syz_clone(0x80001000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x36, 0x1, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x200002, 0x0) r11 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r12, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x15, 0x0, 0x3, 0x80ffffff}, {0x20}, {}, {}, {0x6}]}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r10, r3, 0xa, 0x2000, r1, @value=r11, @void, @void, @void, r9}, 0x20) 20.950553351s ago: executing program 3 (id=2484): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4164, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x969}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1f}, 0x94) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x100}, 0x50) 20.949776811s ago: executing program 1 (id=2485): r0 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x8, 0xc8, 0x9, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1200000000}, 0x0, 0x4, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x114244, 0x0, 0xafe8, 0x4, 0x7fff, 0x7ffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = gettid() perf_event_open(0x0, r2, 0xffffffffffffffff, r1, 0x8) socket$kcm(0x10, 0x7effed69a65f07e4, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x6603, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x6c0ec0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x81000000, 0xe80, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x96, 0x1, 0x0, 0x81, 0x0, 0x8000000000000005, 0x19188, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x4, @perf_bp={0x0, 0x9}, 0x105563, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000000)='cpu>\t\t') ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.769335601s ago: executing program 3 (id=2489): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 17.632164286s ago: executing program 1 (id=2491): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000001580)=ANY=[@ANYRESDEC], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.621797636s ago: executing program 0 (id=2492): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x20801, 0x0) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061114c000000000000b7f04bc8"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x80) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x7, 0x43a1bd78, 0x9, 0x9, 0x6, 0xfffd, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fc0300ff0000000000000000850000003600"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="178d048604bf0bfb1945d7430008", 0x0, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000002000000010000000700000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000004000000030000000c00"/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="310a10"], 0x31) 17.533292879s ago: executing program 2 (id=2493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000000f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 17.322651195s ago: executing program 3 (id=2494): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0xfffffffffffffffe, 0x20a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0xffffbffc, 0x0, 0xc5b}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @exit, @exit, @generic={0x40, 0x0, 0x7, 0x2, 0x4400000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x4, &(0x7f0000000780)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x29, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000886ed92000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100001a040000000000000000000000dacd487302000000"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 17.079637243s ago: executing program 2 (id=2495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 16.964670197s ago: executing program 1 (id=2496): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @generic={0x81, 0x3, 0x4, 0xff7f, 0x1}, @alu={0x7, 0x0, 0xc, 0xc, 0x2, 0xfffffffffffffff8, 0xffffffffffffffe9}, @generic={0xab, 0x1, 0x2, 0x8, 0x7fffffff}]}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x5, 0xe, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x2, 0x11, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf4e5}, {}, {}, [@exit, @jmp={0x5, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000200)={0x3, 0x80, 0xed, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11e, 0x0, 0x0, 0xd, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x40305828, &(0x7f0000000340)={'lo\x00', @random="3f2f94c100"}) socket$kcm(0x10, 0x2, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x80044943, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc3}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90324fc60100c03", 0x17}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070000000200000007"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r5, 0x58, &(0x7f0000000180)}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001880)="5c00000012006b1e003de3d86e6c1dff05137e0300000000000000b68675f80200000000a0e69eeab556a7e60f1e611ca66982949a36c23d3b48dfd8cdbf9367b4fa0a640800030006010000080003001100000000", 0x55}, {&(0x7f0000000080)="6a6203000000dd98c28394f369c6e6ed3dfc25ac256759360d5da3237c222d70354d19428b5b21b322820f64fb21e79939cc835f65e5903f6821cee73140507fa08a1b9e1bc20413ba0cab7409ac38e043cf5c354798aa5f935804b10200fdbf16354348769eff128782f74e79920cd490fe92c465aacf0e21923803dc0c274f2648642c88be5221d5eb6c37e429bd0a22e409335bd324b8d6cfc5e1730dde22b5bcf8c3ef1c47768b4688e227e3fe162934047729c88d07a9207e69ed2e2fa48e8c982e416933596ba326e5d7bc2b1932970287122b3e000000000000", 0xdd}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4040844) 16.943951027s ago: executing program 0 (id=2497): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x10884, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x6, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001f00)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000c080c00bdad0140310068ad639a8ace8680210bc28b805508bc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33", 0x89}], 0x1}, 0xff0f000020000080) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x4048841) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x5, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x9, 0x3fff8000}, 0x40, 0x32, 0x43a1bd76, 0x0, 0x9, 0x6, 0x2, 0x0, 0xfffeffff, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef", 0xcb}], 0x1}, 0x0) socketpair(0x26, 0x5, 0x9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x0, 0x86, 0x0, &(0x7f0000000a00)=""/134, 0x9, 0x0, 0x21, 0xcb, &(0x7f00000007c0)="3c08981790c9484ec49065bcb56d8c4500b5a0bf764aad7d389a82ac1941f3c3e3", &(0x7f0000000800)="f8ee494925c69c3a7da709127ef239c8b3d495a9125958039b8f98cf8c8fdc2868a2b945b5533b780d465a893afce854f54301a5e307f312c0e99eb63476b894672322d02a97fbe2b9f8b0b21e4f09e09d4231c224ff77c61d1a22daffcb808e368ecbdfa4df41af9a70eeafdc1eefa7d1a90e7a084476d84007327e49d08d7bbaf498884083b38ee90eed11475fb750d15c96fb897d07e9ffae484d0ebca94134fb62efab3f03df3516e6c8a6794952403e05eff6d158e896ac92925dae80497646cd801db598891ff406", 0x1, 0x0, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r8, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x406) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$ITER_CREATE(0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x5, 0x3, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}]}}, &(0x7f0000000340)=""/142, 0x26, 0x8e, 0x1}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 16.816086551s ago: executing program 2 (id=2498): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="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", 0x162}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 16.809578351s ago: executing program 3 (id=2499): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000040)=@abs={0x1, 0x2e}, 0x6e, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4164, 0x0, 0x0, 0x5, 0x1, 0x0, 0x6f8, 0x0, 0x0, 0x0, 0x969}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x17}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="2705020059feff000600002fb96dbcf706e105000700810000008100accb", 0x1e}, {&(0x7f00000002c0)="88a8", 0x2}, {&(0x7f00000005c0)="ac37979d1e439e19a3fab5e73acb3e944e5067314670e86878ea780b34a68a9f01b15a9ff9522b89b6c88218d5f257529aa4e34fab88a671ab48b27ac6a4207fe8a270d3d5b82f100a392980a058dddf565e7deaddd88af7ee746b611a2c5033762a03a3b3e135cf3e1b253385ed8c0de1a820324943afbf72b1509334a4815debe79c5d881fe356404ebd716994cc31b9279965133894ceca066cba08977bfd328ee08749c20449017c661b7cfb27f29f4c2a5ef569403ee926899deada9ab15aba6b7054dc68cf2a65ca130aa11ca288230c24a6f2cd9a865615ce0bdeceb0d07f6a9b693d9aea5629b7578a843b98a8", 0xf1}], 0x3}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000006008500000008000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000700)=ANY=[], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x1f}, 0x94) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x3, 0x0, 0x100}, 0x50) 16.674945756s ago: executing program 1 (id=2500): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe, 0x0, &(0x7f00000005c0)="20040000000000f10e586bda5eb7", 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf0000000000000000008500000020000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) 16.504663391s ago: executing program 2 (id=2501): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, [@call={0x85, 0x0, 0x0, 0x7d}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r1}, 0xc) (async) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000240)="807b642dd64bb61eb8efa56c9d2fc831c0b0e1a7b35fb92f2e2c42380625affe84c0a9735440ca4702c748938a2182ebd1ecf172c529bd823100b95ff19253b433388d7097332dd23e04a4356160a379b2bffdd193c670ed056fdd175f7a3b26bd4157d7565230686a9324c63a83ac4f46dd95fc3002808957dae84988efefab4b8261fbeafb875014945998d313435b8f305c3039", 0x95}, {&(0x7f0000000300)="e1430d11f2137535ebee11078f0d9afb6dea79bc472501c7b6eb26cff0ce0770a510fbcbac370d4bcf3be63f79990b9c30112f", 0x33}, {&(0x7f0000000340)="3d3db352f78a5f76d5a2432dfc7c738c564269fabee6df635ffafe2bcee60aa3dd7a2699dadc35e9b13604a60a4a1fb134672fcc6787945a651077948b774d043bdec5a3a27b80fb1acb0bc1e81f2541409f9c31fa2325072562cf7f678762a674c905b4af99bb6a0c1f9eaa32f5738c13687a384ef81a63011767aa3ee03b3fbee29fb89d8ad516285284bb18198f064a66c9df19c2891b0fcb797ff8d75039570440ec3fbf32d7b6f7c694f0076478f9c1f1113886b4246ac6ca45b76bce6300f0c58ba0560adf69d563d5b25675e15fbc87", 0xd3}, {&(0x7f0000000440)="0be7", 0x2}, {&(0x7f0000000480)="75cd162912962c83e0e77f600b9a3196598cf747759f15e1eed537498127ad8c9386b657de33814315d48d62122dac77f3342b910de6828d0d4bd006be10a2a8a5b7", 0x42}, {&(0x7f0000000500)="c65b7f21e0b0c1", 0x7}], 0x6, &(0x7f00000005c0), 0x0, 0x10}, 0x80) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 64) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) (async) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r0}, 0x18) (async, rerun: 64) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="180000003d000b08d25a80648c7494f90224fc6058000240", 0x18}], 0x1}, 0x0) 16.433994803s ago: executing program 0 (id=2502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000000f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 16.344535416s ago: executing program 1 (id=2503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 16.344278216s ago: executing program 2 (id=2504): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) openat$cgroup_procs(r1, 0x0, 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa032a, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x5, 0x200, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c80)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x61, 0x0, 0x61, 0x2e]}}, &(0x7f0000000c80)=""/4096, 0x2a, 0x1000, 0x1, 0x64f}, 0x28) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0), 0x10) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e27, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000002900000039000000000202"], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000}, 0x50) r4 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x9, &(0x7f0000000c40)=r4, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="2b70696473edf5603b31a756612b5d2bea650f00800000000000009b441d9c759fd7ba3cf6fa6c483cdbe2e468c2d38d75f5ec8dde76de60990dee074520447f2de33965cfbc93b0f69fdb1b0cc6fb827be849ced3508792b9fc41712abcf62efbe57b8680ade9ba464e0c06e6039148edae2a27c036c24ec6a7e3566f5f0ab25bc926627790bb0232dea3c6834779bc70d094be1fdb973d961e3dd1394a4f0fb9bb40a408d97e599b33dc5d804b58d66d5a0f4633ae6eb4f25c21a274d0ad5b9bcf742a38ac6a6c00"/214], 0x6) 15.972712748s ago: executing program 2 (id=2505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000001580)=ANY=[@ANYRESDEC], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 15.829222262s ago: executing program 3 (id=2506): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffff31, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) 15.696457136s ago: executing program 3 (id=2507): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0xfffffffffffffffe, 0x20a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0xffffbffc, 0x0, 0xc5b}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @exit, @exit, @generic={0x40, 0x0, 0x7, 0x2, 0x4400000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x4, &(0x7f0000000780)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x29, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000886ed92000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100001a040000000000000000000000dacd487302000000"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) 1.054407407s ago: executing program 32 (id=2502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000000f000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 939.199321ms ago: executing program 33 (id=2503): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x8000, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xfffffffffffffbff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf3, &(0x7f00000002c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000440), 0x8, 0xe6, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 55.395799ms ago: executing program 34 (id=2505): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000001580)=ANY=[@ANYRESDEC], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, 0x0, 0x24040810) bpf$PROG_BIND_MAP(0x23, &(0x7f0000001500)={r0, r0}, 0xc) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001580)}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x202, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0x100000000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x90) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000001000)='cgroup.threads\x00', 0x2, 0x0) socket$kcm(0x10, 0x6, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x300, &(0x7f00000001c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000001200)=ANY=[@ANYBLOB="180000000000000000", @ANYRESHEX=r6, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 35 (id=2507): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x8, 0x80, 0x0, 0xfffffffffffffffe, 0x20a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x7fffffff, 0x1, 0x0, 0x0, 0xffff0000, 0x80, 0x0, 0xffffbffc, 0x0, 0xc5b}, 0x0, 0x9, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x9, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @exit, @exit, @generic={0x40, 0x0, 0x7, 0x2, 0x4400000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x10140) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00m\x00', @ANYBLOB="8b"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x4, &(0x7f0000000780)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x29, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000886ed92000000000", @ANYRES32, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100001a040000000000000000000000dacd487302000000"], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): 00][ T8601] netlink: 128 bytes leftover after parsing attributes in process `syz.3.916'. [ 233.035643][ T8601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 233.598387][ T8619] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 233.608476][ T8619] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 233.629939][ T8619] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 233.643397][ T8619] netlink: 'syz.3.927': attribute type 29 has an invalid length. [ 235.078138][ T8650] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 235.100035][ T8650] netlink: 'syz.2.937': attribute type 29 has an invalid length. [ 237.927413][ T8713] validate_nla: 7 callbacks suppressed [ 237.927430][ T8713] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 237.950225][ T8709] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 237.962869][ T8716] netlink: 'syz.0.957': attribute type 29 has an invalid length. [ 239.123950][ T8750] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 239.443008][ T8750] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 239.457524][ T8753] netlink: 'syz.1.973': attribute type 10 has an invalid length. [ 239.468548][ T8754] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 239.476864][ T8755] netlink: 'syz.2.972': attribute type 29 has an invalid length. [ 240.310888][ T8773] netlink: 'syz.3.981': attribute type 10 has an invalid length. [ 240.365712][ T8776] netlink: 'syz.3.981': attribute type 9 has an invalid length. [ 240.387367][ T8776] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.981'. [ 242.317775][ T8827] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1001'. [ 243.976872][ T5779] Bluetooth: hci2: ACL packet too small [ 243.982853][ T5779] Bluetooth: hci2: ACL packet too small [ 244.181320][ T8874] validate_nla: 10 callbacks suppressed [ 244.181340][ T8874] netlink: 'syz.1.1017': attribute type 10 has an invalid length. [ 244.246868][ T8878] netlink: 'syz.1.1017': attribute type 9 has an invalid length. [ 244.273526][ T8878] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1017'. [ 244.395044][ T8880] netlink: 'syz.3.1019': attribute type 10 has an invalid length. [ 246.120397][ T8912] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 246.525781][ T8925] netlink: 'syz.0.1035': attribute type 9 has an invalid length. [ 246.567160][ T8925] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1035'. [ 246.654216][ T8919] netlink: 'syz.0.1035': attribute type 10 has an invalid length. [ 247.052606][ T8931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 247.060701][ T8931] IPv6: NLM_F_CREATE should be set when creating new route [ 247.068366][ T8931] IPv6: NLM_F_CREATE should be set when creating new route [ 247.075836][ T8931] IPv6: NLM_F_CREATE should be set when creating new route [ 249.075861][ T8969] netlink: 'syz.3.1052': attribute type 10 has an invalid length. [ 249.124934][ T8969] netlink: 'syz.3.1052': attribute type 9 has an invalid length. [ 249.136524][ T8969] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1052'. [ 249.961293][ T8990] netlink: 'syz.0.1059': attribute type 21 has an invalid length. [ 250.740906][ T9005] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 250.773286][ T9007] netlink: 'syz.3.1064': attribute type 10 has an invalid length. [ 250.786678][ T9005] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 250.819682][ T9010] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 250.839529][ T9005] netlink: 'syz.1.1071': attribute type 29 has an invalid length. [ 251.033995][ T9013] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.041464][ T9013] IPv6: NLM_F_CREATE should be set when creating new route [ 251.049096][ T9013] IPv6: NLM_F_CREATE should be set when creating new route [ 251.056589][ T9013] IPv6: NLM_F_CREATE should be set when creating new route [ 251.422302][ T9023] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 252.011005][ T9033] netlink: 'syz.3.1074': attribute type 10 has an invalid length. [ 253.143968][ T9055] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 253.166995][ T9055] netlink: 'syz.3.1081': attribute type 29 has an invalid length. [ 255.939040][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.947242][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.020549][ T9115] validate_nla: 12 callbacks suppressed [ 256.020585][ T9115] netlink: 'syz.0.1102': attribute type 21 has an invalid length. [ 256.040374][ T9115] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1102'. [ 256.060387][ T9118] netlink: 'syz.0.1102': attribute type 21 has an invalid length. [ 256.085423][ T9118] netlink: 'syz.0.1102': attribute type 30 has an invalid length. [ 256.557271][ T9129] netlink: 'syz.0.1107': attribute type 10 has an invalid length. [ 256.758886][ T9138] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 256.785646][ T9138] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 256.823292][ T9141] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 256.834232][ T9138] netlink: 'syz.3.1110': attribute type 29 has an invalid length. [ 257.752077][ T9159] netlink: 'syz.2.1117': attribute type 10 has an invalid length. [ 258.981384][ T9178] netlink: 'syz.2.1121': attribute type 29 has an invalid length. [ 261.236900][ T9211] validate_nla: 4 callbacks suppressed [ 261.236934][ T9211] netlink: 'syz.2.1133': attribute type 29 has an invalid length. [ 261.264708][ T9212] netlink: 'syz.2.1133': attribute type 29 has an invalid length. [ 261.273950][ T9213] netlink: 'syz.2.1133': attribute type 29 has an invalid length. [ 262.857285][ T9249] netlink: 'syz.2.1144': attribute type 3 has an invalid length. [ 262.883597][ T9249] netlink: 'syz.2.1144': attribute type 16 has an invalid length. [ 262.891504][ T9249] netlink: 'syz.2.1144': attribute type 18 has an invalid length. [ 262.903337][ T9249] netlink: 'syz.2.1144': attribute type 20 has an invalid length. [ 262.911305][ T9249] netlink: 'syz.2.1144': attribute type 25 has an invalid length. [ 264.410652][ T9288] netlink: 'syz.1.1159': attribute type 29 has an invalid length. [ 264.419470][ T9288] netlink: 'syz.1.1159': attribute type 29 has an invalid length. [ 267.124164][ T9333] validate_nla: 2 callbacks suppressed [ 267.124204][ T9333] netlink: 'syz.1.1174': attribute type 29 has an invalid length. [ 267.141250][ T9333] netlink: 'syz.1.1174': attribute type 29 has an invalid length. [ 267.158051][ T9333] netlink: 'syz.1.1174': attribute type 29 has an invalid length. [ 267.186031][ T9333] netlink: 'syz.1.1174': attribute type 29 has an invalid length. [ 269.240430][ T9382] netlink: 'syz.1.1189': attribute type 29 has an invalid length. [ 269.269883][ T9382] netlink: 'syz.1.1189': attribute type 29 has an invalid length. [ 269.306274][ T9386] netlink: 'syz.1.1189': attribute type 29 has an invalid length. [ 269.351411][ T9382] netlink: 'syz.1.1189': attribute type 29 has an invalid length. [ 271.033118][ T9420] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 271.998796][ T9441] netlink: 'syz.2.1203': attribute type 29 has an invalid length. [ 272.834428][ T9464] validate_nla: 3 callbacks suppressed [ 272.834443][ T9464] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 276.146021][ T9545] netlink: 'syz.3.1241': attribute type 29 has an invalid length. [ 276.156510][ T9545] netlink: 'syz.3.1241': attribute type 29 has an invalid length. [ 276.325543][ T9546] netlink: 'syz.3.1241': attribute type 29 has an invalid length. [ 276.370981][ T9545] netlink: 'syz.3.1241': attribute type 29 has an invalid length. [ 276.798723][ T9564] netlink: 'syz.2.1249': attribute type 10 has an invalid length. [ 277.100462][ T9571] netlink: 'syz.0.1252': attribute type 29 has an invalid length. [ 277.118628][ T9571] netlink: 'syz.0.1252': attribute type 29 has an invalid length. [ 277.137110][ T9571] netlink: 'syz.0.1252': attribute type 29 has an invalid length. [ 277.147440][ T9571] netlink: 'syz.0.1252': attribute type 29 has an invalid length. [ 278.334988][ T9596] netlink: 'syz.1.1262': attribute type 10 has an invalid length. [ 279.693394][ T9629] netlink: 'syz.3.1273': attribute type 10 has an invalid length. [ 279.850196][ T9633] netlink: 'syz.2.1276': attribute type 10 has an invalid length. [ 279.873688][ T9633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1276'. [ 279.898487][ T9633] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 280.846383][ T9654] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 280.876710][ T9654] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 280.974038][ T9659] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 281.038490][ T9654] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 281.054323][ T9661] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 281.078310][ T9663] netlink: 'syz.0.1288': attribute type 10 has an invalid length. [ 281.094335][ T9654] netlink: 'syz.3.1284': attribute type 29 has an invalid length. [ 282.375813][ T9690] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1298'. [ 283.268230][ T9718] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1310'. [ 283.299495][ T9718] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 284.056574][ T9733] validate_nla: 13 callbacks suppressed [ 284.056591][ T9733] netlink: 'syz.0.1314': attribute type 10 has an invalid length. [ 284.120405][ T9733] netlink: 'syz.0.1314': attribute type 9 has an invalid length. [ 284.129102][ T9733] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1314'. [ 284.402572][ T9739] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 284.582923][ T9739] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 284.612658][ T9741] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 284.622336][ T9742] netlink: 'syz.2.1316': attribute type 29 has an invalid length. [ 286.495199][ T9774] netlink: 'syz.3.1327': attribute type 9 has an invalid length. [ 286.503015][ T9774] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1327'. [ 286.514673][ T9771] netlink: 'syz.3.1327': attribute type 10 has an invalid length. [ 287.299728][ T9797] netlink: 52711 bytes leftover after parsing attributes in process `syz.1.1335'. [ 287.750948][ T9803] netlink: 'syz.1.1338': attribute type 10 has an invalid length. [ 287.863035][ T9803] netlink: 'syz.1.1338': attribute type 9 has an invalid length. [ 287.896808][ T9811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 287.912668][ T9803] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1338'. [ 288.594321][ T9826] netlink: 52711 bytes leftover after parsing attributes in process `syz.2.1346'. [ 289.530646][ T9849] validate_nla: 1 callbacks suppressed [ 289.530743][ T9849] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 289.637159][ T9849] netlink: 'syz.0.1355': attribute type 9 has an invalid length. [ 289.656712][ T9849] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1355'. [ 289.840478][ T9856] netlink: 52711 bytes leftover after parsing attributes in process `syz.3.1357'. [ 290.241492][ T9861] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 290.401925][ T9861] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 290.463476][ T9862] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 290.484540][ T9863] netlink: 'syz.3.1358': attribute type 29 has an invalid length. [ 290.689318][ T9873] netlink: 'syz.1.1362': attribute type 10 has an invalid length. [ 291.769264][ T9892] netlink: 'syz.2.1368': attribute type 10 has an invalid length. [ 291.827885][ T9892] netlink: 'syz.2.1368': attribute type 9 has an invalid length. [ 291.847976][ T9892] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1368'. [ 292.102601][ T9905] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 292.328939][ T9908] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1370'. [ 293.267161][ T9930] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1380'. [ 293.846673][ T9940] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1383'. [ 294.404408][ T9952] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1389'. [ 295.206343][ T9973] validate_nla: 14 callbacks suppressed [ 295.206359][ T9973] netlink: 'syz.2.1395': attribute type 9 has an invalid length. [ 295.223213][ T9973] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1395'. [ 295.299187][ T9969] netlink: 'syz.2.1395': attribute type 10 has an invalid length. [ 295.915068][ T9985] netlink: 'syz.3.1400': attribute type 10 has an invalid length. [ 296.035553][ T9989] netlink: 'syz.3.1400': attribute type 9 has an invalid length. [ 296.064108][ T9989] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1400'. [ 298.904730][T10060] netlink: 'syz.2.1425': attribute type 10 has an invalid length. [ 299.019842][T10060] netlink: 'syz.2.1425': attribute type 9 has an invalid length. [ 299.029792][T10060] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1425'. [ 299.326344][T10066] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 299.579889][T10066] netlink: 'syz.0.1427': attribute type 9 has an invalid length. [ 299.599791][T10066] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1427'. [ 300.355673][T10092] FAULT_INJECTION: forcing a failure. [ 300.355673][T10092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 300.428978][T10092] CPU: 1 PID: 10092 Comm: syz.2.1436 Not tainted syzkaller #0 [ 300.436541][T10092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 300.446655][T10092] Call Trace: [ 300.449982][T10092] [ 300.452948][T10092] dump_stack_lvl+0x18c/0x250 [ 300.457663][T10092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.463886][T10092] ? show_regs_print_info+0x20/0x20 [ 300.469114][T10092] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.475311][T10092] should_fail_ex+0x39d/0x4d0 [ 300.480138][T10092] _copy_from_user+0x2f/0xe0 [ 300.484770][T10092] kstrtouint_from_user+0xde/0x170 [ 300.489930][T10092] ? kstrtol_from_user+0x190/0x190 [ 300.495092][T10092] proc_fail_nth_write+0x8f/0x250 [ 300.500150][T10092] ? proc_fail_nth_read+0x260/0x260 [ 300.505390][T10092] ? proc_fail_nth_read+0x260/0x260 [ 300.510620][T10092] vfs_write+0x296/0x990 [ 300.514910][T10092] ? file_end_write+0x250/0x250 [ 300.519803][T10092] ? __fget_files+0x28/0x4b0 [ 300.524422][T10092] ? __fget_files+0x28/0x4b0 [ 300.529038][T10092] ? __fget_files+0x43d/0x4b0 [ 300.533759][T10092] ? __fdget_pos+0x2a3/0x330 [ 300.538377][T10092] ? ksys_write+0x75/0x260 [ 300.542824][T10092] ksys_write+0x150/0x260 [ 300.547194][T10092] ? __ia32_sys_read+0x90/0x90 [ 300.551998][T10092] ? lockdep_hardirqs_on+0x98/0x150 [ 300.557226][T10092] do_syscall_64+0x55/0xb0 [ 300.561755][T10092] ? clear_bhb_loop+0x40/0x90 [ 300.566548][T10092] ? clear_bhb_loop+0x40/0x90 [ 300.571260][T10092] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 300.577186][T10092] RIP: 0033:0x7fb4d575d68e [ 300.581628][T10092] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 300.601266][T10092] RSP: 002b:00007fb4d65b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 300.609708][T10092] RAX: ffffffffffffffda RBX: 00007fb4d65b26c0 RCX: 00007fb4d575d68e [ 300.617700][T10092] RDX: 0000000000000001 RSI: 00007fb4d65b20a0 RDI: 0000000000000007 [ 300.625690][T10092] RBP: 00007fb4d65b2090 R08: 0000000000000000 R09: 0000000000000000 [ 300.633740][T10092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.641735][T10092] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 300.649918][T10092] [ 301.573232][T10113] netlink: 'syz.1.1444': attribute type 10 has an invalid length. [ 301.699498][T10113] netlink: 'syz.1.1444': attribute type 9 has an invalid length. [ 301.743797][T10113] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1444'. [ 303.283633][T10153] netlink: 'syz.3.1460': attribute type 10 has an invalid length. [ 303.332669][T10153] netlink: 'syz.3.1460': attribute type 9 has an invalid length. [ 303.373358][T10153] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1460'. [ 305.016648][T10184] netlink: 'syz.2.1472': attribute type 10 has an invalid length. [ 305.071724][T10184] netlink: 'syz.2.1472': attribute type 9 has an invalid length. [ 305.080371][T10184] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1472'. [ 305.587083][T10190] netlink: 'syz.0.1475': attribute type 10 has an invalid length. [ 305.807613][T10190] netlink: 'syz.0.1475': attribute type 9 has an invalid length. [ 307.102820][T10229] netlink: 'syz.1.1487': attribute type 10 has an invalid length. [ 307.227343][T10229] netlink: 'syz.1.1487': attribute type 9 has an invalid length. [ 307.263570][T10229] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1487'. [ 307.777682][T10241] netlink: 'syz.3.1493': attribute type 10 has an invalid length. [ 307.878892][T10247] netlink: 'syz.0.1495': attribute type 9 has an invalid length. [ 307.887331][T10247] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1495'. [ 307.897068][T10243] netlink: 'syz.0.1495': attribute type 10 has an invalid length. [ 308.028261][T10241] netlink: 'syz.3.1493': attribute type 9 has an invalid length. [ 308.038057][T10241] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1493'. [ 309.175333][T10279] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 309.424463][T10287] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 309.446338][T10286] netlink: 'syz.1.1508': attribute type 10 has an invalid length. [ 309.517139][T10286] netlink: 'syz.1.1508': attribute type 9 has an invalid length. [ 309.526394][T10286] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1508'. [ 310.012015][T10283] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1507'. [ 310.308883][T10291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.964640][T10319] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1519'. [ 311.474976][T10328] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1521'. [ 312.434821][T10334] validate_nla: 4 callbacks suppressed [ 312.434902][T10334] netlink: 'syz.3.1522': attribute type 10 has an invalid length. [ 312.556272][T10334] netlink: 'syz.3.1522': attribute type 9 has an invalid length. [ 312.571195][T10334] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1522'. [ 313.154244][T10351] netlink: 'syz.1.1527': attribute type 10 has an invalid length. [ 313.442486][T10355] netlink: 'syz.3.1529': attribute type 10 has an invalid length. [ 313.515627][T10355] netlink: 'syz.3.1529': attribute type 9 has an invalid length. [ 313.566911][T10355] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1529'. [ 314.061107][T10366] netlink: 'syz.2.1532': attribute type 9 has an invalid length. [ 314.083421][T10366] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1532'. [ 314.475899][T10379] netlink: 'syz.0.1537': attribute type 10 has an invalid length. [ 314.678665][T10381] netlink: 'syz.1.1544': attribute type 9 has an invalid length. [ 314.688307][T10381] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1544'. [ 315.494696][T10389] netlink: 'syz.3.1548': attribute type 10 has an invalid length. [ 315.508286][T10384] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 315.626458][T10384] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1538'. [ 316.054534][T10389] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1548'. [ 316.450332][T10402] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1542'. [ 316.959217][T10408] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1546'. [ 317.363913][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370519][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.932666][T10417] validate_nla: 4 callbacks suppressed [ 317.939188][T10417] netlink: 'syz.1.1550': attribute type 21 has an invalid length. [ 318.104414][T10417] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1550'. [ 318.817431][T10436] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 319.018873][T10438] netlink: 'syz.1.1556': attribute type 10 has an invalid length. [ 319.078707][T10438] netlink: 'syz.1.1556': attribute type 9 has an invalid length. [ 319.087874][T10438] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1556'. [ 320.457486][T10459] netlink: 'syz.3.1562': attribute type 3 has an invalid length. [ 320.474314][T10459] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1562'. [ 320.499441][T10453] netlink: 16182 bytes leftover after parsing attributes in process `syz.3.1562'. [ 320.513637][T10460] netlink: 'syz.3.1562': attribute type 4 has an invalid length. [ 320.872223][T10469] netlink: 'syz.3.1566': attribute type 10 has an invalid length. [ 321.294383][T10476] netlink: 'syz.0.1569': attribute type 10 has an invalid length. [ 321.391054][T10476] netlink: 'syz.0.1569': attribute type 9 has an invalid length. [ 321.410037][T10476] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1569'. [ 321.745078][T10481] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1572'. [ 322.324221][T10490] netlink: 'syz.0.1582': attribute type 10 has an invalid length. [ 322.389200][T10490] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1582'. [ 324.090691][T10520] validate_nla: 2 callbacks suppressed [ 324.090771][T10520] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 324.246218][T10520] netlink: 'syz.2.1583': attribute type 9 has an invalid length. [ 324.268309][T10520] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1583'. [ 324.641500][T10540] netlink: 'syz.0.1590': attribute type 29 has an invalid length. [ 324.712830][T10536] netlink: 'syz.1.1588': attribute type 10 has an invalid length. [ 324.724351][T10540] netlink: 'syz.0.1590': attribute type 29 has an invalid length. [ 324.755402][T10542] netlink: 'syz.0.1590': attribute type 29 has an invalid length. [ 324.864162][T10540] netlink: 'syz.0.1590': attribute type 29 has an invalid length. [ 324.872660][T10541] netlink: 'syz.1.1588': attribute type 9 has an invalid length. [ 324.893147][T10541] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1588'. [ 324.903307][T10540] netlink: 'syz.0.1590': attribute type 29 has an invalid length. [ 325.776730][T10556] FAULT_INJECTION: forcing a failure. [ 325.776730][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 325.966139][T10556] CPU: 0 PID: 10556 Comm: syz.3.1597 Not tainted syzkaller #0 [ 325.973688][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 325.983881][T10556] Call Trace: [ 325.987203][T10556] [ 325.990176][T10556] dump_stack_lvl+0x18c/0x250 [ 325.994907][T10556] ? __sctp_connect+0x5b7/0xd80 [ 325.999809][T10556] ? sctp_setsockopt+0x6d8/0x11e0 [ 326.004887][T10556] ? show_regs_print_info+0x20/0x20 [ 326.010138][T10556] ? load_image+0x420/0x420 [ 326.014717][T10556] should_fail_ex+0x39d/0x4d0 [ 326.019460][T10556] should_failslab+0x9/0x20 [ 326.024018][T10556] slab_pre_alloc_hook+0x59/0x310 [ 326.029100][T10556] ? sctp_add_bind_addr+0x8c/0x360 [ 326.034264][T10556] __kmem_cache_alloc_node+0x53/0x250 [ 326.039700][T10556] ? sctp_add_bind_addr+0x8c/0x360 [ 326.044860][T10556] kmalloc_trace+0x2a/0xe0 [ 326.049335][T10556] sctp_add_bind_addr+0x8c/0x360 [ 326.054350][T10556] sctp_copy_local_addr_list+0x315/0x4f0 [ 326.060038][T10556] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 326.065805][T10556] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 326.071932][T10556] ? sctp_v4_is_any+0x35/0x60 [ 326.076664][T10556] ? sctp_copy_one_addr+0x8c/0x350 [ 326.081832][T10556] sctp_bind_addr_copy+0xb3/0x3c0 [ 326.086912][T10556] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 326.093287][T10556] sctp_connect_new_asoc+0x2f9/0x6a0 [ 326.098717][T10556] ? __sctp_connect+0xd80/0xd80 [ 326.103837][T10556] ? mark_lock+0x94/0x320 [ 326.108215][T10556] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 326.114214][T10556] __sctp_connect+0x5b7/0xd80 [ 326.119038][T10556] ? sctp_send_asconf+0x170/0x170 [ 326.124124][T10556] ? __local_bh_enable_ip+0x13a/0x1c0 [ 326.129534][T10556] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 326.135110][T10556] ? security_sctp_bind_connect+0x89/0xb0 [ 326.140862][T10556] sctp_setsockopt_connectx+0x104/0x1a0 [ 326.146471][T10556] sctp_setsockopt+0x6d8/0x11e0 [ 326.151347][T10556] ? sock_common_recvmsg+0x190/0x190 [ 326.156665][T10556] do_sock_setsockopt+0x175/0x1a0 [ 326.161712][T10556] ? __fdget+0x180/0x210 [ 326.165989][T10556] __x64_sys_setsockopt+0x182/0x200 [ 326.171217][T10556] do_syscall_64+0x55/0xb0 [ 326.175677][T10556] ? clear_bhb_loop+0x40/0x90 [ 326.180403][T10556] ? clear_bhb_loop+0x40/0x90 [ 326.185141][T10556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 326.191079][T10556] RIP: 0033:0x7f4e0e19ce59 [ 326.195518][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.215151][T10556] RSP: 002b:00007f4e0efb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 326.223594][T10556] RAX: ffffffffffffffda RBX: 00007f4e0e415fa0 RCX: 00007f4e0e19ce59 [ 326.231676][T10556] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 326.239679][T10556] RBP: 00007f4e0efb4090 R08: 0000000000000010 R09: 0000000000000000 [ 326.247675][T10556] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.255666][T10556] R13: 00007f4e0e416038 R14: 00007f4e0e415fa0 R15: 00007ffc3cc9de28 [ 326.263675][T10556] [ 326.915950][T10573] netlink: 16182 bytes leftover after parsing attributes in process `syz.0.1601'. [ 327.003372][T10573] netlink: 'syz.0.1601': attribute type 3 has an invalid length. [ 327.011891][T10573] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1601'. [ 327.308596][T10580] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1604'. [ 328.571439][T10605] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1614'. [ 328.703157][T10610] FAULT_INJECTION: forcing a failure. [ 328.703157][T10610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.732512][T10610] CPU: 0 PID: 10610 Comm: syz.2.1617 Not tainted syzkaller #0 [ 328.740059][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.750154][T10610] Call Trace: [ 328.753480][T10610] [ 328.756448][T10610] dump_stack_lvl+0x18c/0x250 [ 328.761182][T10610] ? show_regs_print_info+0x20/0x20 [ 328.766427][T10610] ? load_image+0x420/0x420 [ 328.770988][T10610] ? __might_fault+0xaa/0x120 [ 328.775706][T10610] ? __lock_acquire+0x7d40/0x7d40 [ 328.780773][T10610] ? __lock_acquire+0x1273/0x7d40 [ 328.785856][T10610] should_fail_ex+0x39d/0x4d0 [ 328.790595][T10610] _copy_from_user+0x2f/0xe0 [ 328.795237][T10610] do_ipv6_setsockopt+0x3a2/0x3e20 [ 328.800404][T10610] ? sk_dst_reset+0xa0/0xa0 [ 328.804955][T10610] ? __lock_acquire+0x7d40/0x7d40 [ 328.810033][T10610] ? mark_lock+0x94/0x320 [ 328.814414][T10610] ? __lock_acquire+0x1347/0x7d40 [ 328.819528][T10610] ? mark_lock+0x94/0x320 [ 328.823905][T10610] ? __lock_acquire+0x1273/0x7d40 [ 328.828977][T10610] ? __rwlock_init+0x150/0x150 [ 328.833806][T10610] ? do_raw_spin_unlock+0x121/0x230 [ 328.839061][T10610] ? aa_label_sk_perm+0x463/0x5c0 [ 328.844134][T10610] ? aa_sk_perm+0x970/0x970 [ 328.848699][T10610] ? __might_sleep+0xe0/0xe0 [ 328.853341][T10610] ? perf_trace_preemptirq_template+0xac/0x330 [ 328.859563][T10610] ? ktime_get+0x7f/0x280 [ 328.863941][T10610] ? perf_trace_preemptirq_template+0xac/0x330 [ 328.870152][T10610] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 328.876188][T10610] ipv6_setsockopt+0x59/0x190 [ 328.880921][T10610] dccp_setsockopt+0x166/0x830 [ 328.885735][T10610] ? lockdep_hardirqs_on+0x98/0x150 [ 328.891339][T10610] ? dccp_ioctl+0x200/0x200 [ 328.895888][T10610] ? sock_common_recvmsg+0x190/0x190 [ 328.901232][T10610] ? dccp_ioctl+0x200/0x200 [ 328.905779][T10610] ? sock_common_recvmsg+0x190/0x190 [ 328.911132][T10610] do_sock_setsockopt+0x175/0x1a0 [ 328.916205][T10610] ? __fdget+0x180/0x210 [ 328.920500][T10610] __x64_sys_setsockopt+0x182/0x200 [ 328.925747][T10610] do_syscall_64+0x55/0xb0 [ 328.930205][T10610] ? clear_bhb_loop+0x40/0x90 [ 328.934933][T10610] ? clear_bhb_loop+0x40/0x90 [ 328.939747][T10610] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 328.945693][T10610] RIP: 0033:0x7fb4d579ce59 [ 328.950152][T10610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.969904][T10610] RSP: 002b:00007fb4d65b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 328.978383][T10610] RAX: ffffffffffffffda RBX: 00007fb4d5a15fa0 RCX: 00007fb4d579ce59 [ 328.986400][T10610] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000007 [ 328.994416][T10610] RBP: 00007fb4d65b2090 R08: 0000000000000120 R09: 0000000000000000 [ 329.002429][T10610] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 329.010438][T10610] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 329.018557][T10610] [ 329.051730][T10616] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1616'. [ 329.131980][T10611] netlink: 16182 bytes leftover after parsing attributes in process `syz.1.1616'. [ 329.141542][T10617] validate_nla: 8 callbacks suppressed [ 329.141556][T10617] netlink: 'syz.1.1616': attribute type 4 has an invalid length. [ 329.508673][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1621'. [ 329.517970][T10624] FAULT_INJECTION: forcing a failure. [ 329.517970][T10624] name failslab, interval 1, probability 0, space 0, times 0 [ 329.531728][T10624] CPU: 0 PID: 10624 Comm: syz.0.1621 Not tainted syzkaller #0 [ 329.539329][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.549408][T10624] Call Trace: [ 329.552711][T10624] [ 329.555666][T10624] dump_stack_lvl+0x18c/0x250 [ 329.560378][T10624] ? show_regs_print_info+0x20/0x20 [ 329.565609][T10624] ? load_image+0x420/0x420 [ 329.570145][T10624] ? __might_sleep+0xe0/0xe0 [ 329.574766][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 329.579822][T10624] should_fail_ex+0x39d/0x4d0 [ 329.584541][T10624] should_failslab+0x9/0x20 [ 329.589075][T10624] slab_pre_alloc_hook+0x59/0x310 [ 329.594133][T10624] ? fib_nl2rule+0x334/0x1b70 [ 329.598840][T10624] ? fib_nl2rule+0x334/0x1b70 [ 329.603642][T10624] __kmem_cache_alloc_node+0x53/0x250 [ 329.609049][T10624] ? fib_nl2rule+0x334/0x1b70 [ 329.613759][T10624] __kmalloc+0xa4/0x230 [ 329.617944][T10624] fib_nl2rule+0x334/0x1b70 [ 329.622479][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 329.627538][T10624] ? fib_nl_newrule+0x1dc0/0x1dc0 [ 329.632615][T10624] ? __nla_parse+0x40/0x50 [ 329.637072][T10624] fib_nl_newrule+0x384/0x1dc0 [ 329.642675][T10624] ? __mutex_trylock_common+0x159/0x260 [ 329.648258][T10624] ? fib_rules_seq_read+0xf0/0xf0 [ 329.653323][T10624] ? rcu_is_watching+0x15/0xb0 [ 329.658125][T10624] ? trace_contention_end+0x39/0xe0 [ 329.663379][T10624] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 329.668539][T10624] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 329.673675][T10624] ? fib_rules_seq_read+0xf0/0xf0 [ 329.678728][T10624] rtnetlink_rcv_msg+0x869/0xfa0 [ 329.683703][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 329.688937][T10624] ? rtnetlink_bind+0x80/0x80 [ 329.693643][T10624] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 329.699660][T10624] ? lock_chain_count+0x20/0x20 [ 329.704536][T10624] ? __local_bh_enable_ip+0x13a/0x1c0 [ 329.709928][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 329.715151][T10624] ? __local_bh_enable_ip+0x13a/0x1c0 [ 329.720544][T10624] ? _local_bh_enable+0xa0/0xa0 [ 329.725417][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 329.730559][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 329.735697][T10624] ? __dev_queue_xmit+0x1b2c/0x3660 [ 329.740930][T10624] ? __dev_queue_xmit+0x265/0x3660 [ 329.746073][T10624] ? ref_tracker_free+0x690/0x840 [ 329.751128][T10624] netlink_rcv_skb+0x241/0x4d0 [ 329.755929][T10624] ? rtnetlink_bind+0x80/0x80 [ 329.760632][T10624] ? netlink_ack+0x1180/0x1180 [ 329.765438][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 329.770492][T10624] ? netlink_deliver_tap+0x2e/0x1b0 [ 329.775815][T10624] netlink_unicast+0x751/0x8d0 [ 329.780629][T10624] netlink_sendmsg+0x8d0/0xbf0 [ 329.785429][T10624] ? netlink_getsockopt+0x590/0x590 [ 329.790661][T10624] ? aa_sock_msg_perm+0x94/0x150 [ 329.795628][T10624] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 329.800937][T10624] ? security_socket_sendmsg+0x80/0xa0 [ 329.806423][T10624] ? netlink_getsockopt+0x590/0x590 [ 329.811653][T10624] ____sys_sendmsg+0x5ba/0x960 [ 329.816446][T10624] ? __asan_memset+0x22/0x40 [ 329.821068][T10624] ? __sys_sendmsg_sock+0x30/0x30 [ 329.826116][T10624] ? __import_iovec+0x5f2/0x850 [ 329.830993][T10624] ? import_iovec+0x73/0xa0 [ 329.835528][T10624] ___sys_sendmsg+0x2a6/0x360 [ 329.840227][T10624] ? get_pid_task+0x20/0x1e0 [ 329.844858][T10624] ? __sys_sendmsg+0x2a0/0x2a0 [ 329.849654][T10624] ? __lock_acquire+0x7d40/0x7d40 [ 329.854727][T10624] __se_sys_sendmsg+0x1c2/0x2b0 [ 329.859601][T10624] ? __x64_sys_sendmsg+0x80/0x80 [ 329.864576][T10624] ? lockdep_hardirqs_on+0x98/0x150 [ 329.869806][T10624] do_syscall_64+0x55/0xb0 [ 329.874246][T10624] ? clear_bhb_loop+0x40/0x90 [ 329.878946][T10624] ? clear_bhb_loop+0x40/0x90 [ 329.883743][T10624] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.889663][T10624] RIP: 0033:0x7faf5ab9ce59 [ 329.894103][T10624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.913741][T10624] RSP: 002b:00007faf5ba26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.922177][T10624] RAX: ffffffffffffffda RBX: 00007faf5ae15fa0 RCX: 00007faf5ab9ce59 [ 329.930165][T10624] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 329.938154][T10624] RBP: 00007faf5ba26090 R08: 0000000000000000 R09: 0000000000000000 [ 329.946144][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.954132][T10624] R13: 00007faf5ae16038 R14: 00007faf5ae15fa0 R15: 00007ffc44fda858 [ 329.962140][T10624] [ 329.974291][T10619] netlink: 'syz.2.1619': attribute type 10 has an invalid length. [ 330.042250][T10619] netlink: 'syz.2.1619': attribute type 9 has an invalid length. [ 330.070615][T10619] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1619'. [ 330.095179][T10621] FAULT_INJECTION: forcing a failure. [ 330.095179][T10621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.123726][T10621] CPU: 1 PID: 10621 Comm: syz.3.1620 Not tainted syzkaller #0 [ 330.131283][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.141407][T10621] Call Trace: [ 330.144747][T10621] [ 330.147749][T10621] dump_stack_lvl+0x18c/0x250 [ 330.152513][T10621] ? show_regs_print_info+0x20/0x20 [ 330.157793][T10621] ? load_image+0x420/0x420 [ 330.162397][T10621] ? __lock_acquire+0x7d40/0x7d40 [ 330.167512][T10621] ? snprintf+0xe9/0x140 [ 330.171844][T10621] should_fail_ex+0x39d/0x4d0 [ 330.176635][T10621] _copy_to_user+0x2f/0xa0 [ 330.181143][T10621] simple_read_from_buffer+0xe7/0x150 [ 330.186635][T10621] proc_fail_nth_read+0x1e8/0x260 [ 330.191754][T10621] ? proc_fault_inject_write+0x360/0x360 [ 330.197489][T10621] ? fsnotify_perm+0x271/0x5e0 [ 330.202333][T10621] ? proc_fault_inject_write+0x360/0x360 [ 330.208029][T10621] vfs_read+0x28b/0x970 [ 330.212310][T10621] ? kernel_read+0x1e0/0x1e0 [ 330.216992][T10621] ? __fget_files+0x28/0x4b0 [ 330.221659][T10621] ? __fget_files+0x28/0x4b0 [ 330.226334][T10621] ? __fget_files+0x43d/0x4b0 [ 330.231141][T10621] ? __fdget_pos+0x2a3/0x330 [ 330.235810][T10621] ? ksys_read+0x75/0x260 [ 330.240238][T10621] ksys_read+0x150/0x260 [ 330.244590][T10621] ? vfs_write+0x990/0x990 [ 330.249128][T10621] ? lockdep_hardirqs_on+0x98/0x150 [ 330.254447][T10621] do_syscall_64+0x55/0xb0 [ 330.258945][T10621] ? clear_bhb_loop+0x40/0x90 [ 330.263704][T10621] ? clear_bhb_loop+0x40/0x90 [ 330.268480][T10621] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.274467][T10621] RIP: 0033:0x7f4e0e15d68e [ 330.278968][T10621] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 330.298698][T10621] RSP: 002b:00007f4e0efb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 330.307218][T10621] RAX: ffffffffffffffda RBX: 00007f4e0efb46c0 RCX: 00007f4e0e15d68e [ 330.315275][T10621] RDX: 000000000000000f RSI: 00007f4e0efb40a0 RDI: 0000000000000008 [ 330.323323][T10621] RBP: 00007f4e0efb4090 R08: 0000000000000000 R09: 0000000000000000 [ 330.331371][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.339417][T10621] R13: 00007f4e0e416038 R14: 00007f4e0e415fa0 R15: 00007ffc3cc9de28 [ 330.347523][T10621] [ 330.797495][T10638] netlink: 'syz.1.1626': attribute type 10 has an invalid length. [ 331.176650][T10651] netlink: 'syz.1.1632': attribute type 4 has an invalid length. [ 331.185310][T10651] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1632'. [ 331.444363][T10654] netlink: 'syz.1.1633': attribute type 10 has an invalid length. [ 331.540888][T10654] netlink: 'syz.1.1633': attribute type 9 has an invalid length. [ 331.552093][T10654] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1633'. [ 332.391824][T10663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.414801][T10666] netlink: 'syz.3.1637': attribute type 10 has an invalid length. [ 333.298666][T10678] syzkaller0: entered promiscuous mode [ 333.304516][T10678] syzkaller0: entered allmulticast mode [ 335.435406][T10694] netlink: 'syz.1.1646': attribute type 10 has an invalid length. [ 335.574476][T10698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 336.034770][T10705] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1651'. [ 336.129575][T10711] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 336.302606][T10716] netlink: 'syz.1.1653': attribute type 17 has an invalid length. [ 336.371144][T10716] netlink: 'syz.1.1653': attribute type 16 has an invalid length. [ 336.413630][T10716] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1653'. [ 337.018014][T10726] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 338.672119][T10766] netlink: 'syz.1.1669': attribute type 10 has an invalid length. [ 338.720333][T10764] netlink: 'syz.0.1668': attribute type 10 has an invalid length. [ 338.845079][T10764] netlink: 'syz.0.1668': attribute type 9 has an invalid length. [ 338.966278][T10764] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1668'. [ 339.111955][T10773] netlink: 'syz.2.1671': attribute type 3 has an invalid length. [ 339.136928][T10773] netlink: 'syz.2.1671': attribute type 16 has an invalid length. [ 339.161945][T10773] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1671'. [ 341.511250][T10815] validate_nla: 1 callbacks suppressed [ 341.511269][T10815] netlink: 'syz.0.1684': attribute type 10 has an invalid length. [ 341.790981][T10822] netlink: 'syz.0.1684': attribute type 9 has an invalid length. [ 341.791017][T10822] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1684'. [ 342.159932][T10831] netlink: 'syz.2.1689': attribute type 10 has an invalid length. [ 343.176185][T10847] netlink: 'syz.0.1692': attribute type 17 has an invalid length. [ 343.185873][T10847] netlink: 'syz.0.1692': attribute type 16 has an invalid length. [ 343.194582][T10847] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1692'. [ 344.159083][T10878] netlink: 'syz.1.1700': attribute type 10 has an invalid length. [ 344.322816][T10879] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 344.487433][T10879] netlink: 'syz.3.1702': attribute type 9 has an invalid length. [ 344.506163][T10879] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1702'. [ 345.741464][T10910] netlink: 'syz.1.1712': attribute type 10 has an invalid length. [ 346.460198][T10924] netlink: 'syz.1.1717': attribute type 10 has an invalid length. [ 346.540726][T10924] netlink: 'syz.1.1717': attribute type 9 has an invalid length. [ 346.548731][T10924] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1717'. [ 346.588781][T10927] FAULT_INJECTION: forcing a failure. [ 346.588781][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 346.622752][T10927] CPU: 0 PID: 10927 Comm: syz.2.1718 Not tainted syzkaller #0 [ 346.630297][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.640402][T10927] Call Trace: [ 346.643720][T10927] [ 346.646697][T10927] dump_stack_lvl+0x18c/0x250 [ 346.651427][T10927] ? show_regs_print_info+0x20/0x20 [ 346.656675][T10927] ? load_image+0x420/0x420 [ 346.661233][T10927] ? ____sys_recvmsg+0x2ce/0x5e0 [ 346.666214][T10927] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.672329][T10927] ? verify_lock_unused+0x140/0x140 [ 346.677583][T10927] should_fail_ex+0x39d/0x4d0 [ 346.682415][T10927] should_failslab+0x9/0x20 [ 346.686972][T10927] slab_pre_alloc_hook+0x59/0x310 [ 346.692058][T10927] kmem_cache_alloc+0x5a/0x2d0 [ 346.696962][T10927] ? skb_clone+0x1eb/0x370 [ 346.701426][T10927] skb_clone+0x1eb/0x370 [ 346.705717][T10927] __netlink_deliver_tap+0x41c/0x830 [ 346.711071][T10927] ? netlink_deliver_tap+0x2e/0x1b0 [ 346.716326][T10927] netlink_deliver_tap+0x19c/0x1b0 [ 346.721493][T10927] __netlink_sendskb+0x4b/0x90 [ 346.726313][T10927] netlink_dump+0xa75/0xe50 [ 346.730879][T10927] ? netlink_lookup+0x200/0x200 [ 346.735801][T10927] ? slab_free_freelist_hook+0x130/0x1a0 [ 346.741483][T10927] ? netlink_recvmsg+0x5e7/0xe60 [ 346.746470][T10927] ? kmem_cache_free+0xf8/0x270 [ 346.751381][T10927] netlink_recvmsg+0x693/0xe60 [ 346.756208][T10927] ? netlink_sendmsg+0xbf0/0xbf0 [ 346.761216][T10927] ? aa_af_perm+0x330/0x330 [ 346.765763][T10927] ? __lock_acquire+0x1273/0x7d40 [ 346.770842][T10927] ? verify_lock_unused+0x140/0x140 [ 346.776101][T10927] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 346.781436][T10927] ? security_socket_recvmsg+0x89/0xb0 [ 346.786939][T10927] ? netlink_sendmsg+0xbf0/0xbf0 [ 346.791934][T10927] ____sys_recvmsg+0x2ce/0x5e0 [ 346.796757][T10927] ? __sys_recvmsg_sock+0x50/0x50 [ 346.801842][T10927] ? import_iovec+0x73/0xa0 [ 346.806393][T10927] ___sys_recvmsg+0x216/0x590 [ 346.811124][T10927] ? __sys_recvmsg+0x2a0/0x2a0 [ 346.815941][T10927] ? ksys_write+0x1c4/0x260 [ 346.820509][T10927] ? __fget_files+0x43d/0x4b0 [ 346.825259][T10927] __x64_sys_recvmsg+0x20c/0x2e0 [ 346.830245][T10927] ? ___sys_recvmsg+0x590/0x590 [ 346.835159][T10927] ? lockdep_hardirqs_on+0x98/0x150 [ 346.840412][T10927] do_syscall_64+0x55/0xb0 [ 346.844966][T10927] ? clear_bhb_loop+0x40/0x90 [ 346.849709][T10927] ? clear_bhb_loop+0x40/0x90 [ 346.854436][T10927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 346.860376][T10927] RIP: 0033:0x7fb4d579ce59 [ 346.864838][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.884489][T10927] RSP: 002b:00007fb4d65b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 346.892953][T10927] RAX: ffffffffffffffda RBX: 00007fb4d5a15fa0 RCX: 00007fb4d579ce59 [ 346.900967][T10927] RDX: 0000000040002000 RSI: 0000200000000440 RDI: 0000000000000003 [ 346.908989][T10927] RBP: 00007fb4d65b2090 R08: 0000000000000000 R09: 0000000000000000 [ 346.917000][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.925012][T10927] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 346.933041][T10927] [ 347.513309][T10943] netlink: 'syz.2.1722': attribute type 10 has an invalid length. [ 347.946933][T10956] netlink: 'syz.2.1729': attribute type 10 has an invalid length. [ 348.060884][T10956] netlink: 'syz.2.1729': attribute type 9 has an invalid length. [ 348.233273][T10956] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1729'. [ 349.752098][T10984] netlink: 'syz.2.1735': attribute type 10 has an invalid length. [ 349.975459][T10991] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 350.003708][T10991] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 350.019426][T10992] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 350.088518][T10991] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 350.198629][T10992] netlink: 'syz.3.1737': attribute type 29 has an invalid length. [ 350.968186][T11008] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1743'. [ 351.776131][T11034] validate_nla: 3 callbacks suppressed [ 351.776151][T11034] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 352.027959][T11034] netlink: 'syz.2.1751': attribute type 9 has an invalid length. [ 352.135226][T11041] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 352.295815][T11045] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 352.327142][T11045] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 352.336635][T11050] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 352.348386][T11045] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 352.416953][T11045] netlink: 'syz.2.1755': attribute type 29 has an invalid length. [ 352.729470][T11062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.997022][T11067] netlink: 'syz.2.1763': attribute type 9 has an invalid length. [ 353.114119][T11066] netlink: 'syz.2.1763': attribute type 10 has an invalid length. [ 353.727340][T11088] FAULT_INJECTION: forcing a failure. [ 353.727340][T11088] name failslab, interval 1, probability 0, space 0, times 0 [ 353.741323][T11088] CPU: 0 PID: 11088 Comm: syz.2.1770 Not tainted syzkaller #0 [ 353.748855][T11088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 353.758965][T11088] Call Trace: [ 353.762301][T11088] [ 353.765274][T11088] dump_stack_lvl+0x18c/0x250 [ 353.770024][T11088] ? show_regs_print_info+0x20/0x20 [ 353.775267][T11088] ? load_image+0x420/0x420 [ 353.779830][T11088] ? __might_sleep+0xe0/0xe0 [ 353.784570][T11088] ? __lock_acquire+0x7d40/0x7d40 [ 353.789648][T11088] ? get_random_u64+0x170/0x8d0 [ 353.794566][T11088] should_fail_ex+0x39d/0x4d0 [ 353.799311][T11088] should_failslab+0x9/0x20 [ 353.803873][T11088] slab_pre_alloc_hook+0x59/0x310 [ 353.808964][T11088] kmem_cache_alloc+0x5a/0x2d0 [ 353.813779][T11088] ? prepare_creds+0x30/0x5d0 [ 353.818523][T11088] prepare_creds+0x30/0x5d0 [ 353.823085][T11088] copy_creds+0x105/0xa70 [ 353.827485][T11088] copy_process+0x953/0x3dc0 [ 353.832145][T11088] ? get_pid_task+0x20/0x1e0 [ 353.836793][T11088] ? __pidfd_prepare+0x140/0x140 [ 353.841788][T11088] kernel_clone+0x24b/0x8a0 [ 353.846343][T11088] ? create_io_thread+0x190/0x190 [ 353.851438][T11088] __x64_sys_clone+0x1b7/0x230 [ 353.856264][T11088] ? __ia32_sys_vfork+0x140/0x140 [ 353.861355][T11088] ? lock_chain_count+0x20/0x20 [ 353.866533][T11088] ? lockdep_hardirqs_on+0x98/0x150 [ 353.871790][T11088] do_syscall_64+0x55/0xb0 [ 353.876249][T11088] ? clear_bhb_loop+0x40/0x90 [ 353.880976][T11088] ? clear_bhb_loop+0x40/0x90 [ 353.885700][T11088] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 353.891650][T11088] RIP: 0033:0x7fb4d579ce59 [ 353.896111][T11088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.915766][T11088] RSP: 002b:00007fb4d65b1fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 353.924251][T11088] RAX: ffffffffffffffda RBX: 00007fb4d5a15fa0 RCX: 00007fb4d579ce59 [ 353.932275][T11088] RDX: 0000000000000000 RSI: 00000000fffffeb0 RDI: 0000000002000400 [ 353.940291][T11088] RBP: 00007fb4d65b2090 R08: 0000000000000000 R09: 0000000000000000 [ 353.948306][T11088] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 353.956320][T11088] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 353.964361][T11088] [ 354.247126][T11098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.408733][T11096] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1773'. [ 354.505250][T11105] lo: entered allmulticast mode [ 354.570312][T11105] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1774'. [ 354.580766][T11105] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1774'. [ 354.803148][T11106] lo: entered promiscuous mode [ 354.808159][T11106] lo: left allmulticast mode [ 355.770115][T11124] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1780'. [ 356.178017][T11142] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 356.322033][T11146] lo: entered allmulticast mode [ 356.355367][T11146] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1786'. [ 356.366073][T11146] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1786'. [ 356.384736][T11146] lo: entered promiscuous mode [ 356.390358][T11146] lo: left allmulticast mode [ 356.668954][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1788'. [ 356.691387][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1788'. [ 356.721543][T11154] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1788'. [ 357.233918][T11160] validate_nla: 7 callbacks suppressed [ 357.233956][T11160] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 357.355419][T11160] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 357.392450][T11163] netlink: 'syz.1.1793': attribute type 29 has an invalid length. [ 357.985164][T11178] lo: entered allmulticast mode [ 358.059311][T11178] netlink: 'syz.2.1798': attribute type 1 has an invalid length. [ 358.079045][T11178] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1798'. [ 358.142344][T11178] lo: entered promiscuous mode [ 358.159502][T11178] lo: left allmulticast mode [ 358.246849][T11182] netlink: 'syz.3.1799': attribute type 10 has an invalid length. [ 359.654100][T11211] netlink: 'syz.3.1809': attribute type 10 has an invalid length. [ 359.760436][T11213] netlink: 'syz.0.1808': attribute type 10 has an invalid length. [ 359.837894][T11213] netlink: 'syz.0.1808': attribute type 9 has an invalid length. [ 359.847608][T11213] __nla_validate_parse: 2 callbacks suppressed [ 359.847801][T11213] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1808'. [ 360.450662][T11223] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 360.521223][T11219] netlink: 'syz.3.1812': attribute type 9 has an invalid length. [ 362.009776][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1820'. [ 362.019015][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1820'. [ 362.038350][T11247] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1820'. [ 363.389079][T11276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1832'. [ 363.399446][T11276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1832'. [ 363.522377][T11276] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1832'. [ 366.552091][T11314] validate_nla: 1 callbacks suppressed [ 366.552107][T11314] netlink: 'syz.0.1845': attribute type 10 has an invalid length. [ 366.566421][T11317] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1846'. [ 366.621890][T11317] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1846'. [ 366.625209][T11314] netlink: 'syz.0.1845': attribute type 9 has an invalid length. [ 366.641169][T11314] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1845'. [ 367.584735][T11330] netlink: 'syz.2.1851': attribute type 21 has an invalid length. [ 368.156119][T11339] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 368.593398][T11347] netlink: 'syz.0.1856': attribute type 10 has an invalid length. [ 368.696396][T11347] netlink: 'syz.0.1856': attribute type 9 has an invalid length. [ 368.705310][T11347] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1856'. [ 368.845212][T11351] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 368.895458][T11351] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 368.919452][T11354] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 369.017817][T11351] netlink: 'syz.1.1857': attribute type 29 has an invalid length. [ 369.090838][T11351] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1857'. [ 369.172444][T11358] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1860'. [ 369.802460][T11372] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1866'. [ 369.923381][T11376] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1867'. [ 370.103892][T11372] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1866'. [ 370.385806][T11380] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1869'. [ 371.565756][T11402] validate_nla: 9 callbacks suppressed [ 371.565776][T11402] netlink: 'syz.0.1882': attribute type 9 has an invalid length. [ 371.584359][T11402] __nla_validate_parse: 1 callbacks suppressed [ 371.584375][T11402] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1882'. [ 371.879276][T11416] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 371.899758][T11416] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 371.922910][T11420] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 371.960811][T11416] netlink: 'syz.2.1888': attribute type 29 has an invalid length. [ 372.007420][T11416] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1888'. [ 372.386759][T11434] netlink: 'syz.3.1886': attribute type 10 has an invalid length. [ 372.969253][T11449] netlink: 'syz.0.1891': attribute type 10 has an invalid length. [ 373.116388][T11449] netlink: 'syz.0.1891': attribute type 9 has an invalid length. [ 373.125281][T11449] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1891'. [ 373.839585][T11467] netlink: 'syz.1.1897': attribute type 10 has an invalid length. [ 375.311185][T11487] netlink: 'syz.3.1904': attribute type 39 has an invalid length. [ 375.830916][T11498] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1906'. [ 376.136749][T11502] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1908'. [ 376.998932][T11527] FAULT_INJECTION: forcing a failure. [ 376.998932][T11527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.012658][T11527] CPU: 1 PID: 11527 Comm: syz.2.1915 Not tainted syzkaller #0 [ 377.020183][T11527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.030286][T11527] Call Trace: [ 377.033604][T11527] [ 377.036574][T11527] dump_stack_lvl+0x18c/0x250 [ 377.041307][T11527] ? show_regs_print_info+0x20/0x20 [ 377.046557][T11527] ? load_image+0x420/0x420 [ 377.051118][T11527] ? __might_fault+0xaa/0x120 [ 377.055848][T11527] ? __lock_acquire+0x7d40/0x7d40 [ 377.060935][T11527] should_fail_ex+0x39d/0x4d0 [ 377.065690][T11527] _copy_to_user+0x2f/0xa0 [ 377.070170][T11527] bpf_verifier_vlog+0x5db/0x870 [ 377.075182][T11527] __btf_verifier_log+0xe3/0x140 [ 377.080188][T11527] ? btf_check_sec_info+0x350/0x350 [ 377.085449][T11527] ? __lock_acquire+0x7d40/0x7d40 [ 377.090526][T11527] ? btf_parse_hdr+0x1f5/0x710 [ 377.095347][T11527] btf_parse_hdr+0x2d0/0x710 [ 377.099995][T11527] btf_new_fd+0x397/0x9f0 [ 377.104414][T11527] ? bpf_btf_show_fdinfo+0x80/0x80 [ 377.109850][T11527] ? capable+0x88/0xe0 [ 377.113985][T11527] __sys_bpf+0x670/0x890 [ 377.118289][T11527] ? bpf_link_show_fdinfo+0x390/0x390 [ 377.123725][T11527] ? lock_chain_count+0x20/0x20 [ 377.128631][T11527] __x64_sys_bpf+0x7c/0x90 [ 377.133098][T11527] do_syscall_64+0x55/0xb0 [ 377.137561][T11527] ? clear_bhb_loop+0x40/0x90 [ 377.142288][T11527] ? clear_bhb_loop+0x40/0x90 [ 377.147032][T11527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.152992][T11527] RIP: 0033:0x7fb4d579ce59 [ 377.157454][T11527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.177113][T11527] RSP: 002b:00007fb4d65b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 377.186031][T11527] RAX: ffffffffffffffda RBX: 00007fb4d5a15fa0 RCX: 00007fb4d579ce59 [ 377.194090][T11527] RDX: 0000000000000028 RSI: 0000200000000640 RDI: 0000000000000012 [ 377.202109][T11527] RBP: 00007fb4d65b2090 R08: 0000000000000000 R09: 0000000000000000 [ 377.210126][T11527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.218144][T11527] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 377.226183][T11527] [ 377.301144][T11533] validate_nla: 4 callbacks suppressed [ 377.301162][T11533] netlink: 'syz.3.1917': attribute type 10 has an invalid length. [ 377.610317][T11541] netlink: 'syz.3.1921': attribute type 10 has an invalid length. [ 377.710759][T11541] netlink: 'syz.3.1921': attribute type 9 has an invalid length. [ 377.733409][T11541] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1921'. [ 378.677830][T11568] netlink: 'syz.3.1929': attribute type 10 has an invalid length. [ 378.799566][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.806098][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.935095][T11574] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 378.985355][T11574] netlink: 'syz.3.1930': attribute type 9 has an invalid length. [ 378.996151][T11574] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1930'. [ 379.691174][T11583] netlink: 'syz.2.1934': attribute type 23 has an invalid length. [ 379.875195][T11585] netlink: 'syz.0.1935': attribute type 3 has an invalid length. [ 379.893229][T11585] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1935'. [ 380.035514][T11596] FAULT_INJECTION: forcing a failure. [ 380.035514][T11596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.093211][T11596] CPU: 1 PID: 11596 Comm: syz.3.1937 Not tainted syzkaller #0 [ 380.100760][T11596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.110862][T11596] Call Trace: [ 380.114187][T11596] [ 380.117157][T11596] dump_stack_lvl+0x18c/0x250 [ 380.121889][T11596] ? show_regs_print_info+0x20/0x20 [ 380.127136][T11596] ? load_image+0x420/0x420 [ 380.131683][T11596] ? __lock_acquire+0x7d40/0x7d40 [ 380.136747][T11596] ? snprintf+0xe9/0x140 [ 380.141021][T11596] should_fail_ex+0x39d/0x4d0 [ 380.145738][T11596] _copy_to_user+0x2f/0xa0 [ 380.150181][T11596] simple_read_from_buffer+0xe7/0x150 [ 380.155597][T11596] proc_fail_nth_read+0x1e8/0x260 [ 380.160659][T11596] ? proc_fault_inject_write+0x360/0x360 [ 380.166326][T11596] ? fsnotify_perm+0x271/0x5e0 [ 380.171116][T11596] ? proc_fault_inject_write+0x360/0x360 [ 380.176784][T11596] vfs_read+0x28b/0x970 [ 380.180973][T11596] ? kernel_read+0x1e0/0x1e0 [ 380.185590][T11596] ? __fget_files+0x28/0x4b0 [ 380.190235][T11596] ? __fget_files+0x28/0x4b0 [ 380.194870][T11596] ? __fget_files+0x43d/0x4b0 [ 380.199641][T11596] ? __fdget_pos+0x2a3/0x330 [ 380.204269][T11596] ? ksys_read+0x75/0x260 [ 380.208725][T11596] ksys_read+0x150/0x260 [ 380.213031][T11596] ? vfs_write+0x990/0x990 [ 380.217506][T11596] ? lockdep_hardirqs_on+0x98/0x150 [ 380.222742][T11596] do_syscall_64+0x55/0xb0 [ 380.227185][T11596] ? clear_bhb_loop+0x40/0x90 [ 380.231902][T11596] ? clear_bhb_loop+0x40/0x90 [ 380.236612][T11596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 380.242532][T11596] RIP: 0033:0x7f4e0e15d68e [ 380.246974][T11596] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.266625][T11596] RSP: 002b:00007f4e0efb3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.275068][T11596] RAX: ffffffffffffffda RBX: 00007f4e0efb46c0 RCX: 00007f4e0e15d68e [ 380.283080][T11596] RDX: 000000000000000f RSI: 00007f4e0efb40a0 RDI: 0000000000000004 [ 380.291074][T11596] RBP: 00007f4e0efb4090 R08: 0000000000000000 R09: 0000000000000000 [ 380.299504][T11596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.307504][T11596] R13: 00007f4e0e416038 R14: 00007f4e0e415fa0 R15: 00007ffc3cc9de28 [ 380.315523][T11596] [ 380.392749][T11600] netlink: 'syz.0.1939': attribute type 10 has an invalid length. [ 380.684059][T11602] netlink: 'syz.3.1940': attribute type 10 has an invalid length. [ 381.550687][T11629] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1949'. [ 381.674658][T11629] hsr0: entered promiscuous mode [ 382.663544][T11643] validate_nla: 3 callbacks suppressed [ 382.663581][T11643] netlink: 'syz.1.1953': attribute type 10 has an invalid length. [ 382.747077][T11643] netlink: 'syz.1.1953': attribute type 9 has an invalid length. [ 382.756495][T11643] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1953'. [ 383.748859][T11653] netlink: 'syz.0.1957': attribute type 9 has an invalid length. [ 383.786729][T11653] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1957'. [ 384.335673][T11659] netlink: 'syz.2.1958': attribute type 10 has an invalid length. [ 384.446319][T11662] netlink: 'syz.0.1959': attribute type 1 has an invalid length. [ 384.539974][T11662] netlink: 'syz.0.1959': attribute type 3 has an invalid length. [ 384.594144][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1959'. [ 384.913703][T11666] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 385.422407][T11681] netlink: 'syz.1.1966': attribute type 23 has an invalid length. [ 385.542008][T11679] netlink: 'syz.2.1964': attribute type 10 has an invalid length. [ 385.604467][T11679] netlink: 'syz.2.1964': attribute type 9 has an invalid length. [ 385.614591][T11679] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1964'. [ 387.054010][T11690] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1968'. [ 387.073321][T11690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 387.467005][T11703] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1972'. [ 389.890266][T11743] validate_nla: 4 callbacks suppressed [ 389.890288][T11743] netlink: 'syz.0.1982': attribute type 10 has an invalid length. [ 390.076177][T11744] netlink: 'syz.0.1982': attribute type 9 has an invalid length. [ 390.104116][T11744] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1982'. [ 390.776517][T11752] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 391.393846][T11761] lo: entered allmulticast mode [ 391.419337][T11766] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 391.788573][T11774] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 391.873928][T11774] netlink: 'syz.0.1990': attribute type 9 has an invalid length. [ 391.882300][T11774] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1990'. [ 392.886766][T11783] netlink: 'syz.3.1993': attribute type 10 has an invalid length. [ 393.348732][T11795] netlink: 'syz.3.1996': attribute type 10 has an invalid length. [ 393.417077][T11795] netlink: 'syz.3.1996': attribute type 9 has an invalid length. [ 393.434417][T11795] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.1996'. [ 393.627657][T11797] netlink: 'syz.2.1998': attribute type 23 has an invalid length. [ 396.093254][T11825] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 396.123404][T11829] netlink: 'syz.0.2007': attribute type 23 has an invalid length. [ 396.226773][T11831] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 396.304626][T11831] netlink: 'syz.2.2006': attribute type 9 has an invalid length. [ 396.312841][T11831] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2006'. [ 396.620825][T11837] netlink: 'syz.3.2009': attribute type 10 has an invalid length. [ 397.073868][T11839] netlink: 'syz.3.2009': attribute type 9 has an invalid length. [ 397.098751][T11839] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2009'. [ 398.643782][T11863] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 398.841788][T11868] netlink: 'syz.1.2019': attribute type 22 has an invalid length. [ 398.849981][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2019'. [ 399.349095][T11881] netlink: 'syz.0.2023': attribute type 10 has an invalid length. [ 399.398797][T11881] netlink: 'syz.0.2023': attribute type 9 has an invalid length. [ 399.409922][T11881] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2023'. [ 400.544076][T11890] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2034'. [ 401.448692][T11922] FAULT_INJECTION: forcing a failure. [ 401.448692][T11922] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 401.473252][T11922] CPU: 1 PID: 11922 Comm: syz.0.2037 Not tainted syzkaller #0 [ 401.480814][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.490914][T11922] Call Trace: [ 401.494224][T11922] [ 401.497181][T11922] dump_stack_lvl+0x18c/0x250 [ 401.501895][T11922] ? show_regs_print_info+0x20/0x20 [ 401.507125][T11922] ? load_image+0x420/0x420 [ 401.511755][T11922] ? __lock_acquire+0x7d40/0x7d40 [ 401.516841][T11922] should_fail_ex+0x39d/0x4d0 [ 401.521574][T11922] prepare_alloc_pages+0x1e2/0x5f0 [ 401.526724][T11922] __alloc_pages+0x134/0x460 [ 401.531339][T11922] ? zone_statistics+0x170/0x170 [ 401.536299][T11922] ? rcuref_put_slowpath+0xe1/0x150 [ 401.541711][T11922] bpf_prog_test_run_xdp+0xc37/0x10e0 [ 401.547137][T11922] ? dev_put+0x80/0x80 [ 401.551248][T11922] ? dev_put+0x80/0x80 [ 401.555357][T11922] bpf_prog_test_run+0x321/0x390 [ 401.560321][T11922] __sys_bpf+0x49d/0x890 [ 401.564594][T11922] ? bpf_link_show_fdinfo+0x390/0x390 [ 401.569999][T11922] ? lock_chain_count+0x20/0x20 [ 401.574882][T11922] __x64_sys_bpf+0x7c/0x90 [ 401.579326][T11922] do_syscall_64+0x55/0xb0 [ 401.583765][T11922] ? clear_bhb_loop+0x40/0x90 [ 401.588471][T11922] ? clear_bhb_loop+0x40/0x90 [ 401.593180][T11922] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.599115][T11922] RIP: 0033:0x7faf5ab9ce59 [ 401.603558][T11922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.623187][T11922] RSP: 002b:00007faf5ba26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.631642][T11922] RAX: ffffffffffffffda RBX: 00007faf5ae15fa0 RCX: 00007faf5ab9ce59 [ 401.639664][T11922] RDX: 0000000000000050 RSI: 00002000000011c0 RDI: 000000000000000a [ 401.647672][T11922] RBP: 00007faf5ba26090 R08: 0000000000000000 R09: 0000000000000000 [ 401.655677][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.663676][T11922] R13: 00007faf5ae16038 R14: 00007faf5ae15fa0 R15: 00007ffc44fda858 [ 401.671687][T11922] [ 401.834410][T11932] validate_nla: 3 callbacks suppressed [ 401.834428][T11932] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 401.852940][T11933] netlink: 'syz.2.2040': attribute type 21 has an invalid length. [ 401.861419][T11933] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2040'. [ 402.292642][T11944] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 402.323813][T11947] FAULT_INJECTION: forcing a failure. [ 402.323813][T11947] name failslab, interval 1, probability 0, space 0, times 0 [ 402.343875][T11945] netlink: 'syz.3.2044': attribute type 9 has an invalid length. [ 402.361024][T11947] CPU: 1 PID: 11947 Comm: syz.2.2046 Not tainted syzkaller #0 [ 402.368572][T11947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.378656][T11947] Call Trace: [ 402.381962][T11947] [ 402.384931][T11947] dump_stack_lvl+0x18c/0x250 [ 402.389839][T11947] ? show_regs_print_info+0x20/0x20 [ 402.395092][T11947] ? load_image+0x420/0x420 [ 402.399640][T11947] ? __might_sleep+0xe0/0xe0 [ 402.404262][T11947] ? __lock_acquire+0x7d40/0x7d40 [ 402.409325][T11947] should_fail_ex+0x39d/0x4d0 [ 402.414058][T11947] should_failslab+0x9/0x20 [ 402.418596][T11947] slab_pre_alloc_hook+0x59/0x310 [ 402.423657][T11947] ? kvmalloc_node+0x70/0x180 [ 402.428364][T11947] ? kvmalloc_node+0x70/0x180 [ 402.433075][T11947] __kmem_cache_alloc_node+0x53/0x250 [ 402.438487][T11947] ? kvmalloc_node+0x70/0x180 [ 402.443196][T11947] __kmalloc_node+0xa4/0x230 [ 402.447828][T11947] kvmalloc_node+0x70/0x180 [ 402.452361][T11947] alloc_netdev_mqs+0xa76/0x1040 [ 402.457331][T11947] ip6_tnl_locate+0x684/0x830 [ 402.462044][T11947] ? ip6_tnl_parm_from_user+0x340/0x340 [ 402.467625][T11947] ? __might_fault+0xaa/0x120 [ 402.472340][T11947] ? __might_fault+0xc6/0x120 [ 402.477044][T11947] ? __might_fault+0xaa/0x120 [ 402.481766][T11947] ? ip6_tnl_siocdevprivate+0x5eb/0xab0 [ 402.487340][T11947] ip6_tnl_siocdevprivate+0x619/0xab0 [ 402.492749][T11947] ? ip6_tnl_start_xmit+0x11c0/0x11c0 [ 402.498156][T11947] ? dev_ioctl+0x83c/0x1140 [ 402.502708][T11947] ? dev_ifsioc+0x958/0xc40 [ 402.507240][T11947] dev_ioctl+0x84c/0x1140 [ 402.511601][T11947] sock_ioctl+0x74c/0x7e0 [ 402.515961][T11947] ? sock_poll+0x3e0/0x3e0 [ 402.520410][T11947] ? bpf_lsm_file_ioctl+0x9/0x10 [ 402.525371][T11947] ? security_file_ioctl+0x80/0xa0 [ 402.530506][T11947] ? sock_poll+0x3e0/0x3e0 [ 402.534945][T11947] __se_sys_ioctl+0xfd/0x170 [ 402.539569][T11947] do_syscall_64+0x55/0xb0 [ 402.544009][T11947] ? clear_bhb_loop+0x40/0x90 [ 402.548720][T11947] ? clear_bhb_loop+0x40/0x90 [ 402.553512][T11947] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 402.559864][T11947] RIP: 0033:0x7fb4d579ce59 [ 402.564307][T11947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.583942][T11947] RSP: 002b:00007fb4d65b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.592559][T11947] RAX: ffffffffffffffda RBX: 00007fb4d5a15fa0 RCX: 00007fb4d579ce59 [ 402.600577][T11947] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000005 [ 402.608571][T11947] RBP: 00007fb4d65b2090 R08: 0000000000000000 R09: 0000000000000000 [ 402.616596][T11947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.624587][T11947] R13: 00007fb4d5a16038 R14: 00007fb4d5a15fa0 R15: 00007ffc14ffdc28 [ 402.632621][T11947] [ 402.643833][T11945] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2044'. [ 402.875896][T11958] netlink: 'syz.2.2050': attribute type 1 has an invalid length. [ 402.894018][T11958] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.2050'. [ 402.968240][T11956] netlink: 'syz.0.2049': attribute type 10 has an invalid length. [ 403.714455][T11957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.521088][T11989] netlink: 'syz.3.2061': attribute type 10 has an invalid length. [ 404.679536][T11991] netlink: 'syz.2.2060': attribute type 10 has an invalid length. [ 404.732620][T11991] netlink: 'syz.2.2060': attribute type 9 has an invalid length. [ 404.741729][T11991] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2060'. [ 405.654946][T12008] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.2068'. [ 405.666593][T12009] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.2068'. [ 405.879575][T12013] netlink: 'syz.1.2067': attribute type 10 has an invalid length. [ 405.975987][T12013] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2067'. [ 406.752029][T12032] netlink: 81308 bytes leftover after parsing attributes in process `syz.2.2074'. [ 407.315643][T12039] validate_nla: 3 callbacks suppressed [ 407.315663][T12039] netlink: 'syz.3.2076': attribute type 10 has an invalid length. [ 407.372607][T12040] netlink: 'syz.3.2076': attribute type 9 has an invalid length. [ 407.424703][T12040] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2076'. [ 407.776813][T12049] FAULT_INJECTION: forcing a failure. [ 407.776813][T12049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.841397][T12049] CPU: 0 PID: 12049 Comm: syz.1.2080 Not tainted syzkaller #0 [ 407.848949][T12049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.859061][T12049] Call Trace: [ 407.862394][T12049] [ 407.865371][T12049] dump_stack_lvl+0x18c/0x250 [ 407.870110][T12049] ? show_regs_print_info+0x20/0x20 [ 407.875362][T12049] ? load_image+0x420/0x420 [ 407.879936][T12049] ? __lock_acquire+0x7d40/0x7d40 [ 407.885028][T12049] ? snprintf+0xe9/0x140 [ 407.889293][T12049] should_fail_ex+0x39d/0x4d0 [ 407.894018][T12049] _copy_to_user+0x2f/0xa0 [ 407.898485][T12049] simple_read_from_buffer+0xe7/0x150 [ 407.903919][T12049] proc_fail_nth_read+0x1e8/0x260 [ 407.908999][T12049] ? proc_fault_inject_write+0x360/0x360 [ 407.914691][T12049] ? fsnotify_perm+0x271/0x5e0 [ 407.919496][T12049] ? proc_fault_inject_write+0x360/0x360 [ 407.925184][T12049] vfs_read+0x28b/0x970 [ 407.929402][T12049] ? kernel_read+0x1e0/0x1e0 [ 407.934049][T12049] ? __fget_files+0x28/0x4b0 [ 407.938703][T12049] ? __fget_files+0x28/0x4b0 [ 407.943355][T12049] ? __fget_files+0x43d/0x4b0 [ 407.948098][T12049] ? __fdget_pos+0x2a3/0x330 [ 407.952738][T12049] ? ksys_read+0x75/0x260 [ 407.957125][T12049] ksys_read+0x150/0x260 [ 407.961423][T12049] ? vfs_write+0x990/0x990 [ 407.965893][T12049] ? lockdep_hardirqs_on+0x98/0x150 [ 407.971149][T12049] do_syscall_64+0x55/0xb0 [ 407.975617][T12049] ? clear_bhb_loop+0x40/0x90 [ 407.980354][T12049] ? clear_bhb_loop+0x40/0x90 [ 407.985092][T12049] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 407.991053][T12049] RIP: 0033:0x7f675cb5d68e [ 407.995515][T12049] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.015179][T12049] RSP: 002b:00007f675dae6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.023742][T12049] RAX: ffffffffffffffda RBX: 00007f675dae76c0 RCX: 00007f675cb5d68e [ 408.031776][T12049] RDX: 000000000000000f RSI: 00007f675dae70a0 RDI: 0000000000000004 [ 408.039805][T12049] RBP: 00007f675dae7090 R08: 0000000000000000 R09: 0000000000000000 [ 408.047833][T12049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.055853][T12049] R13: 00007f675ce16038 R14: 00007f675ce15fa0 R15: 00007ffed330b988 [ 408.063891][T12049] [ 408.148357][T12052] netlink: 'syz.3.2081': attribute type 10 has an invalid length. [ 409.136372][T12077] netlink: 'syz.3.2089': attribute type 9 has an invalid length. [ 409.154559][T12077] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2089'. [ 409.184635][T12074] netlink: 'syz.3.2089': attribute type 10 has an invalid length. [ 410.486695][T12087] netlink: 'syz.1.2092': attribute type 10 has an invalid length. [ 411.387021][T12109] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 411.569401][T12109] netlink: 'syz.1.2101': attribute type 9 has an invalid length. [ 411.579905][T12109] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2101'. [ 412.006190][T12117] netlink: 'syz.3.2104': attribute type 10 has an invalid length. [ 413.191068][T12147] netlink: 'syz.3.2114': attribute type 10 has an invalid length. [ 413.335660][T12153] netlink: 'syz.3.2114': attribute type 9 has an invalid length. [ 413.353154][T12153] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2114'. [ 414.695159][T12188] netlink: 'syz.3.2129': attribute type 10 has an invalid length. [ 414.777217][T12188] netlink: 'syz.3.2129': attribute type 9 has an invalid length. [ 414.786294][T12188] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2129'. [ 416.042517][T12224] FAULT_INJECTION: forcing a failure. [ 416.042517][T12224] name failslab, interval 1, probability 0, space 0, times 0 [ 416.056158][T12224] CPU: 0 PID: 12224 Comm: syz.0.2140 Not tainted syzkaller #0 [ 416.063653][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 416.073739][T12224] Call Trace: [ 416.077027][T12224] [ 416.079973][T12224] dump_stack_lvl+0x18c/0x250 [ 416.084690][T12224] ? show_regs_print_info+0x20/0x20 [ 416.089916][T12224] ? load_image+0x420/0x420 [ 416.094457][T12224] ? verify_lock_unused+0x140/0x140 [ 416.099719][T12224] should_fail_ex+0x39d/0x4d0 [ 416.104470][T12224] should_failslab+0x9/0x20 [ 416.109030][T12224] slab_pre_alloc_hook+0x59/0x310 [ 416.114121][T12224] kmem_cache_alloc+0x5a/0x2d0 [ 416.118938][T12224] ? skb_clone+0x1eb/0x370 [ 416.123393][T12224] skb_clone+0x1eb/0x370 [ 416.127661][T12224] __netlink_deliver_tap+0x41c/0x830 [ 416.133005][T12224] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.138236][T12224] netlink_deliver_tap+0x19c/0x1b0 [ 416.143377][T12224] netlink_unicast+0x72c/0x8d0 [ 416.148178][T12224] netlink_sendmsg+0x8d0/0xbf0 [ 416.152986][T12224] ? netlink_getsockopt+0x590/0x590 [ 416.158218][T12224] ? aa_sock_msg_perm+0x94/0x150 [ 416.163460][T12224] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 416.168823][T12224] ? security_socket_sendmsg+0x80/0xa0 [ 416.174324][T12224] ? netlink_getsockopt+0x590/0x590 [ 416.179603][T12224] ____sys_sendmsg+0x5ba/0x960 [ 416.184459][T12224] ? __asan_memset+0x22/0x40 [ 416.189118][T12224] ? __sys_sendmsg_sock+0x30/0x30 [ 416.194187][T12224] ? __import_iovec+0x5f2/0x850 [ 416.199072][T12224] ? import_iovec+0x73/0xa0 [ 416.203647][T12224] ___sys_sendmsg+0x2a6/0x360 [ 416.208362][T12224] ? get_pid_task+0x20/0x1e0 [ 416.213003][T12224] ? __sys_sendmsg+0x2a0/0x2a0 [ 416.217841][T12224] ? __lock_acquire+0x7d40/0x7d40 [ 416.222932][T12224] __se_sys_sendmsg+0x1c2/0x2b0 [ 416.228185][T12224] ? __x64_sys_sendmsg+0x80/0x80 [ 416.233169][T12224] ? lockdep_hardirqs_on+0x98/0x150 [ 416.238402][T12224] do_syscall_64+0x55/0xb0 [ 416.242841][T12224] ? clear_bhb_loop+0x40/0x90 [ 416.247545][T12224] ? clear_bhb_loop+0x40/0x90 [ 416.252252][T12224] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 416.258176][T12224] RIP: 0033:0x7faf5ab9ce59 [ 416.262614][T12224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.282243][T12224] RSP: 002b:00007faf5ba26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.290689][T12224] RAX: ffffffffffffffda RBX: 00007faf5ae15fa0 RCX: 00007faf5ab9ce59 [ 416.298687][T12224] RDX: 0000000020000050 RSI: 0000200000000100 RDI: 0000000000000003 [ 416.306774][T12224] RBP: 00007faf5ba26090 R08: 0000000000000000 R09: 0000000000000000 [ 416.314768][T12224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.322764][T12224] R13: 00007faf5ae16038 R14: 00007faf5ae15fa0 R15: 00007ffc44fda858 [ 416.330791][T12224] [ 416.441320][T12228] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 416.608500][T12230] netlink: 'syz.3.2143': attribute type 10 has an invalid length. [ 416.678968][T12230] netlink: 'syz.3.2143': attribute type 9 has an invalid length. [ 416.688850][T12230] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2143'. [ 417.660002][T12249] netlink: 'syz.3.2149': attribute type 10 has an invalid length. [ 418.343540][T12274] netlink: 'syz.0.2157': attribute type 10 has an invalid length. [ 418.402366][T12274] netlink: 'syz.0.2157': attribute type 9 has an invalid length. [ 418.411853][T12274] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2157'. [ 419.177966][T12289] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 420.238162][T12314] netlink: 'syz.1.2172': attribute type 10 has an invalid length. [ 420.271670][T12312] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 420.342391][T12312] netlink: 'syz.2.2171': attribute type 9 has an invalid length. [ 420.351289][T12312] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2171'. [ 420.871649][T12327] FAULT_INJECTION: forcing a failure. [ 420.871649][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.895339][T12327] CPU: 0 PID: 12327 Comm: syz.1.2177 Not tainted syzkaller #0 [ 420.902910][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.913011][T12327] Call Trace: [ 420.916350][T12327] [ 420.919325][T12327] dump_stack_lvl+0x18c/0x250 [ 420.924062][T12327] ? show_regs_print_info+0x20/0x20 [ 420.929310][T12327] ? load_image+0x420/0x420 [ 420.933877][T12327] ? __might_fault+0xaa/0x120 [ 420.938604][T12327] ? __lock_acquire+0x7d40/0x7d40 [ 420.943689][T12327] should_fail_ex+0x39d/0x4d0 [ 420.948436][T12327] _copy_from_user+0x2f/0xe0 [ 420.953086][T12327] __sys_bpf+0x23e/0x890 [ 420.957384][T12327] ? bpf_link_show_fdinfo+0x390/0x390 [ 420.962824][T12327] ? lock_chain_count+0x20/0x20 [ 420.967733][T12327] __x64_sys_bpf+0x7c/0x90 [ 420.972206][T12327] do_syscall_64+0x55/0xb0 [ 420.976659][T12327] ? clear_bhb_loop+0x40/0x90 [ 420.981369][T12327] ? clear_bhb_loop+0x40/0x90 [ 420.986102][T12327] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.992108][T12327] RIP: 0033:0x7f675cb9ce59 [ 420.996543][T12327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.016174][T12327] RSP: 002b:00007f675dac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.024612][T12327] RAX: ffffffffffffffda RBX: 00007f675ce16090 RCX: 00007f675cb9ce59 [ 421.033387][T12327] RDX: 000000000000002a RSI: 0000200000000240 RDI: 0000000000000010 [ 421.041374][T12327] RBP: 00007f675dac6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.049363][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.057371][T12327] R13: 00007f675ce16128 R14: 00007f675ce16090 R15: 00007ffed330b988 [ 421.065380][T12327] [ 421.580340][T12340] netlink: 'syz.0.2183': attribute type 10 has an invalid length. [ 421.689302][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2181'. [ 422.639961][T12367] netlink: 'syz.3.2189': attribute type 9 has an invalid length. [ 422.651279][T12367] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2189'. [ 422.666759][T12362] netlink: 'syz.3.2189': attribute type 10 has an invalid length. [ 423.011532][T12375] netlink: 'syz.0.2193': attribute type 10 has an invalid length. [ 423.129025][T12383] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.2194'. [ 423.314818][T12385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 423.640981][T12395] validate_nla: 1 callbacks suppressed [ 423.641112][T12395] netlink: 'syz.3.2201': attribute type 10 has an invalid length. [ 423.708371][T12395] netlink: 'syz.3.2201': attribute type 9 has an invalid length. [ 423.717314][T12395] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2201'. [ 424.507709][T12411] netlink: 'syz.3.2206': attribute type 10 has an invalid length. [ 424.899649][T12427] sctp: [Deprecated]: syz.3.2210 (pid 12427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.899649][T12427] Use struct sctp_sack_info instead [ 425.199211][T12433] netlink: 'syz.0.2214': attribute type 10 has an invalid length. [ 425.276774][T12434] netlink: 'syz.0.2214': attribute type 9 has an invalid length. [ 425.276805][T12434] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2214'. [ 425.538935][T12440] netlink: 'syz.2.2217': attribute type 10 has an invalid length. [ 425.737231][T12448] netlink: 'syz.1.2227': attribute type 10 has an invalid length. [ 426.762544][T12471] netlink: 'syz.3.2226': attribute type 10 has an invalid length. [ 426.789342][T12471] netlink: 'syz.3.2226': attribute type 9 has an invalid length. [ 426.802840][T12471] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2226'. [ 427.972591][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 427.984252][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.001982][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.011825][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.021959][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 428.029846][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.035838][ T6163] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.154223][ T6163] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.307515][ T6163] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.332899][T12517] netlink: 'syz.1.2245': attribute type 10 has an invalid length. [ 428.383595][T12517] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2245'. [ 428.426183][ T6163] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.499151][T12506] chnl_net:caif_netlink_parms(): no params data found [ 428.780347][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.794956][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.802278][T12506] bridge_slave_0: entered allmulticast mode [ 428.821385][T12527] validate_nla: 1 callbacks suppressed [ 428.821403][T12527] netlink: 'syz.1.2246': attribute type 9 has an invalid length. [ 428.837249][T12506] bridge_slave_0: entered promiscuous mode [ 428.854770][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.861950][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.866994][T12527] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2246'. [ 428.874144][T12506] bridge_slave_1: entered allmulticast mode [ 428.886140][T12506] bridge_slave_1: entered promiscuous mode [ 428.894869][T12524] netlink: 'syz.1.2246': attribute type 10 has an invalid length. [ 428.915886][T12526] netlink: 'syz.0.2253': attribute type 10 has an invalid length. [ 429.036282][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.121188][T12528] netlink: 'syz.0.2253': attribute type 9 has an invalid length. [ 429.127904][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.134570][T12528] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2253'. [ 429.572049][T12506] team0: Port device team_slave_0 added [ 429.599727][T12506] team0: Port device team_slave_1 added [ 429.714108][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.721339][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.748831][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.914448][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.921490][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.984338][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.086195][ T5083] Bluetooth: hci0: command tx timeout [ 430.147446][T12558] netlink: 'syz.0.2255': attribute type 10 has an invalid length. [ 430.426517][T12506] hsr_slave_0: entered promiscuous mode [ 430.453460][T12506] hsr_slave_1: entered promiscuous mode [ 430.474468][T12506] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.482136][T12506] Cannot create hsr debugfs directory [ 430.707537][T12579] netlink: 'syz.2.2259': attribute type 9 has an invalid length. [ 430.723230][T12579] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2259'. [ 430.771352][T12574] netlink: 'syz.2.2259': attribute type 10 has an invalid length. [ 431.510472][T12589] netlink: 'syz.2.2263': attribute type 10 has an invalid length. [ 431.647710][T12589] netlink: 'syz.2.2263': attribute type 9 has an invalid length. [ 431.797285][T12589] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2263'. [ 432.150935][ T5083] Bluetooth: hci0: command tx timeout [ 432.436799][T12617] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.2268'. [ 432.484904][T12617] openvswitch: netlink: IP tunnel dst address not specified [ 433.395286][T12625] netlink: 'syz.1.2270': attribute type 10 has an invalid length. [ 433.434498][T12506] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 433.504545][T12625] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2270'. [ 433.520811][T12506] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 433.540352][T12506] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.657990][T12506] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 434.230904][ T5083] Bluetooth: hci0: command tx timeout [ 434.579937][T12642] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 434.930111][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.009169][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.061014][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.068486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.114831][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.122298][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.606958][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.760230][T12506] veth0_vlan: entered promiscuous mode [ 435.811313][T12506] veth1_vlan: entered promiscuous mode [ 435.896379][T12506] veth0_macvtap: entered promiscuous mode [ 435.911829][T12506] veth1_macvtap: entered promiscuous mode [ 435.980035][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.012534][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.050578][T12506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.072550][T12506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.085883][T12506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.098596][T12506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.303789][ T5083] Bluetooth: hci0: command tx timeout [ 436.352333][ T6163] hsr_slave_0: left promiscuous mode [ 436.359626][ T6163] hsr_slave_1: left promiscuous mode [ 436.385506][ T6163] veth1_vlan: left allmulticast mode [ 436.391240][ T6163] veth1_vlan: left promiscuous mode [ 437.391689][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.401546][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.464256][ T6183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.472158][ T6183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.606473][T12706] validate_nla: 1 callbacks suppressed [ 437.606501][T12706] netlink: 'syz.0.2284': attribute type 10 has an invalid length. [ 437.865607][T12712] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2286'. [ 437.888274][T12714] netlink: 'syz.2.2286': attribute type 10 has an invalid length. [ 438.093561][T12717] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2278'. [ 438.293378][T12722] netlink: 'syz.3.2277': attribute type 10 has an invalid length. [ 438.455757][T12726] netlink: 'syz.3.2277': attribute type 9 has an invalid length. [ 438.464153][T12726] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2277'. [ 438.508346][T12722] team0: Device hsr_slave_0 failed to register rx_handler [ 439.012640][T12738] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 439.115169][T12740] netlink: 'syz.3.2287': attribute type 10 has an invalid length. [ 439.168151][T12738] netlink: 'syz.1.2283': attribute type 9 has an invalid length. [ 439.177036][T12738] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2283'. [ 439.232131][T12740] veth0_vlan: left promiscuous mode [ 439.260227][T12740] veth0_vlan: entered promiscuous mode [ 439.275402][T12740] team0: Device veth0_vlan failed to register rx_handler [ 439.554763][T12753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2291'. [ 439.701233][T12753] netlink: 'syz.3.2291': attribute type 22 has an invalid length. [ 439.735639][T12753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2291'. [ 439.920323][T12758] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 439.974613][T12758] netlink: 'syz.1.2294': attribute type 29 has an invalid length. [ 440.252514][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.259364][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.058052][T12786] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2303'. [ 443.431047][T12804] validate_nla: 9 callbacks suppressed [ 443.431067][T12804] netlink: 'syz.2.2307': attribute type 10 has an invalid length. [ 444.707434][T12820] netlink: 'syz.2.2310': attribute type 10 has an invalid length. [ 445.319345][T12835] netlink: 'syz.1.2315': attribute type 10 has an invalid length. [ 445.375344][T12835] netlink: 'syz.1.2315': attribute type 9 has an invalid length. [ 445.385238][T12835] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2315'. [ 445.803398][T12841] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 446.143387][T12846] netlink: 'syz.3.2318': attribute type 10 has an invalid length. [ 446.207101][T12846] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 446.547157][T12846] bond0: entered promiscuous mode [ 446.560907][T12846] bond_slave_0: entered promiscuous mode [ 446.571333][T12846] bond_slave_1: entered promiscuous mode [ 446.578501][T12846] dummy0: entered promiscuous mode [ 446.584095][T12846] bond0: entered allmulticast mode [ 446.589337][T12846] bond_slave_0: entered allmulticast mode [ 446.595300][T12846] bond_slave_1: entered allmulticast mode [ 446.601161][T12846] dummy0: entered allmulticast mode [ 446.612216][T12853] netlink: 'syz.1.2321': attribute type 10 has an invalid length. [ 446.882531][T12869] netlink: 'syz.1.2327': attribute type 10 has an invalid length. [ 447.018119][T12869] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.2327'. [ 447.347356][T12875] netlink: 'syz.0.2329': attribute type 10 has an invalid length. [ 447.480251][T12875] netlink: 'syz.0.2329': attribute type 9 has an invalid length. [ 447.492471][T12875] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2329'. [ 448.439653][T12900] netlink: 209592 bytes leftover after parsing attributes in process `syz.0.2339'. [ 448.802668][T12907] validate_nla: 2 callbacks suppressed [ 448.802685][T12907] netlink: 'syz.0.2344': attribute type 10 has an invalid length. [ 448.816814][T12907] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2344'. [ 448.859854][T12910] netlink: 'syz.3.2343': attribute type 10 has an invalid length. [ 450.914656][T12950] netlink: 'syz.1.2358': attribute type 10 has an invalid length. [ 451.843212][T12977] netlink: 'syz.1.2371': attribute type 10 has an invalid length. [ 452.345887][T12989] netlink: 'syz.2.2377': attribute type 10 has an invalid length. [ 452.354181][T12989] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2377'. [ 452.568581][ T6185] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.648523][ T5779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 452.667046][ T5779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 452.676862][ T5779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 452.679248][ T6185] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.698097][ T5779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 452.708180][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 452.716025][ T5779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 452.775269][ T6185] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.905192][ T6185] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.150682][T12994] chnl_net:caif_netlink_parms(): no params data found [ 454.011254][T12994] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.061468][T12994] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.085776][T12994] bridge_slave_0: entered allmulticast mode [ 454.103741][T12994] bridge_slave_0: entered promiscuous mode [ 454.132413][T12994] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.152356][T12994] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.173135][T12994] bridge_slave_1: entered allmulticast mode [ 454.181468][T12994] bridge_slave_1: entered promiscuous mode [ 454.268507][T12994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.286358][T12994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.444921][T12994] team0: Port device team_slave_0 added [ 454.531873][T12994] team0: Port device team_slave_1 added [ 454.550999][T13042] netlink: 'syz.3.2387': attribute type 10 has an invalid length. [ 454.560742][T13042] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2387'. [ 454.677535][T12994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.702547][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.729848][T12994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.788164][ T5083] Bluetooth: hci1: command tx timeout [ 454.900248][T12994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.914472][T12994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.968214][T12994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.132117][T13055] netlink: 'syz.2.2392': attribute type 10 has an invalid length. [ 455.170228][T12994] hsr_slave_0: entered promiscuous mode [ 455.188047][T12994] hsr_slave_1: entered promiscuous mode [ 455.200495][T12994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.209666][T12994] Cannot create hsr debugfs directory [ 455.879888][T13068] netlink: 'syz.2.2395': attribute type 10 has an invalid length. [ 455.998808][T13065] netlink: 'syz.2.2395': attribute type 9 has an invalid length. [ 456.043615][T13065] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2395'. [ 456.864277][ T5083] Bluetooth: hci1: command tx timeout [ 457.110009][T13089] netlink: 'syz.3.2400': attribute type 10 has an invalid length. [ 457.218715][T13089] team0: Device hsr_slave_0 failed to register rx_handler [ 457.298457][T13095] netlink: 'syz.3.2400': attribute type 9 has an invalid length. [ 457.311541][T13095] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2400'. [ 457.831034][T12994] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 458.048350][T12994] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 458.092393][T12994] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 458.213410][T12994] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 458.852430][T12994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.953063][ T5083] Bluetooth: hci1: command tx timeout [ 459.072468][T12994] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.127737][T13135] netlink: 'syz.2.2408': attribute type 10 has an invalid length. [ 459.189112][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.196415][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.229178][T13135] netlink: 'syz.2.2408': attribute type 9 has an invalid length. [ 459.246313][T13135] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2408'. [ 459.278564][T13140] netlink: 'syz.0.2410': attribute type 10 has an invalid length. [ 459.302095][ T3507] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.309383][ T3507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.840251][T13140] netlink: 'syz.0.2410': attribute type 9 has an invalid length. [ 459.883325][T13140] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2410'. [ 460.887784][T12994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.025502][ T5083] Bluetooth: hci1: command tx timeout [ 461.173206][ T6185] hsr_slave_0: left promiscuous mode [ 461.208738][ T6185] hsr_slave_1: left promiscuous mode [ 461.272297][ T6185] veth1_vlan: left allmulticast mode [ 461.287723][ T6185] veth1_vlan: left promiscuous mode [ 461.528515][T13187] netlink: 'syz.2.2419': attribute type 9 has an invalid length. [ 461.550165][T13187] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2419'. [ 463.047644][T13189] netlink: 'syz.2.2419': attribute type 10 has an invalid length. [ 463.110915][T12994] veth0_vlan: entered promiscuous mode [ 463.165974][T12994] veth1_vlan: entered promiscuous mode [ 463.268227][T12994] veth0_macvtap: entered promiscuous mode [ 463.311909][T12994] veth1_macvtap: entered promiscuous mode [ 463.377232][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.392566][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.429592][T12994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.501827][T13222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 463.573561][T12994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.586763][T12994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.610957][T12994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.645669][T12994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.658285][T12994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.667618][T12994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.676775][T12994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.898258][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.937265][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.170626][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.237052][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.808182][T13256] netlink: 'syz.3.2436': attribute type 9 has an invalid length. [ 464.824165][T13256] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2436'. [ 465.172361][ T5779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.184584][ T5779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.195592][ T5779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.216020][ T5779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.226528][ T5779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.235000][ T5779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.401550][T13250] netlink: 'syz.3.2436': attribute type 10 has an invalid length. [ 465.419147][T13250] team0: Device hsr_slave_0 failed to register rx_handler [ 466.112493][T13257] chnl_net:caif_netlink_parms(): no params data found [ 466.278332][T13257] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.285934][T13257] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.293982][T13257] bridge_slave_0: entered allmulticast mode [ 466.301877][T13257] bridge_slave_0: entered promiscuous mode [ 466.312577][T13257] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.320649][T13257] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.335980][T13257] bridge_slave_1: entered allmulticast mode [ 466.346294][T13257] bridge_slave_1: entered promiscuous mode [ 466.403591][T13257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.422423][T13257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.492624][T13257] team0: Port device team_slave_0 added [ 466.503526][T13257] team0: Port device team_slave_1 added [ 466.554737][T13257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.565351][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.597544][T13257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.611638][T13257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.623199][T13257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.654234][T13257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.757722][T13257] hsr_slave_0: entered promiscuous mode [ 466.765041][T13257] hsr_slave_1: entered promiscuous mode [ 466.812521][ T6185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.882266][T13279] netlink: 'syz.1.2442': attribute type 39 has an invalid length. [ 467.273247][ T5779] Bluetooth: hci4: command tx timeout [ 468.333707][ T6185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.398773][T13292] netlink: 'syz.0.2448': attribute type 10 has an invalid length. [ 468.537624][ T6185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.571309][T13292] netlink: 'syz.0.2448': attribute type 9 has an invalid length. [ 468.590489][T13292] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2448'. [ 468.686411][ T6185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.353546][ T5779] Bluetooth: hci4: command tx timeout [ 469.683789][T13315] lo: entered allmulticast mode [ 469.734575][T13322] lo: entered promiscuous mode [ 469.751824][T13322] lo: left allmulticast mode [ 470.764804][T13345] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 470.781767][T13345] team0: Device hsr_slave_0 failed to register rx_handler [ 470.850150][T13349] netlink: 'syz.3.2461': attribute type 9 has an invalid length. [ 470.850180][T13349] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.2461'. [ 471.192339][T13257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 471.207676][T13257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 471.239739][T13257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 471.250192][T13257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 471.423154][ T5779] Bluetooth: hci4: command tx timeout [ 471.448817][T13257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.470611][T13257] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.491102][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.498347][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.510182][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.517447][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.158521][T13257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.331978][T13257] veth0_vlan: entered promiscuous mode [ 472.365364][T13257] veth1_vlan: entered promiscuous mode [ 472.448873][T13257] veth0_macvtap: entered promiscuous mode [ 472.468986][T13257] veth1_macvtap: entered promiscuous mode [ 472.512698][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.535329][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.556373][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.579971][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.598284][T13257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.632567][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.658771][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.684157][T13257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.705939][T13257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.731000][T13257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.766596][T13257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.788467][T13257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.817299][T13257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.838605][T13257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.137641][T13394] FAULT_INJECTION: forcing a failure. [ 473.137641][T13394] name failslab, interval 1, probability 0, space 0, times 0 [ 473.165921][T13394] CPU: 0 PID: 13394 Comm: syz.1.2471 Not tainted syzkaller #0 [ 473.173666][T13394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.183797][T13394] Call Trace: [ 473.187138][T13394] [ 473.190130][T13394] dump_stack_lvl+0x18c/0x250 [ 473.195114][T13394] ? show_regs_print_info+0x20/0x20 [ 473.200743][T13394] ? load_image+0x420/0x420 [ 473.205350][T13394] ? __might_sleep+0xe0/0xe0 [ 473.210048][T13394] ? __lock_acquire+0x7d40/0x7d40 [ 473.215189][T13394] should_fail_ex+0x39d/0x4d0 [ 473.219951][T13394] should_failslab+0x9/0x20 [ 473.224557][T13394] slab_pre_alloc_hook+0x59/0x310 [ 473.229676][T13394] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 473.236342][T13394] ? sock_kmalloc+0x96/0xf0 [ 473.241027][T13394] ? sock_kmalloc+0x96/0xf0 [ 473.245597][T13394] __kmem_cache_alloc_node+0x53/0x250 [ 473.251129][T13394] ? sock_kmalloc+0x96/0xf0 [ 473.255685][T13394] __kmalloc+0xa4/0x230 [ 473.259905][T13394] sock_kmalloc+0x96/0xf0 [ 473.264283][T13394] ____sys_sendmsg+0x1be/0x960 [ 473.269088][T13394] ? __lock_acquire+0x7d40/0x7d40 [ 473.274157][T13394] ? __asan_memset+0x22/0x40 [ 473.278791][T13394] ? __sys_sendmsg_sock+0x30/0x30 [ 473.283863][T13394] ? __import_iovec+0x3fa/0x850 [ 473.288764][T13394] ? import_iovec+0x73/0xa0 [ 473.293313][T13394] ___sys_sendmsg+0x2a6/0x360 [ 473.298022][T13394] ? get_pid_task+0x20/0x1e0 [ 473.302666][T13394] ? __sys_sendmsg+0x2a0/0x2a0 [ 473.307504][T13394] ? __lock_acquire+0x7d40/0x7d40 [ 473.312608][T13394] __se_sys_sendmsg+0x1c2/0x2b0 [ 473.317503][T13394] ? __x64_sys_sendmsg+0x80/0x80 [ 473.322508][T13394] ? lockdep_hardirqs_on+0x98/0x150 [ 473.327762][T13394] do_syscall_64+0x55/0xb0 [ 473.332216][T13394] ? clear_bhb_loop+0x40/0x90 [ 473.337074][T13394] ? clear_bhb_loop+0x40/0x90 [ 473.341802][T13394] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.348537][T13394] RIP: 0033:0x7f7b7df9ce59 [ 473.353014][T13394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.373204][T13394] RSP: 002b:00007f7b7ee19028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.381694][T13394] RAX: ffffffffffffffda RBX: 00007f7b7e215fa0 RCX: 00007f7b7df9ce59 [ 473.389703][T13394] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 473.397705][T13394] RBP: 00007f7b7ee19090 R08: 0000000000000000 R09: 0000000000000000 [ 473.405706][T13394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.413708][T13394] R13: 00007f7b7e216038 R14: 00007f7b7e215fa0 R15: 00007ffe209a4968 [ 473.421743][T13394] [ 473.503369][ T5779] Bluetooth: hci4: command tx timeout [ 473.730707][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.761128][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.865045][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.887991][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.133076][T13404] netlink: 'syz.0.2476': attribute type 10 has an invalid length. [ 474.299785][T13404] netlink: 'syz.0.2476': attribute type 9 has an invalid length. [ 474.314598][T13404] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2476'. [ 475.041678][T13418] netlink: 'syz.2.2480': attribute type 10 has an invalid length. [ 475.106413][T13419] netlink: 'syz.2.2480': attribute type 9 has an invalid length. [ 475.179956][T13418] team0: Device hsr_slave_0 failed to register rx_handler [ 478.875652][T13451] netlink: 'syz.1.2491': attribute type 10 has an invalid length. [ 478.984902][T13451] team0: Device hsr_slave_0 failed to register rx_handler [ 479.030950][T13456] netlink: 'syz.1.2491': attribute type 9 has an invalid length. [ 479.050917][T13456] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.2491'. [ 479.671625][T13471] netlink: 'syz.2.2498': attribute type 33 has an invalid length. [ 479.719805][T13471] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2498'. [ 479.797378][ T6185] hsr_slave_0: left promiscuous mode [ 479.815002][ T6185] hsr_slave_1: left promiscuous mode [ 479.841032][ T6185] veth1_vlan: left allmulticast mode [ 479.864345][ T6185] veth1_vlan: left promiscuous mode [ 480.549543][T13492] netlink: 'syz.2.2505': attribute type 9 has an invalid length. [ 480.557698][T13492] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2505'. [ 495.764950][ T5083] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 495.783210][ T5083] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 495.793249][ T5083] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 495.803010][ T5083] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 495.810985][ T5083] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 495.819685][ T5083] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 495.878300][ T5083] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 495.888179][ T5083] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 495.898039][ T5083] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 495.909403][ T5083] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 495.921462][ T5083] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 495.929241][ T5083] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.665568][ T5779] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 496.674840][ T5779] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 496.684251][ T5779] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 496.693649][ T5779] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 496.702132][ T5779] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 496.709783][ T5779] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 496.815580][ T5779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 496.825653][ T5779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 496.834838][ T5779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 496.844275][ T5779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 496.852925][ T5779] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 496.862832][ T5779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 497.903130][ T5083] Bluetooth: hci3: command tx timeout [ 497.983224][ T5083] Bluetooth: hci5: command tx timeout [ 498.783242][ T5083] Bluetooth: hci6: command tx timeout [ 498.943206][ T5083] Bluetooth: hci7: command tx timeout [ 499.995197][ T5083] Bluetooth: hci3: command tx timeout [ 500.063237][ T5083] Bluetooth: hci5: command tx timeout [ 500.874947][ T5083] Bluetooth: hci6: command tx timeout [ 501.023445][ T5083] Bluetooth: hci7: command tx timeout [ 501.669077][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.675524][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.063177][ T5083] Bluetooth: hci3: command tx timeout [ 502.143179][ T5083] Bluetooth: hci5: command tx timeout [ 502.950216][ T5083] Bluetooth: hci6: command tx timeout [ 503.103258][ T5083] Bluetooth: hci7: command tx timeout [ 504.143445][ T5083] Bluetooth: hci3: command tx timeout [ 504.224540][ T5083] Bluetooth: hci5: command tx timeout [ 505.023196][ T5779] Bluetooth: hci6: command tx timeout [ 505.183159][ T5779] Bluetooth: hci7: command tx timeout [ 554.953316][ T5083] Bluetooth: hci0: command 0x0406 tx timeout [ 556.242167][ T5083] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 556.251750][ T5083] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 556.260334][ T5083] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 556.272017][ T5083] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 556.282576][ T5083] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 556.293346][ T5083] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 556.318240][ T5779] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 556.334935][ T5780] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 556.345489][ T5780] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 556.362103][ T5780] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 556.372011][ T5780] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 556.381032][ T5780] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 556.760878][ T5083] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 556.771905][ T5083] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 556.781619][ T5083] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 556.794958][ T5083] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 556.803112][ T5083] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 556.811949][ T5083] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 557.150346][ T5083] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 557.160705][ T5083] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 557.174493][ T5083] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 557.187284][ T5083] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 557.199626][ T5083] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 557.210059][ T5083] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 558.383305][ T5780] Bluetooth: hci8: command tx timeout [ 558.464442][ T5780] Bluetooth: hci9: command tx timeout [ 558.863510][ T5780] Bluetooth: hci10: command tx timeout [ 559.263335][ T5780] Bluetooth: hci11: command tx timeout [ 560.466233][ T5780] Bluetooth: hci8: command tx timeout [ 560.543259][ T5780] Bluetooth: hci9: command tx timeout [ 560.943281][ T5780] Bluetooth: hci10: command tx timeout [ 561.343225][ T5780] Bluetooth: hci11: command tx timeout [ 562.543105][ T5780] Bluetooth: hci8: command tx timeout [ 562.623106][ T5780] Bluetooth: hci9: command tx timeout [ 563.033303][ T5780] Bluetooth: hci10: command tx timeout [ 563.108684][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.116869][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.433189][ T5780] Bluetooth: hci11: command tx timeout [ 564.629585][ T5780] Bluetooth: hci8: command tx timeout [ 564.703258][ T5780] Bluetooth: hci9: command tx timeout [ 565.103209][ T5780] Bluetooth: hci10: command tx timeout [ 565.503065][ T5780] Bluetooth: hci11: command tx timeout [ 575.423138][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 590.783150][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 616.834662][ T5083] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 616.847034][ T5083] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 616.863589][ T5083] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 616.871907][ T5083] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 616.880169][ T5083] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 616.888724][ T5083] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 617.000879][ T5083] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 617.012097][ T5083] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 617.020840][ T5083] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 617.030987][ T5083] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 617.039246][ T5083] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 617.048855][ T5083] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 617.894619][ T5083] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 617.903103][ T5083] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 617.912413][ T5083] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 617.925954][ T5083] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 617.946563][ T5083] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 617.955102][ T5083] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 618.057328][ T5083] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 618.070769][ T5083] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 618.080067][ T5083] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 618.089364][ T5083] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 618.098918][ T5083] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 618.106584][ T5083] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 618.943132][ T5083] Bluetooth: hci12: command tx timeout [ 619.103201][ T5083] Bluetooth: hci13: command tx timeout [ 619.983162][T13561] Bluetooth: hci14: command tx timeout [ 620.143167][T13561] Bluetooth: hci15: command tx timeout [ 621.023091][T13561] Bluetooth: hci12: command tx timeout [ 621.197111][T13561] Bluetooth: hci13: command tx timeout [ 621.505755][T13561] Bluetooth: hci3: command 0x0406 tx timeout [ 621.511861][T13561] Bluetooth: hci5: command 0x0406 tx timeout [ 621.519601][T13561] Bluetooth: hci6: command 0x0406 tx timeout [ 621.525781][T13561] Bluetooth: hci7: command 0x0406 tx timeout [ 622.063088][ T5779] Bluetooth: hci14: command tx timeout [ 622.225856][ T5779] Bluetooth: hci15: command tx timeout [ 623.113113][ T5779] Bluetooth: hci12: command tx timeout [ 623.263173][ T5779] Bluetooth: hci13: command tx timeout [ 624.153073][ T5779] Bluetooth: hci14: command tx timeout [ 624.303073][ T5779] Bluetooth: hci15: command tx timeout [ 624.547717][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.554213][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.193342][ T5779] Bluetooth: hci12: command tx timeout [ 625.343143][ T5779] Bluetooth: hci13: command tx timeout [ 626.223093][ T5779] Bluetooth: hci14: command tx timeout [ 626.383123][ T5779] Bluetooth: hci15: command tx timeout [ 630.944229][ T29] INFO: task kworker/u4:23:6195 blocked for more than 143 seconds. [ 630.952227][ T29] Not tainted syzkaller #0 [ 630.957340][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 630.966156][ T29] task:kworker/u4:23 state:D stack:22008 pid:6195 ppid:2 flags:0x00004000 [ 630.977148][ T29] Workqueue: events_unbound linkwatch_event [ 630.984447][ T29] Call Trace: [ 630.987781][ T29] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 630.990756][ T29] __schedule+0x1553/0x45a0 [ 630.997750][ T29] ? asan.module_dtor+0x20/0x20 [ 631.003511][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 631.008259][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 631.017346][ T29] ? kthread_data+0x4f/0xc0 [ 631.021918][ T29] ? wq_worker_sleeping+0x63/0x240 [ 631.031118][ T29] schedule+0xbd/0x170 [ 631.035561][ T29] schedule_preempt_disabled+0x13/0x20 [ 631.041073][ T29] __mutex_lock+0x6a9/0xcc0 [ 631.046256][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 631.050996][ T29] ? linkwatch_event+0xe/0x60 [ 631.056221][ T29] ? mutex_lock_nested+0x20/0x20 [ 631.061231][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.066915][ T29] ? process_scheduled_works+0x96f/0x15d0 [ 631.072699][ T29] linkwatch_event+0xe/0x60 [ 631.077772][ T29] process_scheduled_works+0xa5d/0x15d0 [ 631.083760][ T29] ? worker_attach_to_pool+0x380/0x380 [ 631.089294][ T29] ? assign_work+0x3d2/0x5d0 [ 631.094418][ T29] worker_thread+0xa55/0xfc0 [ 631.099118][ T29] kthread+0x2fa/0x390 [ 631.105684][ T29] ? pr_cont_work+0x560/0x560 [ 631.110855][ T29] ? kthread_blkcg+0xd0/0xd0 [ 631.115947][ T29] ret_from_fork+0x48/0x80 [ 631.120469][ T29] ? kthread_blkcg+0xd0/0xd0 [ 631.146960][ T29] ret_from_fork_asm+0x11/0x20 [ 631.151884][ T29] [ 631.169234][ T29] INFO: task syz.0.2502:13481 blocked for more than 143 seconds. [ 631.181492][ T29] Not tainted syzkaller #0 [ 631.212069][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.221227][ T29] task:syz.0.2502 state:D stack:26344 pid:13481 ppid:5773 flags:0x00004004 [ 631.231507][ T29] Call Trace: [ 631.235207][ T29] [ 631.238209][ T29] __schedule+0x1553/0x45a0 [ 631.242789][ T29] ? asan.module_dtor+0x20/0x20 [ 631.254859][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 631.259641][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 631.267246][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 631.275788][ T29] schedule+0xbd/0x170 [ 631.279933][ T29] schedule_preempt_disabled+0x13/0x20 [ 631.286556][ T29] __mutex_lock+0x6a9/0xcc0 [ 631.291154][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 631.297889][ T29] ? tun_chr_close+0x41/0x1c0 [ 631.302649][ T29] ? mutex_lock_nested+0x20/0x20 [ 631.307743][ T29] ? __fput+0x61c/0x970 [ 631.311950][ T29] ? tun_chr_open+0x510/0x510 [ 631.319039][ T29] tun_chr_close+0x41/0x1c0 [ 631.323666][ T29] __fput+0x234/0x970 [ 631.327716][ T29] task_work_run+0x1d4/0x260 [ 631.336196][ T29] ? task_work_cancel+0x220/0x220 [ 631.341381][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 631.347480][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 631.353150][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 631.358792][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 631.367575][ T29] do_syscall_64+0x61/0xb0 [ 631.372062][ T29] ? clear_bhb_loop+0x40/0x90 [ 631.377898][ T29] ? clear_bhb_loop+0x40/0x90 [ 631.382656][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.391672][ T29] RIP: 0033:0x7faf5ab9ce59 [ 631.396216][ T29] RSP: 002b:00007ffc44fda9b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 631.404825][ T29] RAX: 0000000000000000 RBX: 00007ffc44fdaaa0 RCX: 00007faf5ab9ce59 [ 631.412842][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 631.420940][ T29] RBP: 00000000000752b1 R08: 0000000000000001 R09: 0000000000000000 [ 631.429944][ T29] R10: 0000001b2c720000 R11: 0000000000000246 R12: 00007ffc44fdaae0 [ 631.438855][ T29] R13: 00007faf5ae15fac R14: 0000000000075321 R15: 00007faf5ae15fa0 [ 631.447229][ T29] [ 631.450380][ T29] INFO: task syz.1.2503:13484 blocked for more than 143 seconds. [ 631.459225][ T29] Not tainted syzkaller #0 [ 631.464607][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.479647][ T29] task:syz.1.2503 state:D stack:26472 pid:13484 ppid:12994 flags:0x00004006 [ 631.490533][ T29] Call Trace: [ 631.494077][ T29] [ 631.497077][ T29] __schedule+0x1553/0x45a0 [ 631.502180][ T29] ? asan.module_dtor+0x20/0x20 [ 631.507232][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 631.511983][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 631.517640][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 631.523964][ T29] schedule+0xbd/0x170 [ 631.528097][ T29] schedule_preempt_disabled+0x13/0x20 [ 631.534804][ T29] __mutex_lock+0x6a9/0xcc0 [ 631.540441][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 631.546274][ T29] ? tun_chr_close+0x41/0x1c0 [ 631.551057][ T29] ? mutex_lock_nested+0x20/0x20 [ 631.558017][ T29] ? __fput+0x61c/0x970 [ 631.562239][ T29] ? tun_chr_open+0x510/0x510 [ 631.568208][ T29] tun_chr_close+0x41/0x1c0 [ 631.572794][ T29] __fput+0x234/0x970 [ 631.578879][ T29] task_work_run+0x1d4/0x260 [ 631.584723][ T29] ? task_work_cancel+0x220/0x220 [ 631.589833][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 631.595475][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 631.600829][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 631.606712][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 631.612253][ T29] do_syscall_64+0x61/0xb0 [ 631.616763][ T29] ? clear_bhb_loop+0x40/0x90 [ 631.621514][ T29] ? clear_bhb_loop+0x40/0x90 [ 631.626358][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.632304][ T29] RIP: 0033:0x7f7b7df9ce59 [ 631.636803][ T29] RSP: 002b:00007ffe209a4ac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 631.646356][ T29] RAX: 0000000000000000 RBX: 00007ffe209a4bb0 RCX: 00007f7b7df9ce59 [ 631.654454][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 631.662483][ T29] RBP: 00000000000752e1 R08: 0000000000000001 R09: 0000000000000000 [ 631.671223][ T29] R10: 0000001b2f320000 R11: 0000000000000246 R12: 00007ffe209a4bf0 [ 631.679615][ T29] R13: 00007f7b7e215fac R14: 0000000000075371 R15: 00007f7b7e215fa0 [ 631.688042][ T29] [ 631.691378][ T29] INFO: task syz.2.2505:13491 blocked for more than 144 seconds. [ 631.699611][ T29] Not tainted syzkaller #0 [ 631.704894][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 631.715190][ T29] task:syz.2.2505 state:D stack:24808 pid:13491 ppid:13257 flags:0x00004004 [ 631.724809][ T29] Call Trace: [ 631.728245][ T29] [ 631.731218][ T29] __schedule+0x1553/0x45a0 [ 631.736373][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 631.743377][ T29] ? asan.module_dtor+0x20/0x20 [ 631.748288][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 631.753454][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 631.758976][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 631.765617][ T29] schedule+0xbd/0x170 [ 631.769744][ T29] schedule_preempt_disabled+0x13/0x20 [ 631.775673][ T29] __mutex_lock+0x6a9/0xcc0 [ 631.780239][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 631.785429][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 631.790600][ T29] ? mutex_lock_nested+0x20/0x20 [ 631.796129][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 631.801323][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 631.806741][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 631.812019][ T29] ? rtnetlink_bind+0x80/0x80 [ 631.817198][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 631.824192][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 631.830235][ T29] ? lock_chain_count+0x20/0x20 [ 631.836337][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 631.841856][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 631.847679][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 631.853600][ T29] ? _local_bh_enable+0xa0/0xa0 [ 631.858686][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 631.864716][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 631.869901][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 631.875564][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 631.880743][ T29] ? ref_tracker_free+0x690/0x840 [ 631.886272][ T29] netlink_rcv_skb+0x241/0x4d0 [ 631.891229][ T29] ? rtnetlink_bind+0x80/0x80 [ 631.896392][ T29] ? netlink_ack+0x1180/0x1180 [ 631.901235][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 631.907011][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.912285][ T29] netlink_unicast+0x751/0x8d0 [ 631.917538][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 631.922378][ T29] ? netlink_getsockopt+0x590/0x590 [ 631.928062][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 631.933570][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 631.939040][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 631.945101][ T29] ? netlink_getsockopt+0x590/0x590 [ 631.951014][ T29] ____sys_sendmsg+0x5ba/0x960 [ 631.955950][ T29] ? __asan_memset+0x22/0x40 [ 631.960621][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 631.966256][ T29] ? __import_iovec+0x5f2/0x850 [ 631.971180][ T29] ? import_iovec+0x73/0xa0 [ 631.976164][ T29] ___sys_sendmsg+0x2a6/0x360 [ 631.980902][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 631.986191][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 631.991086][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 631.996667][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 632.001922][ T29] do_syscall_64+0x55/0xb0 [ 632.006828][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.011564][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.017221][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.024613][ T29] RIP: 0033:0x7f1691f9ce59 [ 632.029083][ T29] RSP: 002b:00007f1692ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.038064][ T29] RAX: ffffffffffffffda RBX: 00007f1692215fa0 RCX: 00007f1691f9ce59 [ 632.052978][ T29] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000009 [ 632.061028][ T29] RBP: 00007f1692032d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.073186][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.081243][ T29] R13: 00007f1692216038 R14: 00007f1692215fa0 R15: 00007ffcafefbab8 [ 632.091519][ T29] [ 632.100001][ T29] INFO: task syz.2.2505:13492 blocked for more than 144 seconds. [ 632.110623][ T29] Not tainted syzkaller #0 [ 632.115664][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.124511][ T29] task:syz.2.2505 state:D stack:25736 pid:13492 ppid:13257 flags:0x00004006 [ 632.133886][ T29] Call Trace: [ 632.137222][ T29] [ 632.140201][ T29] __schedule+0x1553/0x45a0 [ 632.145249][ T29] ? verify_lock_unused+0x140/0x140 [ 632.151123][ T29] ? asan.module_dtor+0x20/0x20 [ 632.157654][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 632.162382][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 632.170471][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 632.180324][ T29] schedule+0xbd/0x170 [ 632.186618][ T29] schedule_preempt_disabled+0x13/0x20 [ 632.192167][ T29] __mutex_lock+0x6a9/0xcc0 [ 632.198545][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 632.203445][ T29] ? wiphy_new_nm+0x6ff/0x1990 [ 632.208418][ T29] ? mutex_lock_nested+0x20/0x20 [ 632.214094][ T29] ? wiphy_new_nm+0x621/0x1990 [ 632.218920][ T29] ? rcu_is_watching+0x15/0xb0 [ 632.233067][ T29] ? trace_kmalloc+0x1f/0x90 [ 632.237760][ T29] ? __kmalloc+0x15c/0x230 [ 632.242231][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.248141][ T29] wiphy_new_nm+0x6ff/0x1990 [ 632.252787][ T29] ? ieee80211_alloc_hw_nm+0x3a6/0x1ee0 [ 632.259435][ T29] ieee80211_alloc_hw_nm+0x3c8/0x1ee0 [ 632.271709][ T29] mac80211_hwsim_new_radio+0x1e3/0x4d10 [ 632.277666][ T29] ? __kmem_cache_alloc_node+0x13a/0x250 [ 632.283641][ T29] ? mac80211_hwsim_free+0x220/0x220 [ 632.288980][ T29] ? rcu_is_watching+0x15/0xb0 [ 632.293873][ T29] ? kstrndup+0xbd/0x140 [ 632.298186][ T29] hwsim_new_radio_nl+0xdc9/0x1a90 [ 632.304352][ T29] ? __nla_validate+0x50/0x50 [ 632.309121][ T29] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 632.316662][ T29] ? __nla_parse+0x40/0x50 [ 632.321172][ T29] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 632.327615][ T29] genl_family_rcv_msg_doit+0x211/0x310 [ 632.333474][ T29] ? end_current_label_crit_section+0x170/0x170 [ 632.339788][ T29] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 632.345800][ T29] ? bpf_lsm_capable+0x9/0x10 [ 632.350545][ T29] ? security_capable+0x89/0xb0 [ 632.356103][ T29] genl_rcv_msg+0x619/0x7a0 [ 632.360678][ T29] ? genl_bind+0x360/0x360 [ 632.365649][ T29] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 632.372041][ T29] ? ref_tracker_free+0x690/0x840 [ 632.378694][ T29] netlink_rcv_skb+0x241/0x4d0 [ 632.385771][ T29] ? genl_bind+0x360/0x360 [ 632.390229][ T29] ? netlink_ack+0x1180/0x1180 [ 632.396361][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 632.401470][ T29] ? down_read+0x1ac/0x2e0 [ 632.406405][ T29] genl_rcv+0x28/0x40 [ 632.410451][ T29] netlink_unicast+0x751/0x8d0 [ 632.415707][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 632.420549][ T29] ? netlink_getsockopt+0x590/0x590 [ 632.426256][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 632.431258][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 632.437026][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 632.442540][ T29] ? netlink_getsockopt+0x590/0x590 [ 632.448108][ T29] ____sys_sendmsg+0x5ba/0x960 [ 632.453024][ T29] ? __asan_memset+0x22/0x40 [ 632.458307][ T29] ? __sys_sendmsg_sock+0x30/0x30 [ 632.463867][ T29] ? __import_iovec+0x5f2/0x850 [ 632.468806][ T29] ? import_iovec+0x73/0xa0 [ 632.473821][ T29] ___sys_sendmsg+0x2a6/0x360 [ 632.478571][ T29] ? __sys_sendmsg+0x2a0/0x2a0 [ 632.483977][ T29] ? debug_mutex_init+0x38/0x70 [ 632.488919][ T29] __se_sys_sendmsg+0x1c2/0x2b0 [ 632.494314][ T29] ? __x64_sys_sendmsg+0x80/0x80 [ 632.499328][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 632.505071][ T29] do_syscall_64+0x55/0xb0 [ 632.509543][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.514711][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.519467][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.526954][ T29] RIP: 0033:0x7f1691f9ce59 [ 632.531545][ T29] RSP: 002b:00007f1692e7f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.540114][ T29] RAX: ffffffffffffffda RBX: 00007f1692216090 RCX: 00007f1691f9ce59 [ 632.548809][ T29] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 632.556914][ T29] RBP: 00007f1692032d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.565898][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.574335][ T29] R13: 00007f1692216128 R14: 00007f1692216090 R15: 00007ffcafefbab8 [ 632.582377][ T29] [ 632.591339][ T29] INFO: task syz.3.2507:13496 blocked for more than 145 seconds. [ 632.601028][ T29] Not tainted syzkaller #0 [ 632.608087][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.617150][ T29] task:syz.3.2507 state:D stack:24872 pid:13496 ppid:12506 flags:0x00004004 [ 632.626715][ T29] Call Trace: [ 632.630074][ T29] [ 632.633466][ T29] __schedule+0x1553/0x45a0 [ 632.638028][ T29] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 632.644260][ T29] ? asan.module_dtor+0x20/0x20 [ 632.649203][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 632.654428][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 632.659959][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 632.667171][ T29] schedule+0xbd/0x170 [ 632.671326][ T29] schedule_preempt_disabled+0x13/0x20 [ 632.677338][ T29] __mutex_lock+0x6a9/0xcc0 [ 632.681902][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 632.687195][ T29] ? dev_ioctl+0x83c/0x1140 [ 632.691862][ T29] ? mutex_lock_nested+0x20/0x20 [ 632.697391][ T29] ? dev_load+0x21/0x1f0 [ 632.701698][ T29] ? dev_load+0x21/0x1f0 [ 632.706928][ T29] dev_ioctl+0x83c/0x1140 [ 632.711355][ T29] sock_ioctl+0x74c/0x7e0 [ 632.717402][ T29] ? sock_poll+0x3e0/0x3e0 [ 632.721901][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 632.727189][ T29] ? security_file_ioctl+0x80/0xa0 [ 632.732356][ T29] ? sock_poll+0x3e0/0x3e0 [ 632.737371][ T29] __se_sys_ioctl+0xfd/0x170 [ 632.742033][ T29] do_syscall_64+0x55/0xb0 [ 632.746551][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.751274][ T29] ? clear_bhb_loop+0x40/0x90 [ 632.757183][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.763192][ T29] RIP: 0033:0x7fd942f9ce59 [ 632.768391][ T29] RSP: 002b:00007fd943de9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.777008][ T29] RAX: ffffffffffffffda RBX: 00007fd943215fa0 RCX: 00007fd942f9ce59 [ 632.785324][ T29] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000008 [ 632.793703][ T29] RBP: 00007fd943032d6f R08: 0000000000000000 R09: 0000000000000000 [ 632.801733][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.810172][ T29] R13: 00007fd943216038 R14: 00007fd943215fa0 R15: 00007ffcf9d53628 [ 632.818899][ T29] [ 632.821994][ T29] INFO: task syz.3.2507:13497 blocked for more than 145 seconds. [ 632.830634][ T29] Not tainted syzkaller #0 [ 632.835962][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.844991][ T29] task:syz.3.2507 state:D stack:26504 pid:13497 ppid:12506 flags:0x00004004 [ 632.856616][ T29] Call Trace: [ 632.859951][ T29] [ 632.863715][ T29] __schedule+0x1553/0x45a0 [ 632.869343][ T29] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 632.875998][ T29] ? asan.module_dtor+0x20/0x20 [ 632.880914][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 632.885681][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 632.891479][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 632.897763][ T29] schedule+0xbd/0x170 [ 632.901882][ T29] schedule_preempt_disabled+0x13/0x20 [ 632.907889][ T29] __mutex_lock+0x6a9/0xcc0 [ 632.912457][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 632.917469][ T29] ? rtnetlink_rcv_msg+0x811/0xfa0 [ 632.922647][ T29] ? mutex_lock_nested+0x20/0x20 [ 632.928221][ T29] rtnetlink_rcv_msg+0x811/0xfa0 [ 632.933517][ T29] ? rtnetlink_rcv_msg+0x221/0xfa0 [ 632.938710][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 632.945509][ T29] ? rtnetlink_bind+0x80/0x80 [ 632.950721][ T29] ? perf_trace_preemptirq_template+0xac/0x330 [ 632.957452][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 632.963898][ T29] ? lock_chain_count+0x20/0x20 [ 632.968830][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.975473][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 632.980755][ T29] ? __local_bh_enable_ip+0x13a/0x1c0 [ 632.986250][ T29] ? _local_bh_enable+0xa0/0xa0 [ 632.991368][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 632.996647][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 633.001819][ T29] ? __dev_queue_xmit+0x1b2c/0x3660 [ 633.007619][ T29] ? __dev_queue_xmit+0x265/0x3660 [ 633.012808][ T29] ? __mod_lruvec_page_state+0xa5/0x410 [ 633.018806][ T29] ? ref_tracker_free+0x690/0x840 [ 633.024296][ T29] netlink_rcv_skb+0x241/0x4d0 [ 633.029138][ T29] ? rtnetlink_bind+0x80/0x80 [ 633.034458][ T29] ? netlink_ack+0x1180/0x1180 [ 633.039312][ T29] ? __lock_acquire+0x7d40/0x7d40 [ 633.044880][ T29] ? netlink_deliver_tap+0x2e/0x1b0 [ 633.050168][ T29] netlink_unicast+0x751/0x8d0 [ 633.055960][ T29] netlink_sendmsg+0x8d0/0xbf0 [ 633.060896][ T29] ? netlink_getsockopt+0x590/0x590 [ 633.066455][ T29] ? aa_sock_msg_perm+0x94/0x150 [ 633.071460][ T29] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 633.079531][ T29] ? security_socket_sendmsg+0x80/0xa0 [ 633.085580][ T29] sock_write_iter+0x2df/0x420 [ 633.090509][ T29] ? sock_read_iter+0x3e0/0x3e0 [ 633.097840][ T29] ? common_file_perm+0x198/0x1f0 [ 633.104392][ T29] vfs_write+0x46c/0x990 [ 633.108774][ T29] ? file_end_write+0x250/0x250 [ 633.115672][ T29] ? __fget_files+0x43d/0x4b0 [ 633.120423][ T29] ? __fdget_pos+0x1d8/0x330 [ 633.126173][ T29] ? ksys_write+0x75/0x260 [ 633.130673][ T29] ksys_write+0x150/0x260 [ 633.135193][ T29] ? __ia32_sys_read+0x90/0x90 [ 633.140051][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 633.146562][ T29] do_syscall_64+0x55/0xb0 [ 633.151029][ T29] ? clear_bhb_loop+0x40/0x90 [ 633.158028][ T29] ? clear_bhb_loop+0x40/0x90 [ 633.162877][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.169897][ T29] RIP: 0033:0x7fd942f9ce59 [ 633.175135][ T29] RSP: 002b:00007fd943dc8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 633.186852][ T29] RAX: ffffffffffffffda RBX: 00007fd943216090 RCX: 00007fd942f9ce59 [ 633.195212][ T29] RDX: 000000000000fe33 RSI: 0000200000000240 RDI: 000000000000000d [ 633.203396][ T29] RBP: 00007fd943032d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.211617][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.219688][ T29] R13: 00007fd943216128 R14: 00007fd943216090 R15: 00007ffcf9d53628 [ 633.227772][ T29] [ 633.230905][ T29] INFO: task syz.3.2507:13498 blocked for more than 145 seconds. [ 633.238762][ T29] Not tainted syzkaller #0 [ 633.243899][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 633.252614][ T29] task:syz.3.2507 state:D stack:25800 pid:13498 ppid:12506 flags:0x00004004 [ 633.262206][ T29] Call Trace: [ 633.273154][ T29] [ 633.276158][ T29] __schedule+0x1553/0x45a0 [ 633.281222][ T29] ? arch_stack_walk+0x160/0x190 [ 633.286651][ T29] ? asan.module_dtor+0x20/0x20 [ 633.291554][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 633.296652][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 633.302159][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 633.308786][ T29] schedule+0xbd/0x170 [ 633.313159][ T29] schedule_preempt_disabled+0x13/0x20 [ 633.318676][ T29] __mutex_lock+0x6a9/0xcc0 [ 633.323553][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 633.328303][ T29] ? dev_ethtool+0x1e2/0x18d0 [ 633.333402][ T29] ? mutex_lock_nested+0x20/0x20 [ 633.338417][ T29] dev_ethtool+0x1e2/0x18d0 [ 633.343027][ T29] ? module_enforce_rwx_sections+0x150/0x150 [ 633.349227][ T29] ? ethtool_get_module_eeprom_call+0x170/0x170 [ 633.355794][ T29] ? apparmor_capable+0x137/0x1a0 [ 633.360900][ T29] ? dev_load+0x21/0x1f0 [ 633.365809][ T29] dev_ioctl+0x392/0x1140 [ 633.370212][ T29] sock_do_ioctl+0x239/0x310 [ 633.376227][ T29] ? sock_show_fdinfo+0xb0/0xb0 [ 633.381681][ T29] sock_ioctl+0x5ba/0x7e0 [ 633.387002][ T29] ? sock_poll+0x3e0/0x3e0 [ 633.391505][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 633.396771][ T29] ? security_file_ioctl+0x80/0xa0 [ 633.401955][ T29] ? sock_poll+0x3e0/0x3e0 [ 633.406752][ T29] __se_sys_ioctl+0xfd/0x170 [ 633.411599][ T29] do_syscall_64+0x55/0xb0 [ 633.416532][ T29] ? clear_bhb_loop+0x40/0x90 [ 633.421293][ T29] ? clear_bhb_loop+0x40/0x90 [ 633.426311][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 633.432279][ T29] RIP: 0033:0x7fd942f9ce59 [ 633.437017][ T29] RSP: 002b:00007fd943da7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.445706][ T29] RAX: ffffffffffffffda RBX: 00007fd943216180 RCX: 00007fd942f9ce59 [ 633.453931][ T29] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000f [ 633.461962][ T29] RBP: 00007fd943032d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.470264][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.478663][ T29] R13: 00007fd943216218 R14: 00007fd943216180 R15: 00007ffcf9d53628 [ 633.487516][ T29] [ 633.490624][ T29] [ 633.490624][ T29] Showing all locks held in the system: [ 633.498708][ T29] 1 lock held by khungtaskd/29: [ 633.503862][ T29] #0: ffffffff8d132160 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 633.514102][ T29] 2 locks held by kworker/u4:3/49: [ 633.519291][ T29] 2 locks held by getty/5527: [ 633.524275][ T29] #0: ffff888031e800a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 633.534314][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 633.544706][ T29] 4 locks held by kworker/u4:20/6185: [ 633.550137][ T29] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.561792][ T29] #1: ffffc9000c377d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.572983][ T29] #2: ffffffff8e3b6a50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 633.582514][ T29] #3: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xf2/0xa80 [ 633.595428][ T29] 3 locks held by kworker/u4:23/6195: [ 633.600872][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.612679][ T29] #1: ffffc9000c1f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.624940][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 633.634157][ T29] 3 locks held by kworker/1:3/12624: [ 633.639484][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.652055][ T29] #1: ffffc900035afd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.663606][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 633.673479][ T29] 3 locks held by kworker/u4:2/13445: [ 633.678881][ T29] #0: ffff88802c7da538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.692229][ T29] #1: ffffc9000418fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 633.707492][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 633.717380][ T29] 1 lock held by syz.0.2502/13481: [ 633.722538][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 633.731630][ T29] 1 lock held by syz.1.2503/13484: [ 633.736940][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 633.746239][ T29] 1 lock held by syz.2.2505/13491: [ 633.751416][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.761131][ T29] 3 locks held by syz.2.2505/13492: [ 633.766627][ T29] #0: ffffffff8e428730 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 633.775145][ T29] #1: ffffffff8e428548 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x10c/0x7a0 [ 633.784444][ T29] #2: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_new_nm+0x6ff/0x1990 [ 633.794388][ T29] 1 lock held by syz.3.2507/13496: [ 633.799573][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x83c/0x1140 [ 633.808775][ T29] 1 lock held by syz.3.2507/13497: [ 633.816541][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.827071][ T29] 1 lock held by syz.3.2507/13498: [ 633.832217][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: dev_ethtool+0x1e2/0x18d0 [ 633.845948][ T29] 1 lock held by syz-executor/13503: [ 633.851339][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.862240][ T29] 1 lock held by syz-executor/13507: [ 633.870085][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.880717][ T29] 1 lock held by syz-executor/13511: [ 633.887673][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.898318][ T29] 1 lock held by syz-executor/13513: [ 633.904192][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.913969][ T29] 1 lock held by syz-executor/13525: [ 633.919303][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.930388][ T29] 1 lock held by syz-executor/13527: [ 633.936019][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.945850][ T29] 1 lock held by syz-executor/13532: [ 633.951183][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.961049][ T29] 1 lock held by syz-executor/13535: [ 633.966601][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.979774][ T29] 1 lock held by syz-executor/13548: [ 633.985525][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 633.995833][ T29] 1 lock held by syz-executor/13552: [ 634.001180][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 634.012062][ T29] 1 lock held by syz-executor/13556: [ 634.017664][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 634.027537][ T29] 1 lock held by syz-executor/13558: [ 634.033167][ T29] #0: ffffffff8e3c3a88 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 634.042684][ T29] 2 locks held by dhcpcd/13569: [ 634.048317][ T29] #0: ffff888025cd4130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 634.058434][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x306/0x880 [ 634.070574][ T29] 2 locks held by dhcpcd/13570: [ 634.075693][ T29] #0: ffff888054324130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 634.085735][ T29] #1: ffffffff8d137b38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 634.097648][ T29] [ 634.107171][ T29] ============================================= [ 634.107171][ T29] [ 634.116083][ T29] NMI backtrace for cpu 0 [ 634.120467][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 634.127691][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.137801][ T29] Call Trace: [ 634.141333][ T29] [ 634.144661][ T29] dump_stack_lvl+0x18c/0x250 [ 634.149410][ T29] ? show_regs_print_info+0x20/0x20 [ 634.155462][ T29] ? load_image+0x420/0x420 [ 634.160028][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 634.165710][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 634.173339][ T29] ? _printk+0xde/0x130 [ 634.177554][ T29] ? load_image+0x420/0x420 [ 634.182129][ T29] ? load_image+0x420/0x420 [ 634.186727][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 634.192954][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 634.199100][ T29] watchdog+0xf3d/0xf80 [ 634.203358][ T29] ? watchdog+0x1e1/0xf80 [ 634.207735][ T29] kthread+0x2fa/0x390 [ 634.211842][ T29] ? hungtask_pm_notify+0x90/0x90 [ 634.216899][ T29] ? kthread_blkcg+0xd0/0xd0 [ 634.221691][ T29] ret_from_fork+0x48/0x80 [ 634.227527][ T29] ? kthread_blkcg+0xd0/0xd0 [ 634.232948][ T29] ret_from_fork_asm+0x11/0x20 [ 634.238713][ T29] [ 634.242685][ T29] Sending NMI from CPU 0 to CPUs 1: [ 634.248281][ C1] NMI backtrace for cpu 1 [ 634.248293][ C1] CPU: 1 PID: 12 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 634.248310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.248321][ C1] Workqueue: bat_events batadv_nc_worker [ 634.248456][ C1] RIP: 0010:lock_acquire+0x16b/0x420 [ 634.248479][ C1] Code: 9c 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 43 c6 44 3c 08 f8 fa 48 c7 c7 c0 d8 ca 8a e8 9c cf 1e 09 65 ff 05 5d 58 9a 7e <45> 31 c9 41 f7 c6 00 02 00 00 41 0f 94 c1 4c 89 ef 8b 74 24 1c 89 [ 634.248493][ C1] RSP: 0018:ffffc90000117a40 EFLAGS: 00000002 [ 634.248506][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: df930ad67bfc1f00 [ 634.248518][ C1] RDX: 0000000000000000 RSI: ffffffff8acad8c0 RDI: ffffffff8b1c9860 [ 634.248530][ C1] RBP: ffffc90000117b48 R08: ffffffff8e8b2fef R09: 1ffffffff1d165fd [ 634.248542][ C1] R10: dffffc0000000000 R11: fffffbfff1d165fe R12: 1ffff92000022f54 [ 634.248554][ C1] R13: ffffffff8d132160 R14: 0000000000000246 R15: dffffc0000000000 [ 634.248566][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 634.248580][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.248591][ C1] CR2: 00005583c998e660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 634.248607][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.248617][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 634.248627][ C1] Call Trace: [ 634.248635][ C1] [ 634.248645][ C1] ? batadv_nc_worker+0xd2/0x610 [ 634.248663][ C1] ? read_lock_is_recursive+0x20/0x20 [ 634.248684][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 634.248707][ C1] ? batadv_nc_worker+0xd2/0x610 [ 634.248724][ C1] batadv_nc_worker+0xef/0x610 [ 634.248741][ C1] ? batadv_nc_worker+0xd2/0x610 [ 634.248760][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 634.248782][ C1] process_scheduled_works+0xa5d/0x15d0 [ 634.248816][ C1] ? worker_attach_to_pool+0x380/0x380 [ 634.248846][ C1] ? assign_work+0x3d2/0x5d0 [ 634.248869][ C1] worker_thread+0xa55/0xfc0 [ 634.248901][ C1] kthread+0x2fa/0x390 [ 634.248917][ C1] ? pr_cont_work+0x560/0x560 [ 634.248938][ C1] ? kthread_blkcg+0xd0/0xd0 [ 634.248954][ C1] ret_from_fork+0x48/0x80 [ 634.248975][ C1] ? kthread_blkcg+0xd0/0xd0 [ 634.248992][ C1] ret_from_fork_asm+0x11/0x20 [ 634.249021][ C1] [ 634.263578][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 634.263648][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 634.263709][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.263746][ T29] Call Trace: [ 634.263778][ T29] [ 634.263800][ T29] dump_stack_lvl+0x18c/0x250 [ 634.263880][ T29] ? show_regs_print_info+0x20/0x20 [ 634.263943][ T29] ? load_image+0x420/0x420 [ 634.264054][ T29] panic+0x2dc/0x730 [ 634.264144][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 634.264221][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 634.264319][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 634.264385][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 634.264466][ T29] watchdog+0xf7c/0xf80 [ 634.264539][ T29] ? watchdog+0x1e1/0xf80 [ 634.264621][ T29] kthread+0x2fa/0x390 [ 634.264672][ T29] ? hungtask_pm_notify+0x90/0x90 [ 634.264756][ T29] ? kthread_blkcg+0xd0/0xd0 [ 634.264796][ T29] ret_from_fork+0x48/0x80 [ 634.264864][ T29] ? kthread_blkcg+0xd0/0xd0 [ 634.264919][ T29] ret_from_fork_asm+0x11/0x20 [ 634.265029][ T29] [ 634.266175][ T29] Kernel Offset: disabled [ 634.603905][ T29] Rebooting in 86400 seconds..