last executing test programs: 6.400898733s ago: executing program 4 (id=15424): r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x39, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6623, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00', 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x41, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r4, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1}, 0x4c810) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRES16=r5, @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$ITER_CREATE(0xb, 0x0, 0xffffffffffffffb8) close(r6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/uts\x00') bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520000a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1}, 0x0) 5.651871282s ago: executing program 4 (id=15430): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 5.260666451s ago: executing program 4 (id=15436): r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x11, 0x68, 0x0, 0x0) socket$kcm(0x25, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003}, 0x38) socket$kcm(0x11, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="08000000040000"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x200}, 0x10002a, 0x5, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000013c0)="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"/627, 0x273}, {&(0x7f0000000380)="b0fef28adda42f55a0000000000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb289462231", 0x64}, {&(0x7f00000004c0)="e64df5ed05", 0x5}], 0x3}, 0x0) recvmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r3) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000000c0), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000036000b63717a3c4a0ed8980004000078", 0x14}], 0x1}, 0x40000) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000) close(0x3) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7ff, 0x7}, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x10, 0x2, 0x0) 4.957793049s ago: executing program 4 (id=15441): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0xffff0f00, 0x0, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x3e}, 0x28) 4.788478823s ago: executing program 4 (id=15443): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x80, 0x0}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) write$cgroup_type(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) close(r3) (async) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x3}}, 0x80, 0x0}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) (async) write$cgroup_type(r6, 0x0, 0x0) (async) 4.5081535s ago: executing program 4 (id=15448): socket$kcm(0x10, 0x2, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)='%-010d \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f0000000200)="44cb3db6e3daaaa73b34357dc5ede90038d4ad6ae4ffec5072686fe2109002dcb68796ee6bd202d275c1412dd9dc6d05f31121b1c127a25983aaf4ced1186bcc51ae78a13bed1e449d2cef577c7c51dab77d9f53b9da6a2ee3562aa3bb7acec66809773a9d6aa9d46148d7cfbaf8b4ffac07053921e0449237da1cf468cecd3282", &(0x7f00000002c0)=""/37}, 0x20) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b32, 0x0) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r3 = gettid() perf_event_open(0x0, r3, 0x8, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x1, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8941, &(0x7f0000000080)) (async) close(r1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3eda", @ANYRES8=r7], 0xf) (async) r9 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x4, 0x5, 0x34, 0x8, 0x0, 0x800, 0x43000, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x800, 0x2, @perf_bp={&(0x7f00000007c0), 0x2}, 0x100, 0x7acb01dc, 0x5, 0x9, 0x1, 0x1, 0x8, 0x0, 0x8c, 0x0, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f0000000740)={0x0, 0x80, 0x80, 0x90, 0x40, 0x0, 0x0, 0x400, 0x80002, 0x5, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x1, @perf_bp={&(0x7f0000000580)}, 0x1000, 0x1, 0x76400000, 0x9, 0x80000000, 0x5, 0x7, 0x0, 0xc, 0x0, 0x1000}, r8, 0x1, r9, 0x0) (async) r10 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e965df26c1c1274, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = perf_event_open$cgroup(&(0x7f0000000880)={0x2, 0x80, 0x1, 0x0, 0x9, 0xc0, 0x0, 0x2, 0x48000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000380), 0x8}, 0x0, 0xffffffff, 0x6, 0x7, 0x4, 0x6, 0x2, 0x0, 0xf, 0x0, 0xe}, 0xffffffffffffffff, 0x3, r10, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2024, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f00000003c0), 0x5}, 0x1008d0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, r11, 0x8) 3.084855625s ago: executing program 2 (id=15459): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffd, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) sendmsg(0xffffffffffffffff, 0x0, 0x4000) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0x247}, 0x1, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x9, 0xffffffffffffffff, 0xa) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x301) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000005000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r0, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000001000100c30f00000500000000000400", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0100000001100000030000000000000000ec0000"], 0x50) 2.960598158s ago: executing program 0 (id=15461): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 2.908854869s ago: executing program 2 (id=15462): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/14, 0xe}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x10c002, 0xac5d, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3e0002"], 0x9a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0xad, 0x9, 0x0, 0x3ff000000, 0x10, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x101}, 0xa, 0x8, 0x6, 0x9, 0x7, 0x5, 0x4, 0x0, 0x4, 0x0, 0x80000000}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff02"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x30, &(0x7f0000000100), 0x5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.168511157s ago: executing program 3 (id=15463): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc3, 0xc3, 0x6, [@type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @float={0x5, 0x0, 0x0, 0x10, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @ptr={0x8, 0x0, 0x0, 0x2, 0x5}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x0, [{0xc, 0x4, 0x2}, {0x2, 0x1}, {0xf, 0x0, 0x1}]}, @datasec={0x1, 0x6, 0x0, 0xf, 0x3, [{0x2, 0x0, 0x80000000}, {0x3, 0x874, 0x9}, {0x4, 0x30, 0x1}, {0x4, 0xfffffffc, 0x3}, {0x1, 0x8, 0x5}, {0x5, 0x2, 0x3}], "441b16"}]}, {0x0, [0x2e, 0x5f, 0x2e, 0x2e]}}, &(0x7f0000000b80)=""/83, 0xe2, 0x53, 0x0, 0x0, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x20, &(0x7f0000000080)={&(0x7f00000001c0)=""/111, 0x6f, 0x0, &(0x7f00000009c0)=""/173, 0xad}}, 0x10) 2.146391268s ago: executing program 1 (id=15464): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x21, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x3e}, 0x28) 2.0689965s ago: executing program 0 (id=15465): r0 = socket$kcm(0x2b, 0x1, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x6004, 0x0, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40086602, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) close(r0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r0) 1.940928953s ago: executing program 2 (id=15466): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) (rerun: 32) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x17, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @exit, @ldst={0x2, 0x0, 0x0, 0x0, 0x2, 0x198, 0x1}, @btf_id={0x18, 0xe74cbcb37dacd696, 0x3, 0x0, 0x4}, @generic={0x3, 0x6, 0x0, 0x2, 0x1f}]}, &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, &(0x7f00000002c0), 0x41100, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000340)=[{0x2, 0x5, 0xe, 0x9}, {0x3, 0x5, 0xa, 0xc}, {0x1, 0x1, 0x7, 0x1a1a0b5398e9b011}, {0x3, 0x5, 0x2, 0x8}, {0x3, 0x5, 0xf, 0xc}, {0x3, 0x1, 0x0, 0x9}, {0x0, 0x2, 0xb, 0xa}, {0x2, 0x4, 0x8, 0x7}, {0x0, 0x1, 0x10, 0xc}, {0x3, 0x3, 0x3, 0x3}], 0x10, 0x401}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x13, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@map_fd={0x18, 0xa, 0x1, 0x0, r0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x8, &(0x7f0000000100)=""/8, 0x41100, 0x47, '\x00', 0x0, @fallback=0x34, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x1, 0xd, 0xfffffff9, 0xffffffff}, 0x10, 0x0, r2, 0x2, 0x0, &(0x7f00000004c0)=[{0x2, 0x2, 0x1, 0x2}, {0x4, 0x4, 0xe, 0x4}], 0x10, 0x7}, 0x94) r4 = perf_event_open$cgroup(&(0x7f00000006c0)={0x7, 0x80, 0x9, 0x7c, 0x1, 0x1, 0x0, 0x4, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000680), 0x2}, 0x10500, 0x5, 0xab0a, 0x6, 0x8, 0x44, 0xfff0, 0x0, 0x401, 0x0, 0x6}, r3, 0x9, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x9, 0x1, 0x8, 0x7, 0x0, 0x1, 0x24, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f00000005c0), 0x1}, 0x202, 0xff, 0xffffff98, 0x2, 0x3, 0x1, 0x81, 0x0, 0x70, 0x0, 0xb5f}, 0xffffffffffffffff, 0x6, r4, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000780)={0x2, 0x80, 0x80, 0xc1, 0x3, 0xa, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000740), 0x1}, 0x4000, 0x9, 0x7, 0x0, 0x0, 0x6, 0x9, 0x0, 0x57, 0x0, 0x9}, 0xffffffffffffffff, 0x8, r5, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000800)=0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x400200, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000880)="ff2be12f2317c584ef312ee8bba3f5a960cc5c1a8e377ce18ef7454dbe328b162d77b595c5c8ad53721692c817e30550708a7f39412336f677e7741b675e298f88c20bf8f8b202679eda55e925997c6ea9dae65328df880838ea718180c9eee5b78aa83ce74703d8758f77053fc9cb86a461f7e581983d48f7acb6011363115ee32e0b01c1c609034557d31116691ace1b597e71c52cd79fdddac4a998c55af1ae29fb631aff2c0016ee1d2a171745ed07b343c1e2a67f84f5d82616358084b863f9cf6e6b547485f40c2529bc80a110b6", 0xd1}, {&(0x7f0000000980)="e336254a79a411fff58afd74791914c17d671d3662e91125ddbb55f720ac1fd1b930546ebde2c0184f4cf4d6beeae34a1c965cfe51bb1f40bc490b9d8ace342b302effda78dce3ff05ac5edef6182bf508fa0ca22ee9e0394632f7acb4b8e307345664d33d7aef60fa1b4d86439c0e8fe14a3a08094dbbb52f0ba47b6d18c170cb05843135be91f978491cba332f6e747a8fef9820e2d56a229d3298ed8eaf2768f1ced0c63867e7400bf8e14c044d964c12147a84b48181a0c45812087921dad3e716", 0xc3}, {&(0x7f0000000a80)="bef08e2582e85a2cc6f5fda0f6b57c983700a5ddf86591a64baba3ef690b804818a148c342a2c937617c91d14581754b4a2d5df8cf4a03e9cb1c26c4684b96f86060008507f2a56f2dc2c14b61e34adbe7478c4aec927183fc5d3c52e549e08801da2b432a466bc81c90287710930e565338bc5d42bbdc11ef517aa7a3bfe4a45f5cb466612ae4847e9346e35da14dcec369b387268853ce2248f6c960486ad95534cd550590824660b0675d6c9a8ea784ef21004bd4ce40c2597e78109bbd718e036faadda4a74e48e4889089746263a64c9d6ef27d868f49fdabf6717d8f6530949daeb35f0fa22375f0154540e6", 0xef}, {&(0x7f0000000b80)="ca455c686ccc3e8eba82098c61f9d0e9dfc953e1d51372198cd54fb4fda6d9e38a0a932cc3407feed586a92ea0ee19b8c993c2b0ef3ae233f3a7c7de9bf84e586a1349e703c01ce314cf193d2d2c4d5d906f57b2780fea8ce32fc7aea36a0a76ca1b53224b23e1f2ee99ea3fbd0f857f0de63c9bbb6ce7165c6852fb38fe", 0x7e}, {&(0x7f0000000c00)="713132faaf8afe36a8fb066b346c89b94016a6b5ab7f5aa5ef2d98cb0ace1cdd5676189de24762ca6c2dd7465fceb9f4b0fca0a2678fa0b01300c3327cff33ef234d253da1181ae0bccc2a7d4fbfd43c15d70abfb18bdef0da766157dcb14a4d7b476772db797813876b01504563acf9fc4de996b18452f8b899a0666f9e77c6945b6818f3aa57cb54e883bad6b9fa9a17cb9f057b5b20d9f48a13d91daefff48445c0f996843d1e110784728ea0522ca7c5c65b32b4fa7ec41eca1176583c55fb2caf3e9f614a24c1778e1702df8e6462f495eb515768f529499ef1afaeed21e9825f2b99e9bd74f952199e615b999b4d", 0xf1}, {&(0x7f0000000d00)="1218df92e44e67d7f50f2a5c064cce4106188b06c674d343519ffadc3413fa695b2b1bd07c297152b562ca82888b199080c8a51f0e3ac3912c6acea2e5491b87caa508ad2c4f78b32da65a03e1426d", 0x4f}, {&(0x7f0000000d80)="ccf2955ce04b34562b76196ab9ee5a324091f14fda80d1877b317ed1b31bae030586949a5b05b73966b0afa52cebf16fc05b7029b8d014af16342085a0b7b9fa7b1b5900047abca46ccdcc25ddaf79a311b538ef772a3fc5dafbe5ec9ae0c7d4d999e990488467211eaad129ec0f417b0dcea78569e819da3dc01f244b56a53060f1ef41ae30420af6eb095b3b52611451606a025ee71781aad4c0cb60612adf11ebfeb5ab97c1988eb774ca57739eb37593c3ae4fbf7844e5a42f79c7eecf00ed653c13ee", 0xc5}, {&(0x7f0000000e80)="d9be1fb63c0823390b32cda50fcc92a90a0d261b17ba863e40ebeab9569e9f13f239da3a03287b0cabd5e6bcde2d9ca335eaf608943f69bc93a2986b0d8838adb3413f7dfeda0bb52234459194dffd4d489ca74b6468785869e88df7bb0fed5a41bc4725865e9a09a8f5b32c6566d4d316bd27c7430f33533a2c89486f189ecda4c730c027084759ab8f1b1c328079ef93901af1627fc79384ce81626dc6e91402efd3efab4c6ba6c5b4104be724", 0xae}, {&(0x7f0000000f40)="99f2399bc889ba8e9439a9d5af4bc6d4390d08bafddbf828188b8fa81ecfb9d18a4671732efdb9e0a648edbd35a0121bc1a060d0dbbc4ab80675118ec845c18d13fc35c4edf8dbd1879a4721dd5fca708c69f5d5faa2ca7eb284062564af2d03d4eacef4dc696e5ecdaa5bbc11ab20", 0x6f}], 0x9, &(0x7f0000001080)=[{0xc0, 0x102, 0x7, "064c8c34dbbb39669d113881a527ff5b3f88353e82eea457a757484f78f000420397630ab98e0dbe04f297bbe8a818d4e57ff72a7cb0a2b5c0939429e611ff497171b7ddc94761b506274028b63077be92d1a275fc06434f0db43c01667c02fb9cbef9d1850a9ee5c5ce144c41ebfc6766d6a566acfad3e0bcb20725751d5ce33e4e654581c0860a5a4f712d5a4e6c519e5d9d631e3f1e258d374916ffbef279ea5e62faf4beaec073f8"}, {0xc0, 0x1, 0x80000000, "2420ecd10e6f1996bf18fcfb7b0d00ae3a4198b096e3a296bd96f6ea636c5f3ce845066905aa790c04303bb89d8b8fb1b54c7b2a02bb6ef43336676fa5180d30262156f1bbcec9cf0942d39355f5cf38631d304823da321edf1f6c9edb43a9a612ad045087cc445377bfd3836eda6dfbb59227a745ae8c8cdf5634b170222970ca15e23efec9898db8e4678f89055097c85c3cfed47f149f689de98463f1b7044a8a3013d2150f730ea55a35068c6c"}, {0xa0, 0x110, 0x2, "8a344a723b11020878f07bf04891d280dc64b41f420df85f3b59151cf0b36dd86bd0998f218da646e5a563f767e186b4d22572745a8ae5832e58e07275a0472d0a18b802292ab5e6b608cda4e52f9d4b10835555cca08f12a3e78056dcf07b03860111fd6ae0f05986ac3f764bf3ee7de2cda959fd5e98d7b1cec0f89ae323e1b37b018dd799986cb3"}, {0x40, 0xff, 0xf6, "5f7ea4541e0fd16217b68c3ee3e5ae17952f093fda7b002a5044ada8652d2bee3fdf6a00a6e0220e678c75541f9ef4"}], 0x260}, 0x80) (async) ioctl$TUNSETVNETLE(r7, 0x400454dc, &(0x7f0000001340)) (async) close(0xffffffffffffffff) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000013c0)=@o_path={&(0x7f0000001380)='\x00', r2, 0x4000, r2}, 0x18) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000001400), 0x8) sendmsg$unix(r8, &(0x7f0000001ac0)={&(0x7f0000001440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f00000014c0)="5b5cde9bf2b0ad1fcfed3f0202b2b74adc88765969ee5b4d0ce68cae97584547a3c8e87161ce3490e394e2d8f1a243cac811898834c99aab851c19e5d12c04b1e628bb02c6746fcf55efa6cbfa4d5f42d467567e2b67fab4d61e6cd19a5f3f1c406a0c783d7d", 0x66}, {&(0x7f0000001540)="17d7f858d59ccc11ddfb81964759dfab7e86d333d607031441a7dedf839f91262d7eeaf8d6ce89395ef3aec5cf70a2f0715ea3c00edba493c9998a2a2824716aac8a9c1b6bbcb00dbc2a84acf9b04cda37ad95ec66c919b3aa7bc2763219bb973b20669b7d271d5de67d6c2f6b2acf789306655c93bcb70dc5b962e6bf9f6f392335d9ccb4cea2d19b6ae28430a283ea20afa64daef0483e93ba7d9c9335a44b6a51c067aa8f0ef6e5622f33bb0dea1da36d53a16a4fa0ce40792e5db4798c60dffc9b22a5fd9f7ca9555475fc50ed5b2c737baa7b2d77143b4d9b8b3c428b277565abb85208696606", 0xe9}, {&(0x7f0000001640)="26afc9e471e05938d3b830db6489e424724ca017ce854e584f31658fb5c4975ec0ab15455b8d773f86dfb484140726377cfe62ad4f64b6707ee68b586a0d476ef22787117c0a6f66fc5dd09a36c9d39f1f561de267bd52913df0a84decc6f82302d9f23162466dbffd1e37b19a94c31d18acd8bf2c52f4938ab7cf39f4dada401a8738cb699d371c28bc0a030bfd129c39ab044a79bd57aa0a3b21e438b3f94250c0454f5c329d654109ed41c596ae4655e0d7751118e339fff2f6abf4d9c676023ab4f5e836c6a5b1741f9694db6b3bd1ec7c1650e121efecd93916877f271fc89c15f5f55739aaf1f32b2ff132d065d23f2bef75ed4216be0950", 0xfb}, {&(0x7f0000001740)="16ba4c49ad135f4f575660b964c544a25d79a9457fb72474e20bf01d95b852bdf2d380bf5986a37c1ca79d96d52d7826266593518faa27337e1a8350a8c60e9c3befd128837fc73535e27530cdb4146dd4bbdec17c76b74805bdc53e3138f1b4f53b99d32c3c4f", 0x67}, {&(0x7f00000017c0)="d15a31125a650475e067c20a095a9f435cc93015ad1c2b0b77f85856450086cb9b8dcc11e0d3ba5ee0abad654a53960eebb2f569f6bac3e10ddc9b76a91d7d6586aeceeb7ec3dd2266c22af1daf84d0821f116aa6b4a42a7f6a1bb0f22a605490318a6a126b64ff98fbdd1f0154ed144cccfd10613010bd665a1650f1db63db4aca3e6fecfea65e6be37d6382bce23ee7894c4c799d3b6010856294b9f1c3bf0060747e3cae604aaeff195176520b601e56e", 0xb2}, {&(0x7f0000001880)="74d519879363222477164d5b90ecd532801aa64c0d2038823f9fc2a43c137e83cd9c23b680acbb1e", 0x28}, {&(0x7f00000018c0)="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", 0xfa}], 0x7, &(0x7f0000001a40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r3]}}], 0x48, 0x40000}, 0x40) sendmsg$sock(r8, &(0x7f0000003000)={&(0x7f0000001b00)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001b80)="b964620cfe585616b1a1d551169a1e76cbd85be158c425d08d586dddf0dee6357fdbfaa3f3e41f6e02de7472757680d09df43ee12805f3b664670d3b8a", 0x3d}, {&(0x7f0000001bc0)="88425721b6ecc747be63fde8d88b1414576e51cd6a3a", 0x16}, {&(0x7f0000001c00)="25a6e8e8e2d41ccde4326d365fd7152f2dd28e235b57acf640c997c707ab211de095fb4adae7f6bfb907e38fea9378d2f5612bb9d155560e1141d5a0ee0fad9defeee168cb5a53899fd9f20d8aecc4b694fdcc1f709137460a1945306a15486a13c76a41fb13a60d93755ebb405e1a199a2fe4b4aa62257b9705d767543ac48c2d0e3ee551c0a44b7cd5b450d5536656f7d6cfff3daebcf198cc504b96dfa5a30d824179867701e3e0e0eb6e", 0xac}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000002cc0)="b46c57d7ff7e973e54769a8e18184c3c3a9537d42f8da4a3444e1122f2021a836975390339f56dbd4fadffe76f70b0756e4ba8ea7338700cf51df89e15fa76614f0cb8d789ab75ed1f80384bab8a71ac61cfcc382d69e88a826698904c05f5feac405115f10c3152a68b4e6ecb3cf7769dc3e6d78b78fa8d221dadcaf43478ea2b1c8bdd22c15fbf0c4ac37dfaed7eb524605588298855ef7539f22cb92ec6184e97708a1541905c36ef8b9a914eb9ae66fd5dc8e8a9a6a6704cf75eea27b398f0f69e2897c94bfbf51d195064e77e04e9c706", 0xd3}, {&(0x7f0000002dc0)="5ee463625bade5dee8e3f686f9788d48dcfc94dde5df5181047d6b477e4fee0acde377b8c8071930426e8383c33a4cf5b3a06507bd3debd2f74723e7e44ea9239fcbe34956", 0x45}, {&(0x7f0000002e40)="899da77bbd4c5de43e537a22beba9c0aa09e58dd05f4887247ff202e695c1cf738", 0x21}], 0x7, &(0x7f0000002f00)=[@mark={{0x14, 0x1, 0x24, 0x7ce5c6a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x605}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9fa}}, @timestamping={{0x14, 0x1, 0x25, 0x2a7}}], 0xd8}, 0x4000000) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000003540)={&(0x7f0000003040)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000003400)=[{&(0x7f00000030c0)=""/49, 0x31}, {&(0x7f0000003100)=""/148, 0x94}, {&(0x7f00000031c0)=""/15, 0xf}, {&(0x7f0000003200)=""/161, 0xa1}, {&(0x7f00000032c0)=""/66, 0x42}, {&(0x7f0000003340)=""/38, 0x26}, {&(0x7f0000003380)=""/17, 0x11}, {&(0x7f00000033c0)=""/12, 0xc}], 0x8, &(0x7f0000003480)=""/186, 0xba}, 0x0) (async) socket$kcm(0x29, 0x7, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000035c0)={r8, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000003600)=@generic={&(0x7f0000003580)='./file0\x00', r9}, 0x18) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000003680)=@o_path={&(0x7f0000003640)='./file0\x00', 0x0, 0x10, r1}, 0x18) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003980)={r3, 0xe0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000036c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000003700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003740)=[0x0, 0x0, 0x0], 0x0, 0xd6, &(0x7f0000003780)=[{}], 0x8, 0x10, &(0x7f00000037c0), &(0x7f0000003800), 0x8, 0xb1, 0x8, 0x8, &(0x7f0000003840)}}, 0x10) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003bc0)={{r8, 0xffffffffffffffff}, &(0x7f0000003b40), &(0x7f0000003b80)=r8}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003c00)={&(0x7f00000039c0)="af644388ebffc63f788afa9c0de2bd2026add164e4e175109b4ef98169d2c604", &(0x7f0000003a00)=""/20, &(0x7f0000003a40)="9ce915d5bb96fcb385a48db975f36a9d9fd17ea2514f4f13d7e6c298744ec62649fab4507e836fd1769df067929248b4232ad716f49482d0632b23685bfc5df4fc3ac0d70c45ca2ec8783ce1a505c045007ce48b26b9a1af1fcb64cc2d68999165034bb17b3d220ff05977b33d", &(0x7f0000003ac0)="6266dceec280c848ad4980fb2d536aeeac1e05965bbf922f0ac47668c45c56e212a9707146b0e91b9ce3eedf217ddd99db748b3d28107fdf737c0667beb214617206ca8f326e1e1b5935205f6bc04dae85e4bef8003f64243ad79e442d44cd0dd73fdf", 0x564b99c8, r12, 0x4}, 0x38) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003d00)={r10, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003dc0)={0x11, 0xc, &(0x7f0000003c40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x489}}]}, &(0x7f0000003cc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r11, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003d40)=[0x1, r10, r13, r12], &(0x7f0000003d80)=[{0x4, 0x1, 0x8, 0xb}, {0x3, 0x5, 0x4}], 0x10, 0x81}, 0x94) (async) syz_clone(0x80, &(0x7f0000003e80)="7cf5d1066696", 0x6, &(0x7f0000003ec0), &(0x7f0000003f00), &(0x7f0000003f40)="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") (async, rerun: 32) openat$cgroup_int(r8, &(0x7f0000004f40)='cpu.weight.nice\x00', 0x2, 0x0) (async, rerun: 32) ioctl$TUNSETLINK(r7, 0x400454cd, 0x338) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000051c0)={0x11, 0x6, &(0x7f0000004f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0x8, 0x3, 0xa, 0x50, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xf}]}, &(0x7f0000004fc0)='syzkaller\x00', 0x8, 0x3e, &(0x7f0000005000)=""/62, 0x41000, 0xb, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005040)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000005080)={0x2, 0x6, 0x101, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000005140)=[r9, 0xffffffffffffffff, r0, r10, r9], &(0x7f0000005180)=[{0x3, 0x5, 0x10}, {0x2, 0x1, 0x0, 0x5}, {0x3, 0x1, 0x4, 0x2}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x80000000}, 0x94) 1.916018214s ago: executing program 1 (id=15467): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000090000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.848825465s ago: executing program 2 (id=15468): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x6, 0x1b, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x0, 0xc6, 0x4, 0x5, 0x0, 0x7, 0x61830, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000340), 0x4}, 0x8000, 0x27e1, 0x2, 0x5, 0x3f3, 0x1ff, 0x3, 0x0, 0x4, 0x0, 0x5fa8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x8, 0x1f, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @exit, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x6, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x4, 0x51, &(0x7f0000000680)=""/81, 0x41100, 0x12, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x0, 0x0, 0x508, 0x2}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000840)=[0xffffffffffffffff], &(0x7f0000000900)=[{0x4, 0x2, 0xa, 0xc}, {0x0, 0x4, 0xe, 0x1}, {0x4, 0x1, 0x0, 0x3}, {0x3, 0x2, 0xe, 0x8}]}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000050000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000001000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r4, 0x1, 0x2}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r3, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000b00)=[0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xcc, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xa, 0x6, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x3}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0x2, 0x8, 0xffffffffffffffe0, 0x4}]}, &(0x7f0000000a00)='syzkaller\x00', 0x7ff, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, @fallback=0x21, r4, 0x8, &(0x7f0000000a40)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000a80)={0x0, 0x1, 0x5, 0x3}, 0x10, r5, r3, 0x3, 0x0, &(0x7f0000000dc0)=[{0x0, 0x2, 0xa, 0x1}, {0x5, 0x5, 0xb, 0x8}, {0x0, 0x3, 0x7, 0x3}], 0x10, 0x7}, 0x94) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f0000003440)=""/4137, 0x1029}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000000c0)=""/16, 0x10}], 0x8}, 0x0) 1.832237306s ago: executing program 3 (id=15469): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40c}, 0x10c002, 0xac5d, 0x806, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000200), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000800000000015000600142603600e1209000d0000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400200000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.801535306s ago: executing program 1 (id=15470): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xb5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x22182, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001, 0x1, @perf_bp={0x0, 0x3}, 0x10781, 0x10, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000001900000000000000", @ANYRES32, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="05000000020000000300"/28], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x58, &(0x7f0000003fc0)}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, r2, 0x9, '\x00', 0x0, r1, 0x0, 0x5}, 0x50) 1.748838368s ago: executing program 0 (id=15471): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x16, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03316845268cb89614f00800", 0x0, 0x6000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000000000007111b103000000008510000002000000850000002a00000095000000000000009500a50500000000c01d8c0b495b9404449b2f736907966fb8bd1764617a4d34fad967d6def5ed45f503cbfb50f277a71bb15bce024819d45afbdad9e983eb814c5e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000000000b70400000000000085000000c3000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r3, r2}, 0xc) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xa000000, &(0x7f0000000080)=[{&(0x7f0000000040)="140000001c000b63d25a80648c2594f91c24fc60", 0x14}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1ff4084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e0060000725c8bbb58", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r5, 0x84, 0x10, &(0x7f0000000000)=r8, 0xc) bpf$PROG_LOAD(0x1c, &(0x7f0000000680)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.532577093s ago: executing program 3 (id=15472): socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000240)) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb1", 0x47}, {&(0x7f0000000500)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae89a3816c910a61c28d2fa089f96b9807a8f55a832c4f11e448538ffcee0c6b822436a53c33c12f3a69d81efd66f3affa37aaa31c99041171824f069f392273bd5ce1a", 0x69}], 0x2, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e04, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.478416904s ago: executing program 2 (id=15473): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.', 0x1}], 0x1}, 0x80) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f00000001c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1.382690507s ago: executing program 0 (id=15474): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x11, 0x3, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 1.351280157s ago: executing program 1 (id=15475): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) (async) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e970100"/216, 0xd8}], 0x1}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x84) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x14090, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xb3b, 0xfffffffffffffff8}, 0x840, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070011000523a608463a3f", @ANYRES16=r2], 0xfe33) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000240)="d2ff03076003008cb89e08f088a8", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB="0600000000008fbbf966d013", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) 1.041636455s ago: executing program 1 (id=15476): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000b00)='>', 0x1}], 0x1}, 0x20000040) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/14, 0xe}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x10c002, 0xac5d, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0xffff, 0x8, 0xf9, 0x0, 0x2, 0x0, 0xea}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x2000c000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYBLOB="3e0002"], 0x9a) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r2) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f00000000c0)={0x1, 0x80, 0x7f, 0x8, 0xad, 0x9, 0x0, 0x3ff000000, 0x10, 0x7, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x7, 0x2, @perf_config_ext={0x101}, 0xa, 0x8, 0x6, 0x9, 0x7, 0x5, 0x4, 0x0, 0x4, 0x0, 0x80000000}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea032c00fe08000e40000200875a65969ff57b00ff02"], 0xfdef) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x30, &(0x7f0000000100), 0x5000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 466.813229ms ago: executing program 2 (id=15477): r0 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x0, 0x27, 0x0, 0x0) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, r0, 0xb) 465.551659ms ago: executing program 3 (id=15478): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @const={0x0, 0x300, 0x0, 0xb}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x3e}, 0x28) 241.010615ms ago: executing program 0 (id=15479): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000090000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/45}, 0x20) 240.478704ms ago: executing program 3 (id=15480): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0107180000000000000018e8f474f37521f3fcb682f6296a45201d0ab8a8405cff32b8e7000200961ec344f0dbdac60001ba000c02010000000000000000000d0000000000008e563f9d16b4f86e1093d4e8e26ecb8b1e500b2be272df28e84ffe9efc0b"], 0x0, 0x34, 0x0, 0x0, 0x100}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000f00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b000000000000000000000001000000000000006c07359717981b657f09d63fd881ae02f56a71f8257f12d52657834623c8b0342b56af86f8461d5f7a4c1ad65babaaa35e4e97c7ff9165fe31def41000000000000000f83710da12a852c159b9ec7c60cd8406c38efe606878230fc40cf362806a26f540bed5d9cb765eac2f6cc69e1b01ac1ff3603644e28982aa1d7bcfcf1f3bc1311f9020071da4786ef3025016dfe371480000000000", @ANYRES32, @ANYBLOB="ebc800"/20, @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="04000000000000000400"/28], 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001f40), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002000)={0xff, 0x0}, 0x8) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000ef0000", @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="0000000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x84, &(0x7f00000002c0)}, 0x10) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002040)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, r1, 0x2, 0x2, 0x5}, 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000aa600000300000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000f5fff1bc49c200"/28], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r10, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002140)={{0x1, 0xffffffffffffffff}, &(0x7f00000020c0), &(0x7f0000002100)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000040)=@raw=[@alu={0x4, 0x0, 0x0, 0x3, 0x72c22fc76a444f04, 0x18, 0x1}, @cb_func={0x18, 0x6}], &(0x7f0000000080)='syzkaller\x00', 0xb7d, 0x1000, &(0x7f0000000f40)=""/4096, 0x41100, 0x51, '\x00', r4, 0x1b, r5, 0x8, &(0x7f0000001f80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x2, 0xe, 0x2, 0x1}, 0x10, r6, 0x0, 0x6, &(0x7f0000002180)=[r8, 0x1, r0, r9, r0, r10, r1, r11, r0], &(0x7f00000021c0)=[{0x2, 0x2, 0xc, 0x3}, {0x2, 0x4, 0xe, 0x4}, {0x1, 0x2, 0xc, 0x4}, {0x5, 0x5, 0x9, 0x5}, {0x2, 0x4, 0xe, 0x1}, {0x1, 0x1, 0x2, 0x9}], 0x10, 0x3}, 0x94) 27.93013ms ago: executing program 0 (id=15481): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_pid(r1, &(0x7f0000000040), 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4020940d, &(0x7f0000000540)={'\x00', @link_local}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x40c}, 0x10c002, 0xac5d, 0x806, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000200), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000800000000015000600142603600e1209000d0000000401a80016000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92954b43370e970100", 0xd8}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="3c00000033000b12d25a80648c2594f90124fc60100c03400200000000200cbb9215a2281cf6b809f2db60490d20a735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.460201ms ago: executing program 3 (id=15482): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000090000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, &(0x7f0000000140), &(0x7f0000000080)=""/45}, 0x20) (fail_nth: 1) 0s ago: executing program 1 (id=15483): perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000200)=""/73}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000090000004000000003"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000240)="910c6af7e57f36d9b38b8bc275b2beae590ae20494bb797f25653ec13ce10a84749300000000000000000000000000001a4404ebb386154527a1240d92175f04ac7e71df62bcd07336deaeba6c2d9c162877ea3b71e8053b542baf49592c89f75b90e30c8a3e2f3f43e4244120cca219f0a61bb3a4e650dd76dfb2fca8baf72fb4cb04f7022640cdb0fbd374d365407209f6ce2839b7f256eefb61a3439c0823de", &(0x7f0000000080)=""/45}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0xd7c, 0x18}, 0xc) kernel console output (not intermixed with test programs): 222][T21682] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2130.647116][T21682] RIP: 0033:0x7fb588d9e0d9 [ 2130.651533][T21682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2130.671132][T21682] RSP: 002b:00007fb589cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2130.679542][T21682] RAX: ffffffffffffffda RBX: 00007fb589025fa0 RCX: 00007fb588d9e0d9 [ 2130.687532][T21682] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2130.695496][T21682] RBP: 00007fb589cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.703464][T21682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2130.711430][T21682] R13: 00007fb589026038 R14: 00007fb589025fa0 R15: 00007ffde2a35058 [ 2130.719411][T21682] [ 2132.676611][T21709] netlink: 'syz.2.14744': attribute type 13 has an invalid length. [ 2132.707900][T21709] netlink: 'syz.2.14744': attribute type 14 has an invalid length. [ 2132.751869][T21709] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14744'. [ 2132.830283][T21713] ref_ctr_offset mismatch. inode: 0xb92 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2133.033905][T21728] FAULT_INJECTION: forcing a failure. [ 2133.033905][T21728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.054382][T21723] netlink: 'syz.2.14747': attribute type 10 has an invalid length. [ 2133.071985][T21728] CPU: 1 PID: 21728 Comm: syz.4.14749 Not tainted syzkaller #0 [ 2133.079588][T21728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2133.089664][T21728] Call Trace: [ 2133.092952][T21728] [ 2133.095893][T21728] dump_stack_lvl+0x188/0x24e [ 2133.100593][T21728] ? show_regs_print_info+0x12/0x12 [ 2133.105791][T21728] ? load_image+0x410/0x410 [ 2133.110293][T21728] ? __lock_acquire+0x7c40/0x7c40 [ 2133.115319][T21728] should_fail_ex+0x390/0x4c0 [ 2133.119996][T21728] _copy_to_user+0x2c/0x130 [ 2133.124494][T21728] bpf_verifier_vlog+0x172/0x3a0 [ 2133.129434][T21728] __btf_verifier_log+0xdf/0x130 [ 2133.134369][T21728] ? btf_check_sec_info+0x350/0x350 [ 2133.139563][T21728] ? btf_parse_hdr+0x1dd/0x7d0 [ 2133.144324][T21728] btf_parse_hdr+0x42b/0x7d0 [ 2133.148934][T21728] btf_new_fd+0x367/0x760 [ 2133.153282][T21728] __sys_bpf+0x612/0x780 [ 2133.157542][T21728] ? bpf_link_show_fdinfo+0x380/0x380 [ 2133.162929][T21728] ? lock_chain_count+0x20/0x20 [ 2133.167783][T21728] __x64_sys_bpf+0x78/0x90 [ 2133.172196][T21728] do_syscall_64+0x4c/0xa0 [ 2133.176609][T21728] ? clear_bhb_loop+0x60/0xb0 [ 2133.181286][T21728] ? clear_bhb_loop+0x60/0xb0 [ 2133.185962][T21728] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2133.191855][T21728] RIP: 0033:0x7f91ccb9e0d9 [ 2133.196264][T21728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2133.215873][T21728] RSP: 002b:00007f91cda6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2133.224284][T21728] RAX: ffffffffffffffda RBX: 00007f91cce25fa0 RCX: 00007f91ccb9e0d9 [ 2133.232247][T21728] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2133.240210][T21728] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.248191][T21728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2133.256168][T21728] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2133.264143][T21728] [ 2133.868434][T21723] device geneve0 entered promiscuous mode [ 2134.236853][T21750] netlink: 'syz.2.14757': attribute type 13 has an invalid length. [ 2134.281371][T21750] netlink: 'syz.2.14757': attribute type 14 has an invalid length. [ 2134.317817][T21750] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14757'. [ 2134.635158][T21762] netlink: 172 bytes leftover after parsing attributes in process `syz.2.14762'. [ 2135.115405][T21767] ref_ctr_offset mismatch. inode: 0xac3 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2135.526212][T21786] FAULT_INJECTION: forcing a failure. [ 2135.526212][T21786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.582153][T21786] CPU: 1 PID: 21786 Comm: syz.1.14770 Not tainted syzkaller #0 [ 2135.589759][T21786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2135.599834][T21786] Call Trace: [ 2135.603129][T21786] [ 2135.606072][T21786] dump_stack_lvl+0x188/0x24e [ 2135.610783][T21786] ? show_regs_print_info+0x12/0x12 [ 2135.616010][T21786] ? load_image+0x410/0x410 [ 2135.620546][T21786] ? __lock_acquire+0x7c40/0x7c40 [ 2135.625613][T21786] should_fail_ex+0x390/0x4c0 [ 2135.630332][T21786] _copy_to_user+0x2c/0x130 [ 2135.634864][T21786] bpf_verifier_vlog+0x172/0x3a0 [ 2135.639838][T21786] __btf_verifier_log+0xdf/0x130 [ 2135.644813][T21786] ? btf_check_sec_info+0x350/0x350 [ 2135.650046][T21786] ? btf_parse_hdr+0x1dd/0x7d0 [ 2135.654834][T21786] btf_parse_hdr+0x456/0x7d0 [ 2135.659452][T21786] btf_new_fd+0x367/0x760 [ 2135.663814][T21786] __sys_bpf+0x612/0x780 [ 2135.668094][T21786] ? bpf_link_show_fdinfo+0x380/0x380 [ 2135.673512][T21786] ? lock_chain_count+0x20/0x20 [ 2135.678400][T21786] __x64_sys_bpf+0x78/0x90 [ 2135.682848][T21786] do_syscall_64+0x4c/0xa0 [ 2135.683817][T21791] netlink: 'syz.2.14772': attribute type 13 has an invalid length. [ 2135.687272][T21786] ? clear_bhb_loop+0x60/0xb0 [ 2135.687302][T21786] ? clear_bhb_loop+0x60/0xb0 [ 2135.687327][T21786] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2135.687352][T21786] RIP: 0033:0x7fc8b799e0d9 [ 2135.687371][T21786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2135.687388][T21786] RSP: 002b:00007fc8b889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2135.687412][T21786] RAX: ffffffffffffffda RBX: 00007fc8b7c25fa0 RCX: 00007fc8b799e0d9 [ 2135.687427][T21786] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2135.687440][T21786] RBP: 00007fc8b889b090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.687454][T21786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2135.687467][T21786] R13: 00007fc8b7c26038 R14: 00007fc8b7c25fa0 R15: 00007ffd2b31f108 [ 2135.687498][T21786] [ 2135.911679][T21791] netlink: 'syz.2.14772': attribute type 14 has an invalid length. [ 2135.947225][T21791] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14772'. [ 2137.055712][T21813] netlink: 'syz.3.14780': attribute type 29 has an invalid length. [ 2137.092082][T21813] netlink: 'syz.3.14780': attribute type 29 has an invalid length. [ 2137.116739][T21815] netlink: 'syz.3.14780': attribute type 29 has an invalid length. [ 2137.394920][T21814] ref_ctr_offset mismatch. inode: 0x4f1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2137.428131][T21826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14784'. [ 2140.634044][T21852] validate_nla: 4 callbacks suppressed [ 2140.634077][T21852] netlink: 'syz.0.14795': attribute type 13 has an invalid length. [ 2140.648833][T21852] netlink: 'syz.0.14795': attribute type 14 has an invalid length. [ 2140.658179][T21852] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14795'. [ 2140.734695][T21854] FAULT_INJECTION: forcing a failure. [ 2140.734695][T21854] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.747712][T21854] CPU: 1 PID: 21854 Comm: syz.0.14796 Not tainted syzkaller #0 [ 2140.755281][T21854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2140.765349][T21854] Call Trace: [ 2140.768636][T21854] [ 2140.771576][T21854] dump_stack_lvl+0x188/0x24e [ 2140.776284][T21854] ? show_regs_print_info+0x12/0x12 [ 2140.781502][T21854] ? load_image+0x410/0x410 [ 2140.786032][T21854] should_fail_ex+0x390/0x4c0 [ 2140.790735][T21854] should_failslab+0x5/0x20 [ 2140.795247][T21854] slab_pre_alloc_hook+0x59/0x300 [ 2140.800319][T21854] kmem_cache_alloc+0x56/0x2f0 [ 2140.805102][T21854] ? skb_clone+0x1e7/0x370 [ 2140.809561][T21854] skb_clone+0x1e7/0x370 [ 2140.813819][T21854] bpf_clone_redirect+0x169/0x4a0 [ 2140.818869][T21854] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 2140.824346][T21854] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2140.830343][T21854] ? __lock_acquire+0x7c40/0x7c40 [ 2140.835382][T21854] ? lock_chain_count+0x20/0x20 [ 2140.840264][T21854] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2140.846517][T21854] ? lockdep_hardirqs_on+0x94/0x140 [ 2140.851729][T21854] ? ktime_get+0x7b/0x270 [ 2140.856069][T21854] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2140.862334][T21854] ? ktime_get_real_ts64+0x440/0x440 [ 2140.867636][T21854] ? read_lock_is_recursive+0x10/0x10 [ 2140.873025][T21854] ? __cant_sleep+0x220/0x220 [ 2140.877723][T21854] ? bpf_test_timer_continue+0x142/0x380 [ 2140.883374][T21854] bpf_test_run+0x2b6/0x830 [ 2140.887929][T21854] ? dst_hold+0xb0/0xb0 [ 2140.892114][T21854] ? eth_get_headlen+0x200/0x200 [ 2140.897067][T21854] ? __build_skb+0x24b/0x3b0 [ 2140.901718][T21854] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 2140.907130][T21854] ? cpu_online+0xa0/0xa0 [ 2140.911478][T21854] bpf_prog_test_run+0x31c/0x390 [ 2140.916443][T21854] __sys_bpf+0x62b/0x780 [ 2140.920706][T21854] ? bpf_link_show_fdinfo+0x380/0x380 [ 2140.926117][T21854] ? lock_chain_count+0x20/0x20 [ 2140.930992][T21854] __x64_sys_bpf+0x78/0x90 [ 2140.935437][T21854] do_syscall_64+0x4c/0xa0 [ 2140.939870][T21854] ? clear_bhb_loop+0x60/0xb0 [ 2140.944563][T21854] ? clear_bhb_loop+0x60/0xb0 [ 2140.949257][T21854] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2140.955271][T21854] RIP: 0033:0x7fec1819e0d9 [ 2140.959722][T21854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2140.979348][T21854] RSP: 002b:00007fec163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2140.987784][T21854] RAX: ffffffffffffffda RBX: 00007fec18425fa0 RCX: 00007fec1819e0d9 [ 2140.995771][T21854] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 2141.003753][T21854] RBP: 00007fec163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2141.011735][T21854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2141.019717][T21854] R13: 00007fec18426038 R14: 00007fec18425fa0 R15: 00007ffe3c1e82a8 [ 2141.027722][T21854] [ 2141.904794][T21872] ref_ctr_offset mismatch. inode: 0xae9 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2142.379606][T21884] netlink: 'syz.0.14806': attribute type 13 has an invalid length. [ 2142.389827][T21884] netlink: 'syz.0.14806': attribute type 14 has an invalid length. [ 2142.398536][T21884] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14806'. [ 2142.635073][T21886] netlink: 'syz.0.14807': attribute type 25 has an invalid length. [ 2142.674014][T21886] netlink: 'syz.0.14807': attribute type 28 has an invalid length. [ 2145.617147][T21926] netlink: 'syz.4.14817': attribute type 13 has an invalid length. [ 2145.636269][T21926] netlink: 'syz.4.14817': attribute type 14 has an invalid length. [ 2145.657119][T21926] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14817'. [ 2146.473991][T21938] netlink: 2639 bytes leftover after parsing attributes in process `syz.1.14821'. [ 2146.582346][T21949] ref_ctr_offset mismatch. inode: 0x9e1 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2146.712562][T21950] mac80211_hwsim hwsim123 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2147.856084][T21984] FAULT_INJECTION: forcing a failure. [ 2147.856084][T21984] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.892508][T21984] CPU: 1 PID: 21984 Comm: syz.0.14838 Not tainted syzkaller #0 [ 2147.900125][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2147.910201][T21984] Call Trace: [ 2147.913492][T21984] [ 2147.916440][T21984] dump_stack_lvl+0x188/0x24e [ 2147.921155][T21984] ? show_regs_print_info+0x12/0x12 [ 2147.926388][T21984] ? load_image+0x410/0x410 [ 2147.930916][T21984] ? __might_sleep+0xd0/0xd0 [ 2147.935523][T21984] ? __lock_acquire+0x7c40/0x7c40 [ 2147.940571][T21984] ? trace_event_raw_event_lock+0x230/0x230 [ 2147.946489][T21984] should_fail_ex+0x390/0x4c0 [ 2147.951205][T21984] should_failslab+0x5/0x20 [ 2147.955727][T21984] slab_pre_alloc_hook+0x59/0x300 [ 2147.960782][T21984] kmem_cache_alloc+0x56/0x2f0 [ 2147.965566][T21984] ? __alloc_file+0x25/0x230 [ 2147.970186][T21984] __alloc_file+0x25/0x230 [ 2147.974623][T21984] alloc_empty_file+0x90/0x180 [ 2147.979411][T21984] alloc_file+0x5b/0x5f0 [ 2147.983677][T21984] alloc_file_pseudo+0x180/0x200 [ 2147.988638][T21984] ? alloc_empty_file_noaccount+0x80/0x80 [ 2147.994390][T21984] ? alloc_fd+0x590/0x640 [ 2147.998754][T21984] anon_inode_getfd+0xc6/0x1b0 [ 2148.003649][T21984] btf_new_fd+0x5d3/0x760 [ 2148.008012][T21984] __sys_bpf+0x612/0x780 [ 2148.012283][T21984] ? bpf_link_show_fdinfo+0x380/0x380 [ 2148.017682][T21984] ? lock_chain_count+0x20/0x20 [ 2148.022565][T21984] __x64_sys_bpf+0x78/0x90 [ 2148.027000][T21984] do_syscall_64+0x4c/0xa0 [ 2148.031423][T21984] ? clear_bhb_loop+0x60/0xb0 [ 2148.036100][T21984] ? clear_bhb_loop+0x60/0xb0 [ 2148.040780][T21984] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2148.046671][T21984] RIP: 0033:0x7fec1819e0d9 [ 2148.051082][T21984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2148.070685][T21984] RSP: 002b:00007fec163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2148.079096][T21984] RAX: ffffffffffffffda RBX: 00007fec18425fa0 RCX: 00007fec1819e0d9 [ 2148.087063][T21984] RDX: 0000000000000028 RSI: 0000200000000880 RDI: 0000000000000012 [ 2148.095027][T21984] RBP: 00007fec163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2148.102991][T21984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2148.110957][T21984] R13: 00007fec18426038 R14: 00007fec18425fa0 R15: 00007ffe3c1e82a8 [ 2148.118936][T21984] [ 2148.296116][T21993] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.14839'. [ 2148.333142][T21992] netlink: 2639 bytes leftover after parsing attributes in process `syz.2.14840'. [ 2148.951571][T22009] ref_ctr_offset mismatch. inode: 0xc00 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2149.149262][T22027] FAULT_INJECTION: forcing a failure. [ 2149.149262][T22027] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.197112][T22027] CPU: 1 PID: 22027 Comm: syz.1.14850 Not tainted syzkaller #0 [ 2149.204718][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2149.214767][T22027] Call Trace: [ 2149.218043][T22027] [ 2149.220966][T22027] dump_stack_lvl+0x188/0x24e [ 2149.225657][T22027] ? show_regs_print_info+0x12/0x12 [ 2149.230855][T22027] ? load_image+0x410/0x410 [ 2149.235361][T22027] should_fail_ex+0x390/0x4c0 [ 2149.240044][T22027] should_failslab+0x5/0x20 [ 2149.244545][T22027] slab_pre_alloc_hook+0x59/0x300 [ 2149.249567][T22027] kmem_cache_alloc+0x56/0x2f0 [ 2149.254326][T22027] ? skb_clone+0x1e7/0x370 [ 2149.258767][T22027] skb_clone+0x1e7/0x370 [ 2149.263004][T22027] bpf_clone_redirect+0x169/0x4a0 [ 2149.268057][T22027] bpf_prog_c6f54bbad6dab1ee+0x56/0x5b [ 2149.273517][T22027] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2149.279497][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 2149.284521][T22027] ? lock_chain_count+0x20/0x20 [ 2149.289372][T22027] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 2149.295632][T22027] ? lockdep_hardirqs_on+0x94/0x140 [ 2149.300826][T22027] ? ktime_get+0x7b/0x270 [ 2149.305150][T22027] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 2149.311390][T22027] ? ktime_get_real_ts64+0x440/0x440 [ 2149.316669][T22027] ? read_lock_is_recursive+0x10/0x10 [ 2149.322043][T22027] ? __cant_sleep+0x220/0x220 [ 2149.326715][T22027] ? bpf_test_timer_continue+0x142/0x380 [ 2149.332349][T22027] bpf_test_run+0x2b6/0x830 [ 2149.336859][T22027] ? dst_hold+0xb0/0xb0 [ 2149.341010][T22027] ? eth_get_headlen+0x200/0x200 [ 2149.345955][T22027] ? __build_skb+0x24b/0x3b0 [ 2149.350551][T22027] bpf_prog_test_run_skb+0xdaf/0x18e0 [ 2149.355934][T22027] ? cpu_online+0xa0/0xa0 [ 2149.360263][T22027] bpf_prog_test_run+0x31c/0x390 [ 2149.365204][T22027] __sys_bpf+0x62b/0x780 [ 2149.369445][T22027] ? bpf_link_show_fdinfo+0x380/0x380 [ 2149.374830][T22027] ? lock_chain_count+0x20/0x20 [ 2149.379708][T22027] __x64_sys_bpf+0x78/0x90 [ 2149.384123][T22027] do_syscall_64+0x4c/0xa0 [ 2149.388539][T22027] ? clear_bhb_loop+0x60/0xb0 [ 2149.393215][T22027] ? clear_bhb_loop+0x60/0xb0 [ 2149.397896][T22027] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2149.403789][T22027] RIP: 0033:0x7fc8b799e0d9 [ 2149.408207][T22027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.427821][T22027] RSP: 002b:00007fc8b887a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2149.436241][T22027] RAX: ffffffffffffffda RBX: 00007fc8b7c26090 RCX: 00007fc8b799e0d9 [ 2149.444210][T22027] RDX: 0000000000000050 RSI: 0000200000001b80 RDI: 000000000000000a [ 2149.452177][T22027] RBP: 00007fc8b887a090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.460146][T22027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.468111][T22027] R13: 00007fc8b7c26128 R14: 00007fc8b7c26090 R15: 00007ffd2b31f108 [ 2149.476106][T22027] [ 2149.902165][T22038] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.14854'. [ 2150.012217][T22036] netlink: 'syz.1.14855': attribute type 39 has an invalid length. [ 2150.049110][T22047] FAULT_INJECTION: forcing a failure. [ 2150.049110][T22047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2150.072780][T22036] device macvlan0 entered promiscuous mode [ 2150.101263][T22047] CPU: 0 PID: 22047 Comm: syz.2.14859 Not tainted syzkaller #0 [ 2150.108877][T22047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2150.118937][T22047] Call Trace: [ 2150.122215][T22047] [ 2150.125145][T22047] dump_stack_lvl+0x188/0x24e [ 2150.129834][T22047] ? show_regs_print_info+0x12/0x12 [ 2150.135033][T22047] ? load_image+0x410/0x410 [ 2150.139545][T22047] ? __lock_acquire+0x7c40/0x7c40 [ 2150.144640][T22047] should_fail_ex+0x390/0x4c0 [ 2150.149326][T22047] _copy_to_user+0x2c/0x130 [ 2150.153827][T22047] bpf_verifier_vlog+0x172/0x3a0 [ 2150.158771][T22047] __btf_verifier_log+0xdf/0x130 [ 2150.163703][T22047] ? btf_check_all_metas+0x496/0xa50 [ 2150.168985][T22047] ? btf_parse_type_sec+0xfc/0x1910 [ 2150.174182][T22047] ? btf_check_sec_info+0x350/0x350 [ 2150.179381][T22047] ? __kasan_kmalloc+0x8e/0xa0 [ 2150.184146][T22047] ? __kmalloc_node+0xb2/0x240 [ 2150.188906][T22047] ? kvmalloc_node+0x6c/0x180 [ 2150.193577][T22047] ? btf_parse_type_sec+0x1b0/0x1910 [ 2150.198863][T22047] ? btf_new_fd+0x3fe/0x760 [ 2150.203361][T22047] ? __x64_sys_bpf+0x78/0x90 [ 2150.207953][T22047] btf_verifier_log_member+0x6e5/0x980 [ 2150.213419][T22047] ? __btf_verifier_log_type+0x7d0/0x7d0 [ 2150.219057][T22047] btf_struct_resolve+0xb9c/0x1270 [ 2150.224168][T22047] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2150.229798][T22047] btf_resolve+0x421/0x1440 [ 2150.234309][T22047] btf_parse_type_sec+0x561/0x1910 [ 2150.239426][T22047] ? btf_verifier_log+0x2b0/0x2b0 [ 2150.244476][T22047] ? btf_parse_str_sec+0x20a/0x2a0 [ 2150.249617][T22047] btf_new_fd+0x3fe/0x760 [ 2150.254330][T22047] __sys_bpf+0x612/0x780 [ 2150.258588][T22047] ? bpf_link_show_fdinfo+0x380/0x380 [ 2150.263977][T22047] ? lock_chain_count+0x20/0x20 [ 2150.268839][T22047] __x64_sys_bpf+0x78/0x90 [ 2150.273261][T22047] do_syscall_64+0x4c/0xa0 [ 2150.277685][T22047] ? clear_bhb_loop+0x60/0xb0 [ 2150.282359][T22047] ? clear_bhb_loop+0x60/0xb0 [ 2150.287037][T22047] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2150.292950][T22047] RIP: 0033:0x7fb588d9e0d9 [ 2150.297360][T22047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2150.316963][T22047] RSP: 002b:00007fb589cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2150.325375][T22047] RAX: ffffffffffffffda RBX: 00007fb589025fa0 RCX: 00007fb588d9e0d9 [ 2150.333339][T22047] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2150.341304][T22047] RBP: 00007fb589cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2150.349269][T22047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2150.357233][T22047] R13: 00007fb589026038 R14: 00007fb589025fa0 R15: 00007ffde2a35058 [ 2150.365214][T22047] [ 2150.439585][T22051] netlink: 'syz.4.14858': attribute type 21 has an invalid length. [ 2150.464892][T22051] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14858'. [ 2150.495524][T22051] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14858'. [ 2150.544425][T22049] netlink: 'syz.0.14860': attribute type 10 has an invalid length. [ 2150.632813][T22049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.382965][T22049] device bridge_slave_1 left promiscuous mode [ 2151.390958][T22071] ref_ctr_offset mismatch. inode: 0x93a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2151.405418][T22049] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.526529][T22059] netlink: 'syz.1.14864': attribute type 13 has an invalid length. [ 2151.536795][T22059] netlink: 'syz.1.14864': attribute type 14 has an invalid length. [ 2151.550271][T22059] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14864'. [ 2151.720196][T22078] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.14868'. [ 2151.773376][T22078] net_ratelimit: 3256 callbacks suppressed [ 2151.773395][T22078] netlink: zone id is out of range [ 2151.803248][T22078] netlink: zone id is out of range [ 2151.812992][T22080] FAULT_INJECTION: forcing a failure. [ 2151.812992][T22080] name failslab, interval 1, probability 0, space 0, times 0 [ 2151.848525][T22078] netlink: zone id is out of range [ 2151.866555][T22080] CPU: 0 PID: 22080 Comm: syz.4.14869 Not tainted syzkaller #0 [ 2151.874166][T22080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2151.884243][T22080] Call Trace: [ 2151.887538][T22080] [ 2151.890487][T22080] dump_stack_lvl+0x188/0x24e [ 2151.895183][T22080] ? show_regs_print_info+0x12/0x12 [ 2151.900395][T22080] ? load_image+0x410/0x410 [ 2151.904910][T22080] ? __might_sleep+0xd0/0xd0 [ 2151.909502][T22080] ? __lock_acquire+0x7c40/0x7c40 [ 2151.914531][T22080] should_fail_ex+0x390/0x4c0 [ 2151.919239][T22080] should_failslab+0x5/0x20 [ 2151.923737][T22080] slab_pre_alloc_hook+0x59/0x300 [ 2151.928763][T22080] kmem_cache_alloc+0x56/0x2f0 [ 2151.933522][T22080] ? security_file_alloc+0x30/0x110 [ 2151.938722][T22080] security_file_alloc+0x30/0x110 [ 2151.943743][T22080] __alloc_file+0xc2/0x230 [ 2151.948159][T22080] alloc_empty_file+0x90/0x180 [ 2151.952920][T22080] alloc_file+0x5b/0x5f0 [ 2151.957186][T22080] alloc_file_pseudo+0x180/0x200 [ 2151.962125][T22080] ? alloc_empty_file_noaccount+0x80/0x80 [ 2151.967842][T22080] ? alloc_fd+0x590/0x640 [ 2151.972180][T22080] anon_inode_getfd+0xc6/0x1b0 [ 2151.976950][T22080] btf_new_fd+0x5d3/0x760 [ 2151.981286][T22080] __sys_bpf+0x612/0x780 [ 2151.985531][T22080] ? bpf_link_show_fdinfo+0x380/0x380 [ 2151.990916][T22080] ? lock_chain_count+0x20/0x20 [ 2151.995775][T22080] __x64_sys_bpf+0x78/0x90 [ 2152.000196][T22080] do_syscall_64+0x4c/0xa0 [ 2152.004629][T22080] ? clear_bhb_loop+0x60/0xb0 [ 2152.009310][T22080] ? clear_bhb_loop+0x60/0xb0 [ 2152.013991][T22080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2152.019885][T22080] RIP: 0033:0x7f91ccb9e0d9 [ 2152.024299][T22080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.043917][T22080] RSP: 002b:00007f91cda6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2152.052329][T22080] RAX: ffffffffffffffda RBX: 00007f91cce25fa0 RCX: 00007f91ccb9e0d9 [ 2152.060295][T22080] RDX: 0000000000000028 RSI: 0000200000000880 RDI: 0000000000000012 [ 2152.068259][T22080] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.076222][T22080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2152.084188][T22080] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2152.092173][T22080] [ 2152.098207][T22078] netlink: zone id is out of range [ 2152.103457][T22078] netlink: zone id is out of range [ 2152.141056][T22078] netlink: zone id is out of range [ 2152.215909][T22078] netlink: zone id is out of range [ 2152.267214][T22078] netlink: get zone limit has 8 unknown bytes [ 2152.544008][T22101] tun0: tun_chr_ioctl cmd 1074025680 [ 2152.562142][T22101] tun0: tun_chr_ioctl cmd 1074812117 [ 2152.592217][T22107] netlink: 'syz.4.14878': attribute type 13 has an invalid length. [ 2152.617745][T22107] netlink: 'syz.4.14878': attribute type 14 has an invalid length. [ 2152.631155][T22107] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14878'. [ 2152.969839][T22111] ref_ctr_offset mismatch. inode: 0x950 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2153.565676][T22119] FAULT_INJECTION: forcing a failure. [ 2153.565676][T22119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.647871][T22119] CPU: 1 PID: 22119 Comm: syz.1.14881 Not tainted syzkaller #0 [ 2153.655481][T22119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2153.665557][T22119] Call Trace: [ 2153.668852][T22119] [ 2153.671801][T22119] dump_stack_lvl+0x188/0x24e [ 2153.676514][T22119] ? show_regs_print_info+0x12/0x12 [ 2153.681750][T22119] ? load_image+0x410/0x410 [ 2153.686275][T22119] ? __lock_acquire+0x7c40/0x7c40 [ 2153.691336][T22119] should_fail_ex+0x390/0x4c0 [ 2153.696047][T22119] _copy_to_user+0x2c/0x130 [ 2153.700578][T22119] bpf_verifier_vlog+0x172/0x3a0 [ 2153.705546][T22119] __btf_verifier_log+0xdf/0x130 [ 2153.710520][T22119] ? btf_check_sec_info+0x350/0x350 [ 2153.715739][T22119] ? __lock_acquire+0x1465/0x7c40 [ 2153.720798][T22119] __btf_verifier_log_type+0x5fb/0x7d0 [ 2153.726280][T22119] ? btf_sec_info_cmp+0x59/0x100 [ 2153.731252][T22119] ? btf_int_show+0x27f0/0x27f0 [ 2153.736135][T22119] btf_struct_check_meta+0x409/0xcd0 [ 2153.741456][T22119] btf_check_all_metas+0x35a/0xa50 [ 2153.746601][T22119] btf_parse_type_sec+0xfc/0x1910 [ 2153.751652][T22119] ? btf_check_sec_info+0x350/0x350 [ 2153.756882][T22119] ? btf_verifier_log+0x2b0/0x2b0 [ 2153.761929][T22119] ? btf_parse_str_sec+0x20a/0x2a0 [ 2153.767069][T22119] btf_new_fd+0x3fe/0x760 [ 2153.771427][T22119] __sys_bpf+0x612/0x780 [ 2153.775694][T22119] ? bpf_link_show_fdinfo+0x380/0x380 [ 2153.781107][T22119] ? lock_chain_count+0x20/0x20 [ 2153.785993][T22119] __x64_sys_bpf+0x78/0x90 [ 2153.790431][T22119] do_syscall_64+0x4c/0xa0 [ 2153.794871][T22119] ? clear_bhb_loop+0x60/0xb0 [ 2153.799575][T22119] ? clear_bhb_loop+0x60/0xb0 [ 2153.804274][T22119] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2153.810190][T22119] RIP: 0033:0x7fc8b799e0d9 [ 2153.814631][T22119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2153.834346][T22119] RSP: 002b:00007fc8b889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2153.842781][T22119] RAX: ffffffffffffffda RBX: 00007fc8b7c25fa0 RCX: 00007fc8b799e0d9 [ 2153.850775][T22119] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2153.858768][T22119] RBP: 00007fc8b889b090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.866758][T22119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2153.874746][T22119] R13: 00007fc8b7c26038 R14: 00007fc8b7c25fa0 R15: 00007ffd2b31f108 [ 2153.882749][T22119] [ 2153.944452][T22128] FAULT_INJECTION: forcing a failure. [ 2153.944452][T22128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.967551][T22128] CPU: 1 PID: 22128 Comm: syz.2.14884 Not tainted syzkaller #0 [ 2153.975150][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2153.985231][T22128] Call Trace: [ 2153.988527][T22128] [ 2153.991475][T22128] dump_stack_lvl+0x188/0x24e [ 2153.996182][T22128] ? show_regs_print_info+0x12/0x12 [ 2154.001412][T22128] ? load_image+0x410/0x410 [ 2154.005937][T22128] ? __lock_acquire+0x7c40/0x7c40 [ 2154.010990][T22128] should_fail_ex+0x390/0x4c0 [ 2154.015692][T22128] _copy_to_user+0x2c/0x130 [ 2154.020228][T22128] bpf_verifier_vlog+0x172/0x3a0 [ 2154.025191][T22128] __btf_verifier_log+0xdf/0x130 [ 2154.030155][T22128] ? btf_check_all_metas+0x496/0xa50 [ 2154.035441][T22128] ? btf_parse_type_sec+0xfc/0x1910 [ 2154.040644][T22128] ? btf_check_sec_info+0x350/0x350 [ 2154.045840][T22128] ? __kasan_kmalloc+0x8e/0xa0 [ 2154.050601][T22128] ? __kmalloc_node+0xb2/0x240 [ 2154.055364][T22128] ? kvmalloc_node+0x6c/0x180 [ 2154.060036][T22128] ? btf_parse_type_sec+0x1b0/0x1910 [ 2154.065315][T22128] ? btf_new_fd+0x3fe/0x760 [ 2154.069812][T22128] ? __x64_sys_bpf+0x78/0x90 [ 2154.074405][T22128] btf_verifier_log_member+0x5b8/0x980 [ 2154.079869][T22128] ? __btf_verifier_log_type+0x7d0/0x7d0 [ 2154.085508][T22128] btf_struct_resolve+0xb9c/0x1270 [ 2154.090618][T22128] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2154.096246][T22128] btf_resolve+0x421/0x1440 [ 2154.100754][T22128] btf_parse_type_sec+0x561/0x1910 [ 2154.105871][T22128] ? btf_verifier_log+0x2b0/0x2b0 [ 2154.110893][T22128] ? btf_parse_str_sec+0x20a/0x2a0 [ 2154.115999][T22128] btf_new_fd+0x3fe/0x760 [ 2154.120329][T22128] __sys_bpf+0x612/0x780 [ 2154.124568][T22128] ? bpf_link_show_fdinfo+0x380/0x380 [ 2154.129947][T22128] ? lock_chain_count+0x20/0x20 [ 2154.134799][T22128] __x64_sys_bpf+0x78/0x90 [ 2154.139236][T22128] do_syscall_64+0x4c/0xa0 [ 2154.143667][T22128] ? clear_bhb_loop+0x60/0xb0 [ 2154.148364][T22128] ? clear_bhb_loop+0x60/0xb0 [ 2154.153058][T22128] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2154.158956][T22128] RIP: 0033:0x7fb588d9e0d9 [ 2154.163375][T22128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2154.182981][T22128] RSP: 002b:00007fb589cf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2154.191417][T22128] RAX: ffffffffffffffda RBX: 00007fb589025fa0 RCX: 00007fb588d9e0d9 [ 2154.199381][T22128] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2154.207358][T22128] RBP: 00007fb589cf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.215323][T22128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.223288][T22128] R13: 00007fb589026038 R14: 00007fb589025fa0 R15: 00007ffde2a35058 [ 2154.231271][T22128] [ 2154.895121][T22149] ref_ctr_offset mismatch. inode: 0x966 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2155.926237][T22156] netlink: 'syz.1.14893': attribute type 21 has an invalid length. [ 2157.421284][T22144] netlink: 'syz.2.14889': attribute type 13 has an invalid length. [ 2157.429362][T22144] netlink: 'syz.2.14889': attribute type 14 has an invalid length. [ 2157.437342][T22144] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14889'. [ 2157.557828][T22159] FAULT_INJECTION: forcing a failure. [ 2157.557828][T22159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2157.578163][T22159] CPU: 0 PID: 22159 Comm: syz.4.14895 Not tainted syzkaller #0 [ 2157.585759][T22159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2157.595840][T22159] Call Trace: [ 2157.599134][T22159] [ 2157.602075][T22159] dump_stack_lvl+0x188/0x24e [ 2157.606780][T22159] ? show_regs_print_info+0x12/0x12 [ 2157.611996][T22159] ? load_image+0x410/0x410 [ 2157.616523][T22159] ? __lock_acquire+0x7c40/0x7c40 [ 2157.621561][T22159] ? snprintf+0xe5/0x140 [ 2157.625810][T22159] should_fail_ex+0x390/0x4c0 [ 2157.630496][T22159] _copy_to_user+0x2c/0x130 [ 2157.634997][T22159] simple_read_from_buffer+0xe3/0x150 [ 2157.640372][T22159] proc_fail_nth_read+0x1a6/0x220 [ 2157.645396][T22159] ? proc_fault_inject_write+0x310/0x310 [ 2157.651028][T22159] ? fsnotify_perm+0x248/0x550 [ 2157.655790][T22159] ? proc_fault_inject_write+0x310/0x310 [ 2157.661421][T22159] vfs_read+0x2db/0x960 [ 2157.665582][T22159] ? kernel_read+0x1e0/0x1e0 [ 2157.670176][T22159] ? __fget_files+0x28/0x460 [ 2157.674769][T22159] ? __fget_files+0x3fc/0x460 [ 2157.679461][T22159] ? __fdget_pos+0x2ae/0x360 [ 2157.684046][T22159] ? ksys_read+0x70/0x260 [ 2157.688380][T22159] ksys_read+0x14d/0x260 [ 2157.692629][T22159] ? vfs_write+0x9a0/0x9a0 [ 2157.697053][T22159] ? lockdep_hardirqs_on+0x94/0x140 [ 2157.702274][T22159] do_syscall_64+0x4c/0xa0 [ 2157.706690][T22159] ? clear_bhb_loop+0x60/0xb0 [ 2157.711368][T22159] ? clear_bhb_loop+0x60/0xb0 [ 2157.716044][T22159] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2157.721939][T22159] RIP: 0033:0x7f91ccb5e90e [ 2157.726355][T22159] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2157.745984][T22159] RSP: 002b:00007f91cda69fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2157.754399][T22159] RAX: ffffffffffffffda RBX: 00007f91cda6a6c0 RCX: 00007f91ccb5e90e [ 2157.762367][T22159] RDX: 000000000000000f RSI: 00007f91cda6a0a0 RDI: 0000000000000003 [ 2157.770336][T22159] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2157.778303][T22159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2157.786268][T22159] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2157.794269][T22159] [ 2158.695331][ T3818] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2158.705812][ T3818] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2158.723499][ T3818] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2158.733609][ T3818] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2158.757682][ T3818] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2158.765054][ T3818] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2159.071020][T22180] chnl_net:caif_netlink_parms(): no params data found [ 2159.226923][T22180] bridge0: port 1(bridge_slave_0) entered blocking state [ 2159.240163][T22180] bridge0: port 1(bridge_slave_0) entered disabled state [ 2159.251441][T22180] device bridge_slave_0 entered promiscuous mode [ 2159.272964][T22180] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.284512][T22180] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.296001][T22180] device bridge_slave_1 entered promiscuous mode [ 2159.340841][T22180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2159.355641][T22180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2159.416784][T22180] team0: Port device team_slave_0 added [ 2159.424807][T22180] team0: Port device team_slave_1 added [ 2159.457895][T22180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2159.464951][T22180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.499800][T22180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2159.515525][T22180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2159.524847][T22180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2159.556303][T22180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2159.702195][T22202] ref_ctr_offset mismatch. inode: 0xa44 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2159.766141][T22204] netlink: 'syz.4.14906': attribute type 13 has an invalid length. [ 2159.777406][T22204] netlink: 'syz.4.14906': attribute type 14 has an invalid length. [ 2159.807396][T22204] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14906'. [ 2159.812727][T22209] FAULT_INJECTION: forcing a failure. [ 2159.812727][T22209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2159.847150][T22209] CPU: 0 PID: 22209 Comm: syz.1.14909 Not tainted syzkaller #0 [ 2159.854786][T22209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2159.864852][T22209] Call Trace: [ 2159.868130][T22209] [ 2159.871069][T22209] dump_stack_lvl+0x188/0x24e [ 2159.875770][T22209] ? show_regs_print_info+0x12/0x12 [ 2159.880995][T22209] ? load_image+0x410/0x410 [ 2159.885520][T22209] ? __lock_acquire+0x7c40/0x7c40 [ 2159.890572][T22209] should_fail_ex+0x390/0x4c0 [ 2159.895277][T22209] _copy_to_user+0x2c/0x130 [ 2159.899803][T22209] bpf_verifier_vlog+0x172/0x3a0 [ 2159.904767][T22209] __btf_verifier_log+0xdf/0x130 [ 2159.909720][T22209] ? __virt_addr_valid+0x188/0x540 [ 2159.914862][T22209] ? btf_check_sec_info+0x350/0x350 [ 2159.920080][T22209] ? _copy_to_user+0xea/0x130 [ 2159.924807][T22209] ? bpf_verifier_vlog+0x1b6/0x3a0 [ 2159.929943][T22209] btf_verifier_log_member+0x702/0x980 [ 2159.935434][T22209] ? __btf_verifier_log_type+0x7d0/0x7d0 [ 2159.941093][T22209] btf_struct_resolve+0xb9c/0x1270 [ 2159.946207][T22209] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2159.951841][T22209] btf_resolve+0x421/0x1440 [ 2159.956350][T22209] btf_parse_type_sec+0x561/0x1910 [ 2159.961491][T22209] ? btf_verifier_log+0x2b0/0x2b0 [ 2159.966533][T22209] ? btf_parse_str_sec+0x20a/0x2a0 [ 2159.971663][T22209] btf_new_fd+0x3fe/0x760 [ 2159.975998][T22209] __sys_bpf+0x612/0x780 [ 2159.980259][T22209] ? bpf_link_show_fdinfo+0x380/0x380 [ 2159.985637][T22209] ? lock_chain_count+0x20/0x20 [ 2159.990490][T22209] __x64_sys_bpf+0x78/0x90 [ 2159.994903][T22209] do_syscall_64+0x4c/0xa0 [ 2159.999321][T22209] ? clear_bhb_loop+0x60/0xb0 [ 2160.003996][T22209] ? clear_bhb_loop+0x60/0xb0 [ 2160.008672][T22209] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2160.014561][T22209] RIP: 0033:0x7fc8b799e0d9 [ 2160.018971][T22209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2160.038578][T22209] RSP: 002b:00007fc8b889b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2160.046999][T22209] RAX: ffffffffffffffda RBX: 00007fc8b7c25fa0 RCX: 00007fc8b799e0d9 [ 2160.054980][T22209] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2160.062943][T22209] RBP: 00007fc8b889b090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.070909][T22209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2160.078871][T22209] R13: 00007fc8b7c26038 R14: 00007fc8b7c25fa0 R15: 00007ffd2b31f108 [ 2160.086847][T22209] [ 2160.142244][T22180] device hsr_slave_0 entered promiscuous mode [ 2160.174843][T22180] device hsr_slave_1 entered promiscuous mode [ 2160.185253][T22180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2160.207319][T22180] Cannot create hsr debugfs directory [ 2160.234904][T22220] netlink: 'syz.0.14914': attribute type 3 has an invalid length. [ 2160.245366][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.245409][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.258522][T22220] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.14914'. [ 2160.529727][T22226] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2160.585617][T22226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2160.787235][ T49] Bluetooth: hci6: command 0x0409 tx timeout [ 2161.416931][T15986] device 0 left promiscuous mode [ 2161.434736][T22250] ref_ctr_offset mismatch. inode: 0xa61 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2161.761354][T22264] netlink: 'syz.4.14922': attribute type 13 has an invalid length. [ 2161.797367][T22264] netlink: 'syz.4.14922': attribute type 14 has an invalid length. [ 2161.827219][T22264] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14922'. [ 2162.086559][T22282] FAULT_INJECTION: forcing a failure. [ 2162.086559][T22282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2162.138759][T22282] CPU: 1 PID: 22282 Comm: syz.4.14928 Not tainted syzkaller #0 [ 2162.146354][T22282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2162.156417][T22282] Call Trace: [ 2162.159704][T22282] [ 2162.162646][T22282] dump_stack_lvl+0x188/0x24e [ 2162.167350][T22282] ? show_regs_print_info+0x12/0x12 [ 2162.172565][T22282] ? load_image+0x410/0x410 [ 2162.177085][T22282] ? __lock_acquire+0x7c40/0x7c40 [ 2162.182127][T22282] ? snprintf+0xe5/0x140 [ 2162.186381][T22282] should_fail_ex+0x390/0x4c0 [ 2162.191088][T22282] _copy_to_user+0x2c/0x130 [ 2162.195606][T22282] simple_read_from_buffer+0xe3/0x150 [ 2162.200993][T22282] proc_fail_nth_read+0x1a6/0x220 [ 2162.206022][T22282] ? proc_fault_inject_write+0x310/0x310 [ 2162.211651][T22282] ? fsnotify_perm+0x248/0x550 [ 2162.216410][T22282] ? proc_fault_inject_write+0x310/0x310 [ 2162.222038][T22282] vfs_read+0x2db/0x960 [ 2162.226196][T22282] ? kernel_read+0x1e0/0x1e0 [ 2162.230786][T22282] ? __fget_files+0x28/0x460 [ 2162.235379][T22282] ? __fget_files+0x3fc/0x460 [ 2162.240063][T22282] ? __fdget_pos+0x2ae/0x360 [ 2162.244648][T22282] ? ksys_read+0x70/0x260 [ 2162.248986][T22282] ksys_read+0x14d/0x260 [ 2162.253239][T22282] ? vfs_write+0x9a0/0x9a0 [ 2162.257660][T22282] ? lockdep_hardirqs_on+0x94/0x140 [ 2162.262855][T22282] do_syscall_64+0x4c/0xa0 [ 2162.267274][T22282] ? clear_bhb_loop+0x60/0xb0 [ 2162.271952][T22282] ? clear_bhb_loop+0x60/0xb0 [ 2162.276628][T22282] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2162.282516][T22282] RIP: 0033:0x7f91ccb5e90e [ 2162.286926][T22282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2162.306550][T22282] RSP: 002b:00007f91cda69fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2162.314961][T22282] RAX: ffffffffffffffda RBX: 00007f91cda6a6c0 RCX: 00007f91ccb5e90e [ 2162.322943][T22282] RDX: 000000000000000f RSI: 00007f91cda6a0a0 RDI: 0000000000000003 [ 2162.330908][T22282] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2162.338876][T22282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2162.346838][T22282] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2162.354814][T22282] [ 2162.867400][ T49] Bluetooth: hci6: command 0x041b tx timeout [ 2162.910924][T22289] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.14930'. [ 2162.956432][T22298] ref_ctr_offset mismatch. inode: 0xb7a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2163.923786][T22300] netlink: 'syz.4.14934': attribute type 3 has an invalid length. [ 2163.948169][T22302] netlink: 'syz.0.14936': attribute type 13 has an invalid length. [ 2163.966566][T22300] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.14934'. [ 2163.986887][T22302] netlink: 'syz.0.14936': attribute type 14 has an invalid length. [ 2164.015529][T22302] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14936'. [ 2164.231171][T22180] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2164.947116][ T49] Bluetooth: hci6: command 0x040f tx timeout [ 2165.126045][T22180] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2165.220877][T22180] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2165.256864][T22180] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2165.291786][T22336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14943'. [ 2165.360156][T22336] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14943'. [ 2165.414879][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14943'. [ 2165.437733][T22337] netlink: 152 bytes leftover after parsing attributes in process `syz.4.14943'. [ 2165.595133][T22346] ref_ctr_offset mismatch. inode: 0xa72 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2166.473192][T22356] netlink: 'syz.2.14949': attribute type 13 has an invalid length. [ 2166.493175][T22356] netlink: 'syz.2.14949': attribute type 14 has an invalid length. [ 2166.503404][T22356] netlink: 156 bytes leftover after parsing attributes in process `syz.2.14949'. [ 2166.624879][T22180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2166.814150][T22180] 8021q: adding VLAN 0 to HW filter on device team0 [ 2166.881124][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2166.896176][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2166.968474][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2166.988726][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2167.005525][T15267] bridge0: port 1(bridge_slave_0) entered blocking state [ 2167.012780][T15267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2167.027575][ T49] Bluetooth: hci6: command 0x0419 tx timeout [ 2167.034083][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2167.085625][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2167.128586][T15267] bridge0: port 2(bridge_slave_1) entered blocking state [ 2167.135801][T15267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2167.154001][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2167.174852][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2167.919840][T22392] ref_ctr_offset mismatch. inode: 0xbaa offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2167.945926][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2168.004070][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2168.016075][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2168.029101][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2168.040060][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2168.049095][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2168.065016][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2168.079052][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2168.091802][T22396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14960'. [ 2168.112553][T22180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2168.162161][T22180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2168.183324][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2168.202859][T12350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2168.370864][T22402] netlink: 'syz.0.14962': attribute type 13 has an invalid length. [ 2168.408722][T22402] netlink: 'syz.0.14962': attribute type 14 has an invalid length. [ 2168.428312][T22402] netlink: 156 bytes leftover after parsing attributes in process `syz.0.14962'. [ 2168.860080][T22427] ref_ctr_offset mismatch. inode: 0x9cf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2168.904851][T15986] device hsr_slave_0 left promiscuous mode [ 2168.917312][T15986] device hsr_slave_1 left promiscuous mode [ 2168.971240][T15986] device veth1_vlan left promiscuous mode [ 2168.989373][T15986] device veth0_vlan left promiscuous mode [ 2170.634149][T22180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2170.662593][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2170.676941][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2170.703807][T22443] netlink: 'syz.1.14978': attribute type 13 has an invalid length. [ 2170.717351][T22443] netlink: 'syz.1.14978': attribute type 14 has an invalid length. [ 2170.725250][T22443] netlink: 156 bytes leftover after parsing attributes in process `syz.1.14978'. [ 2170.777208][T22459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.14982'. [ 2170.838193][T22459] device caif0 entered promiscuous mode [ 2170.843833][T22459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2170.925924][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2170.941532][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2171.038110][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2171.053028][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2171.074283][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2171.090564][T22462] ref_ctr_offset mismatch. inode: 0xbcf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2171.102998][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2171.142929][T22180] device veth0_vlan entered promiscuous mode [ 2171.221815][T22180] device veth1_vlan entered promiscuous mode [ 2171.371938][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2171.390458][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2171.420345][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2171.440653][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2171.488963][T22180] device veth0_macvtap entered promiscuous mode [ 2171.557540][T22479] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.14988'. [ 2171.588850][T22180] device veth1_macvtap entered promiscuous mode [ 2171.693758][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.738073][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.767092][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2171.799586][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2171.813995][T22180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2171.823500][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2171.868554][T22487] netlink: 'syz.4.14992': attribute type 30 has an invalid length. [ 2171.878641][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2171.886832][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2171.921283][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2171.959309][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2171.996566][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.015360][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.035499][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.046399][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.063766][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.075034][T22180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.091683][T22180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.104010][T22180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2172.109232][T22496] netlink: 'syz.1.14995': attribute type 4 has an invalid length. [ 2172.120726][T22496] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.14995'. [ 2172.196971][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2172.218075][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2172.231634][T22180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.253785][T22180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.268105][T22180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.285324][T22180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.529468][T22506] ref_ctr_offset mismatch. inode: 0xabf offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2172.559696][T15986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.577663][T15986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.602258][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2172.699227][T12350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.724456][T12350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2172.759521][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2173.652702][T22540] ref_ctr_offset mismatch. inode: 0xacb offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2173.673329][T22546] FAULT_INJECTION: forcing a failure. [ 2173.673329][T22546] name failslab, interval 1, probability 0, space 0, times 0 [ 2173.714556][T22544] netlink: 'syz.4.15012': attribute type 1 has an invalid length. [ 2173.725515][T22546] CPU: 1 PID: 22546 Comm: syz.0.15013 Not tainted syzkaller #0 [ 2173.733111][T22546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2173.743187][T22546] Call Trace: [ 2173.746478][T22546] [ 2173.749415][T22546] dump_stack_lvl+0x188/0x24e [ 2173.754125][T22546] ? show_regs_print_info+0x12/0x12 [ 2173.759348][T22546] ? load_image+0x410/0x410 [ 2173.763877][T22546] ? __might_sleep+0xd0/0xd0 [ 2173.768489][T22546] ? __lock_acquire+0x7c40/0x7c40 [ 2173.773539][T22546] should_fail_ex+0x390/0x4c0 [ 2173.778244][T22546] should_failslab+0x5/0x20 [ 2173.782760][T22546] slab_pre_alloc_hook+0x59/0x300 [ 2173.787809][T22546] kmem_cache_alloc+0x56/0x2f0 [ 2173.792585][T22546] ? security_file_alloc+0x30/0x110 [ 2173.797797][T22546] security_file_alloc+0x30/0x110 [ 2173.802838][T22546] __alloc_file+0xc2/0x230 [ 2173.807268][T22546] alloc_empty_file+0x90/0x180 [ 2173.812039][T22546] alloc_file+0x5b/0x5f0 [ 2173.816292][T22546] alloc_file_pseudo+0x180/0x200 [ 2173.821239][T22546] ? alloc_empty_file_noaccount+0x80/0x80 [ 2173.826968][T22546] ? alloc_fd+0x590/0x640 [ 2173.831317][T22546] anon_inode_getfd+0xc6/0x1b0 [ 2173.836097][T22546] btf_new_fd+0x5d3/0x760 [ 2173.840440][T22546] __sys_bpf+0x612/0x780 [ 2173.844710][T22546] ? bpf_link_show_fdinfo+0x380/0x380 [ 2173.850103][T22546] ? lock_chain_count+0x20/0x20 [ 2173.854971][T22546] __x64_sys_bpf+0x78/0x90 [ 2173.859396][T22546] do_syscall_64+0x4c/0xa0 [ 2173.863825][T22546] ? clear_bhb_loop+0x60/0xb0 [ 2173.868515][T22546] ? clear_bhb_loop+0x60/0xb0 [ 2173.873201][T22546] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2173.879104][T22546] RIP: 0033:0x7fec1819e0d9 [ 2173.883522][T22546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2173.903132][T22546] RSP: 002b:00007fec163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2173.911551][T22546] RAX: ffffffffffffffda RBX: 00007fec18425fa0 RCX: 00007fec1819e0d9 [ 2173.919527][T22546] RDX: 0000000000000028 RSI: 00002000000002c0 RDI: 0000000000000012 [ 2173.927523][T22546] RBP: 00007fec163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2173.935501][T22546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2173.943475][T22546] R13: 00007fec18426038 R14: 00007fec18425fa0 R15: 00007ffe3c1e82a8 [ 2173.951465][T22546] [ 2175.203615][T22586] ref_ctr_offset mismatch. inode: 0xa13 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2175.778552][T22591] ref_ctr_offset mismatch. inode: 0xae6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2177.116179][T22626] netlink: 'syz.4.15039': attribute type 2 has an invalid length. [ 2179.288959][T22635] ref_ctr_offset mismatch. inode: 0xafc offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2180.089596][T22648] ref_ctr_offset mismatch. inode: 0x3b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2180.329237][T22662] netlink: 'syz.2.15051': attribute type 29 has an invalid length. [ 2180.351901][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15051'. [ 2180.385279][T22662] netlink: 'syz.2.15051': attribute type 29 has an invalid length. [ 2180.415621][T22662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15051'. [ 2180.846849][T22684] netlink: 'syz.0.15060': attribute type 13 has an invalid length. [ 2180.868283][T22684] netlink: 'syz.0.15060': attribute type 14 has an invalid length. [ 2180.884581][T22684] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15060'. [ 2180.909028][T22685] netlink: 'syz.3.15061': attribute type 13 has an invalid length. [ 2180.936693][T22685] netlink: 'syz.3.15061': attribute type 14 has an invalid length. [ 2180.964659][T22685] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15061'. [ 2181.277729][T22703] ref_ctr_offset mismatch. inode: 0x60e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2181.682087][T22722] netlink: 'syz.3.15075': attribute type 13 has an invalid length. [ 2181.705081][T22722] netlink: 'syz.3.15075': attribute type 14 has an invalid length. [ 2181.722385][T22722] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15075'. [ 2181.745944][T22721] netlink: 'syz.4.15076': attribute type 13 has an invalid length. [ 2181.763505][T22721] netlink: 'syz.4.15076': attribute type 14 has an invalid length. [ 2181.778346][T22721] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15076'. [ 2183.005172][T22759] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15089'. [ 2183.076114][T22763] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15090'. [ 2183.095489][T22758] ref_ctr_offset mismatch. inode: 0xa6a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2183.305923][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15093'. [ 2183.328192][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15093'. [ 2184.414209][T22798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.547390][T22798] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.555241][T22798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2184.704004][T22798] team0: Port device bridge0 added [ 2184.718361][T22812] ref_ctr_offset mismatch. inode: 0xa7b offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2185.194338][ T3818] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2185.207349][ T3818] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2185.215293][ T3818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2185.234676][ T3818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2185.247872][ T3818] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2185.256382][ T3818] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2185.471205][T22829] chnl_net:caif_netlink_parms(): no params data found [ 2185.545212][T22841] validate_nla: 9 callbacks suppressed [ 2185.545244][T22841] netlink: 'syz.4.15116': attribute type 13 has an invalid length. [ 2185.571918][T22841] netlink: 'syz.4.15116': attribute type 14 has an invalid length. [ 2185.587719][T22841] __nla_validate_parse: 1 callbacks suppressed [ 2185.587751][T22841] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15116'. [ 2185.722984][T22829] bridge0: port 1(bridge_slave_0) entered blocking state [ 2185.732255][T22829] bridge0: port 1(bridge_slave_0) entered disabled state [ 2185.740698][T22829] device bridge_slave_0 entered promiscuous mode [ 2185.749135][T22853] netlink: 'syz.4.15119': attribute type 39 has an invalid length. [ 2185.767281][T22853] netlink: 'syz.4.15119': attribute type 29 has an invalid length. [ 2185.775908][T22829] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.783291][T22829] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.792035][T22829] device bridge_slave_1 entered promiscuous mode [ 2185.869893][T22829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2185.934302][T22829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2186.070821][T22829] team0: Port device team_slave_0 added [ 2186.138581][T22829] team0: Port device team_slave_1 added [ 2186.194959][T22829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.221714][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.287138][T22829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.323967][T22862] ref_ctr_offset mismatch. inode: 0x63e offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2186.355852][T22829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.377091][T22829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2186.476241][T22829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.527388][T12350] tipc: Left network mode [ 2186.605652][T22829] device hsr_slave_0 entered promiscuous mode [ 2186.663868][T22829] device hsr_slave_1 entered promiscuous mode [ 2186.806385][T12350] device ip6gretap0 left promiscuous mode [ 2186.820309][T12350] bridge0: port 3(ip6gretap0) entered disabled state [ 2186.860385][T22875] netlink: 'syz.0.15124': attribute type 13 has an invalid length. [ 2186.882658][T22875] netlink: 'syz.0.15124': attribute type 14 has an invalid length. [ 2186.902873][T22875] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15124'. [ 2187.142437][T22892] netlink: 'syz.3.15128': attribute type 13 has an invalid length. [ 2187.151431][T22892] netlink: 'syz.3.15128': attribute type 14 has an invalid length. [ 2187.166582][T22892] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15128'. [ 2187.347772][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 2187.530645][T22907] ref_ctr_offset mismatch. inode: 0xaa5 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2188.178558][T22927] netlink: 'syz.2.15139': attribute type 2 has an invalid length. [ 2188.475151][T22935] netlink: 'syz.3.15142': attribute type 13 has an invalid length. [ 2188.526447][T22935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15142'. [ 2188.573891][T22938] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15141'. [ 2188.900983][ T49] Bluetooth: hci3: unexpected event 0x23 length: 15 > 13 [ 2188.976495][T22829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2189.001587][T22952] ref_ctr_offset mismatch. inode: 0xb2 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2189.427234][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 2189.990252][T22829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2190.157630][T22829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2190.420810][T22829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2190.433548][T22982] netlink: 100 bytes leftover after parsing attributes in process `syz.3.15155'. [ 2190.490783][T22990] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15156'. [ 2190.557755][T12350] device hsr_slave_0 left promiscuous mode [ 2190.600667][T12350] device hsr_slave_1 left promiscuous mode [ 2190.611369][T12350] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2190.624870][T12350] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.663821][T12350] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2190.681882][T12350] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2190.689790][T23002] ref_ctr_offset mismatch. inode: 0x669 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2190.715480][T12350] device bridge_slave_1 left promiscuous mode [ 2190.725384][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 2190.740624][T12350] device bridge_slave_0 left promiscuous mode [ 2190.757320][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 2190.808857][T12350] device veth0_macvtap left promiscuous mode [ 2190.817603][T12350] device veth1_vlan left promiscuous mode [ 2190.823764][T12350] device veth0_vlan left promiscuous mode [ 2190.908891][T23008] validate_nla: 7 callbacks suppressed [ 2190.908960][T23008] netlink: 'syz.3.15162': attribute type 3 has an invalid length. [ 2190.924515][T23008] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.15162'. [ 2191.513394][ T3818] Bluetooth: hci0: command 0x040f tx timeout [ 2192.327639][T22829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2192.377893][T22829] 8021q: adding VLAN 0 to HW filter on device team0 [ 2192.397769][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2192.420182][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2192.494568][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2192.513333][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2192.538012][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.545146][T15264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2192.591616][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2192.611855][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2192.632718][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 2192.639928][T15264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2192.686677][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2192.709657][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2192.739818][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2192.764865][T23027] netlink: 'syz.3.15169': attribute type 13 has an invalid length. [ 2192.783665][T23027] netlink: 'syz.3.15169': attribute type 14 has an invalid length. [ 2192.794587][T23027] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15169'. [ 2192.819883][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2192.831829][T23033] ref_ctr_offset mismatch. inode: 0x67a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2192.836072][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2192.883983][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2192.911189][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2192.954306][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2193.035564][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2193.073389][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2193.140185][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2193.164077][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2193.205651][T22829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2193.593836][ T3818] Bluetooth: hci0: command 0x0419 tx timeout [ 2193.740069][T23067] netlink: 'syz.2.15183': attribute type 13 has an invalid length. [ 2193.778421][T23067] netlink: 'syz.2.15183': attribute type 14 has an invalid length. [ 2193.819089][T23067] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15183'. [ 2194.034767][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2194.052001][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2194.115233][T22829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2194.191836][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2194.215237][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2194.267813][T23080] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.15186'. [ 2194.283189][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2194.302416][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2194.319399][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2194.333708][T15267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2194.353069][T23080] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2194.403090][T23084] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.15187'. [ 2194.420517][T23080] CPU: 1 PID: 23080 Comm: syz.2.15186 Not tainted syzkaller #0 [ 2194.428114][T23080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2194.438166][T23080] Call Trace: [ 2194.441440][T23080] [ 2194.444368][T23080] dump_stack_lvl+0x188/0x24e [ 2194.449069][T23080] ? show_regs_print_info+0x12/0x12 [ 2194.454274][T23080] ? load_image+0x410/0x410 [ 2194.458787][T23080] sysfs_warn_dup+0x8a/0xa0 [ 2194.463296][T23080] sysfs_do_create_link_sd+0xc0/0x110 [ 2194.468673][T23080] device_add+0x83b/0x1050 [ 2194.473102][T23080] wiphy_register+0x1d8b/0x2aa0 [ 2194.477974][T23080] ? cfg80211_event_work+0x40/0x40 [ 2194.483091][T23080] ? minstrel_ht_alloc+0x894/0xa20 [ 2194.488209][T23080] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2194.494276][T23080] ieee80211_register_hw+0x2d48/0x39f0 [ 2194.499747][T23080] ? ieee80211_register_hw+0xfa1/0x39f0 [ 2194.505292][T23080] ? ieee80211_register_hw+0xea1/0x39f0 [ 2194.510848][T23080] ? ieee80211_tasklet_handler+0x20/0x20 [ 2194.516483][T23080] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2194.522382][T23080] ? __debug_object_init+0xed/0x440 [ 2194.527584][T23080] ? memset+0x1e/0x40 [ 2194.531564][T23080] ? __hrtimer_init+0x189/0x270 [ 2194.536421][T23080] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2194.542151][T23080] ? memcpy+0x3c/0x60 [ 2194.546131][T23080] hwsim_new_radio_nl+0xab7/0xc90 [ 2194.551176][T23080] genl_family_rcv_msg_doit+0x22f/0x350 [ 2194.556722][T23080] ? end_current_label_crit_section+0x170/0x170 [ 2194.562982][T23080] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2194.568881][T23080] ? bpf_lsm_capable+0x5/0x10 [ 2194.573556][T23080] ? security_capable+0x85/0xb0 [ 2194.578421][T23080] genl_rcv_msg+0x601/0x790 [ 2194.582929][T23080] ? genl_bind+0x360/0x360 [ 2194.587346][T23080] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2194.593693][T23080] netlink_rcv_skb+0x1ef/0x440 [ 2194.598463][T23080] ? genl_bind+0x360/0x360 [ 2194.602878][T23080] ? netlink_ack+0x1160/0x1160 [ 2194.607653][T23080] ? down_read+0x1a8/0x2d0 [ 2194.612084][T23080] genl_rcv+0x24/0x40 [ 2194.616061][T23080] netlink_unicast+0x7ad/0x920 [ 2194.620838][T23080] netlink_sendmsg+0x8ad/0xbd0 [ 2194.625607][T23080] ? netlink_getsockopt+0x550/0x550 [ 2194.630802][T23080] ? apparmor_socket_sendmsg+0x8a/0x330 [ 2194.636358][T23080] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2194.641663][T23080] ? security_socket_sendmsg+0x7c/0xa0 [ 2194.647125][T23080] ? netlink_getsockopt+0x550/0x550 [ 2194.652322][T23080] ____sys_sendmsg+0x5ed/0x9a0 [ 2194.657102][T23080] ? __sys_sendmsg_sock+0x30/0x30 [ 2194.662135][T23080] ? __import_iovec+0x306/0x510 [ 2194.667000][T23080] ? import_iovec+0x6f/0xa0 [ 2194.671510][T23080] ___sys_sendmsg+0x2a2/0x360 [ 2194.676197][T23080] ? __sys_sendmsg+0x2a0/0x2a0 [ 2194.681004][T23080] __se_sys_sendmsg+0x1c3/0x2b0 [ 2194.685860][T23080] ? __x64_sys_sendmsg+0x80/0x80 [ 2194.690833][T23080] ? lockdep_hardirqs_on+0x94/0x140 [ 2194.696034][T23080] do_syscall_64+0x4c/0xa0 [ 2194.700455][T23080] ? clear_bhb_loop+0x60/0xb0 [ 2194.705133][T23080] ? clear_bhb_loop+0x60/0xb0 [ 2194.709822][T23080] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2194.715717][T23080] RIP: 0033:0x7fb588d9e0d9 [ 2194.720132][T23080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2194.739734][T23080] RSP: 002b:00007fb589cd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2194.748147][T23080] RAX: ffffffffffffffda RBX: 00007fb589026090 RCX: 00007fb588d9e0d9 [ 2194.756113][T23080] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 2194.764076][T23080] RBP: 00007fb588e35024 R08: 0000000000000000 R09: 0000000000000000 [ 2194.772064][T23080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2194.780032][T23080] R13: 00007fb589026128 R14: 00007fb589026090 R15: 00007ffde2a35058 [ 2194.788015][T23080] [ 2194.802022][T23085] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.15187'. [ 2194.936825][T23085] netlink: 'syz.3.15187': attribute type 29 has an invalid length. [ 2194.963858][T22829] device veth0_vlan entered promiscuous mode [ 2194.998442][T23085] netlink: 'syz.3.15187': attribute type 29 has an invalid length. [ 2195.020439][T22829] device veth1_vlan entered promiscuous mode [ 2195.051743][T23090] netlink: 'syz.3.15187': attribute type 29 has an invalid length. [ 2195.101528][T23085] netlink: 'syz.3.15187': attribute type 29 has an invalid length. [ 2195.123792][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2195.151073][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2195.177907][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2195.198434][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2195.234502][T22829] device veth0_macvtap entered promiscuous mode [ 2195.271365][T22829] device veth1_macvtap entered promiscuous mode [ 2195.348301][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.394990][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.423118][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2195.443965][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.486668][T22829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2195.507413][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.547165][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.578664][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.599285][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.629638][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.654924][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.677891][T22829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2195.713974][T22829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2195.743250][T22829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2195.763859][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2195.780459][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2195.806491][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2195.824693][T15264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2195.867593][T23102] netlink: 'syz.2.15194': attribute type 13 has an invalid length. [ 2195.876127][T23102] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15194'. [ 2195.926082][T22829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.955841][T22829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2195.984265][T22829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.003927][T22829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2196.220736][T15267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2196.257379][T15267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2196.294414][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2196.359943][T15267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2196.376766][T15267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2196.387190][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2197.093347][T23149] validate_nla: 1 callbacks suppressed [ 2197.093382][T23149] netlink: 'syz.3.15207': attribute type 13 has an invalid length. [ 2197.149083][T23149] netlink: 'syz.3.15207': attribute type 14 has an invalid length. [ 2197.234244][T23149] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15207'. [ 2198.525002][T23196] netlink: 'syz.2.15226': attribute type 13 has an invalid length. [ 2198.547260][T23196] netlink: 'syz.2.15226': attribute type 14 has an invalid length. [ 2198.584709][T23196] netlink: 156 bytes leftover after parsing attributes in process `syz.2.15226'. [ 2199.161878][T23218] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.15235'. [ 2199.335746][T23224] netlink: 40 bytes leftover after parsing attributes in process `syz.3.15236'. [ 2199.431912][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15236'. [ 2199.791797][T23237] netlink: 'syz.3.15240': attribute type 13 has an invalid length. [ 2199.843326][T23237] netlink: 'syz.3.15240': attribute type 14 has an invalid length. [ 2199.877862][T23237] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15240'. [ 2200.139067][T23244] netlink: 'syz.0.15239': attribute type 3 has an invalid length. [ 2200.146951][T23244] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.15239'. [ 2200.226065][T23245] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15243'. [ 2201.171767][T23245] device hsr_slave_0 left promiscuous mode [ 2201.199915][T23245] device hsr_slave_1 left promiscuous mode [ 2201.402111][T23246] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15243'. [ 2201.432403][T23249] netlink: 'syz.0.15239': attribute type 21 has an invalid length. [ 2201.442642][T23249] netlink: 128 bytes leftover after parsing attributes in process `syz.0.15239'. [ 2201.465463][T23249] netlink: 'syz.0.15239': attribute type 4 has an invalid length. [ 2201.493124][T23255] tc_dump_action: action bad kind [ 2201.547157][T23269] tap0: tun_chr_ioctl cmd 1074025676 [ 2201.552514][T23269] tap0: owner set to 776 [ 2201.894058][T23278] netlink: 'syz.0.15254': attribute type 13 has an invalid length. [ 2202.234770][T23303] validate_nla: 1 callbacks suppressed [ 2202.234807][T23303] netlink: 'syz.0.15262': attribute type 10 has an invalid length. [ 2202.699122][T23303] team0: Port device geneve1 added [ 2202.748356][T23314] tun0: tun_chr_ioctl cmd 2148553947 [ 2202.776556][T23317] __nla_validate_parse: 3 callbacks suppressed [ 2202.776577][T23317] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15266'. [ 2203.058941][T23335] netlink: 'syz.4.15272': attribute type 13 has an invalid length. [ 2203.087635][T23335] netlink: 'syz.4.15272': attribute type 14 has an invalid length. [ 2203.108511][T23335] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15272'. [ 2204.369426][T23379] netlink: 'syz.1.15288': attribute type 13 has an invalid length. [ 2204.414511][T23379] netlink: 'syz.1.15288': attribute type 14 has an invalid length. [ 2204.448112][T23379] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15288'. [ 2204.499682][T23383] netlink: 'syz.4.15289': attribute type 10 has an invalid length. [ 2204.544619][T23383] netlink: 2 bytes leftover after parsing attributes in process `syz.4.15289'. [ 2205.012210][T23397] netlink: 'syz.1.15297': attribute type 2 has an invalid length. [ 2205.035276][T23397] netlink: 'syz.1.15297': attribute type 8 has an invalid length. [ 2205.088087][T23397] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15297'. [ 2205.714480][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2205.725011][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2205.733453][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2205.743231][ T49] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2205.754223][ T49] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2205.769333][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2205.781351][T23422] netlink: 'syz.0.15301': attribute type 13 has an invalid length. [ 2205.817628][T23422] netlink: 'syz.0.15301': attribute type 14 has an invalid length. [ 2205.850374][T23422] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15301'. [ 2206.273877][T23420] chnl_net:caif_netlink_parms(): no params data found [ 2206.450270][T23451] netlink: 40 bytes leftover after parsing attributes in process `syz.4.15309'. [ 2206.464317][T23451] device dummy0 entered promiscuous mode [ 2206.479391][T23451] bridge0: port 2(dummy0) entered blocking state [ 2206.516988][T23451] bridge0: port 2(dummy0) entered disabled state [ 2206.553604][T23451] bridge0: port 2(dummy0) entered blocking state [ 2206.560361][T23451] bridge0: port 2(dummy0) entered forwarding state [ 2206.730357][T15265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.771221][T23463] IPv6: …: Disabled Multicast RS [ 2206.932039][T15265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.982738][T23471] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15317'. [ 2207.024673][T23420] bridge0: port 1(bridge_slave_0) entered blocking state [ 2207.049476][T23420] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.073301][T23420] device bridge_slave_0 entered promiscuous mode [ 2207.125942][T15265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.191631][T23487] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15319'. [ 2207.336819][T23479] validate_nla: 3 callbacks suppressed [ 2207.336852][T23479] netlink: 'syz.3.15316': attribute type 13 has an invalid length. [ 2207.355523][T23479] netlink: 'syz.3.15316': attribute type 14 has an invalid length. [ 2207.366320][T23479] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15316'. [ 2207.378347][T23420] bridge0: port 2(bridge_slave_1) entered blocking state [ 2207.385921][T23420] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.405618][T23420] device bridge_slave_1 entered promiscuous mode [ 2207.466949][T15265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2207.554626][T23420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2207.614131][T23420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2207.780117][T23420] team0: Port device team_slave_0 added [ 2207.815409][T23420] team0: Port device team_slave_1 added [ 2207.827350][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 2207.892614][T23420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2207.900211][T23420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2207.929367][T23420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2208.402157][T23511] netlink: 'syz.4.15325': attribute type 3 has an invalid length. [ 2208.675696][T23511] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.15325'. [ 2209.907271][ T3818] Bluetooth: hci2: command 0x041b tx timeout [ 2210.793243][T23420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2210.801237][T23420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2210.837288][T23420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2210.867459][T23508] netlink: 'syz.3.15324': attribute type 10 has an invalid length. [ 2210.923165][T23508] team0: Port device wlan1 added [ 2210.935864][T23516] netlink: 'syz.4.15325': attribute type 21 has an invalid length. [ 2210.956687][T23516] netlink: 128 bytes leftover after parsing attributes in process `syz.4.15325'. [ 2210.981066][T23516] netlink: 'syz.4.15325': attribute type 4 has an invalid length. [ 2211.008502][T23516] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15325'. [ 2211.327720][T23420] device hsr_slave_0 entered promiscuous mode [ 2211.364248][T23420] device hsr_slave_1 entered promiscuous mode [ 2211.397612][T23420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2211.423353][T23420] Cannot create hsr debugfs directory [ 2211.434574][T23547] netlink: 'syz.1.15333': attribute type 13 has an invalid length. [ 2211.458278][T23547] netlink: 'syz.1.15333': attribute type 14 has an invalid length. [ 2211.474020][T23547] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15333'. [ 2211.592705][T23557] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2211.658346][T23557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2211.733753][T23564] netlink: 'syz.0.15337': attribute type 10 has an invalid length. [ 2211.861341][T23564] team0: Port device dummy0 added [ 2211.987340][ T3818] Bluetooth: hci2: command 0x040f tx timeout [ 2213.548878][T23612] netlink: 'syz.4.15348': attribute type 13 has an invalid length. [ 2213.567226][T23612] netlink: 'syz.4.15348': attribute type 14 has an invalid length. [ 2213.592519][T23612] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15348'. [ 2213.634997][T23615] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15347'. [ 2213.680719][T23615] bond0: (slave bond_slave_0): Releasing backup interface [ 2213.726828][T23615] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2214.067445][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 2214.160630][T23630] FAULT_INJECTION: forcing a failure. [ 2214.160630][T23630] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.181812][T23630] CPU: 1 PID: 23630 Comm: syz.4.15354 Not tainted syzkaller #0 [ 2214.189409][T23630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2214.199475][T23630] Call Trace: [ 2214.202757][T23630] [ 2214.205686][T23630] dump_stack_lvl+0x188/0x24e [ 2214.210378][T23630] ? show_regs_print_info+0x12/0x12 [ 2214.215591][T23630] ? load_image+0x410/0x410 [ 2214.220099][T23630] ? __lock_acquire+0x7c40/0x7c40 [ 2214.225130][T23630] should_fail_ex+0x390/0x4c0 [ 2214.229814][T23630] should_failslab+0x5/0x20 [ 2214.234311][T23630] slab_pre_alloc_hook+0x59/0x300 [ 2214.239331][T23630] ? verify_lock_unused+0x140/0x140 [ 2214.244549][T23630] ? bpf_test_init+0x9f/0x140 [ 2214.249270][T23630] __kmem_cache_alloc_node+0x4f/0x270 [ 2214.254663][T23630] ? bpf_test_init+0x9f/0x140 [ 2214.259346][T23630] __kmalloc+0xa3/0x240 [ 2214.263510][T23630] bpf_test_init+0x9f/0x140 [ 2214.268027][T23630] bpf_prog_test_run_xdp+0x488/0xf80 [ 2214.273318][T23630] ? __lock_acquire+0x7c40/0x7c40 [ 2214.278379][T23630] ? dev_put+0x80/0x80 [ 2214.282472][T23630] ? dev_put+0x80/0x80 [ 2214.286539][T23630] bpf_prog_test_run+0x31c/0x390 [ 2214.291482][T23630] __sys_bpf+0x62b/0x780 [ 2214.295729][T23630] ? bpf_link_show_fdinfo+0x380/0x380 [ 2214.301114][T23630] ? lock_chain_count+0x20/0x20 [ 2214.305967][T23630] __x64_sys_bpf+0x78/0x90 [ 2214.310398][T23630] do_syscall_64+0x4c/0xa0 [ 2214.314828][T23630] ? clear_bhb_loop+0x60/0xb0 [ 2214.319508][T23630] ? clear_bhb_loop+0x60/0xb0 [ 2214.324192][T23630] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2214.330096][T23630] RIP: 0033:0x7f91ccb9e0d9 [ 2214.334511][T23630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.354138][T23630] RSP: 002b:00007f91cda6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2214.362548][T23630] RAX: ffffffffffffffda RBX: 00007f91cce25fa0 RCX: 00007f91ccb9e0d9 [ 2214.370514][T23630] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2214.378480][T23630] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.386447][T23630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.394434][T23630] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2214.402432][T23630] [ 2214.996089][T23639] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15357'. [ 2216.355636][T23656] netlink: 'syz.1.15359': attribute type 13 has an invalid length. [ 2216.415672][T23656] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.15359'. [ 2216.589792][T23420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2216.653629][T23420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2216.835620][T23681] ref_ctr_offset mismatch. inode: 0x73f offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2216.863705][T23420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2216.897316][T23420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2216.935612][T23685] FAULT_INJECTION: forcing a failure. [ 2216.935612][T23685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2216.990439][T23685] CPU: 0 PID: 23685 Comm: syz.3.15368 Not tainted syzkaller #0 [ 2216.998042][T23685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2217.008115][T23685] Call Trace: [ 2217.011402][T23685] [ 2217.014344][T23685] dump_stack_lvl+0x188/0x24e [ 2217.019058][T23685] ? show_regs_print_info+0x12/0x12 [ 2217.024286][T23685] ? load_image+0x410/0x410 [ 2217.028816][T23685] ? __lock_acquire+0x7c40/0x7c40 [ 2217.033864][T23685] should_fail_ex+0x390/0x4c0 [ 2217.038571][T23685] _copy_from_user+0x2c/0x170 [ 2217.043269][T23685] bpf_test_init+0xde/0x140 [ 2217.047796][T23685] bpf_prog_test_run_xdp+0x488/0xf80 [ 2217.053097][T23685] ? __lock_acquire+0x7c40/0x7c40 [ 2217.058156][T23685] ? dev_put+0x80/0x80 [ 2217.062255][T23685] ? dev_put+0x80/0x80 [ 2217.066337][T23685] bpf_prog_test_run+0x31c/0x390 [ 2217.071309][T23685] __sys_bpf+0x62b/0x780 [ 2217.075573][T23685] ? bpf_link_show_fdinfo+0x380/0x380 [ 2217.080982][T23685] ? lock_chain_count+0x20/0x20 [ 2217.085839][T23685] __x64_sys_bpf+0x78/0x90 [ 2217.090256][T23685] do_syscall_64+0x4c/0xa0 [ 2217.094674][T23685] ? clear_bhb_loop+0x60/0xb0 [ 2217.099350][T23685] ? clear_bhb_loop+0x60/0xb0 [ 2217.104027][T23685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2217.109921][T23685] RIP: 0033:0x7f58f5d9e0d9 [ 2217.114352][T23685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2217.133949][T23685] RSP: 002b:00007f58f6ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2217.142360][T23685] RAX: ffffffffffffffda RBX: 00007f58f6025fa0 RCX: 00007f58f5d9e0d9 [ 2217.150327][T23685] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2217.158293][T23685] RBP: 00007f58f6ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2217.166261][T23685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2217.174235][T23685] R13: 00007f58f6026038 R14: 00007f58f6025fa0 R15: 00007ffd9c7a5138 [ 2217.182226][T23685] [ 2217.219677][T15265] device hsr_slave_0 left promiscuous mode [ 2217.243337][T15265] device hsr_slave_1 left promiscuous mode [ 2217.254018][T15265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2217.272541][T15265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2217.300590][T15265] bridge0: port 2(bridge_slave_1) entered disabled state [ 2217.325792][T15265] device bridge_slave_0 left promiscuous mode [ 2217.338022][T15265] bridge0: port 1(bridge_slave_0) entered disabled state [ 2217.371741][T15265] device veth1_macvtap left promiscuous mode [ 2217.383549][T15265] device veth0_macvtap left promiscuous mode [ 2217.391303][T15265] device veth1_vlan left promiscuous mode [ 2217.413689][T15265] device veth0_vlan left promiscuous mode [ 2217.555210][T23698] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.15370'. [ 2218.548672][T15265] team0 (unregistering): Port device team_slave_1 removed [ 2218.600793][T15265] team0 (unregistering): Port device team_slave_0 removed [ 2219.490728][T23420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2219.572381][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2219.587909][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2219.632526][T23420] 8021q: adding VLAN 0 to HW filter on device team0 [ 2219.697488][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2219.720374][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2219.765834][T15989] bridge0: port 1(bridge_slave_0) entered blocking state [ 2219.773060][T15989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2219.838034][T23726] netlink: 'syz.1.15378': attribute type 2 has an invalid length. [ 2219.842535][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2219.891568][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2219.929874][T15989] bridge0: port 2(bridge_slave_1) entered blocking state [ 2219.937143][T15989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2219.986110][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2220.021645][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2220.052293][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2220.127471][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2220.155120][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2220.184250][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2220.225331][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2220.366469][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2220.395214][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2220.424263][T23738] FAULT_INJECTION: forcing a failure. [ 2220.424263][T23738] name failslab, interval 1, probability 0, space 0, times 0 [ 2220.425974][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2220.437281][T23738] CPU: 1 PID: 23738 Comm: syz.0.15382 Not tainted syzkaller #0 [ 2220.452267][T23738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2220.462341][T23738] Call Trace: [ 2220.465636][T23738] [ 2220.468584][T23738] dump_stack_lvl+0x188/0x24e [ 2220.473295][T23738] ? show_regs_print_info+0x12/0x12 [ 2220.478520][T23738] ? load_image+0x410/0x410 [ 2220.483051][T23738] ? __might_sleep+0xd0/0xd0 [ 2220.487657][T23738] ? __lock_acquire+0x7c40/0x7c40 [ 2220.492704][T23738] should_fail_ex+0x390/0x4c0 [ 2220.497388][T23738] should_failslab+0x5/0x20 [ 2220.501884][T23738] slab_pre_alloc_hook+0x59/0x300 [ 2220.506907][T23738] ? __lock_acquire+0x7c40/0x7c40 [ 2220.511934][T23738] ? kvmalloc_node+0x6c/0x180 [ 2220.516612][T23738] __kmem_cache_alloc_node+0x4f/0x270 [ 2220.521982][T23738] ? schedule_delayed_monitor_work+0x160/0x160 [ 2220.528143][T23738] ? kvmalloc_node+0x6c/0x180 [ 2220.532818][T23738] __kmalloc_node+0xa2/0x240 [ 2220.537411][T23738] kvmalloc_node+0x6c/0x180 [ 2220.541913][T23738] bpf_test_run_xdp_live+0x1da/0x1a90 [ 2220.547293][T23738] ? 0xffffffffa0004440 [ 2220.551442][T23738] ? text_poke_copy+0x7b/0x90 [ 2220.556211][T23738] ? 0xffffffffa0004440 [ 2220.560361][T23738] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2220.566262][T23738] ? xdp_convert_md_to_buff+0x330/0x330 [ 2220.571829][T23738] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2220.578072][T23738] ? bpf_test_init+0x119/0x140 [ 2220.582833][T23738] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2220.588289][T23738] bpf_prog_test_run_xdp+0x757/0xf80 [ 2220.593572][T23738] ? __lock_acquire+0x7c40/0x7c40 [ 2220.598601][T23738] ? dev_put+0x80/0x80 [ 2220.602674][T23738] ? dev_put+0x80/0x80 [ 2220.606734][T23738] bpf_prog_test_run+0x31c/0x390 [ 2220.611673][T23738] __sys_bpf+0x62b/0x780 [ 2220.615915][T23738] ? bpf_link_show_fdinfo+0x380/0x380 [ 2220.621297][T23738] ? lock_chain_count+0x20/0x20 [ 2220.626150][T23738] __x64_sys_bpf+0x78/0x90 [ 2220.630564][T23738] do_syscall_64+0x4c/0xa0 [ 2220.634982][T23738] ? clear_bhb_loop+0x60/0xb0 [ 2220.639658][T23738] ? clear_bhb_loop+0x60/0xb0 [ 2220.644334][T23738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2220.650224][T23738] RIP: 0033:0x7fec1819e0d9 [ 2220.654634][T23738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2220.674231][T23738] RSP: 002b:00007fec163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2220.682664][T23738] RAX: ffffffffffffffda RBX: 00007fec18425fa0 RCX: 00007fec1819e0d9 [ 2220.690631][T23738] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2220.698596][T23738] RBP: 00007fec163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2220.706565][T23738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2220.714528][T23738] R13: 00007fec18426038 R14: 00007fec18425fa0 R15: 00007ffe3c1e82a8 [ 2220.722505][T23738] [ 2220.744907][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2220.774697][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2220.806289][T23420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2221.604798][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2221.612966][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2221.626086][T23420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2221.665046][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2221.678989][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.685528][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.699354][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2221.730547][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2221.763761][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2221.780270][T23420] device veth0_vlan entered promiscuous mode [ 2221.797421][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2221.809997][T15987] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2221.845252][T23420] device veth1_vlan entered promiscuous mode [ 2221.904289][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 2221.916125][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 2221.933653][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2221.952808][T15989] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2221.974426][T23420] device veth0_macvtap entered promiscuous mode [ 2222.001592][T23420] device veth1_macvtap entered promiscuous mode [ 2222.021712][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2222.032435][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.042624][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2222.053430][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.063767][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2222.097792][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.133677][T23420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2222.152895][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2222.173762][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2222.183019][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2222.220335][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2222.274555][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.317173][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.337411][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.372826][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.387375][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.406440][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.444640][T23420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2222.455323][T23420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2222.466808][T23420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2222.480105][T23420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.536736][T23420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.551679][T23420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.587240][T23420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.620780][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2222.644343][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2223.381686][T23800] FAULT_INJECTION: forcing a failure. [ 2223.381686][T23800] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.425725][ T4839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.446406][T23800] CPU: 0 PID: 23800 Comm: syz.0.15393 Not tainted syzkaller #0 [ 2223.454013][T23800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2223.460082][ T4839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.464074][T23800] Call Trace: [ 2223.464083][T23800] [ 2223.477545][T23800] dump_stack_lvl+0x188/0x24e [ 2223.482232][T23800] ? show_regs_print_info+0x12/0x12 [ 2223.487431][T23800] ? load_image+0x410/0x410 [ 2223.491930][T23800] ? __might_sleep+0xd0/0xd0 [ 2223.496511][T23800] ? __lock_acquire+0x7c40/0x7c40 [ 2223.501535][T23800] should_fail_ex+0x390/0x4c0 [ 2223.506211][T23800] should_failslab+0x5/0x20 [ 2223.510708][T23800] slab_pre_alloc_hook+0x59/0x300 [ 2223.515728][T23800] ? kvmalloc_node+0x6c/0x180 [ 2223.520405][T23800] __kmem_cache_alloc_node+0x4f/0x270 [ 2223.525775][T23800] ? kvmalloc_node+0x6c/0x180 [ 2223.530450][T23800] __kmalloc_node+0xa2/0x240 [ 2223.535040][T23800] kvmalloc_node+0x6c/0x180 [ 2223.539543][T23800] bpf_test_run_xdp_live+0x206/0x1a90 [ 2223.544914][T23800] ? 0xffffffffa0004440 [ 2223.549067][T23800] ? text_poke_copy+0x7b/0x90 [ 2223.553743][T23800] ? 0xffffffffa0004440 [ 2223.557893][T23800] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2223.563789][T23800] ? xdp_convert_md_to_buff+0x330/0x330 [ 2223.569351][T23800] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2223.575595][T23800] ? bpf_test_init+0x119/0x140 [ 2223.580352][T23800] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2223.585807][T23800] bpf_prog_test_run_xdp+0x757/0xf80 [ 2223.591107][T23800] ? __lock_acquire+0x7c40/0x7c40 [ 2223.596145][T23800] ? dev_put+0x80/0x80 [ 2223.600223][T23800] ? dev_put+0x80/0x80 [ 2223.604301][T23800] bpf_prog_test_run+0x31c/0x390 [ 2223.609254][T23800] __sys_bpf+0x62b/0x780 [ 2223.613494][T23800] ? bpf_link_show_fdinfo+0x380/0x380 [ 2223.618873][T23800] ? lock_chain_count+0x20/0x20 [ 2223.623741][T23800] __x64_sys_bpf+0x78/0x90 [ 2223.628159][T23800] do_syscall_64+0x4c/0xa0 [ 2223.632575][T23800] ? clear_bhb_loop+0x60/0xb0 [ 2223.637251][T23800] ? clear_bhb_loop+0x60/0xb0 [ 2223.641927][T23800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2223.647817][T23800] RIP: 0033:0x7fec1819e0d9 [ 2223.652223][T23800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2223.671825][T23800] RSP: 002b:00007fec163f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2223.680231][T23800] RAX: ffffffffffffffda RBX: 00007fec18425fa0 RCX: 00007fec1819e0d9 [ 2223.688202][T23800] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2223.696166][T23800] RBP: 00007fec163f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2223.704127][T23800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2223.712092][T23800] R13: 00007fec18426038 R14: 00007fec18425fa0 R15: 00007ffe3c1e82a8 [ 2223.720065][T23800] [ 2223.782404][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2223.807607][ T4839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2223.815501][ T4839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2223.848438][ T4839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2223.999465][T23807] netlink: 'syz.3.15392': attribute type 13 has an invalid length. [ 2224.009062][T23807] netlink: 'syz.3.15392': attribute type 14 has an invalid length. [ 2224.017311][T23807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15392'. [ 2224.047836][T23810] FAULT_INJECTION: forcing a failure. [ 2224.047836][T23810] name failslab, interval 1, probability 0, space 0, times 0 [ 2224.097139][T23810] CPU: 0 PID: 23810 Comm: syz.4.15396 Not tainted syzkaller #0 [ 2224.104738][T23810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2224.114798][T23810] Call Trace: [ 2224.118073][T23810] [ 2224.120997][T23810] dump_stack_lvl+0x188/0x24e [ 2224.125695][T23810] ? show_regs_print_info+0x12/0x12 [ 2224.130900][T23810] ? load_image+0x410/0x410 [ 2224.135401][T23810] ? __might_sleep+0xd0/0xd0 [ 2224.139986][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 2224.145012][T23810] should_fail_ex+0x390/0x4c0 [ 2224.149712][T23810] should_failslab+0x5/0x20 [ 2224.154219][T23810] slab_pre_alloc_hook+0x59/0x300 [ 2224.159253][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 2224.164288][T23810] ? kvmalloc_node+0x6c/0x180 [ 2224.168966][T23810] __kmem_cache_alloc_node+0x4f/0x270 [ 2224.174332][T23810] ? schedule_delayed_monitor_work+0x160/0x160 [ 2224.180486][T23810] ? kvmalloc_node+0x6c/0x180 [ 2224.185162][T23810] __kmalloc_node+0xa2/0x240 [ 2224.189757][T23810] kvmalloc_node+0x6c/0x180 [ 2224.194263][T23810] bpf_test_run_xdp_live+0x1da/0x1a90 [ 2224.199631][T23810] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2224.204910][T23810] ? text_poke_copy+0x7b/0x90 [ 2224.209583][T23810] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2224.214865][T23810] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2224.220763][T23810] ? xdp_convert_md_to_buff+0x330/0x330 [ 2224.226329][T23810] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2224.232567][T23810] ? bpf_test_init+0x119/0x140 [ 2224.237345][T23810] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2224.242817][T23810] bpf_prog_test_run_xdp+0x757/0xf80 [ 2224.248114][T23810] ? __lock_acquire+0x7c40/0x7c40 [ 2224.253608][T23810] ? dev_put+0x80/0x80 [ 2224.257697][T23810] ? dev_put+0x80/0x80 [ 2224.261808][T23810] bpf_prog_test_run+0x31c/0x390 [ 2224.266769][T23810] __sys_bpf+0x62b/0x780 [ 2224.271034][T23810] ? bpf_link_show_fdinfo+0x380/0x380 [ 2224.276423][T23810] ? lock_chain_count+0x20/0x20 [ 2224.281282][T23810] __x64_sys_bpf+0x78/0x90 [ 2224.285707][T23810] do_syscall_64+0x4c/0xa0 [ 2224.290124][T23810] ? clear_bhb_loop+0x60/0xb0 [ 2224.294817][T23810] ? clear_bhb_loop+0x60/0xb0 [ 2224.299516][T23810] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2224.305417][T23810] RIP: 0033:0x7f91ccb9e0d9 [ 2224.309831][T23810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2224.329434][T23810] RSP: 002b:00007f91cda6a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2224.337842][T23810] RAX: ffffffffffffffda RBX: 00007f91cce25fa0 RCX: 00007f91ccb9e0d9 [ 2224.345805][T23810] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2224.353769][T23810] RBP: 00007f91cda6a090 R08: 0000000000000000 R09: 0000000000000000 [ 2224.361730][T23810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2224.369696][T23810] R13: 00007f91cce26038 R14: 00007f91cce25fa0 R15: 00007ffdfdd526b8 [ 2224.377674][T23810] [ 2225.773991][T23849] FAULT_INJECTION: forcing a failure. [ 2225.773991][T23849] name failslab, interval 1, probability 0, space 0, times 0 [ 2225.807464][T23851] netlink: 'syz.4.15409': attribute type 13 has an invalid length. [ 2225.815628][T23851] netlink: 'syz.4.15409': attribute type 14 has an invalid length. [ 2225.816181][T23849] CPU: 1 PID: 23849 Comm: syz.3.15411 Not tainted syzkaller #0 [ 2225.831089][T23849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2225.841154][T23849] Call Trace: [ 2225.844445][T23849] [ 2225.847385][T23849] dump_stack_lvl+0x188/0x24e [ 2225.852109][T23849] ? show_regs_print_info+0x12/0x12 [ 2225.857328][T23849] ? load_image+0x410/0x410 [ 2225.861856][T23849] ? __might_sleep+0xd0/0xd0 [ 2225.862612][T23851] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15409'. [ 2225.866449][T23849] ? __lock_acquire+0x7c40/0x7c40 [ 2225.866485][T23849] should_fail_ex+0x390/0x4c0 [ 2225.866516][T23849] should_failslab+0x5/0x20 [ 2225.866534][T23849] slab_pre_alloc_hook+0x59/0x300 [ 2225.866558][T23849] ? kvmalloc_node+0x6c/0x180 [ 2225.866585][T23849] __kmem_cache_alloc_node+0x4f/0x270 [ 2225.866609][T23849] ? kvmalloc_node+0x6c/0x180 [ 2225.909541][T23849] __kmalloc_node+0xa2/0x240 [ 2225.914128][T23849] kvmalloc_node+0x6c/0x180 [ 2225.918634][T23849] bpf_test_run_xdp_live+0x206/0x1a90 [ 2225.924011][T23849] ? 0xffffffffa0004440 [ 2225.928158][T23849] ? text_poke_copy+0x7b/0x90 [ 2225.932829][T23849] ? 0xffffffffa0004440 [ 2225.936977][T23849] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2225.942875][T23849] ? xdp_convert_md_to_buff+0x330/0x330 [ 2225.948446][T23849] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2225.954689][T23849] ? bpf_test_init+0x119/0x140 [ 2225.959448][T23849] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2225.964901][T23849] bpf_prog_test_run_xdp+0x757/0xf80 [ 2225.970182][T23849] ? __lock_acquire+0x7c40/0x7c40 [ 2225.975209][T23849] ? dev_put+0x80/0x80 [ 2225.979282][T23849] ? dev_put+0x80/0x80 [ 2225.983343][T23849] bpf_prog_test_run+0x31c/0x390 [ 2225.988285][T23849] __sys_bpf+0x62b/0x780 [ 2225.992522][T23849] ? bpf_link_show_fdinfo+0x380/0x380 [ 2225.997899][T23849] ? lock_chain_count+0x20/0x20 [ 2226.002751][T23849] __x64_sys_bpf+0x78/0x90 [ 2226.007164][T23849] do_syscall_64+0x4c/0xa0 [ 2226.011575][T23849] ? clear_bhb_loop+0x60/0xb0 [ 2226.016247][T23849] ? clear_bhb_loop+0x60/0xb0 [ 2226.020919][T23849] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2226.026804][T23849] RIP: 0033:0x7f58f5d9e0d9 [ 2226.031210][T23849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2226.050807][T23849] RSP: 002b:00007f58f6ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2226.059213][T23849] RAX: ffffffffffffffda RBX: 00007f58f6025fa0 RCX: 00007f58f5d9e0d9 [ 2226.067176][T23849] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2226.075137][T23849] RBP: 00007f58f6ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2226.083099][T23849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2226.091058][T23849] R13: 00007f58f6026038 R14: 00007f58f6025fa0 R15: 00007ffd9c7a5138 [ 2226.099032][T23849] [ 2226.191716][T23857] ref_ctr_offset mismatch. inode: 0x26 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2226.570006][T23879] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.15423'. [ 2226.880089][T23888] netlink: 'syz.1.15427': attribute type 13 has an invalid length. [ 2226.893479][T23888] netlink: 'syz.1.15427': attribute type 14 has an invalid length. [ 2226.904666][T23888] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15427'. [ 2227.129874][T23885] FAULT_INJECTION: forcing a failure. [ 2227.129874][T23885] name failslab, interval 1, probability 0, space 0, times 0 [ 2227.186517][T23885] CPU: 0 PID: 23885 Comm: syz.2.15426 Not tainted syzkaller #0 [ 2227.194130][T23885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2227.204207][T23885] Call Trace: [ 2227.207510][T23885] [ 2227.210454][T23885] dump_stack_lvl+0x188/0x24e [ 2227.215149][T23885] ? show_regs_print_info+0x12/0x12 [ 2227.220355][T23885] ? load_image+0x410/0x410 [ 2227.224888][T23885] ? __might_sleep+0xd0/0xd0 [ 2227.229495][T23885] ? __lock_acquire+0x7c40/0x7c40 [ 2227.234547][T23885] should_fail_ex+0x390/0x4c0 [ 2227.239259][T23885] should_failslab+0x5/0x20 [ 2227.243773][T23885] slab_pre_alloc_hook+0x59/0x300 [ 2227.248818][T23885] ? kvmalloc_node+0x6c/0x180 [ 2227.253526][T23885] __kmem_cache_alloc_node+0x4f/0x270 [ 2227.258921][T23885] ? kvmalloc_node+0x6c/0x180 [ 2227.263622][T23885] __kmalloc_node+0xa2/0x240 [ 2227.268241][T23885] kvmalloc_node+0x6c/0x180 [ 2227.272769][T23885] bpf_test_run_xdp_live+0x206/0x1a90 [ 2227.278163][T23885] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2227.283470][T23885] ? text_poke_copy+0x7b/0x90 [ 2227.288167][T23885] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2227.293469][T23885] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2227.299394][T23885] ? xdp_convert_md_to_buff+0x330/0x330 [ 2227.304988][T23885] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2227.310703][T23893] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2227.311244][T23885] ? bpf_test_init+0x119/0x140 [ 2227.322933][T23885] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2227.328421][T23885] bpf_prog_test_run_xdp+0x757/0xf80 [ 2227.333733][T23885] ? __lock_acquire+0x7c40/0x7c40 [ 2227.338787][T23885] ? dev_put+0x80/0x80 [ 2227.342888][T23885] ? dev_put+0x80/0x80 [ 2227.346972][T23885] bpf_prog_test_run+0x31c/0x390 [ 2227.351926][T23885] __sys_bpf+0x62b/0x780 [ 2227.356194][T23885] ? bpf_link_show_fdinfo+0x380/0x380 [ 2227.361600][T23885] ? lock_chain_count+0x20/0x20 [ 2227.366480][T23885] __x64_sys_bpf+0x78/0x90 [ 2227.370918][T23885] do_syscall_64+0x4c/0xa0 [ 2227.375358][T23885] ? clear_bhb_loop+0x60/0xb0 [ 2227.380057][T23885] ? clear_bhb_loop+0x60/0xb0 [ 2227.384756][T23885] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2227.390670][T23885] RIP: 0033:0x7f6bd8b9e0d9 [ 2227.395099][T23885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2227.414727][T23885] RSP: 002b:00007f6bd9989028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2227.423165][T23885] RAX: ffffffffffffffda RBX: 00007f6bd8e25fa0 RCX: 00007f6bd8b9e0d9 [ 2227.431157][T23885] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2227.439145][T23885] RBP: 00007f6bd9989090 R08: 0000000000000000 R09: 0000000000000000 [ 2227.447131][T23885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2227.455116][T23885] R13: 00007f6bd8e26038 R14: 00007f6bd8e25fa0 R15: 00007fffabf2bc58 [ 2227.463121][T23885] [ 2227.870630][T23919] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.15437'. [ 2227.921466][T23918] ref_ctr_offset mismatch. inode: 0x7a6 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2227.953726][T23923] netlink: 'syz.3.15440': attribute type 13 has an invalid length. [ 2227.993502][T23923] netlink: 'syz.3.15440': attribute type 14 has an invalid length. [ 2228.047797][T23923] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15440'. [ 2228.787135][T23939] FAULT_INJECTION: forcing a failure. [ 2228.787135][T23939] name failslab, interval 1, probability 0, space 0, times 0 [ 2228.817198][T23939] CPU: 1 PID: 23939 Comm: syz.1.15447 Not tainted syzkaller #0 [ 2228.824812][T23939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2228.834887][T23939] Call Trace: [ 2228.838182][T23939] [ 2228.841113][T23939] dump_stack_lvl+0x188/0x24e [ 2228.845797][T23939] ? show_regs_print_info+0x12/0x12 [ 2228.850997][T23939] ? load_image+0x410/0x410 [ 2228.855500][T23939] ? __might_sleep+0xd0/0xd0 [ 2228.860089][T23939] ? __lock_acquire+0x7c40/0x7c40 [ 2228.865111][T23939] should_fail_ex+0x390/0x4c0 [ 2228.869788][T23939] should_failslab+0x5/0x20 [ 2228.874282][T23939] slab_pre_alloc_hook+0x59/0x300 [ 2228.879300][T23939] ? kvmalloc_node+0x6c/0x180 [ 2228.883984][T23939] __kmem_cache_alloc_node+0x4f/0x270 [ 2228.889355][T23939] ? kvmalloc_node+0x6c/0x180 [ 2228.894034][T23939] __kmalloc_node+0xa2/0x240 [ 2228.898624][T23939] kvmalloc_node+0x6c/0x180 [ 2228.903127][T23939] page_pool_create+0x1e7/0x5c0 [ 2228.908068][T23939] bpf_test_run_xdp_live+0x220/0x1a90 [ 2228.913437][T23939] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2228.918715][T23939] ? text_poke_copy+0x7b/0x90 [ 2228.923390][T23939] ? bpf_dispatcher_xdp+0x800/0x1000 [ 2228.928671][T23939] ? bpf_dispatcher_change_prog+0xc92/0xf10 [ 2228.934566][T23939] ? xdp_convert_md_to_buff+0x330/0x330 [ 2228.940132][T23939] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 2228.946376][T23939] ? bpf_test_init+0x119/0x140 [ 2228.951135][T23939] ? xdp_convert_md_to_buff+0x5b/0x330 [ 2228.956594][T23939] bpf_prog_test_run_xdp+0x757/0xf80 [ 2228.961877][T23939] ? __lock_acquire+0x7c40/0x7c40 [ 2228.966907][T23939] ? dev_put+0x80/0x80 [ 2228.970980][T23939] ? dev_put+0x80/0x80 [ 2228.975045][T23939] bpf_prog_test_run+0x31c/0x390 [ 2228.979982][T23939] __sys_bpf+0x62b/0x780 [ 2228.984227][T23939] ? bpf_link_show_fdinfo+0x380/0x380 [ 2228.989605][T23939] ? lock_chain_count+0x20/0x20 [ 2228.994460][T23939] __x64_sys_bpf+0x78/0x90 [ 2228.998883][T23939] do_syscall_64+0x4c/0xa0 [ 2229.003297][T23939] ? clear_bhb_loop+0x60/0xb0 [ 2229.007975][T23939] ? clear_bhb_loop+0x60/0xb0 [ 2229.012654][T23939] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2229.018544][T23939] RIP: 0033:0x7f2188b9e0d9 [ 2229.022952][T23939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2229.042566][T23939] RSP: 002b:00007f21899eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2229.050972][T23939] RAX: ffffffffffffffda RBX: 00007f2188e25fa0 RCX: 00007f2188b9e0d9 [ 2229.058934][T23939] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 2229.066896][T23939] RBP: 00007f21899eb090 R08: 0000000000000000 R09: 0000000000000000 [ 2229.074858][T23939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2229.082821][T23939] R13: 00007f2188e26038 R14: 00007f2188e25fa0 R15: 00007ffc42c61278 [ 2229.090799][T23939] [ 2229.207736][T23939] page_pool_create() gave up with errno -12 [ 2229.373429][ T49] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2229.383384][ T49] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2229.392331][ T49] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2229.401322][ T49] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2229.414193][ T49] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2229.421844][ T49] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2229.697623][T23976] netlink: 'syz.3.15454': attribute type 13 has an invalid length. [ 2229.705744][T23976] netlink: 'syz.3.15454': attribute type 14 has an invalid length. [ 2229.753615][T23976] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15454'. [ 2230.672712][T24001] ref_ctr_offset mismatch. inode: 0x5a offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2230.691892][ T4839] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.752027][T23959] chnl_net:caif_netlink_parms(): no params data found [ 2230.861298][ T4839] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2230.886272][T23959] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.893746][T23959] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.902534][T23959] device bridge_slave_0 entered promiscuous mode [ 2230.911474][T23959] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.921142][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.929556][T23959] device bridge_slave_1 entered promiscuous mode [ 2231.026890][ T4839] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.094822][T23959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.128637][T24023] netlink: 'syz.2.15468': attribute type 29 has an invalid length. [ 2231.152381][T23959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2231.165148][T24023] netlink: 'syz.2.15468': attribute type 29 has an invalid length. [ 2231.174878][T24025] netlink: 'syz.3.15469': attribute type 13 has an invalid length. [ 2231.196117][T24025] netlink: 'syz.3.15469': attribute type 14 has an invalid length. [ 2231.218367][T24025] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15469'. [ 2231.251414][ T4839] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2231.275492][T24028] netlink: 164 bytes leftover after parsing attributes in process `syz.0.15471'. [ 2231.287328][T24030] netlink: 'syz.2.15468': attribute type 29 has an invalid length. [ 2231.366269][T23959] team0: Port device team_slave_0 added [ 2231.377381][T23959] team0: Port device team_slave_1 added [ 2231.406544][T23959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2231.437356][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.516287][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 2231.517967][T23959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2231.583850][T23959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2231.620814][T23959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2231.663837][T23959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.704183][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15475'. [ 2231.721521][T24041] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15475'. [ 2232.337792][T24053] ref_ctr_offset mismatch. inode: 0x179 offset: 0x0 ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2232.352956][T23959] device hsr_slave_0 entered promiscuous mode [ 2232.397782][T23959] device hsr_slave_1 entered promiscuous mode [ 2232.409055][T23959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2232.453839][T23959] Cannot create hsr debugfs directory [ 2232.677261][ T4839] tipc: Left network mode [ 2233.001550][T24075] FAULT_INJECTION: forcing a failure. [ 2233.001550][T24075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2233.035245][T24075] CPU: 1 PID: 24075 Comm: syz.3.15482 Not tainted syzkaller #0 [ 2233.042849][T24075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2233.052921][T24075] Call Trace: [ 2233.056209][T24075] [ 2233.059151][T24075] dump_stack_lvl+0x188/0x24e [ 2233.063849][T24075] ? show_regs_print_info+0x12/0x12 [ 2233.069073][T24075] ? load_image+0x410/0x410 [ 2233.073594][T24075] ? __lock_acquire+0x7c40/0x7c40 [ 2233.078645][T24075] should_fail_ex+0x390/0x4c0 [ 2233.083347][T24075] _copy_from_user+0x2c/0x170 [ 2233.088046][T24075] __sys_bpf+0x2ea/0x780 [ 2233.092309][T24075] ? bpf_link_show_fdinfo+0x380/0x380 [ 2233.097712][T24075] ? lock_chain_count+0x20/0x20 [ 2233.102587][T24075] __x64_sys_bpf+0x78/0x90 [ 2233.107021][T24075] do_syscall_64+0x4c/0xa0 [ 2233.111466][T24075] ? clear_bhb_loop+0x60/0xb0 [ 2233.116162][T24075] ? clear_bhb_loop+0x60/0xb0 [ 2233.120846][T24075] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2233.126743][T24075] RIP: 0033:0x7f58f5d9e0d9 [ 2233.131177][T24075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2233.150796][T24075] RSP: 002b:00007f58f6ce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2233.159213][T24075] RAX: ffffffffffffffda RBX: 00007f58f6025fa0 RCX: 00007f58f5d9e0d9 [ 2233.167179][T24075] RDX: 0000000000000020 RSI: 0000200000000200 RDI: 0000000000000001 [ 2233.175182][T24075] RBP: 00007f58f6ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 2233.183162][T24075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2233.191140][T24075] R13: 00007f58f6026038 R14: 00007f58f6025fa0 R15: 00007ffd9c7a5138 [ 2233.199110][T24075] [ 2233.204051][ T27] INFO: task rcu_tasks_kthre:12 blocked for more than 143 seconds. [ 2233.223019][T24072] netlink: 'syz.0.15481': attribute type 13 has an invalid length. [ 2233.228007][ T27] Not tainted syzkaller #0 [ 2233.235999][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2233.237769][T24072] netlink: 'syz.0.15481': attribute type 14 has an invalid length. [ 2233.257249][T24072] netlink: 156 bytes leftover after parsing attributes in process `syz.0.15481'. [ 2233.273855][ T27] task:rcu_tasks_kthre state:D stack:27920 pid:12 ppid:2 flags:0x00004000 [ 2233.297769][ T27] Call Trace: [ 2233.301112][ T27] [ 2233.304062][ T27] __schedule+0x107f/0x4030 [ 2233.317128][ T27] ? release_firmware_map_entry+0x187/0x187 [ 2233.323104][ T27] schedule+0xb9/0x180 [ 2233.337196][ T27] schedule_timeout+0xbd/0x2d0 [ 2233.342027][ T27] ? console_conditional_schedule+0x40/0x40 [ 2233.357961][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2233.364006][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 2233.387102][ T27] ? lock_chain_count+0x20/0x20 [ 2233.392054][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2233.407097][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2233.412724][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 2233.427240][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 2233.432574][ T27] ? wait_for_completion+0x26f/0x590 [ 2233.447101][ T27] wait_for_completion+0x2c2/0x590 [ 2233.453289][ T27] ? io_schedule+0xd0/0xd0 [ 2233.467126][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2233.473077][ T27] ? debug_object_active_state+0x6b/0x380 [ 2233.518429][ T27] __synchronize_srcu+0x2b3/0x350 [ 2233.523560][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2233.537597][ T27] ? synchronize_srcu_expedited+0x20/0x20 [ 2233.543384][ T27] ? rcu_read_lock_any_held+0x130/0x130 [ 2233.567113][ T27] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 2233.572822][ T27] ? synchronize_srcu+0x18f/0x1b0 [ 2233.578152][ T27] rcu_tasks_wait_gp+0x49f/0xac0 [ 2233.583211][ T27] ? rcu_tasks_wait_gp+0x21a/0xac0 [ 2233.588452][ T3818] Bluetooth: hci3: command 0x041b tx timeout [ 2233.594696][ T27] ? lock_chain_count+0x20/0x20 [ 2233.599905][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2233.605927][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 2233.611275][ T27] ? rcu_tasks_invoke_cbs+0x670/0x670 [ 2233.616887][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2233.623415][ T27] ? _raw_spin_unlock+0x40/0x40 [ 2233.628485][ T27] rcu_tasks_one_gp+0xd27/0xef0 [ 2233.633549][ T27] ? rcu_tasks_one_gp+0xe5/0xef0 [ 2233.638726][ T27] rcu_tasks_kthread+0x6e/0x90 [ 2233.643691][ T27] kthread+0x29d/0x330 [ 2233.647929][ T27] ? rcu_tasks_postgp+0x10/0x10 [ 2233.652985][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2233.657784][ T27] ret_from_fork+0x1f/0x30 [ 2233.662407][ T27] [ 2233.666281][ T27] [ 2233.666281][ T27] Showing all locks held in the system: [ 2233.691926][ T27] 1 lock held by rcu_tasks_kthre/12: [ 2233.697345][ T27] #0: ffffffff8cb2e4f0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2233.708125][ T27] 1 lock held by rcu_tasks_trace/13: [ 2233.713442][ T27] #0: ffffffff8cb2ed10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2233.724593][ T27] 1 lock held by khungtaskd/27: [ 2233.729642][ T27] #0: ffffffff8cb2db60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2233.739769][ T27] 2 locks held by kworker/0:2/126: [ 2233.744892][ T27] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2233.767586][ T27] #1: ffffc90002e67d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2233.781073][ T27] 2 locks held by getty/4033: [ 2233.785789][ T27] #0: ffff88802fdab098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2233.801257][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2233.811630][ T27] 5 locks held by kworker/u4:25/4839: [ 2233.817073][ T27] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2233.838087][ T27] #1: ffffc90006b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 2233.848293][ T27] #2: ffffffff8dd4f650 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 2233.857946][ T27] #3: ffffffff8dd5c4e8 (rtnl_mutex){+.+.}-{3:3}, at: ip6_tnl_exit_batch_net+0xc8/0x620 [ 2233.869006][ T27] #4: ffffffff8cb33838 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2ec/0x890 [ 2233.880925][ T27] 2 locks held by kworker/u4:12/15265: [ 2233.886417][ T27] #0: ffff8880b8f3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 2233.896507][ T27] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x400/0x740 [ 2233.910864][ T27] 6 locks held by syz-executor/23959: [ 2233.916261][ T27] #0: ffff88807dc36460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x270/0x9a0 [ 2233.929647][ T27] #1: ffff888056102488 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1d8/0x520 [ 2233.939575][ T27] #2: ffff888144fdc490 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x520 [ 2233.949789][ T27] #3: ffffffff8d66aba8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xd3/0x370 [ 2233.960463][ T27] #4: ffff88805524c0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb1/0x7c0 [ 2233.971103][ T27] #5: ffffffff8dd5c4e8 (rtnl_mutex){+.+.}-{3:3}, at: devlink_nl_port_fill+0x2a3/0x950 [ 2233.985123][ T27] 1 lock held by sed/24089: [ 2234.002096][ T27] [ 2234.004457][ T27] ============================================= [ 2234.004457][ T27] [ 2234.018459][ T27] NMI backtrace for cpu 0 [ 2234.022823][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2234.030032][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2234.040100][ T27] Call Trace: [ 2234.043385][ T27] [ 2234.046304][ T27] dump_stack_lvl+0x188/0x24e [ 2234.050989][ T27] ? irq_work_queue+0xb8/0x140 [ 2234.055766][ T27] ? show_regs_print_info+0x12/0x12 [ 2234.060958][ T27] ? load_image+0x410/0x410 [ 2234.065450][ T27] ? vprintk_emit+0x59f/0x6a0 [ 2234.070163][ T27] ? printk_sprint+0x460/0x460 [ 2234.074954][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 2234.079921][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2234.086087][ T27] ? _printk+0xda/0x130 [ 2234.090240][ T27] ? load_image+0x410/0x410 [ 2234.094746][ T27] ? load_image+0x410/0x410 [ 2234.099245][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2234.105307][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2234.111452][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2234.117432][ T27] watchdog+0xf0e/0xf50 [ 2234.121585][ T27] ? watchdog+0x1ed/0xf50 [ 2234.125912][ T27] kthread+0x29d/0x330 [ 2234.129975][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2234.135003][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2234.139592][ T27] ret_from_fork+0x1f/0x30 [ 2234.144017][ T27] [ 2234.147726][ T27] Sending NMI from CPU 0 to CPUs 1: [ 2234.153272][ C1] NMI backtrace for cpu 1 [ 2234.153282][ C1] CPU: 1 PID: 15986 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 2234.153297][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2234.153306][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 2234.153330][ C1] RIP: 0010:__lock_acquire+0xf28/0x7c40 [ 2234.153351][ C1] Code: 89 3e 48 8b 44 24 68 42 0f b6 04 00 84 c0 0f 85 f9 59 00 00 41 8b 1c 24 48 85 db 74 5d 83 fb 31 0f 83 0e 5b 00 00 48 8d 04 9b <49> 8d 9c c5 d8 0a 00 00 48 89 d8 48 c1 e8 03 42 0f b6 04 00 84 c0 [ 2234.153363][ C1] RSP: 0018:ffffc900036d6c80 EFLAGS: 00000087 [ 2234.153376][ C1] RAX: 0000000000000019 RBX: 0000000000000005 RCX: ffffffff81640d4d [ 2234.153386][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff90b13240 [ 2234.153395][ C1] RBP: ffffc900036d6eb0 R08: dffffc0000000000 R09: 1ffffffff2162648 [ 2234.153406][ C1] R10: dffffc0000000000 R11: fffffbfff2162649 R12: ffff888039a664d8 [ 2234.153417][ C1] R13: ffff888039a65a00 R14: ffff888039a665a8 R15: 27a6d0efec03bdd4 [ 2234.153427][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2234.153440][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2234.153450][ C1] CR2: 000055709d556950 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 2234.153464][ C1] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000000000000000 [ 2234.153472][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2234.153482][ C1] Call Trace: [ 2234.153487][ C1] [ 2234.153495][ C1] ? deref_stack_reg+0x18e/0x220 [ 2234.153515][ C1] ? deref_stack_reg+0x18e/0x220 [ 2234.153531][ C1] ? unwind_next_frame+0x1769/0x1fd0 [ 2234.153546][ C1] ? verify_lock_unused+0x140/0x140 [ 2234.153565][ C1] ? mark_lock+0x94/0x320 [ 2234.153583][ C1] ? __lock_acquire+0x1465/0x7c40 [ 2234.153600][ C1] ? arch_stack_walk+0x10c/0x140 [ 2234.153617][ C1] ? ret_from_fork+0x1f/0x30 [ 2234.153636][ C1] lock_acquire+0x1bb/0x4a0 [ 2234.153653][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 2234.153669][ C1] ? mark_lock+0x94/0x320 [ 2234.153687][ C1] ? read_lock_is_recursive+0x10/0x10 [ 2234.153703][ C1] ? __lock_acquire+0x1465/0x7c40 [ 2234.153722][ C1] ? unwind_next_frame+0x1769/0x1fd0 [ 2234.153737][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 2234.153751][ C1] debug_objects_fill_pool+0xa7/0x780 [ 2234.153765][ C1] ? debug_objects_fill_pool+0x87/0x780 [ 2234.153780][ C1] ? debug_object_activate+0x4f0/0x4f0 [ 2234.153794][ C1] ? verify_lock_unused+0x140/0x140 [ 2234.153811][ C1] ? ret_from_fork+0x1f/0x30 [ 2234.153829][ C1] ? stack_trace_save+0xa6/0xf0 [ 2234.153930][ C1] ? __stack_depot_save+0x35/0x480 [ 2234.153946][ C1] ? unwind_next_frame+0x1719/0x1fd0 [ 2234.153962][ C1] debug_object_activate+0x32/0x4f0 [ 2234.153978][ C1] kvfree_call_rcu+0xae/0x890 [ 2234.153996][ C1] ? worker_thread+0xaf5/0x12a0 [ 2234.154014][ C1] ? rcu_leak_callback+0x10/0x10 [ 2234.154033][ C1] ? do_raw_spin_lock+0x128/0x2f0 [ 2234.154049][ C1] cfg80211_update_known_bss+0x184/0xb60 [ 2234.154069][ C1] cfg80211_bss_update+0x156/0x21a0 [ 2234.154089][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 2234.154106][ C1] ? cfg80211_inform_bss_frame_data+0x728/0x1390 [ 2234.154123][ C1] ? rcu_is_watching+0x11/0xa0 [ 2234.154140][ C1] ? cfg80211_inform_bss_frame_data+0x8b0/0x1390 [ 2234.154159][ C1] cfg80211_inform_bss_frame_data+0xa77/0x1390 [ 2234.154188][ C1] ? cfg80211_parse_mbssid_data+0x23a0/0x23a0 [ 2234.154205][ C1] ? __lock_acquire+0x138a/0x7c40 [ 2234.154228][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 2234.154249][ C1] ? ieee80211_bss_info_update+0x33b/0xbf0 [ 2234.154266][ C1] ieee80211_bss_info_update+0x6ef/0xbf0 [ 2234.154285][ C1] ? ieee80211_rx_bss_put+0x60/0x60 [ 2234.154305][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 2234.154324][ C1] ? ieee80211_vif_get_shift+0x22b/0x290 [ 2234.154377][ C1] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 2234.154392][ C1] ieee80211_ibss_rx_queued_mgmt+0x1931/0x2eb0 [ 2234.154413][ C1] ? verify_lock_unused+0x140/0x140 [ 2234.154436][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xeaa/0x2eb0 [ 2234.154457][ C1] ? ieee80211_ibss_rx_no_sta+0x780/0x780 [ 2234.154480][ C1] ? mark_lock+0x94/0x320 [ 2234.154498][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2234.154517][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 2234.154534][ C1] ? lock_chain_count+0x20/0x20 [ 2234.154550][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2234.154571][ C1] ? kcov_remote_start+0x87/0x810 [ 2234.154587][ C1] ? skb_dequeue+0x120/0x150 [ 2234.154602][ C1] ieee80211_iface_work+0x72c/0xc70 [ 2234.154618][ C1] cfg80211_wiphy_work+0x224/0x260 [ 2234.154638][ C1] ? process_one_work+0x7b4/0x1160 [ 2234.154654][ C1] process_one_work+0x8ab/0x1160 [ 2234.154675][ C1] ? worker_detach_from_pool+0x240/0x240 [ 2234.154691][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2234.154707][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2234.154724][ C1] ? wq_worker_running+0x97/0x190 [ 2234.154745][ C1] worker_thread+0xaf5/0x12a0 [ 2234.154770][ C1] kthread+0x29d/0x330 [ 2234.154781][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 2234.154796][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2234.154809][ C1] ret_from_fork+0x1f/0x30 [ 2234.154830][ C1] [ 2234.678521][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2234.685408][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2234.692618][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2234.702687][ T27] Call Trace: [ 2234.705976][ T27] [ 2234.708918][ T27] dump_stack_lvl+0x188/0x24e [ 2234.713619][ T27] ? memcpy+0x3c/0x60 [ 2234.717619][ T27] ? show_regs_print_info+0x12/0x12 [ 2234.722845][ T27] ? load_image+0x410/0x410 [ 2234.727366][ T27] panic+0x2d3/0x710 [ 2234.731270][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 2234.736926][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 2234.741445][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 2234.747013][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2234.753175][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2234.759321][ T27] watchdog+0xf4d/0xf50 [ 2234.763483][ T27] ? watchdog+0x1ed/0xf50 [ 2234.767819][ T27] kthread+0x29d/0x330 [ 2234.771894][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2234.776915][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2234.781498][ T27] ret_from_fork+0x1f/0x30 [ 2234.785920][ T27] [ 2234.789225][ T27] Kernel Offset: disabled [ 2234.793545][ T27] Rebooting in 86400 seconds..