last executing test programs: 22m47.244947855s ago: executing program 3 (id=2549): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x2, 0x2, 0x88, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000580)={r6, &(0x7f0000000200)="239a484478de273854db5ade978f2c246f751fc278d2d6586f29bea421", &(0x7f0000000040)=""/73, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe3d) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='0,0'], 0x79) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02f70000040000000800000005000000800000009157f79390ffdb5f3635a985f1e22ec213afca3c0e8e62", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000300"/28], 0x50) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x1c, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xefa, 0xa2, &(0x7f0000000240)=""/162, 0x0, 0x6, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x3, 0xeb56, 0x5b}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000600), &(0x7f0000000640)=[{0x1, 0x2, 0xf, 0x8}, {0x4, 0x2, 0x0, 0x4}, {0x4, 0x3, 0x2, 0xc}, {0x2, 0x4, 0x9}, {0x4, 0x3, 0xe, 0xb}, {0x3, 0x4, 0x6, 0x4}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x2, 0x8, 0x2}, {0x1, 0x5, 0x4}, {0x4, 0x1, 0x0, 0x5}], 0x10, 0x3}, 0x94) socket$kcm(0xa, 0x6, 0x0) 22m44.83112936s ago: executing program 3 (id=2551): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) (async) unlink(&(0x7f0000000180)='./cgroup/../file0\x00') write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x30, &(0x7f0000000100), 0x5000) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d8000000190081054e81f782db4cb9041c1d0800fe007c05e8fe55a10a0015000200142603600e12080005007f370401a8000600200002400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x98ffffff}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002b40)=""/174, 0xae}, {&(0x7f0000000500)=""/230, 0xe6}, {&(0x7f0000001b40)=""/4050, 0xfd2}, {&(0x7f0000000b00)=""/4113, 0x1011}], 0x4}, 0x20) 22m44.601669222s ago: executing program 3 (id=2552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000048000000003a08a2d4ffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000007209200000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x3) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x49) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x5, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x60, 0x8}, {}, {0x2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x21, &(0x7f00000000c0), 0x4) close(r7) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)=""/203, 0xcb}, {0x0}], 0x2}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="11000000040000000400000009000000000000", @ANYRES32, @ANYBLOB, @ANYRES8=r7], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x0, 0x36, 0x0, &(0x7f0000001bc0)='GPL\x00', 0x5, 0x33, &(0x7f0000001c00)=""/51, 0x40f00, 0x73, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000001c80)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000001cc0)={0x4, 0xf, 0xffff, 0x3}, 0x10, 0x0, r5, 0x0, &(0x7f0000001d00)=[0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff], &(0x7f0000001d40), 0x10, 0x7fff}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7", 0xb}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x33fe0) 22m43.827609442s ago: executing program 3 (id=2559): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000001280), 0x4) r2 = getpid() sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000240)='C', 0x1}], 0x1, &(0x7f0000000e00)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee00, 0xee01}}}], 0x20, 0x10}, 0x80) write$cgroup_pid(r0, &(0x7f0000000840)=r2, 0x12) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee}, 0x2002) 22m43.626111053s ago: executing program 3 (id=2560): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f0000000200)="d858650010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014020000001208003f0041012000a80016000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd", 0xd8}], 0x1}, 0x0) 22m43.533185258s ago: executing program 3 (id=2562): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c46f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x71a2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000180)="e0806e5308ece5df05ee8df51516ef3c2974c4796c0c769743481efc5ccfcfccd1c08c8f82439d2f3f3053b1a862", &(0x7f0000000d00)="ab00df96f12203fa5b01ebdeab2b399cafb7d0f2a6cd2929d4eb6924adbfb7d141a5c1ff3001be94108e85de72b29a2456fd431cbb1846a106f9d2fef645c5082033ddb62346c834c90ed15fc5c6e53526c42fbd430cb55bc077", 0x20000619, r3}, 0x38) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x6, 0x8d, 0x8, 0x0, 0x3, 0x42008, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x2, 0x40000ffffffff}, 0x0, 0x0, 0x6, 0x4, 0x9, 0x1, 0xfffc, 0x0, 0x2, 0x0, 0x72}, 0x0, 0x5, r1, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8d99e9258d5a541a"], &(0x7f0000000140)='GPL\x00', 0x4, 0xf7, &(0x7f0000000200)=""/247, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x7f, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x1, 0x10, 0x7}]}, 0x94) recvmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/20, 0x14}], 0x9, &(0x7f0000000bc0)=""/229, 0xe5}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x3000000}, 0x24000000) 22m28.324708149s ago: executing program 32 (id=2562): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x71a2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000180)="e0806e5308ece5df05ee8df51516ef3c2974c4796c0c769743481efc5ccfcfccd1c08c8f82439d2f3f3053b1a862", &(0x7f0000000d00)="ab00df96f12203fa5b01ebdeab2b399cafb7d0f2a6cd2929d4eb6924adbfb7d141a5c1ff3001be94108e85de72b29a2456fd431cbb1846a106f9d2fef645c5082033ddb62346c834c90ed15fc5c6e53526c42fbd430cb55bc077", 0x20000619, r3}, 0x38) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x6, 0x8d, 0x8, 0x0, 0x3, 0x42008, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8001, 0x4, @perf_config_ext={0x2, 0x40000ffffffff}, 0x0, 0x0, 0x6, 0x4, 0x9, 0x1, 0xfffc, 0x0, 0x2, 0x0, 0x72}, 0x0, 0x5, r1, 0x1) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="8d99e9258d5a541a"], &(0x7f0000000140)='GPL\x00', 0x4, 0xf7, &(0x7f0000000200)=""/247, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x8, 0x7f, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000380)=[{0x5, 0x1, 0x10, 0x7}]}, 0x94) recvmsg$kcm(r0, &(0x7f0000000cc0)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f0000000700)=""/205, 0xcd}, {&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/234, 0xea}, {&(0x7f0000000a00)=""/119, 0x77}, {&(0x7f0000000a80)=""/11, 0xb}, {&(0x7f0000000ac0)=""/20, 0x14}], 0x9, &(0x7f0000000bc0)=""/229, 0xe5}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0}, 0x40) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0x3000000}, 0x24000000) 23.826123228s ago: executing program 2 (id=8050): perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000003c0), 0x8}, 0x828, 0x2000000000000000, 0x0, 0x0, 0xe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x5, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xf8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7902}) write$cgroup_devices(r3, &(0x7f0000000100)=ANY=[@ANYRES8, @ANYBLOB="589797"], 0xd208) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) r5 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r5, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b564", 0x2}], 0x1, &(0x7f0000000580)=ANY=[@ANYBLOB="18"], 0x18}, 0x8080) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @mcast2}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000280)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}, 0x62) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110e22ffef) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'veth1_to_batadv\x00', 0x100}) ioctl$TUNSETCARRIER(r6, 0x400454e2, 0x0) 23.761527462s ago: executing program 4 (id=8052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff7e, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r3, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000800)='%pK \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x18, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe}, [@alu={0x7, 0x1, 0x6, 0x0, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @map_idx={0x18, 0xf, 0x5, 0x0, 0x9}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff3b34}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x40, &(0x7f00000006c0)=""/64, 0x41100, 0x65, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000940)=[r6, r3, r0, r3, r2, r2], &(0x7f0000000980)=[{0x3, 0x4, 0x2, 0xc}, {0x4, 0x5, 0xd, 0x5}, {0x3, 0x3, 0xc, 0x8}, {0x4, 0x4, 0x9, 0x1}, {0x2, 0x5, 0xf, 0xa}, {0x3, 0x1, 0xc, 0x6}, {0x0, 0x3, 0x1, 0x9}], 0x10, 0xffffff55}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000300)=r9) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071043d000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 22.082918369s ago: executing program 0 (id=8065): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x7, 0xff, 0xf8, 0x7, 0x0, 0x800ea, 0x9800, 0xa, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffffffffffff9f54, 0xff}, 0xc001, 0x40000010040, 0xfd84, 0x6, 0x10001, 0x400, 0xa33, 0x0, 0x4, 0x0, 0x40008}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x2400c000) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x40000200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x1e, 0x4, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.events\x00', 0x100002, 0x0) 21.351988747s ago: executing program 1 (id=8058): r0 = socket$kcm(0xa, 0x2, 0x88) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x97) (async) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)={r0}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) (async) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20000081) 21.225900523s ago: executing program 1 (id=8059): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3c, 0x2, 0x1, 0x3, 0x0, 0x8, 0x800, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000340), 0x4}, 0x2240, 0x400, 0x9, 0x3, 0x2, 0x1, 0x41e, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 21.052206032s ago: executing program 1 (id=8060): r0 = socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000004020087374a11625634310000c4ceefad25e412eb02969e791a62f4a833f7be99ae8b34ee0cb2687699c0c4eb6612aff45989d2f23bced2c87fe59205c6b067e4ba012484c74007fb8d378e564f53da81e3ec481fbd80deb25974cac328518eb5b2f6dd32ef4379e3c516f806cdb955d4", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x2, 0x2, 0x88, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000000580)={r4, &(0x7f0000000200)="239a484478de273854db5ade978f2c246f751fc278d2d6586f29bea421", &(0x7f0000000040)=""/73, 0x4}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0xfffffffffffffe3d) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000340)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='0,'], 0x79) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480), &(0x7f00000004c0)='%pi6 \x00'}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012d50000000000000000000000000c20000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c2e1ac366fb1f3c37692c0e132070cf2c5165e58fbde7eb7089d2d9d8ac387f2303864e35388a00fb807667de194e4d51e572c8e1305290359"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0xfffffffffffffc9a}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$ITER_CREATE(0x21, &(0x7f00000005c0), 0x8) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0xefa, 0xa2, &(0x7f0000000240)=""/162, 0x0, 0x6, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000400)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x3, 0xeb56, 0x5b}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000600), &(0x7f0000000640)=[{0x1, 0x2, 0xf, 0x8}, {0x4, 0x2, 0x0, 0x4}, {0x4, 0x3, 0x2, 0xc}, {0x2, 0x4, 0x9}, {0x3, 0x4, 0x6, 0x4}, {0x5, 0x3, 0x2, 0x9}, {0x3, 0x2, 0x8, 0x2}, {0x1, 0x5, 0x4}, {0x4, 0x1, 0x0, 0x5}], 0x10, 0x3}, 0x94) socket$kcm(0xa, 0x6, 0x0) 18.063293507s ago: executing program 0 (id=8061): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x4, 0x0, 0xf000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x31, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x13900, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, r2, 0x9b, '\x00', r6, r1, 0x3, 0x2, 0x4}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a4000000000000000000000007000000442800"/161, @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4005, 0x0, 0x0, 0x0, 0x7}, [@generic={0x6b, 0x1, 0x1, 0x9f}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.059405107s ago: executing program 1 (id=8062): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x9e4, 0x5, 0x8, 0x20005, 0xfffd, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000440)={&(0x7f0000001340)=@hci={0x1f, 0x8e88, 0x47}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x3, 0x8, 0x0, 0x1}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x104101, 0x4, 0x2000000, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000021001800000000000000000000000000020095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r8, 0x84, 0x1e, &(0x7f0000000000), 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa1000000001600000000000000ffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc) r11 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x30, 0x0, 0x5000) 18.059074987s ago: executing program 2 (id=8063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf650f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={0x0, 0x8}, 0x26, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) mkdirat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x1ff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c02000055a10a0017000600a42603600e1208000600fe80ff00a007a290457f01890500277ce06bbaceac3c940649cc7f5715a9b62f00001fb71b14d6c930dfe1d9d322fe7c2e8771820d16a4683f5aeb4edb360c8c1a8db6751cffe0b5952a0f536ffd77500db798262f3d409c1f40cb9f92b74f51fad9e3bba4d809d5e1cace0d81ed0b764434a19789bf0cffece0b4129ee6ccd4e1ffffffffc2c9b627430600007c388b0dd6e4edef57935d0000000000000073d0e899fdf2431393dfd6cbaf", 0xd8}], 0x1}, 0x48000) 18.058904647s ago: executing program 4 (id=8064): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, 0x0, 0x0, 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000000000000100000408000000000000000300000010000000000000000000000200000000030000000000000404000000"], 0x0, 0x4d}, 0x28) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_bp={0x0, 0xa}, 0x104105, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1, 0x0, 0x0, 0x1001}, 0x80d1) 17.849916528s ago: executing program 4 (id=8066): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x12, 0x3a}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x4, 0x8}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}, {0x0, 0x1}]}]}}, 0x0, 0x4a}, 0x28) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) 17.707965445s ago: executing program 2 (id=8067): write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000900)=""/4115, 0x1013}, {&(0x7f0000005740)=""/4062, 0xfde}, {&(0x7f0000000200)=""/114, 0x72}, {&(0x7f0000000480)=""/205, 0xcd}, {&(0x7f0000000880)=""/108, 0x6c}, {&(0x7f0000000000)=""/11, 0xb}, {&(0x7f0000000280)=""/102, 0x66}, {&(0x7f0000000300)=""/116, 0x74}], 0x8}, 0x12100) 17.511484235s ago: executing program 4 (id=8068): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x269, 0x7e4}, 0x10, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1e01b9dc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0xb, 0x6, 0xe, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=@base={0x6, 0x4, 0x21ff, 0x5e, 0x0, 0xffffffffffffffff, 0x280, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) 17.510151855s ago: executing program 0 (id=8076): r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0x4, 0x0, 0xf000000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0x31, 0x0, 0x9, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], 0x0}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8912, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f00000000c0)={'team_slave_1\x00', @random="01320136b1ff"}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x13900, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5}, 0xc) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r2, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1000, 0x0, r2, 0x9b, '\x00', r6, r1, 0x3, 0x2, 0x4}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a4000000000000000000000007000000442800"/161, @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB], 0x230}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000248053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 17.499455806s ago: executing program 2 (id=8069): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x3c, 0x2, 0x1, 0x3, 0x0, 0x8, 0x800, 0xe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x5, 0x2, @perf_bp={&(0x7f0000000340), 0x4}, 0x2240, 0x400, 0x9, 0x3, 0x2, 0x1, 0x41e, 0x0, 0x1, 0x0, 0x10000}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES32=r2], 0x9a) 17.448425438s ago: executing program 1 (id=8070): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa313c6b876c1d0000007ea60864160af36507001ac0043f020208000c000500010004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000200ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x5, &(0x7f0000000040), 0x4) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x10000000000005, 0x9}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xd}, 0x0, 0x4, 0x0, 0x0, 0x504, 0x800}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000440)="97", 0x1}], 0x1}, 0x4008000) r6 = socket$kcm(0x2, 0x2, 0x73) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000040)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x14f8}, 0x90) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x590f}, 0x2920, 0x0, 0x0, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x20, 0x10, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x740b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x9, 0xd35d}, 0x10000, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0xfffffded}, 0x94) 17.226715669s ago: executing program 2 (id=8071): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$kcm(0x2, 0x5, 0x84) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x20) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x101c, 0x7, 0xfffffffe, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x0, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4000}, 0x18) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x60, 0x0, 0x1}, 0x28) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000010040)=ANY=[], 0x31) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000480)=ANY=[@ANYBLOB='-', @ANYRESHEX, @ANYRESDEC], 0x8b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x4, 0x1}, {0x2}], 0x10, 0xfffffffe}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f0000000180)="7b474b72f58938f294e78e4d459d5c6f3a6573cfefb243c11e6b286dc0976fbc018000003bcb5f886fc7b7adcca5f919d9d74a5d317b8b3f62d487e1d1968364cb079f463d39bf3158bd3f66b042b8b8a9b30b55aacdf4d58e41b332f12d0ecfe753addb1b2d5011328b7057d6465a03b938b60050b45caa442cc008ec2dcd1cb3fdf6d76276", 0x86}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 16.819577781s ago: executing program 0 (id=8072): sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) (fail_nth: 3) 16.118287107s ago: executing program 4 (id=8073): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x20}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x20}, 0x94) 16.06593653s ago: executing program 0 (id=8074): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x4, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={0x0, r0, 0x0, 0x6, &(0x7f00000000c0)='wlan1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x4000004) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[], 0x0, 0x58}, 0x28) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x4008, r4}, 0x18) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r5, 0x0, &(0x7f00000001c0)=""/125}, 0x20) setsockopt$sock_attach_bpf(r4, 0x29, 0x32, &(0x7f0000000100), 0x120) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.054966111s ago: executing program 1 (id=8075): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xc}, 0x4a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, &(0x7f0000000000), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000e9a1a4512b16bb7e000c00d8124100000c00000008000000080000000000000804"], 0x0, 0x2c, 0x0, 0x1, 0x7fffffff}, 0x28) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYRES64=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 15.977329714s ago: executing program 2 (id=8077): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0xe}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r4, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18) close(r9) 15.899573958s ago: executing program 4 (id=8078): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000001a80)="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", 0x2df}], 0x3, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0xa4, [@rand_addr=0x64010100, @multicast1, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xb, "3a047e2aae56e4b9ea"}]}}}], 0x58}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddeccd0fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3dbec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182c0180000007632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8490000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_devices(r3, &(0x7f00000000c0)={'b', ' *:* ', 'rw\x00'}, 0x9) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15.753849176s ago: executing program 0 (id=8079): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @private2, 0x7}, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)="d8000000100081355622cf2ee12e08bac81d08072500000001ff55a1180015000600142500001b120800030043000013199953cb6be0d7a840a8002b000a00691f2f7b9e04fe9c10fab94dcf5c04000000000000000534cf6ee08000a0e496e6f66112c88a2dc8dbbb219c6c090800d481d485dc6abb43e2782ac2662331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14fe", 0xd8}, {&(0x7f0000000380)="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", 0xff4}], 0x2, 0x0, 0xfffffffffffffe3e}, 0x24000c00) 372.799571ms ago: executing program 33 (id=8079): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f91424fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r9, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @private2, 0x7}, 0x6, &(0x7f00000000c0)=[{&(0x7f0000000000)="f1", 0x1}], 0x1}, 0x40040) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r8, 0x24, 0x0, 0xffff, &(0x7f0000000200)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)="d8000000100081355622cf2ee12e08bac81d08072500000001ff55a1180015000600142500001b120800030043000013199953cb6be0d7a840a8002b000a00691f2f7b9e04fe9c10fab94dcf5c04000000000000000534cf6ee08000a0e496e6f66112c88a2dc8dbbb219c6c090800d481d485dc6abb43e2782ac2662331419768c417898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a5e1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccc89e00360db70100000040fac25667e006dcdf63951f215ce3bb14fe", 0xd8}, {&(0x7f0000000380)="5dedb8986997137ed0f6e6a8c15e62aa925ecda4f39405486557cc9b72b16b1cd676223a274b9aee03eb19dfecf70a4bf02738a127dd329f33953cc408289223c9bc1d8cd99e80a55071a12228eb5a7c4b5a53816f7d0f800d3fb8e279f9712b118a47346196e7fc8dc32d6e5329de8c958aae6a9c94de7f8b9e18f2602ba18e48854f012711db2787d8d6e91a71ec73cb37897aa0f66edb2860f5677fae4739b662c60274ffe0d039f79286fc141d57bc12ddb881090a66f7b3266b2f44b28c63962ad5382a810a415c065a89bf479235e699cc7a078f4cdc23855e30fd39abba6bbbae4137fcdce7931d0860da997d5598c97e39f76b0101acf2f01de0b6265d0e61c657101c53fbe014ef965a38f72a591edf9d2cbe14bcccc0198fb77fb2d1966122c4a2d95e8e98b1ab54cfff824e39e756047169ec59ec38c2b717e7578cd93d2bc113acaa98c6786c26958f387d34975d59b5f3ba124bf5f2e722dc9f70b7c33cd22df1f1b7cdb23c78c70a216bee42b46d2fc145ea9a772ee46f88f5477051db225b4efe7af16cc81c1fa1467ee5e0f44f3090b83d8185427adf59139b1135f3243792e3832a5da1e0e91663f75382a3c08c2ff995b70b7e5a192c87e6ac9a13d282f7d92e7e96683711a8f118cbcee89b27eae3f573a652b68a4f4a8c1fc6649f0d438229f87ebb6a284090563f3ccbdda84e46ec3d99bd6f3e60a0ed58326838ed6b6a2625bc387ee71c909993bdce2e170825c0f56ede7458d93808bf20c68627e7ba7d76759179c73f67f2e5b0fb76900eb936366a0899435dedb6219526232c2166f8c9c9659d67f6f06003a5c1558394c963f9ebcccebb22ed2535cd00f56c34c3b1f8f3b7504acc6ffe3d5cb7d1d7765648846825eee3e3e1988d2869ff081ec531037a6325eebb791d801179b954fa8293b7b575f0ae426b039b72ba93d0d6e029dea4ad2dd45ba56eee92a47033b7a0223b0cd69b511527ee3f88e339a889bdbcc3255fa739a6c112941637a8b00183774770f693d89ff17667cdf6fa764f71bbcc5dc1c3a3fe1b82159a665b0ee96be31e5ffe69b262f6f31c41b1cabd79883e7fc496d18c961db3cb11b4724354631e4d91eb7c30748026c368f6f8b0214982c650f89ebbea0e1fa28b9bcd1574c3dd02d4a58eb372fad2ae93f133736df64d533fcae233c0b285809fcf1e8e2d2313ebb9e645548e54fec2cafdd172d68fa977e9812606b34c4644156b2cb381f18f7112836fcffd9e065f60215aab3604eff92fbdf5ee66321a7fe42cda69f477b16ac5317b0d4548535aabd28c65ff93480c23dc0a80e7bf9f9af9cb70868ae92b1fd08bd00a74cb5d312b64d162246f6ed578859da673801530f4f513fbed735733f109cf2f2eed3163703892f7af7c74e40f8d15341f1ed7575c1d268b2f8df2410ed7a01cb7992db709be9dedf16c9540c040e77f165a4a76bf013df9b70e3f49fd1faffd137cc94edfe337691d83e1b4b5c9fd25228c4bf4ac041ee39317bd28190683ee06762ee5072aa810989dbb5cbe3ececf44c8390e79709981ba5933e711ae0943d4ae0bb8e9d8bc89f95449cf2338ce62e428e8bc90f914d998978418565dd9ff3fbc0c670a9b93136eff6705028c4aae36ef83b65ad7b168656d3b5902c90053db1c54b0a60759fccfed407bcf639972fda64bf81b0056202e628c33d8f1982d6d0df56d9bee38a5493be21fd721d59c797209b9e8fc3c47b96df3d6fa666881870b0e3e99f4fd31c01f77d29717f88aa94c6e42dc2a8d8d7943332a59003c589f23ba4912efedfd6b586c96ef3bacfbc22588bf5b79f2548e14a7a2165c92fca70599d359f9a9c7b773d265a9a55855bf2611df85879438ec94ca52ab49a29d1698f419eaa77b6e544fe41aeadcaa8109898cc84c6238917c7cbc1b5a27f131c638e57abf442e1209f8d9f87de23a9f6087791d6d5b1c11ec17a1dabba06942e20bec51b389a936231a5ed410f419c40e5e5e9702d8b107d74c013bab913fbda9099e17a78e4b1e5eb2c07a24e5fdc006619cf37fc496871fe2d8fa6215b727c7fb6816f6ed732db0d8da75b4fef84b7ab4510ad9c8a2b997d9acf4a246f1d33b80d26ada42a7734ca8672294f054ceb4a28bf26a745df2a972893d0312243ed2fca61915698f8c20c14f5607648023173fbdb414837578e797783c22bf4520c61f57b3242ddc16c3fce91f27b402057dbd358dc86cf4973a0fa7c36f78d58743f0898118187f44b56179d9dfc17dc1bbedf050371132aafb4791f2f28af9611b37409587e9502afd12bc7c5b42a7078b10aea57cfd3ee5214942d7172de04e1b29d65901a4c43994cecc57a4b9c68bcf2e009855d26c3d4ee04377db93e2203b3c4465c2aae84aa493a8c07a7a608385e2181788410f05789299d2282d28d16f111986cc3c4e8fdb68b2fc3330779c4fafb8f80f0ac60bc435f030d38efe3707861b5ca66cdb11b8fedeaf80edf527c2bf362d418cab0ce0870169ec94432feb085232fac4702ce0eaed59a09c8521e41ef5c2196c8abeeeacf527489f92ee300cad59a34d29bfb3c9b74f5ef75cbf93d0d940b061759583b7d3e48690368a118cfbcf81c69eb5b7b2e13edb67037ed3b23366aba5a5f887e88cd3d91b191de476370340250f9d0367de802e9f85bb87a3f69c0f793ede3ea5b4d3d9ed3f4e0d25e3079e26c4f559f3aeeb7c6f839f742d095be195ddb0ce5e2178a04656dd24c447eb40d140c08d32fb2d538615eca9c80490c8fb3c64c660ae03e76cab26bb6a5dd85bb65419fe518a17b563cd8959e82f86e1e84d3ba77d436e9d9c7359a73c006c81b841e92622090124ec530c96661e1d345873b35dba3a8940bfaa9e3161d6debb8daa09bea101264ee955499188fcd2f7904b8f0fb8e54f6e58c44c1d4c34ebb08c993a96c822aa2640eb0ca2821786214506c09960bd5a964fcb973f653ab48258d4c13deada68d4da5fea2d9d7e6643dfb8472741efe451ffa5d67b7acb49d03b32c5bad63f93375a3f315da22a4b87b59df6357ba4003f74c04cdbde571bcaeb9002db28c5dc88dcf3bd0c42b3ac7493beff0400b71d6451f7c790feae227460da9212483801391e0712cb15147ffd727b3c081e25edb84ce73023e95d8c7a18263a7682dd0a468f7437376a10dad5999c75624128a14595b1e9b32f42302ba521e10974d4e72763274387a7d5563eedf68fca6a99e595060c8f48dbcce1c81da21746057bb503a043308149785e1fca92239b58732a5377bac45baa0ec80e452026f8c2b51880e6f414fbd64443f676985d6f87f8f5392577f293bddebef3fd56bfbe770f3e478b778d5676927c402e64b5483f54c6fd180a4af380cf792ab40b9932159a8f81d62189f4703de5b55af92172b0fe8732ca486f3e0bfbcd98b07551c0eccb03f89b34531db51e087c3f8014b9af0c4b6dbe67054907123572124875b1e53e928467d0cb79c3655ac81959617a9e1b111d533bec88021854a40d107ea4e69f548d3d086fd31a866d06b8f764e02b56b7f786dd815d1b71ae009a8ff669102ca511c8352516bd8b23c60856f0402bed742d7d404b07cf9315277fae84c2c598ec6baaf3b6574d6b94dc05826978f5096221afc7ff9bde21d41573e491752570288e210014ad8a31efb05c80c8a33b3052b4f43f9c50fc42c6fc3760be8079891de28c310e59b2db131666b0b47af8014ffdf22aa8ee2d544d09eb3723564a65a2b052619bd3ef52c70a76441b51176509e845223ed6295ced724f958fe9945a25c81dd6ebf255911d139f700eb27d476152c33374b85769a1605101beff9317e125cca894a3c86e55142b5a70b7a0ca8f922a3d4b45450d3595fade1438ba31536c5c84998fb24e9f0a420445f949e6dec94d8ae34d2b35505897bad28da507de93eb43e9c310c7e642bf9a93f6212e90f70890c524c4dfff84a09a6838782c2792358f0c601c4e9087a3bcb6a3e7b3503953db169fb5dae6ac023ff9eb56ff50f195e7fe69abb9f76eb2e946d29ec6b5be3f0ab443efba5c95d23e8a3d782357b6dc37c744255380b4f3c72a28195f1e24ef1b7ae92593a330b87ef6b9f5ae05f04123abf2678b74189c0fd37cca75b91a6a17bd46e1b7610c2b9c3cdd0730e6f0dd5a1d141b6d52640aac0417e28a934a40106aa9d013851a695f2e86c1bc8eedc95189ea4bd4aacfc4064afd535a14f930179b147341980920c48d8652304b66b3b432bc832ac2908f1b51c43642631db5ccc2a48b80e74f7f93c432c54cde7afda0a7986c33b290d9ab74829af0759cfaf18df1d6453af98a354b7835b3b3f8c7d30a89891fa819dd011507538a497ace22180e7971f29d9721609c423b408e41c2af312622e09ea4671f24420df7d6cf164419db5ab991fda85257ff43d77ef3652071cf138064ecc37eb52aec50d4f7283f96d73b7bff627789efc006cbc917a572c855b96fa8b321f7ecc358cfb5b740be89133ca1e8fc2e84f8ecf203da1b7ec54777d168be8df340770d59e5da3079aa1a56e16a8ac4c82d7ea0006d207c4e691c84e429ebca1eda278811b981177240b63f98de9507e85d9563f60a675bcceb8b673a4b0f4d3c16a4ec5c199188f18b5b18709c11251f05e51f5c0a81f4a0be1836a89387c08e464279279ea1ad7159ff020e93049197ab07997b1641458f94555f2b5a6654fbecec42c546dd3513194f96beb5a2f8f13acf38a7f6a5ff67b1cb5c197c34a1dd1ba98220058d192510da67777a785876f4c52c20a0e219b9da54e1c19c792b909e7485903ae00eb889e551cf9721fe55fbf6e1517e866403895be567c21ebb181a70a211401ea42e4527a23b6672e8ac0d4deb134a649cb5a96a420aaa53d2430022bfa1b043e4cfc2b502d3673bfc1731b89a6410c112f7bdd06dd7955e51eef147debf245c3bf7378fb02814e26ac1d8cfd58d02fba4c264a742b3b17aa4da64270a1c11757f1812cc42c94677ab8a191dd5d24cf6eba506a6c96bd5a7be2a36e870b2a64b915f498f2bbbc2fde6ee1407fe081468f2375ba4d3acdd580bdb95ff61ae754659e1a30796f8357a2be1813f1d8e2bf99268cf9c79594f44be49b570119cc4ab72c10b3c4b4469fbc8650fe0f5619b022dc0be7d0e19075423ccf98eb5a1bd9bd3a6aab09a1bbb27af7709d427388802b319421204f9e87423145c4f802bcc4da87d1102cdd8045a3f1cb55dace39f81e1535f6b4a83d90ada08d0505ae2e9197be0cf84c4fc9ca7fb249a00659720a3a8054192c8833854fe7acd5ba5eb3907ea518e950be8d7f8d6dadeb24ea9883b02aebf8c4920d1c80461ad9b28a543b93b624c77e4e49cada829d3511a0ef72cf345608a9eab87d46bec022777baad7c7096c05d8833f59970eca9d6e8ddd32399fb7cce7355a68c1bc0169c19b8892cda33ed9b3db142e5406870f8f66c16d013446c0b41e20783b642866d9b371fb3eb1dc3e80d166b7463c42fd5cc1c1db94c30d942e4dfcb29890ea789089303487486c0c08ba11e98ebcfd4930acbe3022a67fc0adcf4820f229b644c996e16be15cc68d8d1b99ce0665de395f676d0cbb45a486e1c490da6375ac5387db170b8a7f22ec6e2c5fb3281cecdfd70fbc503d35635b0466176c7389a992090a0772e5c32ea936160a437a9fa70afad24729e0a73ad74fc47d662c8b092b97412af99af7209df6fe5cd8f828e376ef0a94b92f3ca51dbfcb6fa625e", 0xff4}], 0x2, 0x0, 0xfffffffffffffe3e}, 0x24000c00) 262.290726ms ago: executing program 34 (id=8075): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x48}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0xc}, 0x4a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x29, 0x49, &(0x7f0000000000), 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000e9a1a4512b16bb7e000c00d8124100000c00000008000000080000000000000804"], 0x0, 0x2c, 0x0, 0x1, 0x7fffffff}, 0x28) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x6e, &(0x7f0000000000), 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r8, @ANYRES64=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x0, r5}, 0x18) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) 142.019572ms ago: executing program 35 (id=8077): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x104904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000480)) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0xe}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001280)="b9ffddc1ddcccdde75537d53888e", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000013c0)={r4, 0xe0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2a, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x9b, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f00000011c0)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x0, r0}, 0x18) close(r9) 0s ago: executing program 36 (id=8078): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f0000001a80)="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", 0x2df}], 0x3, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0xa4, [@rand_addr=0x64010100, @multicast1, @private=0xa010100, @local]}, @ra={0x94, 0x4, 0x1}, @generic={0x0, 0xb, "3a047e2aae56e4b9ea"}]}}}], 0x58}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b84, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddeccd0fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3dbec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182c0180000007632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8490000000000"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x10000, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x1c, &(0x7f0000000500)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1c00ffb0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1000000}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x0, 0x7ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {0x4, 0x0, 0x6}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0xc000000, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r4, &(0x7f0000000040)='syz1\x00', 0x1ff) write$cgroup_devices(r3, &(0x7f00000000c0)={'b', ' *:* ', 'rw\x00'}, 0x9) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): pe 9 has an invalid length. [ 1818.021994][T29147] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.031197][T29387] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7423'. [ 1819.185854][T29385] netlink: 'syz.2.7424': attribute type 9 has an invalid length. [ 1819.195877][T29385] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7424'. [ 1819.365862][T29406] netlink: 'syz.4.7427': attribute type 11 has an invalid length. [ 1819.458342][T21600] hsr_slave_0: left promiscuous mode [ 1819.470783][T21600] hsr_slave_1: left promiscuous mode [ 1819.531664][T21600] veth1_macvtap: left promiscuous mode [ 1819.537269][T21600] veth0_macvtap: left promiscuous mode [ 1819.544961][T21600] veth1_vlan: left promiscuous mode [ 1821.455101][T29411] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1821.462315][T20849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.478003][T20849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1821.633133][T20839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1821.651816][T20839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1822.173861][T29436] mac80211_hwsim hwsim168 wlan0: entered promiscuous mode [ 1822.189069][T29436] mac80211_hwsim hwsim168 wlan0: entered allmulticast mode [ 1822.582728][T29427] 6: renamed from veth0_vlan (while UP) [ 1823.698679][T29454] netlink: 199644 bytes leftover after parsing attributes in process `syz.2.7440'. [ 1824.316292][T28854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1824.327062][T28854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1824.337916][T28854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1824.353034][T28854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1824.364394][T28854] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1824.377694][T28854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1824.556698][T29457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1825.143842][T21597] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.543730][T21597] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1825.684806][T29478] syzkaller0: entered promiscuous mode [ 1825.699992][T29478] syzkaller0: entered allmulticast mode [ 1825.712054][T29460] chnl_net:caif_netlink_parms(): no params data found [ 1825.750262][T21597] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1826.439975][T28854] Bluetooth: hci3: command tx timeout [ 1828.518362][T28854] Bluetooth: hci3: command tx timeout [ 1828.912432][T21597] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1828.938105][T29495] 6: renamed from veth0_vlan (while UP) [ 1829.133679][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1829.159459][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1829.167163][T29460] bridge_slave_0: entered allmulticast mode [ 1829.211009][T29460] bridge_slave_0: entered promiscuous mode [ 1829.220951][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.239879][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1829.247278][T29460] bridge_slave_1: entered allmulticast mode [ 1829.280508][T29460] bridge_slave_1: entered promiscuous mode [ 1829.318000][T29460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1829.333399][T29460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1829.353814][T29509] netlink: 199644 bytes leftover after parsing attributes in process `syz.4.7453'. [ 1829.807158][T29460] team0: Port device team_slave_0 added [ 1829.830392][T29515] nr0: port 1(hsr0) entered blocking state [ 1829.836734][T29515] nr0: port 1(hsr0) entered disabled state [ 1829.864629][T29515] hsr0: entered allmulticast mode [ 1829.888313][T29515] hsr_slave_0: entered allmulticast mode [ 1829.894450][T29515] hsr_slave_1: entered allmulticast mode [ 1829.910144][T29515] hsr0: entered promiscuous mode [ 1829.921010][T29460] team0: Port device team_slave_1 added [ 1830.127977][T29521] netlink: 'syz.1.7457': attribute type 9 has an invalid length. [ 1830.168164][T29521] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7457'. [ 1830.485864][T29460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1830.493000][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.538305][T29460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1830.598410][T28854] Bluetooth: hci3: command tx timeout [ 1830.924545][T29460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1830.935107][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1830.991605][T29460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.045713][T29527] netlink: 'syz.4.7458': attribute type 9 has an invalid length. [ 1831.058700][T29527] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7458'. [ 1831.395857][T29460] hsr_slave_0: entered promiscuous mode [ 1831.455332][T29460] hsr_slave_1: entered promiscuous mode [ 1831.470816][T29460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1831.499008][T29460] Cannot create hsr debugfs directory [ 1831.751107][T29551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7461'. [ 1832.364196][T29559] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7463'. [ 1832.685677][T28854] Bluetooth: hci3: command tx timeout [ 1833.044210][T29570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1833.063300][T29578] veth0_macvtap: entered allmulticast mode [ 1833.873384][T29594] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.7472'. [ 1834.238784][T29460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1834.335181][T29460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1834.363966][T29598] netlink: 'syz.1.7473': attribute type 9 has an invalid length. [ 1834.374664][T29598] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7473'. [ 1834.465478][T29460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1834.507460][T29460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1834.940638][T29609] netlink: 'syz.2.7477': attribute type 4 has an invalid length. [ 1834.979778][T29609] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1835.126902][T29609] .`: renamed from bond0 (while UP) [ 1835.165643][T29610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7477'. [ 1835.221209][T29612] netlink: 'syz.4.7479': attribute type 10 has an invalid length. [ 1835.681706][T29622] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7482'. [ 1835.983263][T29460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1836.126661][T29460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1836.173667][T29635] netlink: 'syz.4.7486': attribute type 9 has an invalid length. [ 1836.212247][T21600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1836.219743][T21600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1836.226640][T29635] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7486'. [ 1836.230889][T21600] bridge0: port 2(bridge_slave_1) entered blocking state [ 1836.246637][T21600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1836.328389][T29633] netlink: 'syz.2.7484': attribute type 21 has an invalid length. [ 1836.356375][T29633] netlink: 'syz.2.7484': attribute type 6 has an invalid length. [ 1837.350415][T29653] netlink: 'syz.4.7490': attribute type 9 has an invalid length. [ 1837.378375][T29653] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7490'. [ 1838.300116][T29663] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7492'. [ 1838.551054][T29677] netlink: 'syz.4.7494': attribute type 4 has an invalid length. [ 1838.588213][T29677] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7494'. [ 1838.675989][T29460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1838.795474][T29683] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7494'. [ 1839.074499][T29693] FAULT_INJECTION: forcing a failure. [ 1839.074499][T29693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.179922][T29460] veth0_vlan: entered promiscuous mode [ 1839.186202][T29693] CPU: 1 PID: 29693 Comm: syz.1.7498 Not tainted syzkaller #0 [ 1839.193821][T29693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1839.204196][T29693] Call Trace: [ 1839.207553][T29693] [ 1839.210546][T29693] dump_stack_lvl+0x18c/0x250 [ 1839.215326][T29693] ? show_regs_print_info+0x20/0x20 [ 1839.220609][T29693] ? load_image+0x420/0x420 [ 1839.225185][T29693] ? __lock_acquire+0x7d40/0x7d40 [ 1839.230421][T29693] ? snprintf+0xe9/0x140 [ 1839.234974][T29693] should_fail_ex+0x39d/0x4d0 [ 1839.239812][T29693] _copy_to_user+0x2f/0xa0 [ 1839.244346][T29693] simple_read_from_buffer+0xe7/0x150 [ 1839.249787][T29693] proc_fail_nth_read+0x1e8/0x260 [ 1839.255084][T29693] ? proc_fault_inject_write+0x360/0x360 [ 1839.260787][T29693] ? fsnotify_perm+0x271/0x5e0 [ 1839.265930][T29693] ? proc_fault_inject_write+0x360/0x360 [ 1839.271865][T29693] vfs_read+0x28b/0x970 [ 1839.276071][T29693] ? kernel_read+0x1e0/0x1e0 [ 1839.280796][T29693] ? __fget_files+0x28/0x4b0 [ 1839.285516][T29693] ? __fget_files+0x28/0x4b0 [ 1839.290452][T29693] ? __fget_files+0x43d/0x4b0 [ 1839.295261][T29693] ? __fdget_pos+0x2a3/0x330 [ 1839.299880][T29693] ? ksys_read+0x75/0x260 [ 1839.304256][T29693] ksys_read+0x150/0x260 [ 1839.308716][T29693] ? vfs_write+0x990/0x990 [ 1839.313190][T29693] ? lockdep_hardirqs_on+0x98/0x150 [ 1839.318528][T29693] do_syscall_64+0x55/0xa0 [ 1839.323150][T29693] ? clear_bhb_loop+0x40/0x90 [ 1839.327950][T29693] ? clear_bhb_loop+0x40/0x90 [ 1839.333035][T29693] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1839.338980][T29693] RIP: 0033:0x7f508795d04e [ 1839.343716][T29693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1839.364859][T29693] RSP: 002b:00007f508878afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1839.373311][T29693] RAX: ffffffffffffffda RBX: 00007f508878b6c0 RCX: 00007f508795d04e [ 1839.381584][T29693] RDX: 000000000000000f RSI: 00007f508878b0a0 RDI: 0000000000000005 [ 1839.389614][T29693] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.397919][T29693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.406393][T29693] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1839.414628][T29693] [ 1839.554373][T29460] veth1_vlan: entered promiscuous mode [ 1839.788567][T29460] veth0_macvtap: entered promiscuous mode [ 1839.800997][T29460] veth1_macvtap: entered promiscuous mode [ 1840.306203][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1840.398956][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.456637][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1840.500557][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1840.571036][T29460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1840.980832][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.033840][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.073224][T29460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.113424][T29460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.156079][T29460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1841.269184][T29460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.310394][T29460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.368888][T29460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.388285][T29460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.496321][T29720] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7502'. [ 1842.127972][T29725] netlink: 'syz.2.7504': attribute type 9 has an invalid length. [ 1842.268526][T21600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.268553][T21600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.437239][T29733] netlink: 'syz.1.7507': attribute type 29 has an invalid length. [ 1842.437554][T29733] netlink: 'syz.1.7507': attribute type 3 has an invalid length. [ 1842.437649][T29733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7507'. [ 1842.655690][T29725] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7504'. [ 1843.172176][T20839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.183859][T29754] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7510'. [ 1843.184650][T20839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.026398][T29774] netlink: 'syz.2.7516': attribute type 9 has an invalid length. [ 1846.062171][T29778] netlink: 192188 bytes leftover after parsing attributes in process `syz.1.7515'. [ 1846.078424][T29774] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7516'. [ 1846.156634][T29778] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 1846.667840][T21632] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1846.685782][T21632] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1846.696995][T21632] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1846.710929][T21632] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1846.719934][T21632] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1846.727990][T21632] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1847.133717][T29783] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7518'. [ 1847.373256][T29788] netlink: 'syz.0.7519': attribute type 9 has an invalid length. [ 1847.408589][T29788] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1847.463146][T21597] hsr_slave_0: left promiscuous mode [ 1847.470711][T21597] hsr_slave_1: left promiscuous mode [ 1848.305595][T21597] team0 (unregistering): Port device team_slave_1 removed [ 1848.377696][T21597] team0 (unregistering): Port device team_slave_0 removed [ 1848.848383][T28854] Bluetooth: hci4: command tx timeout [ 1849.040677][T29791] Ÿë: port 1(gretap0) entered blocking state [ 1849.047250][T29791] Ÿë: port 1(gretap0) entered disabled state [ 1849.056180][T29791] gretap0: entered allmulticast mode [ 1849.064168][T29791] gretap0: entered promiscuous mode [ 1849.074470][T29794] Ÿë: port 2(veth0_to_team) entered blocking state [ 1849.083457][T29794] Ÿë: port 2(veth0_to_team) entered disabled state [ 1849.090477][T29794] veth0_to_team: entered allmulticast mode [ 1849.097496][T29794] veth0_to_team: entered promiscuous mode [ 1849.258727][T29807] netlink: 'syz.2.7526': attribute type 29 has an invalid length. [ 1849.297767][T29807] netlink: 'syz.2.7526': attribute type 3 has an invalid length. [ 1849.319067][T29807] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7526'. [ 1849.505318][T29780] chnl_net:caif_netlink_parms(): no params data found [ 1849.664345][T29817] netlink: 'syz.0.7535': attribute type 10 has an invalid length. [ 1849.684047][T29817] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7535'. [ 1849.694610][T29817] team0: entered promiscuous mode [ 1849.704705][T29817] team_slave_0: entered promiscuous mode [ 1849.715610][T29817] team_slave_1: entered promiscuous mode [ 1849.745753][T29817] team0: entered allmulticast mode [ 1849.788177][T29817] team_slave_0: entered allmulticast mode [ 1849.805921][T29817] team_slave_1: entered allmulticast mode [ 1849.830426][T29817] bridge0: port 3(team0) entered blocking state [ 1849.858907][T29817] bridge0: port 3(team0) entered disabled state [ 1849.887951][T29817] bridge0: port 3(team0) entered blocking state [ 1849.894829][T29817] bridge0: port 3(team0) entered forwarding state [ 1849.956111][T29780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.983353][T29780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1850.055289][T29780] bridge_slave_0: entered allmulticast mode [ 1850.064792][T29780] bridge_slave_0: entered promiscuous mode [ 1850.079747][T29780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.103997][T29780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1850.146589][T29780] bridge_slave_1: entered allmulticast mode [ 1850.154846][T29780] bridge_slave_1: entered promiscuous mode [ 1850.162793][T29828] mac80211_hwsim hwsim181 wlan1: entered promiscuous mode [ 1850.171470][T29828] mac80211_hwsim hwsim181 wlan1: entered allmulticast mode [ 1850.540691][T29835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1850.572073][T29780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1850.684865][T29780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1850.875775][T29835] netlink: 'syz.2.7532': attribute type 10 has an invalid length. [ 1850.908869][T29835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7532'. [ 1850.928737][T28854] Bluetooth: hci4: command tx timeout [ 1850.934530][T29835] 6: entered allmulticast mode [ 1851.070023][T29835] bridge0: port 3(776) entered blocking state [ 1851.127855][T29835] bridge0: port 3(776) entered disabled state [ 1851.349428][T29835] A link change request failed with some changes committed already. Interface 776 may have been left with an inconsistent configuration, please check. [ 1851.463441][T29780] team0: Port device team_slave_0 added [ 1851.474111][T29780] team0: Port device team_slave_1 added [ 1851.480840][T29842] FAULT_INJECTION: forcing a failure. [ 1851.480840][T29842] name failslab, interval 1, probability 0, space 0, times 0 [ 1851.501730][T29842] CPU: 0 PID: 29842 Comm: syz.1.7536 Not tainted syzkaller #0 [ 1851.510081][T29842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1851.520278][T29842] Call Trace: [ 1851.523682][T29842] [ 1851.526662][T29842] dump_stack_lvl+0x18c/0x250 [ 1851.531504][T29842] ? show_regs_print_info+0x20/0x20 [ 1851.536995][T29842] ? load_image+0x420/0x420 [ 1851.541738][T29842] ? __might_sleep+0xe0/0xe0 [ 1851.546387][T29842] ? __lock_acquire+0x7d40/0x7d40 [ 1851.551462][T29842] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1851.557675][T29842] should_fail_ex+0x39d/0x4d0 [ 1851.562518][T29842] should_failslab+0x9/0x20 [ 1851.567083][T29842] slab_pre_alloc_hook+0x59/0x310 [ 1851.572174][T29842] kmem_cache_alloc_node+0x60/0x320 [ 1851.578136][T29842] ? __alloc_skb+0x103/0x2c0 [ 1851.583004][T29842] __alloc_skb+0x103/0x2c0 [ 1851.587653][T29842] rtmsg_ifa+0xf9/0x1f0 [ 1851.592038][T29842] __inet_del_ifa+0x865/0x1020 [ 1851.597116][T29842] inetdev_event+0x671/0x1630 [ 1851.602118][T29842] ? devinet_exit_net+0x220/0x220 [ 1851.607493][T29842] notifier_call_chain+0x197/0x380 [ 1851.612927][T29842] dev_set_mtu_ext+0x463/0x680 [ 1851.617833][T29842] ? dev_validate_mtu+0x170/0x170 [ 1851.622932][T29842] ? __mutex_lock+0x94c/0xcc0 [ 1851.627911][T29842] ? do_raw_spin_lock+0x11f/0x2c0 [ 1851.633087][T29842] ? __rwlock_init+0x150/0x150 [ 1851.638184][T29842] dev_set_mtu+0xec/0x1c0 [ 1851.642664][T29842] ? dev_set_mtu_ext+0x680/0x680 [ 1851.647682][T29842] ? __dev_get_by_name+0xe5/0x130 [ 1851.652858][T29842] ? dev_ifsioc+0x4f9/0xc40 [ 1851.657418][T29842] dev_ioctl+0x7b4/0x1140 [ 1851.662153][T29842] sock_do_ioctl+0x239/0x310 [ 1851.667000][T29842] ? sock_show_fdinfo+0xb0/0xb0 [ 1851.672195][T29842] sock_ioctl+0x5ba/0x7e0 [ 1851.676675][T29842] ? sock_poll+0x3e0/0x3e0 [ 1851.681154][T29842] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1851.686155][T29842] ? security_file_ioctl+0x80/0xa0 [ 1851.691406][T29842] ? sock_poll+0x3e0/0x3e0 [ 1851.695881][T29842] __se_sys_ioctl+0xfd/0x170 [ 1851.700622][T29842] do_syscall_64+0x55/0xa0 [ 1851.705449][T29842] ? clear_bhb_loop+0x40/0x90 [ 1851.710171][T29842] ? clear_bhb_loop+0x40/0x90 [ 1851.714893][T29842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1851.721016][T29842] RIP: 0033:0x7f508799c819 [ 1851.725564][T29842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1851.745746][T29842] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1851.754248][T29842] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 1851.762584][T29842] RDX: 0000200000000180 RSI: 0000000000008922 RDI: 0000000000000003 [ 1851.770790][T29842] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1851.778801][T29842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1851.786912][T29842] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1851.795302][T29842] [ 1852.008988][T29780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1852.016324][T29780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.129305][T29780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1852.178686][T29780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1852.186020][T29780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1852.288120][T29780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1852.459374][T29780] hsr_slave_0: entered promiscuous mode [ 1852.528586][T29780] hsr_slave_1: entered promiscuous mode [ 1852.558210][T29780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1852.568108][T29780] Cannot create hsr debugfs directory [ 1852.796816][T21597] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.002089][T28854] Bluetooth: hci4: command tx timeout [ 1853.083399][T21597] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.165758][T29867] mac80211_hwsim hwsim189 wlan1: entered promiscuous mode [ 1853.208343][T29867] mac80211_hwsim hwsim189 wlan1: entered allmulticast mode [ 1853.553033][T21597] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.783247][T21597] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1853.803449][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.811402][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.855748][T29858] netlink: 830 bytes leftover after parsing attributes in process `syz.1.7542'. [ 1854.394120][T29879] syzkaller0: entered promiscuous mode [ 1854.411616][T29879] syzkaller0: entered allmulticast mode [ 1855.081523][T28854] Bluetooth: hci4: command tx timeout [ 1855.835950][T29908] netlink: 'syz.1.7552': attribute type 9 has an invalid length. [ 1856.002641][T29908] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7552'. [ 1857.592216][T29922] mac80211_hwsim hwsim169 wlan1: entered promiscuous mode [ 1857.628585][T29922] mac80211_hwsim hwsim169 wlan1: entered allmulticast mode [ 1858.734811][T29933] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7556'. [ 1858.965971][T29780] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1859.022733][T29780] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1859.069807][T29780] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1859.087639][T29938] netlink: 'syz.1.7557': attribute type 9 has an invalid length. [ 1859.163379][T29938] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1859.232034][T29780] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1860.585136][T29952] netlink: 'syz.2.7561': attribute type 9 has an invalid length. [ 1860.607136][T29952] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7561'. [ 1861.228362][T29780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1861.689746][T29958] netlink: 'syz.0.7562': attribute type 10 has an invalid length. [ 1861.730329][T29958] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7562'. [ 1861.919537][T29962] FAULT_INJECTION: forcing a failure. [ 1861.919537][T29962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.938174][T29962] CPU: 0 PID: 29962 Comm: syz.0.7563 Not tainted syzkaller #0 [ 1861.945974][T29962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1861.956277][T29962] Call Trace: [ 1861.959604][T29962] [ 1861.962584][T29962] dump_stack_lvl+0x18c/0x250 [ 1861.967467][T29962] ? show_regs_print_info+0x20/0x20 [ 1861.972723][T29962] ? load_image+0x420/0x420 [ 1861.977372][T29962] ? __lock_acquire+0x7d40/0x7d40 [ 1861.982791][T29962] ? snprintf+0xe9/0x140 [ 1861.987166][T29962] should_fail_ex+0x39d/0x4d0 [ 1861.992429][T29962] _copy_to_user+0x2f/0xa0 [ 1861.996903][T29962] simple_read_from_buffer+0xe7/0x150 [ 1862.002354][T29962] proc_fail_nth_read+0x1e8/0x260 [ 1862.007439][T29962] ? proc_fault_inject_write+0x360/0x360 [ 1862.013325][T29962] ? fsnotify_perm+0x271/0x5e0 [ 1862.018413][T29962] ? proc_fault_inject_write+0x360/0x360 [ 1862.024280][T29962] vfs_read+0x28b/0x970 [ 1862.028624][T29962] ? kernel_read+0x1e0/0x1e0 [ 1862.033264][T29962] ? __fget_files+0x28/0x4b0 [ 1862.037901][T29962] ? __fget_files+0x28/0x4b0 [ 1862.042629][T29962] ? __fget_files+0x43d/0x4b0 [ 1862.047530][T29962] ? __fdget_pos+0x2a3/0x330 [ 1862.052498][T29962] ? ksys_read+0x75/0x260 [ 1862.056867][T29962] ksys_read+0x150/0x260 [ 1862.061153][T29962] ? vfs_write+0x990/0x990 [ 1862.065690][T29962] ? lockdep_hardirqs_on+0x98/0x150 [ 1862.071007][T29962] do_syscall_64+0x55/0xa0 [ 1862.075543][T29962] ? clear_bhb_loop+0x40/0x90 [ 1862.080300][T29962] ? clear_bhb_loop+0x40/0x90 [ 1862.085212][T29962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.091306][T29962] RIP: 0033:0x7f928315d04e [ 1862.095794][T29962] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1862.115853][T29962] RSP: 002b:00007f9284038fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1862.124385][T29962] RAX: ffffffffffffffda RBX: 00007f92840396c0 RCX: 00007f928315d04e [ 1862.132548][T29962] RDX: 000000000000000f RSI: 00007f92840390a0 RDI: 0000000000000004 [ 1862.140723][T29962] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.148827][T29962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.156904][T29962] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1862.165260][T29962] [ 1862.347619][T29780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1862.384454][T29967] syz.1.7564: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 1862.461776][T29964] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7565'. [ 1862.499931][T29967] CPU: 0 PID: 29967 Comm: syz.1.7564 Not tainted syzkaller #0 [ 1862.507524][T29967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1862.518027][T29967] Call Trace: [ 1862.521535][T29967] [ 1862.524733][T29967] dump_stack_lvl+0x18c/0x250 [ 1862.529746][T29967] ? show_regs_print_info+0x20/0x20 [ 1862.535170][T29967] ? load_image+0x420/0x420 [ 1862.539744][T29967] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1862.546351][T29967] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1862.553081][T29967] warn_alloc+0x246/0x340 [ 1862.557558][T29967] ? stack_trace_save+0xaa/0x100 [ 1862.562678][T29967] ? zone_watermark_ok_safe+0x230/0x230 [ 1862.568596][T29967] ? kasan_set_track+0x5f/0x70 [ 1862.573506][T29967] ? kasan_set_track+0x4e/0x70 [ 1862.578498][T29967] ? __kasan_kmalloc+0x8f/0xa0 [ 1862.583488][T29967] ? xsk_init_queue+0xad/0x100 [ 1862.588650][T29967] ? xsk_setsockopt+0x4e5/0x760 [ 1862.593559][T29967] ? do_sock_setsockopt+0x175/0x1a0 [ 1862.598855][T29967] ? __x64_sys_setsockopt+0x182/0x200 [ 1862.604359][T29967] __vmalloc_node_range+0x126/0x1330 [ 1862.609779][T29967] ? free_vm_area+0x50/0x50 [ 1862.614370][T29967] vmalloc_user+0x74/0x80 [ 1862.618746][T29967] ? xskq_create+0xbf/0x170 [ 1862.623335][T29967] xskq_create+0xbf/0x170 [ 1862.627721][T29967] xsk_init_queue+0xad/0x100 [ 1862.632547][T29967] xsk_setsockopt+0x4e5/0x760 [ 1862.637383][T29967] ? xsk_poll+0x680/0x680 [ 1862.641949][T29967] ? __fget_files+0x28/0x4b0 [ 1862.646680][T29967] ? __fget_files+0x28/0x4b0 [ 1862.651422][T29967] ? aa_sock_opt_perm+0x74/0x100 [ 1862.656584][T29967] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1862.662169][T29967] ? security_socket_setsockopt+0x7e/0xa0 [ 1862.667955][T29967] ? xsk_poll+0x680/0x680 [ 1862.672453][T29967] do_sock_setsockopt+0x175/0x1a0 [ 1862.677602][T29967] ? __fdget+0x180/0x210 [ 1862.682078][T29967] __x64_sys_setsockopt+0x182/0x200 [ 1862.687597][T29967] do_syscall_64+0x55/0xa0 [ 1862.692221][T29967] ? clear_bhb_loop+0x40/0x90 [ 1862.697114][T29967] ? clear_bhb_loop+0x40/0x90 [ 1862.701851][T29967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1862.708079][T29967] RIP: 0033:0x7f508799c819 [ 1862.712551][T29967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.733076][T29967] RSP: 002b:00007f5085bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1862.741624][T29967] RAX: ffffffffffffffda RBX: 00007f5087c16090 RCX: 00007f508799c819 [ 1862.750071][T29967] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1862.758131][T29967] RBP: 00007f5087a32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1862.766164][T29967] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1862.774256][T29967] R13: 00007f5087c16128 R14: 00007f5087c16090 R15: 00007ffdd201a608 [ 1862.782315][T29967] [ 1862.888434][T29967] Mem-Info: [ 1862.891665][T29967] active_anon:48893 inactive_anon:0 isolated_anon:0 [ 1862.891665][T29967] active_file:24868 inactive_file:40611 isolated_file:0 [ 1862.891665][T29967] unevictable:768 dirty:110 writeback:0 [ 1862.891665][T29967] slab_reclaimable:13346 slab_unreclaimable:108484 [ 1862.891665][T29967] mapped:25000 shmem:42755 pagetables:681 [ 1862.891665][T29967] sec_pagetables:0 bounce:0 [ 1862.891665][T29967] kernel_misc_reclaimable:0 [ 1862.891665][T29967] free:1276075 free_pcp:7370 free_cma:0 [ 1862.964562][T29967] Node 0 active_anon:195172kB inactive_anon:0kB active_file:99472kB inactive_file:162240kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100000kB dirty:436kB writeback:0kB shmem:168884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:2724kB sec_pagetables:0kB all_unreclaimable? no [ 1863.088922][T29967] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1863.090197][T21609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1863.127231][T21609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1863.243346][T20839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1863.251220][T20839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1863.598175][T29967] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1863.988291][T29967] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1863.996104][T29967] Node 0 DMA32 free:1174876kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:183492kB inactive_anon:0kB active_file:99472kB inactive_file:161408kB unevictable:1536kB writepending:432kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:37516kB local_pcp:20420kB free_cma:0kB [ 1864.301100][T29967] lowmem_reserve[]: 0 0 0 0 0 [ 1864.306118][T29967] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1864.478183][T29967] lowmem_reserve[]: 0 0 0 0 0 [ 1864.483274][T29967] Node 1 Normal free:3913036kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:4992kB local_pcp:0kB free_cma:0kB [ 1864.593050][T29967] lowmem_reserve[]: 0 0 0 0 0 [ 1864.613526][T29967] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1864.668494][T29967] Node 0 DMA32: 3032*4kB (UME) 1898*8kB (UME) 895*16kB (UME) 1100*32kB (UME) 405*64kB (UME) 698*128kB (UM) 241*256kB (UME) 60*512kB (UME) 121*1024kB (U) 3*2048kB (UME) 193*4096kB (M) = 1205088kB [ 1864.729324][T29967] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1864.765975][T29974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1864.778394][T29967] Node 1 Normal: 233*4kB (UME) 51*8kB (UME) 47*16kB (UME) 239*32kB (UME) 79*64kB (UE) 23*128kB (UME) 4*256kB (U) 2*512kB (ME) 2*1024kB (UE) 2*2048kB (UE) 949*4096kB (M) = 3913036kB [ 1864.815261][T29967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1864.819002][T29974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1864.859881][T29967] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1864.873706][T29974] bond0 (unregistering): Released all slaves [ 1864.962481][T29967] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1865.119975][T29967] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1865.213346][T29967] 95992 total pagecache pages [ 1865.308880][T29967] 0 pages in swap cache [ 1865.313240][T29967] Free swap = 124996kB [ 1865.317458][T29967] Total swap = 124996kB [ 1865.424829][T29967] 2097051 pages RAM [ 1865.577618][T29967] 0 pages HighMem/MovableOnly [ 1865.583344][T29967] 416927 pages reserved [ 1865.587667][T29967] 0 pages cma reserved [ 1866.091381][T29982] netlink: 'syz.0.7568': attribute type 9 has an invalid length. [ 1866.129851][T29982] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7568'. [ 1867.585966][T29780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1867.631911][T29993] FAULT_INJECTION: forcing a failure. [ 1867.631911][T29993] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.645487][T29993] CPU: 1 PID: 29993 Comm: syz.0.7571 Not tainted syzkaller #0 [ 1867.653119][T29993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1867.663607][T29993] Call Trace: [ 1867.667065][T29993] [ 1867.670340][T29993] dump_stack_lvl+0x18c/0x250 [ 1867.675314][T29993] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1867.681228][T29993] ? show_regs_print_info+0x20/0x20 [ 1867.686605][T29993] ? load_image+0x420/0x420 [ 1867.691333][T29993] ? trace_event_raw_event_lock+0x250/0x250 [ 1867.697353][T29993] should_fail_ex+0x39d/0x4d0 [ 1867.702144][T29993] should_failslab+0x9/0x20 [ 1867.707261][T29993] slab_pre_alloc_hook+0x59/0x310 [ 1867.712489][T29993] kmem_cache_alloc_node+0x60/0x320 [ 1867.718028][T29993] ? __alloc_skb+0x103/0x2c0 [ 1867.722807][T29993] __alloc_skb+0x103/0x2c0 [ 1867.727595][T29993] tipc_msg_create+0x4f/0x4d0 [ 1867.732873][T29993] ? tipc_own_addr+0x45/0x2a0 [ 1867.737658][T29993] tipc_group_create_event+0x1f4/0x660 [ 1867.743274][T29993] ? tipc_group_proto_rcv+0x1cf0/0x1cf0 [ 1867.748997][T29993] tipc_sk_proto_rcv+0x25c/0x1790 [ 1867.754216][T29993] ? trace_call_bpf+0xc3/0x6c0 [ 1867.759151][T29993] ? trace_tipc_sk_dump+0x200/0x200 [ 1867.764691][T29993] ? trace_call_bpf+0xc3/0x6c0 [ 1867.769560][T29993] ? trace_call_bpf+0x5e9/0x6c0 [ 1867.774502][T29993] ? trace_call_bpf+0xc3/0x6c0 [ 1867.779364][T29993] ? tipc_sk_filtering+0x13c/0x510 [ 1867.785022][T29993] tipc_sk_filter_rcv+0x2f5a/0x3190 [ 1867.790447][T29993] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1867.796500][T29993] ? trace_event_raw_event_lock+0x250/0x250 [ 1867.802476][T29993] ? mark_lock+0x94/0x320 [ 1867.806871][T29993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1867.812906][T29993] ? tipc_sk_publish+0x450/0x450 [ 1867.817914][T29993] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1867.823391][T29993] tipc_sk_rcv+0x8c5/0x2af0 [ 1867.827965][T29993] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1867.834010][T29993] ? perf_trace_lock+0x304/0x3b0 [ 1867.839103][T29993] ? trace_event_raw_event_lock+0x250/0x250 [ 1867.845088][T29993] ? __skb_queue_purge+0x170/0x170 [ 1867.850292][T29993] ? __asan_memset+0x22/0x40 [ 1867.855276][T29993] ? lockdep_init_map_type+0x9c/0x8e0 [ 1867.860830][T29993] ? net_generic+0x1e/0x240 [ 1867.865476][T29993] ? __raw_spin_lock_init+0x45/0x100 [ 1867.870832][T29993] tipc_node_xmit+0x223/0xfe0 [ 1867.875640][T29993] ? kasan_set_track+0x4e/0x70 [ 1867.880619][T29993] ? ____kasan_slab_free+0x126/0x1e0 [ 1867.886190][T29993] ? slab_free_freelist_hook+0x130/0x1a0 [ 1867.891984][T29993] ? __kmem_cache_free+0xba/0x1e0 [ 1867.897046][T29993] ? tipc_group_delete+0x3c1/0x4c0 [ 1867.902294][T29993] ? tipc_sk_leave+0x146/0x4e0 [ 1867.907191][T29993] ? tipc_node_get_linkname+0x1a0/0x1a0 [ 1867.912883][T29993] ? do_syscall_64+0x55/0xa0 [ 1867.917606][T29993] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1867.924074][T29993] ? mark_lock+0x94/0x320 [ 1867.928690][T29993] tipc_node_distr_xmit+0x2d6/0x400 [ 1867.934154][T29993] ? tipc_node_xmit_skb+0x190/0x190 [ 1867.939527][T29993] ? tipc_group_delete+0x3c1/0x4c0 [ 1867.944706][T29993] ? __kmem_cache_free+0xba/0x1e0 [ 1867.949800][T29993] tipc_group_delete+0x3f9/0x4c0 [ 1867.954972][T29993] ? perf_trace_lock+0x304/0x3b0 [ 1867.960002][T29993] ? tipc_group_update_member+0x3c0/0x3c0 [ 1867.965823][T29993] ? tipc_group_self+0x26/0x1c0 [ 1867.970986][T29993] tipc_sk_leave+0x146/0x4e0 [ 1867.975813][T29993] ? __tipc_shutdown+0x1530/0x1530 [ 1867.981145][T29993] ? _local_bh_enable+0xa0/0xa0 [ 1867.986209][T29993] tipc_release+0x328/0x2160 [ 1867.990892][T29993] ? ima_get_current_hash_algo+0x10/0x10 [ 1867.996818][T29993] ? tipc_sock_destruct+0x180/0x180 [ 1868.002326][T29993] ? down_write+0x16e/0x200 [ 1868.006964][T29993] ? down_read_killable+0x340/0x340 [ 1868.012340][T29993] sock_close+0xbd/0x230 [ 1868.016807][T29993] ? sock_mmap+0xa0/0xa0 [ 1868.021098][T29993] __fput+0x234/0x970 [ 1868.025278][T29993] __se_sys_close+0x15f/0x220 [ 1868.030109][T29993] do_syscall_64+0x55/0xa0 [ 1868.034867][T29993] ? clear_bhb_loop+0x40/0x90 [ 1868.039690][T29993] ? clear_bhb_loop+0x40/0x90 [ 1868.044445][T29993] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1868.050484][T29993] RIP: 0033:0x7f928319c819 [ 1868.055047][T29993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.075874][T29993] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1868.084429][T29993] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1868.092558][T29993] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1868.100587][T29993] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1868.108784][T29993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1868.116882][T29993] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1868.125303][T29993] [ 1870.855456][T30010] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7574'. [ 1870.939236][T28854] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1871.270724][T29780] veth0_vlan: entered promiscuous mode [ 1871.350662][T29780] veth1_vlan: entered promiscuous mode [ 1872.159149][T30020] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1872.442714][T30020] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1872.548841][T30020] .` (unregistering): Released all slaves [ 1872.870808][T29780] veth0_macvtap: entered promiscuous mode [ 1873.051250][T28854] Bluetooth: hci1: command tx timeout [ 1873.104960][T29780] veth1_macvtap: entered promiscuous mode [ 1873.452652][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.501478][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.534766][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.568232][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.611405][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1873.648267][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.691147][T29780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1873.777781][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.829844][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.859047][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.878278][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.898603][T29780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1873.928982][T29780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1873.961845][T29780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1874.320948][T29780] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.353493][T29780] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.420021][T29780] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.437101][T30035] FAULT_INJECTION: forcing a failure. [ 1874.437101][T30035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1874.490569][T29780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1874.538884][T30035] CPU: 0 PID: 30035 Comm: syz.1.7582 Not tainted syzkaller #0 [ 1874.547111][T30035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1874.557443][T30035] Call Trace: [ 1874.560821][T30035] [ 1874.563837][T30035] dump_stack_lvl+0x18c/0x250 [ 1874.568614][T30035] ? show_regs_print_info+0x20/0x20 [ 1874.574075][T30035] ? load_image+0x420/0x420 [ 1874.578797][T30035] ? __lock_acquire+0x7d40/0x7d40 [ 1874.583935][T30035] should_fail_ex+0x39d/0x4d0 [ 1874.588890][T30035] _copy_from_user+0x2f/0xe0 [ 1874.593584][T30035] __copy_msghdr+0x3bb/0x580 [ 1874.598886][T30035] ___sys_sendmsg+0x214/0x360 [ 1874.603863][T30035] ? __sys_sendmsg+0x2a0/0x2a0 [ 1874.608981][T30035] ? __lock_acquire+0x7d40/0x7d40 [ 1874.614457][T30035] __se_sys_sendmsg+0x1c2/0x2b0 [ 1874.619369][T30035] ? __x64_sys_sendmsg+0x80/0x80 [ 1874.624403][T30035] ? lockdep_hardirqs_on+0x98/0x150 [ 1874.629842][T30035] do_syscall_64+0x55/0xa0 [ 1874.634295][T30035] ? clear_bhb_loop+0x40/0x90 [ 1874.639196][T30035] ? clear_bhb_loop+0x40/0x90 [ 1874.644003][T30035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1874.650591][T30035] RIP: 0033:0x7f508799c819 [ 1874.655408][T30035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.675596][T30035] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1874.684155][T30035] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 1874.692189][T30035] RDX: 0000000000000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1874.700565][T30035] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.708576][T30035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1874.716665][T30035] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1874.724980][T30035] [ 1875.677685][T20849] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.729210][T20849] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.850461][T30040] netlink: 'syz.0.7584': attribute type 9 has an invalid length. [ 1875.860308][T30040] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7584'. [ 1875.984183][ T3498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.040469][ T3498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1877.844653][T30051] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7586'. [ 1877.918891][T28854] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1878.269529][T30058] netlink: 'syz.2.7588': attribute type 27 has an invalid length. [ 1878.292028][T30058] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7588'. [ 1878.406740][T30061] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x37 [ 1879.958406][T28854] Bluetooth: hci3: command tx timeout [ 1880.937394][T30068] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7591'. [ 1882.841420][T30090] netlink: 'syz.4.7598': attribute type 9 has an invalid length. [ 1882.859463][T30090] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7598'. [ 1884.060273][T21597] vlan0: left allmulticast mode [ 1884.065274][T21597] 6: left allmulticast mode [ 1884.098416][T21597] vlan0: left promiscuous mode [ 1884.104159][T21597] À: port 1(vlan0) entered disabled state [ 1884.448455][T21597] hsr_slave_0: left promiscuous mode [ 1884.618602][T21597] hsr_slave_1: left promiscuous mode [ 1884.932118][T21597] veth1_macvtap: left promiscuous mode [ 1884.941520][T21597] veth0_macvtap: left promiscuous mode [ 1884.952545][T21597] veth1_vlan: left allmulticast mode [ 1884.970162][T21597] veth1_vlan: left promiscuous mode [ 1884.999299][T21597] 6: left promiscuous mode [ 1886.710023][T21597] macvlan0 (unregistering): left promiscuous mode [ 1886.717231][T21597] macvlan0 (unregistering): left allmulticast mode [ 1886.746827][T21597] team0 (unregistering): Port device macvlan0 removed [ 1887.681736][T21597] team_slave_1 (unregistering): left promiscuous mode [ 1887.688902][T21597] team_slave_1 (unregistering): left allmulticast mode [ 1887.700340][T21597] team0 (unregistering): Port device team_slave_1 removed [ 1887.787598][T21597] team_slave_0 (unregistering): left promiscuous mode [ 1887.794940][T21597] team_slave_0 (unregistering): left allmulticast mode [ 1887.805291][T21597] team0 (unregistering): Port device team_slave_0 removed [ 1888.350668][T30099] netlink: 'syz.1.7600': attribute type 9 has an invalid length. [ 1888.368127][T30099] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7600'. [ 1888.779017][T30111] FAULT_INJECTION: forcing a failure. [ 1888.779017][T30111] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.850742][T30105] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7601'. [ 1888.855061][T30111] CPU: 1 PID: 30111 Comm: syz.1.7603 Not tainted syzkaller #0 [ 1888.867872][T30111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1888.877979][T30111] Call Trace: [ 1888.881344][T30111] [ 1888.884309][T30111] dump_stack_lvl+0x18c/0x250 [ 1888.889158][T30111] ? show_regs_print_info+0x20/0x20 [ 1888.894680][T30111] ? load_image+0x420/0x420 [ 1888.899238][T30111] ? __might_sleep+0xe0/0xe0 [ 1888.903888][T30111] ? __lock_acquire+0x7d40/0x7d40 [ 1888.909750][T30111] should_fail_ex+0x39d/0x4d0 [ 1888.914746][T30111] should_failslab+0x9/0x20 [ 1888.919544][T30111] slab_pre_alloc_hook+0x59/0x310 [ 1888.925070][T30111] ? kvmalloc_node+0x70/0x180 [ 1888.929788][T30111] ? kvmalloc_node+0x70/0x180 [ 1888.934509][T30111] __kmem_cache_alloc_node+0x53/0x250 [ 1888.940033][T30111] ? kvmalloc_node+0x70/0x180 [ 1888.944744][T30111] __kmalloc_node+0xa4/0x230 [ 1888.949388][T30111] kvmalloc_node+0x70/0x180 [ 1888.953941][T30111] alloc_netdev_mqs+0x8cd/0x1040 [ 1888.959265][T30111] ipip6_tunnel_locate+0x4d4/0x760 [ 1888.964601][T30111] ? check_6rd+0x670/0x670 [ 1888.969123][T30111] ? bpf_lsm_capable+0x9/0x10 [ 1888.974049][T30111] ipip6_tunnel_ctl+0x6ae/0x9e0 [ 1888.979049][T30111] ip_tunnel_siocdevprivate+0x138/0x1f0 [ 1888.984721][T30111] ? __mutex_lock+0x94c/0xcc0 [ 1888.989624][T30111] ? ip_tunnel_update+0xb10/0xb10 [ 1888.994702][T30111] ? __mutex_lock+0x94c/0xcc0 [ 1888.999434][T30111] ? __lock_acquire+0x7d40/0x7d40 [ 1889.004585][T30111] ? do_raw_spin_lock+0x11f/0x2c0 [ 1889.009661][T30111] ipip6_tunnel_siocdevprivate+0x363/0x16f0 [ 1889.015616][T30111] ? do_raw_spin_unlock+0x121/0x230 [ 1889.020858][T30111] ? sit_tunnel_xmit+0x2010/0x2010 [ 1889.026015][T30111] ? __mutex_lock+0x956/0xcc0 [ 1889.030822][T30111] ? __mutex_lock+0x4f9/0xcc0 [ 1889.035542][T30111] ? dev_ioctl+0x83c/0x1140 [ 1889.040096][T30111] ? mutex_lock_nested+0x20/0x20 [ 1889.045083][T30111] ? full_name_hash+0x92/0xe0 [ 1889.049832][T30111] ? dev_ifsioc+0x958/0xc40 [ 1889.054384][T30111] dev_ioctl+0x84c/0x1140 [ 1889.058856][T30111] sock_ioctl+0x74c/0x7e0 [ 1889.063409][T30111] ? sock_poll+0x3e0/0x3e0 [ 1889.067897][T30111] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1889.073055][T30111] ? security_file_ioctl+0x80/0xa0 [ 1889.078507][T30111] ? sock_poll+0x3e0/0x3e0 [ 1889.083051][T30111] __se_sys_ioctl+0xfd/0x170 [ 1889.087872][T30111] do_syscall_64+0x55/0xa0 [ 1889.092507][T30111] ? clear_bhb_loop+0x40/0x90 [ 1889.097852][T30111] ? clear_bhb_loop+0x40/0x90 [ 1889.102875][T30111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1889.108905][T30111] RIP: 0033:0x7f508799c819 [ 1889.113446][T30111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1889.133345][T30111] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1889.141889][T30111] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 1889.150244][T30111] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 1889.158450][T30111] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1889.166680][T30111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1889.175126][T30111] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1889.183359][T30111] [ 1889.299145][T28854] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 1890.962654][T30137] netlink: 'syz.2.7610': attribute type 9 has an invalid length. [ 1890.979664][T30137] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7610'. [ 1891.319516][T28854] Bluetooth: hci4: command tx timeout [ 1891.668299][T30140] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.7611'. [ 1892.208421][T30147] netlink: 'syz.4.7613': attribute type 4 has an invalid length. [ 1892.713598][T30156] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7616'. [ 1895.633124][T30178] FAULT_INJECTION: forcing a failure. [ 1895.633124][T30178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1895.696153][T30178] CPU: 0 PID: 30178 Comm: syz.1.7622 Not tainted syzkaller #0 [ 1895.703745][T30178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1895.713962][T30178] Call Trace: [ 1895.717327][T30178] [ 1895.720426][T30178] dump_stack_lvl+0x18c/0x250 [ 1895.725216][T30178] ? show_regs_print_info+0x20/0x20 [ 1895.730856][T30178] ? load_image+0x420/0x420 [ 1895.735451][T30178] ? __might_fault+0xaa/0x120 [ 1895.740308][T30178] ? __lock_acquire+0x7d40/0x7d40 [ 1895.745460][T30178] should_fail_ex+0x39d/0x4d0 [ 1895.750255][T30178] _copy_from_iter+0x1d9/0x12e0 [ 1895.755203][T30178] ? __virt_addr_valid+0x18c/0x540 [ 1895.760503][T30178] ? __lock_acquire+0x7d40/0x7d40 [ 1895.765603][T30178] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1895.771187][T30178] ? copyout_mc+0x70/0x70 [ 1895.775702][T30178] ? __virt_addr_valid+0x18c/0x540 [ 1895.780989][T30178] ? __virt_addr_valid+0x18c/0x540 [ 1895.786187][T30178] ? __virt_addr_valid+0x469/0x540 [ 1895.791406][T30178] ? __check_object_size+0x506/0xa20 [ 1895.796963][T30178] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1895.802889][T30178] ? skb_put+0x11b/0x210 [ 1895.807258][T30178] tun_get_user+0x15db/0x3ca0 [ 1895.812076][T30178] ? aa_file_perm+0x11b/0xee0 [ 1895.817126][T30178] ? rcu_read_unlock+0xa0/0xa0 [ 1895.822310][T30178] ? tun_get+0x1c/0x2e0 [ 1895.826573][T30178] ? __lock_acquire+0x7d40/0x7d40 [ 1895.831719][T30178] ? tun_get+0x1c/0x2e0 [ 1895.835999][T30178] tun_chr_write_iter+0x119/0x200 [ 1895.841313][T30178] vfs_write+0x46c/0x990 [ 1895.845764][T30178] ? file_end_write+0x250/0x250 [ 1895.851433][T30178] ? __fget_files+0x43d/0x4b0 [ 1895.856342][T30178] ? __fdget_pos+0x1d8/0x330 [ 1895.861227][T30178] ? ksys_write+0x75/0x260 [ 1895.865746][T30178] ksys_write+0x150/0x260 [ 1895.870175][T30178] ? __ia32_sys_read+0x90/0x90 [ 1895.875221][T30178] ? lockdep_hardirqs_on+0x98/0x150 [ 1895.880525][T30178] do_syscall_64+0x55/0xa0 [ 1895.885283][T30178] ? clear_bhb_loop+0x40/0x90 [ 1895.890050][T30178] ? clear_bhb_loop+0x40/0x90 [ 1895.894822][T30178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1895.900971][T30178] RIP: 0033:0x7f508799c819 [ 1895.905466][T30178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1895.926287][T30178] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1895.934809][T30178] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 1895.943127][T30178] RDX: 000000000000fdef RSI: 0000200000000100 RDI: 00000000000000c8 [ 1895.951365][T30178] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1895.959801][T30178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1895.968125][T30178] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1895.976278][T30178] [ 1896.300322][T30181] netlink: 'syz.2.7623': attribute type 9 has an invalid length. [ 1896.320696][T30181] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7623'. [ 1901.585318][T30183] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1901.613088][T30186] FAULT_INJECTION: forcing a failure. [ 1901.613088][T30186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1901.632839][T30186] CPU: 0 PID: 30186 Comm: syz.0.7625 Not tainted syzkaller #0 [ 1901.640733][T30186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1901.650848][T30186] Call Trace: [ 1901.654434][T30186] [ 1901.657407][T30186] dump_stack_lvl+0x18c/0x250 [ 1901.662143][T30186] ? show_regs_print_info+0x20/0x20 [ 1901.667487][T30186] ? load_image+0x420/0x420 [ 1901.672051][T30186] ? __might_fault+0xaa/0x120 [ 1901.676989][T30186] ? __lock_acquire+0x7d40/0x7d40 [ 1901.682162][T30186] should_fail_ex+0x39d/0x4d0 [ 1901.687167][T30186] _copy_from_iter+0x1d9/0x12e0 [ 1901.692061][T30186] ? __virt_addr_valid+0x18c/0x540 [ 1901.697390][T30186] ? __lock_acquire+0x7d40/0x7d40 [ 1901.702447][T30186] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 1901.708097][T30186] ? copyout_mc+0x70/0x70 [ 1901.712808][T30186] ? __virt_addr_valid+0x18c/0x540 [ 1901.717952][T30186] ? __virt_addr_valid+0x18c/0x540 [ 1901.723257][T30186] ? __virt_addr_valid+0x469/0x540 [ 1901.728478][T30186] ? __check_object_size+0x506/0xa20 [ 1901.733975][T30186] skb_copy_datagram_from_iter+0xf4/0x6e0 [ 1901.739831][T30186] ? skb_put+0x11b/0x210 [ 1901.744375][T30186] tun_get_user+0x15db/0x3ca0 [ 1901.749092][T30186] ? aa_file_perm+0x11b/0xee0 [ 1901.753795][T30186] ? rcu_read_unlock+0xa0/0xa0 [ 1901.758691][T30186] ? tun_get+0x1c/0x2e0 [ 1901.763127][T30186] ? __lock_acquire+0x7d40/0x7d40 [ 1901.768281][T30186] ? tun_get+0x1c/0x2e0 [ 1901.772461][T30186] tun_chr_write_iter+0x119/0x200 [ 1901.777509][T30186] vfs_write+0x46c/0x990 [ 1901.781889][T30186] ? file_end_write+0x250/0x250 [ 1901.786872][T30186] ? __fget_files+0x43d/0x4b0 [ 1901.791608][T30186] ? __fdget_pos+0x1d8/0x330 [ 1901.796228][T30186] ? ksys_write+0x75/0x260 [ 1901.800675][T30186] ksys_write+0x150/0x260 [ 1901.805029][T30186] ? __ia32_sys_read+0x90/0x90 [ 1901.809995][T30186] ? lockdep_hardirqs_on+0x98/0x150 [ 1901.815316][T30186] do_syscall_64+0x55/0xa0 [ 1901.819759][T30186] ? clear_bhb_loop+0x40/0x90 [ 1901.824455][T30186] ? clear_bhb_loop+0x40/0x90 [ 1901.829152][T30186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1901.835156][T30186] RIP: 0033:0x7f928319c819 [ 1901.839851][T30186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1901.859838][T30186] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1901.868465][T30186] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1901.876494][T30186] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 00000000000000c8 [ 1901.884588][T30186] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1901.892784][T30186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1901.900865][T30186] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1901.908958][T30186] [ 1902.145751][T30188] netlink: 'syz.4.7626': attribute type 33 has an invalid length. [ 1902.178481][T30188] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7626'. [ 1902.701478][T30209] netlink: 'syz.4.7633': attribute type 21 has an invalid length. [ 1902.994940][T30206] syzkaller0: entered promiscuous mode [ 1903.032547][T30206] syzkaller0: entered allmulticast mode [ 1906.926586][T30231] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7636'. [ 1906.984102][T30228] netlink: 'syz.2.7635': attribute type 9 has an invalid length. [ 1907.048578][T30228] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7635'. [ 1907.719174][T30237] FAULT_INJECTION: forcing a failure. [ 1907.719174][T30237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1907.763509][T30237] CPU: 1 PID: 30237 Comm: syz.0.7638 Not tainted syzkaller #0 [ 1907.771438][T30237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1907.781919][T30237] Call Trace: [ 1907.785261][T30237] [ 1907.788262][T30237] dump_stack_lvl+0x18c/0x250 [ 1907.793060][T30237] ? show_regs_print_info+0x20/0x20 [ 1907.798350][T30237] ? load_image+0x420/0x420 [ 1907.802966][T30237] ? __might_fault+0xaa/0x120 [ 1907.807826][T30237] ? __lock_acquire+0x7d40/0x7d40 [ 1907.813041][T30237] should_fail_ex+0x39d/0x4d0 [ 1907.817819][T30237] _copy_to_user+0x2f/0xa0 [ 1907.822564][T30237] bpf_test_finish+0x19f/0x650 [ 1907.827433][T30237] ? convert___skb_to_skb+0x590/0x590 [ 1907.832971][T30237] ? convert_skb_to___skb+0x420/0x420 [ 1907.838821][T30237] ? slab_build_skb+0x25f/0x3f0 [ 1907.844028][T30237] bpf_prog_test_run_skb+0xcc3/0x12b0 [ 1907.849567][T30237] ? cpu_online+0x60/0x60 [ 1907.854079][T30237] bpf_prog_test_run+0x321/0x390 [ 1907.859291][T30237] __sys_bpf+0x49d/0x890 [ 1907.863798][T30237] ? bpf_link_show_fdinfo+0x390/0x390 [ 1907.869395][T30237] ? lock_chain_count+0x20/0x20 [ 1907.874450][T30237] __x64_sys_bpf+0x7c/0x90 [ 1907.879053][T30237] do_syscall_64+0x55/0xa0 [ 1907.883626][T30237] ? clear_bhb_loop+0x40/0x90 [ 1907.888470][T30237] ? clear_bhb_loop+0x40/0x90 [ 1907.893231][T30237] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1907.900151][T30237] RIP: 0033:0x7f928319c819 [ 1907.904828][T30237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1907.924933][T30237] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1907.934037][T30237] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1907.942346][T30237] RDX: 0000000000000050 RSI: 0000200000002280 RDI: 000000000000000a [ 1907.950731][T30237] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1907.958941][T30237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1907.967153][T30237] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1907.975312][T30237] [ 1908.040144][T30233] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.7637'. [ 1908.701425][T30245] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.755986][T30245] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1908.799479][T30245] bond0 (unregistering): Released all slaves [ 1909.313185][T30259] netlink: 'syz.1.7645': attribute type 1 has an invalid length. [ 1909.331692][T30259] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7645'. [ 1909.716998][T30262] netlink: 'syz.2.7646': attribute type 21 has an invalid length. [ 1909.819721][T30264] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.7647'. [ 1910.162684][T30262] Ÿë: port 3(ip6gretap0) entered blocking state [ 1910.193408][T30262] Ÿë: port 3(ip6gretap0) entered disabled state [ 1910.215413][T30262] ip6gretap0: entered allmulticast mode [ 1910.251934][T30262] ip6gretap0: entered promiscuous mode [ 1911.329691][T30279] netlink: 'syz.4.7650': attribute type 9 has an invalid length. [ 1911.350105][T30279] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7650'. [ 1911.885064][T21632] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1912.210497][T21632] Bluetooth: hci2: command 0x0406 tx timeout [ 1912.924208][T30299] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7658'. [ 1913.965855][T28854] Bluetooth: hci1: command tx timeout [ 1915.247025][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.253828][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.267986][T30302] syzkaller0: entered promiscuous mode [ 1916.281296][T30302] syzkaller0: entered allmulticast mode [ 1922.385945][T30317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1922.399666][T30322] FAULT_INJECTION: forcing a failure. [ 1922.399666][T30322] name failslab, interval 1, probability 0, space 0, times 0 [ 1922.425408][T30317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1922.439577][T30317] bond0 (unregistering): Released all slaves [ 1922.463037][T30322] CPU: 1 PID: 30322 Comm: syz.0.7664 Not tainted syzkaller #0 [ 1922.470578][T30322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1922.481075][T30322] Call Trace: [ 1922.484467][T30322] [ 1922.487411][T30322] dump_stack_lvl+0x18c/0x250 [ 1922.492207][T30322] ? show_regs_print_info+0x20/0x20 [ 1922.497415][T30322] ? load_image+0x420/0x420 [ 1922.502070][T30322] ? __might_sleep+0xe0/0xe0 [ 1922.506982][T30322] ? __lock_acquire+0x7d40/0x7d40 [ 1922.512017][T30322] should_fail_ex+0x39d/0x4d0 [ 1922.516808][T30322] should_failslab+0x9/0x20 [ 1922.521445][T30322] slab_pre_alloc_hook+0x59/0x310 [ 1922.526605][T30322] ? kvmalloc_node+0x70/0x180 [ 1922.531322][T30322] ? kvmalloc_node+0x70/0x180 [ 1922.536183][T30322] __kmem_cache_alloc_node+0x53/0x250 [ 1922.541572][T30322] ? kvmalloc_node+0x70/0x180 [ 1922.546355][T30322] __kmalloc_node+0xa4/0x230 [ 1922.551067][T30322] kvmalloc_node+0x70/0x180 [ 1922.555668][T30322] page_pool_create+0x1eb/0x5c0 [ 1922.560539][T30322] bpf_test_run_xdp_live+0x203/0x1b20 [ 1922.566014][T30322] ? 0xffffffffa0004740 [ 1922.570228][T30322] ? 0xffffffffa0004740 [ 1922.574428][T30322] ? bpf_dispatcher_change_prog+0xcbf/0xf10 [ 1922.581240][T30322] ? 0xffffffffa0004740 [ 1922.585530][T30322] ? xdp_convert_md_to_buff+0x330/0x330 [ 1922.591272][T30322] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 1922.597542][T30322] ? _copy_from_user+0xa5/0xe0 [ 1922.602365][T30322] ? bpf_test_init+0x119/0x140 [ 1922.607402][T30322] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1922.612906][T30322] bpf_prog_test_run_xdp+0x7ca/0x10e0 [ 1922.618403][T30322] ? dev_put+0x80/0x80 [ 1922.622502][T30322] ? dev_put+0x80/0x80 [ 1922.626676][T30322] bpf_prog_test_run+0x321/0x390 [ 1922.631721][T30322] __sys_bpf+0x49d/0x890 [ 1922.636071][T30322] ? bpf_link_show_fdinfo+0x390/0x390 [ 1922.641562][T30322] ? lock_chain_count+0x20/0x20 [ 1922.646616][T30322] __x64_sys_bpf+0x7c/0x90 [ 1922.651053][T30322] do_syscall_64+0x55/0xa0 [ 1922.655759][T30322] ? clear_bhb_loop+0x40/0x90 [ 1922.660452][T30322] ? clear_bhb_loop+0x40/0x90 [ 1922.665238][T30322] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1922.671324][T30322] RIP: 0033:0x7f928319c819 [ 1922.676065][T30322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1922.696125][T30322] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1922.704730][T30322] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1922.712773][T30322] RDX: 0000000000000050 RSI: 0000200000000b80 RDI: 000000000000000a [ 1922.720761][T30322] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1922.728768][T30322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1922.736892][T30322] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1922.744992][T30322] [ 1922.759586][T30322] page_pool_create() gave up with errno -12 [ 1922.989689][T21597] veth1_macvtap: left allmulticast mode [ 1923.008711][T21597] veth1_macvtap: left promiscuous mode [ 1923.038634][T21597] veth0_macvtap: left promiscuous mode [ 1923.044566][T21597] veth1_vlan: left promiscuous mode [ 1923.058391][T21597] veth0_vlan: left promiscuous mode [ 1923.101935][T28854] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 1924.065556][T30343] netlink: 'syz.1.7678': attribute type 9 has an invalid length. [ 1924.084749][T30343] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7678'. [ 1924.143653][T21597] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1925.173017][T28854] Bluetooth: hci4: command tx timeout [ 1926.565788][T21597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1926.781944][T21597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1927.775917][T21597] bond0 (unregistering): Released all slaves [ 1928.090067][T30351] netlink: 'syz.0.7672': attribute type 9 has an invalid length. [ 1928.098279][T30351] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7672'. [ 1928.970241][T30361] netlink: 'syz.0.7676': attribute type 9 has an invalid length. [ 1929.000346][T30361] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7676'. [ 1929.701763][T30364] netlink: 'syz.4.7675': attribute type 9 has an invalid length. [ 1929.741022][T30364] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7675'. [ 1930.593971][T28854] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1931.096464][T30369] syzkaller0: entered promiscuous mode [ 1931.138604][T30369] syzkaller0: entered allmulticast mode [ 1931.582607][T30384] FAULT_INJECTION: forcing a failure. [ 1931.582607][T30384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1931.643987][T30384] CPU: 1 PID: 30384 Comm: syz.2.7683 Not tainted syzkaller #0 [ 1931.651656][T30384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1931.662154][T30384] Call Trace: [ 1931.665710][T30384] [ 1931.668814][T30384] dump_stack_lvl+0x18c/0x250 [ 1931.673742][T30384] ? show_regs_print_info+0x20/0x20 [ 1931.679372][T30384] ? load_image+0x420/0x420 [ 1931.684225][T30384] ? __might_fault+0xaa/0x120 [ 1931.689216][T30384] ? __lock_acquire+0x7d40/0x7d40 [ 1931.694790][T30384] should_fail_ex+0x39d/0x4d0 [ 1931.699759][T30384] _copy_from_iter+0x1d9/0x12e0 [ 1931.704815][T30384] ? rep_movs_alternative+0x4a/0x90 [ 1931.710598][T30384] ? _copy_from_iter+0x24e/0x12e0 [ 1931.715817][T30384] ? __virt_addr_valid+0x18c/0x540 [ 1931.721165][T30384] ? __lock_acquire+0x7d40/0x7d40 [ 1931.726495][T30384] ? copyout_mc+0x70/0x70 [ 1931.731350][T30384] ? copyout_mc+0x70/0x70 [ 1931.735976][T30384] ? __virt_addr_valid+0x18c/0x540 [ 1931.741397][T30384] ? page_copy_sane+0x16a/0x270 [ 1931.746603][T30384] copy_page_from_iter+0x7b/0x100 [ 1931.751944][T30384] skb_copy_datagram_from_iter+0x2e4/0x6e0 [ 1931.758242][T30384] tun_get_user+0x15db/0x3ca0 [ 1931.763225][T30384] ? aa_file_perm+0x11b/0xee0 [ 1931.768198][T30384] ? rcu_read_unlock+0xa0/0xa0 [ 1931.773482][T30384] ? tun_get+0x1c/0x2e0 [ 1931.777973][T30384] ? __lock_acquire+0x7d40/0x7d40 [ 1931.783378][T30384] ? tun_get+0x1c/0x2e0 [ 1931.787740][T30384] tun_chr_write_iter+0x119/0x200 [ 1931.793185][T30384] vfs_write+0x46c/0x990 [ 1931.797696][T30384] ? file_end_write+0x250/0x250 [ 1931.802863][T30384] ? __fget_files+0x43d/0x4b0 [ 1931.807852][T30384] ? __fdget_pos+0x1d8/0x330 [ 1931.812732][T30384] ? ksys_write+0x75/0x260 [ 1931.817298][T30384] ksys_write+0x150/0x260 [ 1931.821779][T30384] ? __ia32_sys_read+0x90/0x90 [ 1931.826709][T30384] ? lockdep_hardirqs_on+0x98/0x150 [ 1931.832070][T30384] do_syscall_64+0x55/0xa0 [ 1931.836608][T30384] ? clear_bhb_loop+0x40/0x90 [ 1931.841486][T30384] ? clear_bhb_loop+0x40/0x90 [ 1931.846487][T30384] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1931.852593][T30384] RIP: 0033:0x7fcc4959c819 [ 1931.857231][T30384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.877512][T30384] RSP: 002b:00007fcc4a538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1931.886233][T30384] RAX: ffffffffffffffda RBX: 00007fcc49815fa0 RCX: 00007fcc4959c819 [ 1931.894493][T30384] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1931.902571][T30384] RBP: 00007fcc4a538090 R08: 0000000000000000 R09: 0000000000000000 [ 1931.910821][T30384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1931.918921][T30384] R13: 00007fcc49816038 R14: 00007fcc49815fa0 R15: 00007fff4ceb57b8 [ 1931.927243][T30384] [ 1932.689955][T21632] Bluetooth: hci1: command 0x0406 tx timeout [ 1932.696482][T21632] Bluetooth: hci3: command tx timeout [ 1933.032954][T30388] netlink: 'syz.4.7684': attribute type 9 has an invalid length. [ 1933.085021][T30388] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7684'. [ 1936.902585][T30391] netlink: 'syz.2.7685': attribute type 9 has an invalid length. [ 1936.920626][T30391] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7685'. [ 1937.185273][T30399] netlink: 'syz.4.7687': attribute type 9 has an invalid length. [ 1937.198191][T30399] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7687'. [ 1937.494141][T30405] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.7689'. [ 1937.630264][T30404] mac80211_hwsim hwsim181 wlan1: left promiscuous mode [ 1937.728830][T30404] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7688'. [ 1937.869703][T28854] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 1938.008152][T30407] netlink: 'syz.1.7688': attribute type 10 has an invalid length. [ 1938.062418][T30409] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.7691'. [ 1938.091130][T30407] team0: Device hsr_slave_0 failed to register rx_handler [ 1938.455457][T30415] netlink: 'syz.2.7692': attribute type 19 has an invalid length. [ 1938.472538][T30415] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1938.621529][T30425] netlink: 'syz.0.7697': attribute type 9 has an invalid length. [ 1938.637725][T30425] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7697'. [ 1939.975675][T28854] Bluetooth: hci2: command 0x0406 tx timeout [ 1940.151866][T30434] netlink: 'syz.1.7698': attribute type 9 has an invalid length. [ 1940.161680][T30434] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7698'. [ 1940.992845][T28854] Bluetooth: hci4: unexpected subevent 0x05 length: 150 > 12 [ 1941.280791][T30438] netlink: 'syz.2.7692': attribute type 4 has an invalid length. [ 1941.468312][T30438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7692'. [ 1941.561373][T30446] netlink: 'syz.1.7702': attribute type 9 has an invalid length. [ 1941.591091][T30446] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7702'. [ 1942.349901][T30454] __nla_validate_parse: 1 callbacks suppressed [ 1942.349922][T30454] netlink: 199832 bytes leftover after parsing attributes in process `syz.4.7704'. [ 1943.148061][T28854] Bluetooth: hci4: command tx timeout [ 1943.448969][T30472] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7709'. [ 1944.253475][T30488] netlink: 'syz.1.7713': attribute type 9 has an invalid length. [ 1944.282581][T30488] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7713'. [ 1944.780075][T30497] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7716'. [ 1944.810047][T30495] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7715'. [ 1945.106586][T30502] netlink: 'syz.1.7717': attribute type 19 has an invalid length. [ 1945.147853][T30502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1945.154582][T30493] netlink: 191760 bytes leftover after parsing attributes in process `syz.0.7723'. [ 1945.499548][T30507] netlink: 'syz.1.7717': attribute type 4 has an invalid length. [ 1945.548052][T30507] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1946.102584][T30515] syzkaller0: entered promiscuous mode [ 1946.118692][T30515] syzkaller0: entered allmulticast mode [ 1946.464604][T30520] netlink: 199832 bytes leftover after parsing attributes in process `syz.4.7722'. [ 1948.045347][T30389] Bluetooth: hci3: command 0x0406 tx timeout [ 1950.255790][T30524] netlink: 'syz.2.7725': attribute type 9 has an invalid length. [ 1950.263775][T30524] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7725'. [ 1950.508928][T30533] FAULT_INJECTION: forcing a failure. [ 1950.508928][T30533] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.526308][T30533] CPU: 1 PID: 30533 Comm: syz.0.7727 Not tainted syzkaller #0 [ 1950.533925][T30533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1950.544036][T30533] Call Trace: [ 1950.547350][T30533] [ 1950.550583][T30533] dump_stack_lvl+0x18c/0x250 [ 1950.555417][T30533] ? show_regs_print_info+0x20/0x20 [ 1950.560760][T30533] ? load_image+0x420/0x420 [ 1950.565482][T30533] ? __might_sleep+0xe0/0xe0 [ 1950.570113][T30533] ? __lock_acquire+0x7d40/0x7d40 [ 1950.575273][T30533] should_fail_ex+0x39d/0x4d0 [ 1950.580350][T30533] should_failslab+0x9/0x20 [ 1950.585158][T30533] slab_pre_alloc_hook+0x59/0x310 [ 1950.590218][T30533] ? sk_prot_alloc+0xe7/0x210 [ 1950.595107][T30533] ? sk_prot_alloc+0xe7/0x210 [ 1950.600236][T30533] __kmem_cache_alloc_node+0x53/0x250 [ 1950.605719][T30533] ? sk_prot_alloc+0xe7/0x210 [ 1950.610689][T30533] __kmalloc+0xa4/0x230 [ 1950.614870][T30533] sk_prot_alloc+0xe7/0x210 [ 1950.619572][T30533] ? sk_alloc+0x24/0x360 [ 1950.624013][T30533] sk_alloc+0x3a/0x360 [ 1950.628225][T30533] ? bpf_ctx_init+0x163/0x1a0 [ 1950.633134][T30533] ? bpf_prog_test_run_skb+0x273/0x12b0 [ 1950.638815][T30533] bpf_prog_test_run_skb+0x3a5/0x12b0 [ 1950.644477][T30533] ? lockdep_hardirqs_on+0x98/0x150 [ 1950.649786][T30533] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1950.655984][T30533] ? cpu_online+0x60/0x60 [ 1950.660425][T30533] bpf_prog_test_run+0x321/0x390 [ 1950.665409][T30533] __sys_bpf+0x49d/0x890 [ 1950.669768][T30533] ? bpf_link_show_fdinfo+0x390/0x390 [ 1950.675346][T30533] ? lock_chain_count+0x20/0x20 [ 1950.680312][T30533] __x64_sys_bpf+0x7c/0x90 [ 1950.684835][T30533] do_syscall_64+0x55/0xa0 [ 1950.689277][T30533] ? clear_bhb_loop+0x40/0x90 [ 1950.694099][T30533] ? clear_bhb_loop+0x40/0x90 [ 1950.698807][T30533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1950.704977][T30533] RIP: 0033:0x7f928319c819 [ 1950.709724][T30533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1950.729900][T30533] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1950.738445][T30533] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1950.746539][T30533] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 1950.755130][T30533] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1950.763295][T30533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1950.771375][T30533] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1950.779703][T30533] [ 1951.752634][T30559] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7734'. [ 1951.982100][T30565] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7737'. [ 1952.410754][T30574] netlink: 153032 bytes leftover after parsing attributes in process `syz.1.7739'. [ 1953.022064][T30584] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7744'. [ 1953.468185][T30591] syzkaller0: entered promiscuous mode [ 1953.477157][T30591] syzkaller0: entered allmulticast mode [ 1959.093204][T30593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7747'. [ 1959.186869][T30600] syzkaller0: entered promiscuous mode [ 1959.192610][T30600] syzkaller0: entered allmulticast mode [ 1959.334463][T30614] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7753'. [ 1962.549379][T30626] netlink: 'syz.4.7757': attribute type 9 has an invalid length. [ 1962.563281][T30626] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7757'. [ 1962.982523][T30620] netlink: 'syz.1.7758': attribute type 9 has an invalid length. [ 1962.998329][T30620] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1963.283506][T30636] syzkaller0: entered allmulticast mode [ 1963.376168][T30638] netlink: 144316 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1963.401735][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 1963.524862][T30645] netlink: 199832 bytes leftover after parsing attributes in process `syz.4.7764'. [ 1966.816873][T30662] netlink: 'syz.1.7770': attribute type 10 has an invalid length. [ 1966.847404][T30662] team0: Device hsr_slave_0 failed to register rx_handler [ 1967.161037][T30671] netlink: 199832 bytes leftover after parsing attributes in process `syz.1.7773'. [ 1967.282309][T30674] netlink: 'syz.0.7772': attribute type 9 has an invalid length. [ 1967.291577][T30674] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1970.739533][T30689] netlink: 'syz.0.7780': attribute type 9 has an invalid length. [ 1970.780321][T30689] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.7780'. [ 1970.783802][T30695] netlink: 'syz.4.7782': attribute type 10 has an invalid length. [ 1970.854469][T30695] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7782'. [ 1970.866151][T30695] veth0_vlan: entered allmulticast mode [ 1970.889631][T30695] bridge0: port 3(veth0_vlan) entered blocking state [ 1970.897433][T30695] bridge0: port 3(veth0_vlan) entered disabled state [ 1971.027299][T30695] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1971.696182][T30703] netlink: 199832 bytes leftover after parsing attributes in process `syz.4.7784'. [ 1971.863792][T30389] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1971.926916][T30714] netlink: 'syz.4.7789': attribute type 9 has an invalid length. [ 1971.968312][T30714] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.7789'. [ 1973.232044][T30735] netlink: 199832 bytes leftover after parsing attributes in process `syz.0.7797'. [ 1973.728638][T30389] Bluetooth: hci4: command 0x0406 tx timeout [ 1973.878317][T30389] Bluetooth: hci1: command 0x0406 tx timeout [ 1975.150166][T30739] netlink: 'syz.2.7798': attribute type 9 has an invalid length. [ 1975.166759][T30739] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7798'. [ 1975.169488][T30743] netlink: 'syz.1.7801': attribute type 10 has an invalid length. [ 1975.208180][T30743] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1975.225318][T30743] 6: entered allmulticast mode [ 1975.255450][T30743] bridge0: port 3(776) entered blocking state [ 1975.272028][T30743] bridge0: port 3(776) entered disabled state [ 1975.317787][T30743] A link change request failed with some changes committed already. Interface 776 may have been left with an inconsistent configuration, please check. [ 1975.644690][T30747] IPv6: pim6reg1: Disabled Multicast RS [ 1976.220357][T30765] netlink: 199832 bytes leftover after parsing attributes in process `syz.2.7809'. [ 1976.695487][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.708070][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.564771][T30791] netlink: 'syz.0.7817': attribute type 10 has an invalid length. [ 1979.583784][T30791] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7817'. [ 1979.594604][T30791] veth0_vlan: entered allmulticast mode [ 1979.617538][T30791] bridge0: port 4(veth0_vlan) entered blocking state [ 1979.637911][T30791] bridge0: port 4(veth0_vlan) entered disabled state [ 1979.715840][T30791] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1980.770516][T30827] syzkaller0: entered promiscuous mode [ 1980.784460][T30827] syzkaller0: entered allmulticast mode [ 1981.147300][T30830] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1981.163322][T30830] netlink: 6332 bytes leftover after parsing attributes in process `syz.2.7831'. [ 1982.569420][T30870] FAULT_INJECTION: forcing a failure. [ 1982.569420][T30870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1982.583673][T30870] CPU: 0 PID: 30870 Comm: syz.2.7843 Not tainted syzkaller #0 [ 1982.591566][T30870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1982.602044][T30870] Call Trace: [ 1982.605342][T30870] [ 1982.608383][T30870] dump_stack_lvl+0x18c/0x250 [ 1982.613280][T30870] ? show_regs_print_info+0x20/0x20 [ 1982.618570][T30870] ? load_image+0x420/0x420 [ 1982.623361][T30870] ? __might_fault+0xaa/0x120 [ 1982.628698][T30870] ? __lock_acquire+0x7d40/0x7d40 [ 1982.633784][T30870] should_fail_ex+0x39d/0x4d0 [ 1982.638710][T30870] _copy_from_user+0x2f/0xe0 [ 1982.643445][T30870] sk_setsockopt+0x2b2/0x2bc0 [ 1982.648322][T30870] ? sockopt_capable+0x60/0x60 [ 1982.653547][T30870] ? ksys_write+0x1c4/0x260 [ 1982.658171][T30870] ? aa_sk_perm+0x83c/0x970 [ 1982.662714][T30870] udp_lib_setsockopt+0xf7/0x8a0 [ 1982.668031][T30870] ? udp_destroy_sock+0x2c0/0x2c0 [ 1982.673284][T30870] ? __fget_files+0x28/0x4b0 [ 1982.678162][T30870] ? __fget_files+0x28/0x4b0 [ 1982.682873][T30870] udp_setsockopt+0x77/0xb0 [ 1982.687575][T30870] ? udp_set_csum+0x6f0/0x6f0 [ 1982.692304][T30870] ? sock_common_recvmsg+0x190/0x190 [ 1982.697785][T30870] do_sock_setsockopt+0x175/0x1a0 [ 1982.702917][T30870] __x64_sys_setsockopt+0x182/0x200 [ 1982.708169][T30870] do_syscall_64+0x55/0xa0 [ 1982.712628][T30870] ? clear_bhb_loop+0x40/0x90 [ 1982.717429][T30870] ? clear_bhb_loop+0x40/0x90 [ 1982.722240][T30870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1982.728540][T30870] RIP: 0033:0x7fcc4959c819 [ 1982.733175][T30870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1982.753238][T30870] RSP: 002b:00007fcc4a538028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1982.761852][T30870] RAX: ffffffffffffffda RBX: 00007fcc49815fa0 RCX: 00007fcc4959c819 [ 1982.769841][T30870] RDX: 0000000000000021 RSI: 0000000000000001 RDI: 0000000000000005 [ 1982.778039][T30870] RBP: 00007fcc4a538090 R08: 0000000000000004 R09: 0000000000000000 [ 1982.786315][T30870] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 1982.794514][T30870] R13: 00007fcc49816038 R14: 00007fcc49815fa0 R15: 00007fff4ceb57b8 [ 1982.802714][T30870] [ 1983.194409][T30888] FAULT_INJECTION: forcing a failure. [ 1983.194409][T30888] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.234797][T30888] CPU: 0 PID: 30888 Comm: syz.4.7852 Not tainted syzkaller #0 [ 1983.242890][T30888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1983.253849][T30888] Call Trace: [ 1983.257255][T30888] [ 1983.260335][T30888] dump_stack_lvl+0x18c/0x250 [ 1983.265162][T30888] ? show_regs_print_info+0x20/0x20 [ 1983.270496][T30888] ? load_image+0x420/0x420 [ 1983.275053][T30888] ? __might_sleep+0xe0/0xe0 [ 1983.279684][T30888] ? __lock_acquire+0x7d40/0x7d40 [ 1983.285062][T30888] should_fail_ex+0x39d/0x4d0 [ 1983.289858][T30888] should_failslab+0x9/0x20 [ 1983.294593][T30888] slab_pre_alloc_hook+0x59/0x310 [ 1983.299819][T30888] kmem_cache_alloc+0x5a/0x2d0 [ 1983.304821][T30888] ? sk_prot_alloc+0x57/0x210 [ 1983.309823][T30888] sk_prot_alloc+0x57/0x210 [ 1983.314391][T30888] ? sk_alloc+0x24/0x360 [ 1983.318879][T30888] sk_alloc+0x3a/0x360 [ 1983.323018][T30888] inet6_create+0x7f0/0x11d0 [ 1983.327740][T30888] ? inet6_create+0x83/0x11d0 [ 1983.332565][T30888] __sock_create+0x4a6/0x940 [ 1983.337239][T30888] mptcp_subflow_create_socket+0x10b/0xac0 [ 1983.343086][T30888] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 1983.348924][T30888] ? __mptcp_subflow_connect+0x1450/0x1450 [ 1983.354789][T30888] ? mark_lock+0x94/0x320 [ 1983.359181][T30888] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1983.365310][T30888] __mptcp_nmpc_sk+0x157/0x740 [ 1983.370136][T30888] ? __bpf_trace_subflow_check_data_avail+0x160/0x160 [ 1983.377145][T30888] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1983.382660][T30888] ? lockdep_hardirqs_on+0x98/0x150 [ 1983.388095][T30888] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1983.393547][T30888] mptcp_sendmsg_fastopen+0x7f/0x4d0 [ 1983.398993][T30888] mptcp_sendmsg+0x14b2/0x16d0 [ 1983.403921][T30888] ? __lock_acquire+0x1273/0x7d40 [ 1983.408990][T30888] ? verify_lock_unused+0x140/0x140 [ 1983.414244][T30888] ? aa_sk_perm+0x83c/0x970 [ 1983.418802][T30888] ? aa_af_perm+0x330/0x330 [ 1983.422705][T30884] FAULT_INJECTION: forcing a failure. [ 1983.422705][T30884] name failslab, interval 1, probability 0, space 0, times 0 [ 1983.423414][T30888] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1983.423494][T30888] ? mptcp_shutdown+0x80/0x80 [ 1983.423527][T30888] ? inet6_sendmsg+0x5f/0xd0 [ 1983.423547][T30888] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 1983.423572][T30888] ____sys_sendmsg+0x5ba/0x960 [ 1983.423594][T30888] ? __lock_acquire+0x7d40/0x7d40 [ 1983.423622][T30888] ? __asan_memset+0x22/0x40 [ 1983.423649][T30888] ? __sys_sendmsg_sock+0x30/0x30 [ 1983.423667][T30888] ? __import_iovec+0x3fa/0x850 [ 1983.423698][T30888] ? import_iovec+0x73/0xa0 [ 1983.423722][T30888] ___sys_sendmsg+0x2a6/0x360 [ 1983.423749][T30888] ? __sys_sendmsg+0x2a0/0x2a0 [ 1983.423792][T30888] ? trace_call_bpf+0xc3/0x6c0 [ 1983.503079][T30888] __se_sys_sendmsg+0x1c2/0x2b0 [ 1983.508250][T30888] ? __x64_sys_sendmsg+0x80/0x80 [ 1983.513268][T30888] ? lockdep_hardirqs_on+0x98/0x150 [ 1983.518606][T30888] do_syscall_64+0x55/0xa0 [ 1983.523064][T30888] ? clear_bhb_loop+0x40/0x90 [ 1983.527787][T30888] ? clear_bhb_loop+0x40/0x90 [ 1983.532534][T30888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1983.538549][T30888] RIP: 0033:0x7fb3bb99c819 [ 1983.543184][T30888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.563276][T30888] RSP: 002b:00007fb3bc84b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.572376][T30888] RAX: ffffffffffffffda RBX: 00007fb3bbc15fa0 RCX: 00007fb3bb99c819 [ 1983.580793][T30888] RDX: e07e872420dfefca RSI: 0000200000000780 RDI: 0000000000000004 [ 1983.589682][T30888] RBP: 00007fb3bc84b090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.597961][T30888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.606061][T30888] R13: 00007fb3bbc16038 R14: 00007fb3bbc15fa0 R15: 00007ffd382bec78 [ 1983.614096][T30888] [ 1983.617188][T30884] CPU: 1 PID: 30884 Comm: syz.1.7850 Not tainted syzkaller #0 [ 1983.624797][T30884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1983.635431][T30884] Call Trace: [ 1983.638961][T30884] [ 1983.641940][T30884] dump_stack_lvl+0x18c/0x250 [ 1983.646740][T30884] ? show_regs_print_info+0x20/0x20 [ 1983.652399][T30884] ? load_image+0x420/0x420 [ 1983.657031][T30884] should_fail_ex+0x39d/0x4d0 [ 1983.661917][T30884] should_failslab+0x9/0x20 [ 1983.666706][T30884] slab_pre_alloc_hook+0x59/0x310 [ 1983.671857][T30884] kmem_cache_alloc+0x5a/0x2d0 [ 1983.676641][T30884] ? skb_clone+0x1eb/0x370 [ 1983.681283][T30884] skb_clone+0x1eb/0x370 [ 1983.685659][T30884] ? dev_queue_xmit_nit+0x212/0xbb0 [ 1983.691248][T30884] dev_queue_xmit_nit+0x24d/0xbb0 [ 1983.696293][T30884] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 1983.701435][T30884] ? validate_xmit_skb+0x949/0xf60 [ 1983.706579][T30884] dev_hard_start_xmit+0x148/0x740 [ 1983.711731][T30884] __dev_queue_xmit+0x19a3/0x3660 [ 1983.716882][T30884] ? __dev_queue_xmit+0x265/0x3660 [ 1983.722014][T30884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1983.728369][T30884] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1983.734870][T30884] ? netdev_core_pick_tx+0x340/0x340 [ 1983.740332][T30884] ? __copy_skb_header+0x169/0x4a0 [ 1983.746424][T30884] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 1983.752098][T30884] ? __skb_clone+0x63/0x790 [ 1983.757328][T30884] ? __skb_clone+0x480/0x790 [ 1983.761952][T30884] ? skb_clone+0x21f/0x370 [ 1983.766663][T30884] __netlink_deliver_tap+0x5ab/0x830 [ 1983.772267][T30884] ? netlink_deliver_tap+0x2e/0x1b0 [ 1983.778095][T30884] netlink_deliver_tap+0x19c/0x1b0 [ 1983.783665][T30884] netlink_unicast+0x72c/0x8d0 [ 1983.788554][T30884] netlink_sendmsg+0x8d0/0xbf0 [ 1983.793391][T30884] ? lockdep_hardirqs_on+0x98/0x150 [ 1983.798787][T30884] ? netlink_getsockopt+0x590/0x590 [ 1983.804118][T30884] ? netlink_getsockopt+0x590/0x590 [ 1983.809426][T30884] ? netlink_getsockopt+0x590/0x590 [ 1983.815036][T30884] ____sys_sendmsg+0x5ba/0x960 [ 1983.820086][T30884] ? lockdep_hardirqs_on+0x98/0x150 [ 1983.825481][T30884] ? __sys_sendmsg_sock+0x30/0x30 [ 1983.830526][T30884] ? ___sys_sendmsg+0x28b/0x360 [ 1983.835408][T30884] ___sys_sendmsg+0x2a6/0x360 [ 1983.840806][T30884] ? __sys_sendmsg+0x2a0/0x2a0 [ 1983.846103][T30884] __se_sys_sendmsg+0x1c2/0x2b0 [ 1983.851250][T30884] ? __x64_sys_sendmsg+0x80/0x80 [ 1983.856760][T30884] do_syscall_64+0x55/0xa0 [ 1983.861456][T30884] ? clear_bhb_loop+0x40/0x90 [ 1983.866512][T30884] ? clear_bhb_loop+0x40/0x90 [ 1983.871393][T30884] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1983.877448][T30884] RIP: 0033:0x7f508799c819 [ 1983.882351][T30884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1983.903235][T30884] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1983.912708][T30884] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 1983.921088][T30884] RDX: 0000000000048010 RSI: 0000200000000000 RDI: 000000000000000a [ 1983.929191][T30884] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 1983.937526][T30884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1983.945534][T30884] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 1983.953740][T30884] [ 1984.579764][T30908] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1985.400425][T28854] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 1986.501786][T30962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1986.511230][T30962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1986.522420][T30962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1987.478452][T28854] Bluetooth: hci1: command 0x0406 tx timeout [ 1988.677466][T28854] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 1988.786164][T30974] FAULT_INJECTION: forcing a failure. [ 1988.786164][T30974] name failslab, interval 1, probability 0, space 0, times 0 [ 1988.811483][T30974] CPU: 1 PID: 30974 Comm: syz.4.7880 Not tainted syzkaller #0 [ 1988.819204][T30974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1988.829474][T30974] Call Trace: [ 1988.832779][T30974] [ 1988.835867][T30974] dump_stack_lvl+0x18c/0x250 [ 1988.840680][T30974] ? show_regs_print_info+0x20/0x20 [ 1988.846007][T30974] ? load_image+0x420/0x420 [ 1988.850576][T30974] should_fail_ex+0x39d/0x4d0 [ 1988.855386][T30974] should_failslab+0x9/0x20 [ 1988.860010][T30974] slab_pre_alloc_hook+0x59/0x310 [ 1988.865189][T30974] ? find_exception+0x175/0xa30 [ 1988.870183][T30974] kmem_cache_alloc+0x5a/0x2d0 [ 1988.874984][T30974] ? dst_alloc+0x105/0x170 [ 1988.879443][T30974] dst_alloc+0x105/0x170 [ 1988.883725][T30974] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 1988.890016][T30974] ? ip_route_output_key_hash+0x13d/0x330 [ 1988.895970][T30974] ip_route_output_key_hash+0x1f3/0x330 [ 1988.901553][T30974] ? ip_route_input_rcu+0x30f0/0x30f0 [ 1988.907060][T30974] ? mark_lock+0x94/0x320 [ 1988.911516][T30974] ip_route_output_flow+0x2a/0x150 [ 1988.916921][T30974] sctp_v4_get_dst+0x400/0x1230 [ 1988.921832][T30974] ? sctp_v4_xmit+0xde0/0xde0 [ 1988.926563][T30974] ? rcu_force_quiescent_state+0x230/0x230 [ 1988.932506][T30974] ? dst_release+0x121/0x1a0 [ 1988.937135][T30974] sctp_transport_pmtu+0x12c/0x580 [ 1988.942371][T30974] sctp_transport_route+0x184/0x2c0 [ 1988.947719][T30974] sctp_assoc_add_peer+0x650/0x1390 [ 1988.953260][T30974] sctp_connect_new_asoc+0x323/0x6a0 [ 1988.958757][T30974] ? __sctp_connect+0xd80/0xd80 [ 1988.963643][T30974] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1988.969248][T30974] ? _local_bh_enable+0xa0/0xa0 [ 1988.974118][T30974] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1988.979976][T30974] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1988.985913][T30974] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1988.991522][T30974] ? security_sctp_bind_connect+0x89/0xb0 [ 1988.997453][T30974] sctp_sendmsg+0x1575/0x28c0 [ 1989.002194][T30974] ? sctp_getsockopt+0xb60/0xb60 [ 1989.007246][T30974] ? aa_sk_perm+0x83c/0x970 [ 1989.011809][T30974] ? aa_af_perm+0x330/0x330 [ 1989.016429][T30974] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 1989.023075][T30974] ? sock_rps_record_flow+0x19/0x3f0 [ 1989.028724][T30974] ? inet_sendmsg+0x7c/0x2f0 [ 1989.033427][T30974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1989.038753][T30974] ? security_socket_sendmsg+0x80/0xa0 [ 1989.044335][T30974] ? inet_send_prepare+0x260/0x260 [ 1989.049570][T30974] ____sys_sendmsg+0x5ba/0x960 [ 1989.054469][T30974] ? __lock_acquire+0x7d40/0x7d40 [ 1989.059617][T30974] ? __asan_memset+0x22/0x40 [ 1989.064508][T30974] ? __sys_sendmsg_sock+0x30/0x30 [ 1989.069567][T30974] ? __import_iovec+0x5f2/0x850 [ 1989.074468][T30974] ? import_iovec+0x73/0xa0 [ 1989.079097][T30974] ___sys_sendmsg+0x2a6/0x360 [ 1989.083897][T30974] ? __sys_sendmsg+0x2a0/0x2a0 [ 1989.088732][T30974] ? __lock_acquire+0x7d40/0x7d40 [ 1989.094089][T30974] __se_sys_sendmsg+0x1c2/0x2b0 [ 1989.099346][T30974] ? __x64_sys_sendmsg+0x80/0x80 [ 1989.104522][T30974] ? lockdep_hardirqs_on+0x98/0x150 [ 1989.109761][T30974] do_syscall_64+0x55/0xa0 [ 1989.114376][T30974] ? clear_bhb_loop+0x40/0x90 [ 1989.119171][T30974] ? clear_bhb_loop+0x40/0x90 [ 1989.123898][T30974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1989.129849][T30974] RIP: 0033:0x7fb3bb99c819 [ 1989.135127][T30974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1989.155570][T30974] RSP: 002b:00007fb3bc84b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1989.164293][T30974] RAX: ffffffffffffffda RBX: 00007fb3bbc15fa0 RCX: 00007fb3bb99c819 [ 1989.172382][T30974] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 1989.180991][T30974] RBP: 00007fb3bc84b090 R08: 0000000000000000 R09: 0000000000000000 [ 1989.189004][T30974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1989.197184][T30974] R13: 00007fb3bbc16038 R14: 00007fb3bbc15fa0 R15: 00007ffd382bec78 [ 1989.205473][T30974] [ 1990.093650][T31006] netlink: 'syz.2.7892': attribute type 10 has an invalid length. [ 1990.105778][T28854] Bluetooth: hci3: unexpected subevent 0x05 length: 150 > 12 [ 1990.195012][T30989] syzkaller0: entered promiscuous mode [ 1990.201376][T30989] syzkaller0: entered allmulticast mode [ 1990.521417][T31017] netlink: 'syz.2.7893': attribute type 29 has an invalid length. [ 1990.548106][T31017] netlink: 'syz.2.7893': attribute type 3 has an invalid length. [ 1990.558102][T31017] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7893'. [ 1990.758510][T28854] Bluetooth: hci2: command 0x0406 tx timeout [ 1992.130599][T28854] Bluetooth: hci3: command 0x0406 tx timeout [ 1994.405176][T31010] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1994.425479][T31021] netlink: 'syz.0.7897': attribute type 13 has an invalid length. [ 1994.448134][T31021] netlink: 'syz.0.7897': attribute type 58 has an invalid length. [ 1994.456222][T31021] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7897'. [ 1994.577924][T31031] FAULT_INJECTION: forcing a failure. [ 1994.577924][T31031] name failslab, interval 1, probability 0, space 0, times 0 [ 1994.616628][T31031] CPU: 0 PID: 31031 Comm: syz.0.7901 Not tainted syzkaller #0 [ 1994.624371][T31031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1994.634907][T31031] Call Trace: [ 1994.638214][T31031] [ 1994.641178][T31031] dump_stack_lvl+0x18c/0x250 [ 1994.646420][T31031] ? show_regs_print_info+0x20/0x20 [ 1994.651856][T31031] ? load_image+0x420/0x420 [ 1994.656421][T31031] ? __might_sleep+0xe0/0xe0 [ 1994.661073][T31031] ? __lock_acquire+0x7d40/0x7d40 [ 1994.666139][T31031] should_fail_ex+0x39d/0x4d0 [ 1994.670943][T31031] should_failslab+0x9/0x20 [ 1994.675508][T31031] slab_pre_alloc_hook+0x59/0x310 [ 1994.680680][T31031] kmem_cache_alloc_node+0x60/0x320 [ 1994.686035][T31031] ? __alloc_skb+0x103/0x2c0 [ 1994.691297][T31031] __alloc_skb+0x103/0x2c0 [ 1994.695774][T31031] alloc_skb_with_frags+0xca/0x7b0 [ 1994.701199][T31031] ? mark_lock+0x94/0x320 [ 1994.705779][T31031] sock_alloc_send_pskb+0x883/0x9a0 [ 1994.711082][T31031] ? sock_kzfree_s+0x50/0x50 [ 1994.715804][T31031] tun_get_user+0x82c/0x3ca0 [ 1994.720420][T31031] ? aa_file_perm+0x11b/0xee0 [ 1994.725210][T31031] ? rcu_read_unlock+0xa0/0xa0 [ 1994.730010][T31031] ? tun_get+0x1c/0x2e0 [ 1994.734398][T31031] ? __lock_acquire+0x7d40/0x7d40 [ 1994.739751][T31031] ? tun_get+0x1c/0x2e0 [ 1994.744014][T31031] tun_chr_write_iter+0x119/0x200 [ 1994.749060][T31031] vfs_write+0x46c/0x990 [ 1994.753331][T31031] ? file_end_write+0x250/0x250 [ 1994.758310][T31031] ? __fget_files+0x43d/0x4b0 [ 1994.763193][T31031] ? __fdget_pos+0x1d8/0x330 [ 1994.768085][T31031] ? ksys_write+0x75/0x260 [ 1994.772532][T31031] ksys_write+0x150/0x260 [ 1994.776915][T31031] ? __ia32_sys_read+0x90/0x90 [ 1994.781964][T31031] ? lockdep_hardirqs_on+0x98/0x150 [ 1994.787302][T31031] do_syscall_64+0x55/0xa0 [ 1994.791864][T31031] ? clear_bhb_loop+0x40/0x90 [ 1994.796578][T31031] ? clear_bhb_loop+0x40/0x90 [ 1994.801561][T31031] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1994.807583][T31031] RIP: 0033:0x7f928319c819 [ 1994.812025][T31031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.832004][T31031] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1994.840710][T31031] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 1994.849076][T31031] RDX: 000000000000fdef RSI: 0000200000000300 RDI: 00000000000000c8 [ 1994.857151][T31031] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.865327][T31031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.873414][T31031] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 1994.881704][T31031] [ 1995.296667][T28854] Bluetooth: hci4: ISO packet for unknown connection handle 2622 [ 1995.408927][T31048] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7907'. [ 1995.418853][T31048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1995.426907][T31048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1995.450798][T31048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1995.468174][T31048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1995.645846][T28854] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 1995.827455][T31063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1995.856590][T31061] syzkaller0: entered promiscuous mode [ 1995.862901][T31061] syzkaller0: entered allmulticast mode [ 1995.874171][T31063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1995.886181][T31064] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7912'. [ 1996.005572][T31066] netlink: 3787 bytes leftover after parsing attributes in process `syz.0.7913'. [ 1996.737361][T28854] Bluetooth: hci1: unexpected subevent 0x0a length: 15 < 30 [ 1997.760328][T31078] delete_channel: no stack [ 1999.120410][T31066] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7913'. [ 1999.132639][T31080] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7918'. [ 1999.316451][T31086] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.7921'. [ 1999.823715][T31103] netlink: 'syz.0.7927': attribute type 21 has an invalid length. [ 1999.859648][T31097] netlink: 'syz.2.7924': attribute type 10 has an invalid length. [ 1999.872613][T31097] 6: left allmulticast mode [ 1999.905027][T31104] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.7926'. [ 1999.967144][T31104] openvswitch: netlink: IP tunnel dst address not specified [ 2000.036302][T31097] 6: left promiscuous mode [ 2000.091182][T31097] 6: entered promiscuous mode [ 2000.164123][T31097] team0: Device 776 failed to register rx_handler [ 2001.121989][T31121] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.7931'. [ 2003.170258][T31162] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.7946'. [ 2003.183789][T31163] netlink: 'syz.4.7947': attribute type 21 has an invalid length. [ 2003.852084][T31164] Ÿë: port 1(ip6gretap0) entered blocking state [ 2003.872451][T31164] Ÿë: port 1(ip6gretap0) entered disabled state [ 2003.905957][T31164] ip6gretap0: entered allmulticast mode [ 2003.957433][T31164] ip6gretap0: entered promiscuous mode [ 2006.651924][T31207] netlink: 'syz.0.7960': attribute type 4 has an invalid length. [ 2006.657801][T31213] netlink: 'syz.1.7962': attribute type 21 has an invalid length. [ 2006.688447][T31207] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7960'. [ 2006.792079][T31207] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2007.036402][T31222] Ÿë: port 1(ip6gretap0) entered blocking state [ 2007.043714][T31222] Ÿë: port 1(ip6gretap0) entered disabled state [ 2007.050860][T31222] ip6gretap0: entered allmulticast mode [ 2007.058942][T31222] ip6gretap0: entered promiscuous mode [ 2007.238028][T31228] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7969'. [ 2007.357898][T31228] netlink: 763 bytes leftover after parsing attributes in process `syz.4.7969'. [ 2008.485528][T31231] netlink: 'syz.4.7970': attribute type 10 has an invalid length. [ 2009.396739][T31264] netlink: 'syz.4.7983': attribute type 15 has an invalid length. [ 2009.427163][T31265] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7982'. [ 2010.142615][T28854] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 2010.496186][T31306] netlink: 'syz.1.7998': attribute type 1 has an invalid length. [ 2010.509372][T31306] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7998'. [ 2010.813280][T31312] netlink: 176 bytes leftover after parsing attributes in process `syz.1.8001'. [ 2010.834866][T31315] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.8002'. [ 2011.027299][T31323] netlink: 'syz.4.8004': attribute type 2 has an invalid length. [ 2011.307746][T31315] netlink: 'syz.0.8002': attribute type 1 has an invalid length. [ 2011.316899][T31315] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.8002'. [ 2011.501412][T31334] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2011.609658][T31334] ±ÿ: renamed from team_slave_1 (while UP) [ 2011.713690][T31340] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.8008'. [ 2012.199393][T28854] Bluetooth: hci1: command 0x0406 tx timeout [ 2012.899986][T31361] netlink: 'syz.4.8017': attribute type 10 has an invalid length. [ 2013.034640][T31361] veth0_vlan: left allmulticast mode [ 2013.266548][T31361] veth0_vlan: left promiscuous mode [ 2013.301233][T31361] veth0_vlan: entered promiscuous mode [ 2013.323790][T31361] team0: Device veth0_vlan failed to register rx_handler [ 2013.407136][T31366] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8019'. [ 2013.429271][T31366] batadv_slave_1: entered promiscuous mode [ 2013.486832][T31363] netlink: 'syz.1.8018': attribute type 4 has an invalid length. [ 2013.495641][T31363] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8018'. [ 2013.615552][T31363] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2013.644506][T31381] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8023'. [ 2013.663920][T31381] hsr_slave_0: left promiscuous mode [ 2013.691859][T31381] hsr_slave_1: left promiscuous mode [ 2014.464943][T31394] netlink: 'syz.1.8028': attribute type 6 has an invalid length. [ 2014.530869][T31396] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8029'. [ 2014.634054][T31404] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2014.684485][T31404] ±ÿ: renamed from team_slave_1 (while UP) [ 2014.994867][T31404] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.8033'. [ 2015.455667][T31418] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.8037'. [ 2015.467906][T31418] netlink: 22828 bytes leftover after parsing attributes in process `syz.1.8037'. [ 2015.743851][T31425] netlink: 'syz.2.8040': attribute type 21 has an invalid length. [ 2016.429430][T31434] netlink: 'syz.1.8042': attribute type 1 has an invalid length. [ 2016.454856][T31434] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.8042'. [ 2016.523350][T31434] netlink: 'syz.1.8042': attribute type 2 has an invalid length. [ 2016.948485][T31439] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2017.014072][T31439] ±ÿ: renamed from team_slave_1 (while UP) [ 2017.163797][T31439] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8045'. [ 2017.191413][T31452] sit0: entered allmulticast mode [ 2017.503757][T31460] syzkaller0: entered promiscuous mode [ 2017.521161][T31460] syzkaller0: entered allmulticast mode [ 2018.036763][T31468] FAULT_INJECTION: forcing a failure. [ 2018.036763][T31468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2018.051633][T31468] CPU: 1 PID: 31468 Comm: syz.1.8056 Not tainted syzkaller #0 [ 2018.059329][T31468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2018.069707][T31468] Call Trace: [ 2018.073114][T31468] [ 2018.076132][T31468] dump_stack_lvl+0x18c/0x250 [ 2018.080917][T31468] ? show_regs_print_info+0x20/0x20 [ 2018.086339][T31468] ? load_image+0x420/0x420 [ 2018.091059][T31468] ? __might_fault+0xaa/0x120 [ 2018.095948][T31468] ? __lock_acquire+0x7d40/0x7d40 [ 2018.101040][T31468] should_fail_ex+0x39d/0x4d0 [ 2018.105864][T31468] _copy_from_user+0x2f/0xe0 [ 2018.110501][T31468] ___sys_sendmsg+0x1c7/0x360 [ 2018.115476][T31468] ? __sys_sendmsg+0x2a0/0x2a0 [ 2018.120297][T31468] __se_sys_sendmsg+0x1c2/0x2b0 [ 2018.125434][T31468] ? __x64_sys_sendmsg+0x80/0x80 [ 2018.130600][T31468] do_syscall_64+0x55/0xa0 [ 2018.135118][T31468] ? clear_bhb_loop+0x40/0x90 [ 2018.139809][T31468] ? clear_bhb_loop+0x40/0x90 [ 2018.144502][T31468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2018.151018][T31468] RIP: 0033:0x7f508799c819 [ 2018.155538][T31468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2018.175160][T31468] RSP: 002b:00007f508878b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2018.183682][T31468] RAX: ffffffffffffffda RBX: 00007f5087c15fa0 RCX: 00007f508799c819 [ 2018.191758][T31468] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007 [ 2018.199851][T31468] RBP: 00007f508878b090 R08: 0000000000000000 R09: 0000000000000000 [ 2018.207839][T31468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2018.216025][T31468] R13: 00007f5087c16038 R14: 00007f5087c15fa0 R15: 00007ffdd201a608 [ 2018.224344][T31468] [ 2023.156841][T31492] netlink: 'syz.2.8063': attribute type 23 has an invalid length. [ 2023.165289][T31495] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2023.173977][T31492] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8063'. [ 2023.253063][T31495] ±ÿ: renamed from team_slave_1 (while UP) [ 2023.385970][T31495] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8061'. [ 2023.569838][T31501] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.8066'. [ 2023.680136][T31503] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2023.961301][T31512] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8076'. [ 2024.546381][T31522] FAULT_INJECTION: forcing a failure. [ 2024.546381][T31522] name failslab, interval 1, probability 0, space 0, times 0 [ 2024.596190][T31522] CPU: 1 PID: 31522 Comm: syz.0.8072 Not tainted syzkaller #0 [ 2024.603822][T31522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2024.614191][T31522] Call Trace: [ 2024.617587][T31522] [ 2024.620632][T31522] dump_stack_lvl+0x18c/0x250 [ 2024.625349][T31522] ? show_regs_print_info+0x20/0x20 [ 2024.630576][T31522] ? load_image+0x420/0x420 [ 2024.635102][T31522] ? __might_sleep+0xe0/0xe0 [ 2024.639848][T31522] ? __lock_acquire+0x7d40/0x7d40 [ 2024.645012][T31522] should_fail_ex+0x39d/0x4d0 [ 2024.649832][T31522] should_failslab+0x9/0x20 [ 2024.654626][T31522] slab_pre_alloc_hook+0x59/0x310 [ 2024.659765][T31522] ? sctp_association_new+0x89/0x25c0 [ 2024.665340][T31522] __kmem_cache_alloc_node+0x53/0x250 [ 2024.670735][T31522] ? sctp_association_new+0x89/0x25c0 [ 2024.676302][T31522] kmalloc_trace+0x2a/0xe0 [ 2024.680747][T31522] sctp_association_new+0x89/0x25c0 [ 2024.685988][T31522] ? bpf_lsm_capable+0x9/0x10 [ 2024.690806][T31522] ? security_capable+0x89/0xb0 [ 2024.695794][T31522] sctp_connect_new_asoc+0x2de/0x6a0 [ 2024.701509][T31522] ? __sctp_connect+0xd80/0xd80 [ 2024.706681][T31522] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2024.712243][T31522] ? _local_bh_enable+0xa0/0xa0 [ 2024.717119][T31522] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2024.723115][T31522] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 2024.728941][T31522] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 2024.734535][T31522] ? security_sctp_bind_connect+0x89/0xb0 [ 2024.740367][T31522] sctp_sendmsg+0x1575/0x28c0 [ 2024.745072][T31522] ? sctp_getsockopt+0xb60/0xb60 [ 2024.750202][T31522] ? aa_sk_perm+0x83c/0x970 [ 2024.754740][T31522] ? aa_af_perm+0x330/0x330 [ 2024.759358][T31522] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 2024.765873][T31522] ? sock_rps_record_flow+0x19/0x3f0 [ 2024.771873][T31522] ? inet_sendmsg+0x7c/0x2f0 [ 2024.776589][T31522] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2024.782340][T31522] ? security_socket_sendmsg+0x80/0xa0 [ 2024.787820][T31522] ? inet_send_prepare+0x260/0x260 [ 2024.793045][T31522] ____sys_sendmsg+0x5ba/0x960 [ 2024.797835][T31522] ? __lock_acquire+0x7d40/0x7d40 [ 2024.802971][T31522] ? __asan_memset+0x22/0x40 [ 2024.807778][T31522] ? __sys_sendmsg_sock+0x30/0x30 [ 2024.813130][T31522] ? __import_iovec+0x5f2/0x850 [ 2024.818104][T31522] ? import_iovec+0x73/0xa0 [ 2024.822722][T31522] ___sys_sendmsg+0x2a6/0x360 [ 2024.827504][T31522] ? get_pid_task+0x20/0x1e0 [ 2024.832481][T31522] ? __sys_sendmsg+0x2a0/0x2a0 [ 2024.837455][T31522] ? __lock_acquire+0x7d40/0x7d40 [ 2024.842521][T31522] __se_sys_sendmsg+0x1c2/0x2b0 [ 2024.847839][T31522] ? __x64_sys_sendmsg+0x80/0x80 [ 2024.852838][T31522] ? lockdep_hardirqs_on+0x98/0x150 [ 2024.858079][T31522] do_syscall_64+0x55/0xa0 [ 2024.862688][T31522] ? clear_bhb_loop+0x40/0x90 [ 2024.867558][T31522] ? clear_bhb_loop+0x40/0x90 [ 2024.872342][T31522] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2024.878427][T31522] RIP: 0033:0x7f928319c819 [ 2024.883033][T31522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2024.902853][T31522] RSP: 002b:00007f9284039028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2024.911574][T31522] RAX: ffffffffffffffda RBX: 00007f9283415fa0 RCX: 00007f928319c819 [ 2024.919658][T31522] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 2024.927727][T31522] RBP: 00007f9284039090 R08: 0000000000000000 R09: 0000000000000000 [ 2024.935979][T31522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2024.943969][T31522] R13: 00007f9283416038 R14: 00007f9283415fa0 R15: 00007ffe2758aeb8 [ 2024.951969][T31522] [ 2025.400964][T31537] netlink: 'syz.0.8079': attribute type 3 has an invalid length. [ 2025.416983][T31537] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8079'. [ 2026.454883][T31548] netlink: 'syz.2.8077': attribute type 2 has an invalid length. [ 2026.466747][T31548] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.8077'. [ 2038.854647][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2038.865923][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.244235][T30389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2042.255267][T30389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2042.263647][T30389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2042.277294][T30389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2042.289284][T30389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2042.296956][T30389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2042.639386][T28854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2042.660786][T28854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2042.670257][T28854] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2042.687909][T28854] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2042.695843][T28854] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2042.705687][T28854] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2042.905841][T30389] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2042.916500][T30389] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2042.930848][T30389] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2042.939389][T30389] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2042.947492][T30389] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2042.955704][T30389] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2043.046780][T28854] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2043.057204][T28854] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2043.066231][T28854] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2043.074852][T28854] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2043.088727][T28854] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 2043.096447][T28854] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2043.694461][T31557] chnl_net:caif_netlink_parms(): no params data found [ 2043.935821][T31562] chnl_net:caif_netlink_parms(): no params data found [ 2044.013864][T31564] chnl_net:caif_netlink_parms(): no params data found [ 2044.157063][T31557] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.168367][T31557] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.175826][T31557] bridge_slave_0: entered allmulticast mode [ 2044.193064][T31557] bridge_slave_0: entered promiscuous mode [ 2044.227625][T31557] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.246632][T31557] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.255743][T31557] bridge_slave_1: entered allmulticast mode [ 2044.270050][T31557] bridge_slave_1: entered promiscuous mode [ 2044.368163][T28854] Bluetooth: hci0: command tx timeout [ 2044.412240][T31566] chnl_net:caif_netlink_parms(): no params data found [ 2044.698979][T31562] bridge0: port 1(bridge_slave_0) entered blocking state [ 2044.706549][T31562] bridge0: port 1(bridge_slave_0) entered disabled state [ 2044.722453][T31562] bridge_slave_0: entered allmulticast mode [ 2044.735135][T31562] bridge_slave_0: entered promiscuous mode [ 2044.752685][T31562] bridge0: port 2(bridge_slave_1) entered blocking state [ 2044.768069][T28854] Bluetooth: hci5: command tx timeout [ 2044.784790][T31562] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.792893][T31562] bridge_slave_1: entered allmulticast mode [ 2044.810895][T31562] bridge_slave_1: entered promiscuous mode [ 2044.875468][T31562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2044.896365][T31562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.976190][T31562] team0: Port device team_slave_0 added [ 2044.994657][T31562] team0: Port device team_slave_1 added [ 2045.000916][T28854] Bluetooth: hci6: command tx timeout [ 2045.065680][T31562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2045.078371][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.115334][T31562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2045.140395][T31562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2045.147791][T31562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2045.188047][T28854] Bluetooth: hci7: command tx timeout [ 2045.196287][T31562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2046.438279][T28854] Bluetooth: hci0: command tx timeout [ 2046.848156][T28854] Bluetooth: hci5: command tx timeout [ 2047.078143][T28854] Bluetooth: hci6: command tx timeout [ 2047.238154][T28854] Bluetooth: hci7: command tx timeout [ 2048.518315][T28854] Bluetooth: hci0: command tx timeout [ 2048.928182][T28854] Bluetooth: hci5: command tx timeout [ 2049.158179][T28854] Bluetooth: hci6: command tx timeout [ 2049.318250][T28854] Bluetooth: hci7: command tx timeout [ 2050.598270][T28854] Bluetooth: hci0: command tx timeout [ 2051.008131][T28854] Bluetooth: hci5: command tx timeout [ 2051.238273][T28854] Bluetooth: hci6: command tx timeout [ 2051.402519][T28854] Bluetooth: hci7: command tx timeout [ 2099.569305][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.575862][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.418583][T30389] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2103.430135][T30389] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2103.440397][T30389] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2103.450842][T30389] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2103.460256][T30389] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 2103.467797][T30389] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2103.589273][T30389] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2103.609608][T30389] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2103.618431][T30389] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2103.627722][T30389] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2103.638846][T30389] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 2103.647465][T30389] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2103.782802][T28854] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2103.794504][T28854] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2103.803713][T28854] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2103.814187][T28854] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2103.822434][T28854] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 2103.835298][T28854] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2105.558567][T28854] Bluetooth: hci8: command tx timeout [ 2105.728434][T28854] Bluetooth: hci9: command tx timeout [ 2105.892862][T28854] Bluetooth: hci10: command tx timeout [ 2107.638288][T28854] Bluetooth: hci8: command tx timeout [ 2107.798364][T28854] Bluetooth: hci9: command tx timeout [ 2107.958344][T28854] Bluetooth: hci10: command tx timeout [ 2110.908669][T28854] Bluetooth: hci8: command tx timeout [ 2110.914224][T28854] Bluetooth: hci9: command tx timeout [ 2110.919896][T28854] Bluetooth: hci10: command tx timeout [ 2112.998988][T28854] Bluetooth: hci10: command tx timeout [ 2113.004754][T28854] Bluetooth: hci9: command tx timeout [ 2113.017518][T28854] Bluetooth: hci8: command tx timeout [ 2161.015519][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2161.023671][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2170.752077][T30389] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2170.770344][T30389] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2170.779672][T30389] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2170.789454][T30389] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2170.799588][T30389] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 2170.808486][T30389] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2171.025202][T30389] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2171.035968][T30389] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2171.044875][T30389] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2171.055001][T30389] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2171.063103][T30389] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 2171.071103][T30389] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2171.169302][T13250] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2171.188738][T13250] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2171.197387][T13250] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 2171.208741][T13250] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 2171.217150][T13250] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 2171.225376][T13250] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 2171.335363][T30389] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 2171.355308][T30389] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 2171.367405][T30389] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 2171.392862][T30389] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 2171.408520][T30389] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 2171.416572][T30389] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 2172.841774][T13250] Bluetooth: hci11: command tx timeout [ 2173.168330][T13250] Bluetooth: hci12: command tx timeout [ 2173.318343][T13250] Bluetooth: hci13: command tx timeout [ 2173.488335][T13250] Bluetooth: hci14: command tx timeout [ 2174.458001][ T29] INFO: task syz.0.8079:31536 blocked for more than 144 seconds. [ 2174.537948][ T29] Not tainted syzkaller #0 [ 2174.542968][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2174.627913][ T29] task:syz.0.8079 state:D stack:24232 pid:31536 ppid:29460 flags:0x00004004 [ 2174.637574][ T29] Call Trace: [ 2174.691812][ T29] [ 2174.694927][ T29] __schedule+0x1553/0x45a0 [ 2174.751048][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 2174.756470][ T29] ? asan.module_dtor+0x20/0x20 [ 2174.807924][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 2174.812806][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 2174.867943][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 2174.874294][ T29] schedule+0xbd/0x170 [ 2174.927916][ T29] schedule_preempt_disabled+0x13/0x20 [ 2174.933463][ T29] __mutex_lock+0x6a9/0xcc0 [ 2174.938814][T13250] Bluetooth: hci11: command tx timeout [ 2174.977925][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 2174.982878][ T29] ? perf_event_ctx_lock_nested+0x3b9/0x490 [ 2175.037943][ T29] ? mutex_lock_nested+0x20/0x20 [ 2175.043158][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 2175.087936][ T29] perf_event_ctx_lock_nested+0x3b9/0x490 [ 2175.093846][ T29] ? perf_event_ctx_lock_nested+0xb4/0x490 [ 2175.168021][ T29] ? perf_event_update_sibling_time+0x4c0/0x4c0 [ 2175.174473][ T29] ? perf_remove_from_owner+0x444/0x4f0 [ 2175.237008][ T29] ? perf_remove_from_owner+0x22/0x4f0 [ 2175.242776][T13250] Bluetooth: hci12: command tx timeout [ 2175.268378][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2175.273057][ T29] perf_event_release_kernel+0x1a0/0x8d0 [ 2175.347934][ T29] ? __might_sleep+0xe0/0xe0 [ 2175.352747][ T29] ? calc_timer_values+0x400/0x400 [ 2175.408698][ T29] ? __fput+0x61c/0x970 [ 2175.413050][ T29] ? perf_mmap+0x15c0/0x15c0 [ 2175.418620][T13250] Bluetooth: hci13: command tx timeout [ 2175.467922][ T29] perf_release+0x3b/0x40 [ 2175.472446][ T29] __fput+0x234/0x970 [ 2175.476752][ T29] task_work_run+0x1d4/0x260 [ 2175.527925][ T29] ? task_work_cancel+0x220/0x220 [ 2175.533070][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 2175.560840][T13250] Bluetooth: hci14: command tx timeout [ 2175.607932][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 2175.627946][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 2175.633703][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 2175.697921][ T29] do_syscall_64+0x61/0xa0 [ 2175.702544][ T29] ? clear_bhb_loop+0x40/0x90 [ 2175.707356][ T29] ? clear_bhb_loop+0x40/0x90 [ 2175.777925][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2175.783935][ T29] RIP: 0033:0x7f928319c819 [ 2175.827918][ T29] RSP: 002b:00007ffe2758b018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2175.836688][ T29] RAX: 0000000000000000 RBX: 00007f9283417da0 RCX: 00007f928319c819 [ 2175.927920][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2175.936142][ T29] RBP: 00007f9283417da0 R08: 0000000000000006 R09: 0000000000000000 [ 2176.049036][ T29] R10: 00007f9283417cb0 R11: 0000000000000246 R12: 00000000001eebc2 [ 2176.057110][ T29] R13: 00007f928341627c R14: 00000000001eeb90 R15: 00007f9283416270 [ 2176.125431][ T29] [ 2176.147945][ T29] [ 2176.147945][ T29] Showing all locks held in the system: [ 2176.155917][ T29] 1 lock held by khungtaskd/29: [ 2176.217909][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2176.277956][ T29] 2 locks held by getty/5534: [ 2176.282728][ T29] #0: ffff888031fea0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2176.357944][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 2176.407919][ T29] 3 locks held by kworker/1:4/5815: [ 2176.413458][ T29] #0: ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.487917][ T29] #1: ffffc9000471fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.597910][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2176.658221][ T29] 2 locks held by kworker/0:4/16807: [ 2176.663603][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.757913][ T29] #1: ffffc9000b9cfd00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.841954][ T29] 2 locks held by kworker/u4:4/18535: [ 2176.877917][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.944624][ T29] #1: ffffc90004bcfd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2176.997915][ T29] 3 locks held by kworker/u4:28/21605: [ 2177.003450][ T29] #0: ffff88802ce38938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.027969][T13250] Bluetooth: hci11: command tx timeout [ 2177.097910][ T29] #1: ffffc9000fee7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.183453][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd4/0x1530 [ 2177.227920][ T29] 3 locks held by kworker/u4:32/21609: [ 2177.233645][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.318246][T13250] Bluetooth: hci12: command tx timeout [ 2177.338292][ T29] #1: ffffc9001059fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.397947][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 2177.407314][ T29] 3 locks held by kworker/0:3/24993: [ 2177.477918][ T29] #0: ffff888017c71d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.491045][T13250] Bluetooth: hci13: command tx timeout [ 2177.557962][ T29] #1: ffffc90005197d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 2177.617914][ T29] #2: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x92/0xd90 [ 2177.647979][T13250] Bluetooth: hci14: command tx timeout [ 2177.687919][ T29] 1 lock held by syz.0.8079/31536: [ 2177.693202][ T29] #0: ffff88802f7034a8 (&ctx->mutex){+.+.}-{3:3}, at: perf_event_ctx_lock_nested+0x3b9/0x490 [ 2177.763984][ T29] 4 locks held by syz.0.8079/31540: [ 2177.797915][ T29] 1 lock held by dhcpcd/31550: [ 2177.803218][ T29] #0: ffff8880797aee20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 2177.907933][ T29] 2 locks held by dhcpcd/31551: [ 2177.937910][ T29] #0: ffff8880797abe20 (&sb->s_type->i_mutex_key#11){+.+.}-{3:3}, at: sock_close+0x9b/0x230 [ 2177.997910][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2178.067911][ T29] 1 lock held by syz-executor/31557: [ 2178.092165][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2178.137945][ T29] 1 lock held by syz-executor/31562: [ 2178.143598][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2178.227927][ T29] 1 lock held by syz-executor/31564: [ 2178.233369][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2178.331666][ T29] 1 lock held by syz-executor/31566: [ 2178.337129][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2178.467919][ T29] 1 lock held by dhcpcd/31586: [ 2178.472781][ T29] #0: ffff88806ba3a130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2178.557913][ T29] 1 lock held by dhcpcd/31588: [ 2178.562851][ T29] #0: ffff88807a88c130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2178.627917][ T29] 1 lock held by dhcpcd/31589: [ 2178.632783][ T29] #0: ffff88807f232130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2178.738126][ T29] 1 lock held by dhcpcd/31590: [ 2178.743266][ T29] #0: ffff88801c7ec130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2178.847976][ T29] 1 lock held by dhcpcd/31591: [ 2178.852916][ T29] #0: ffff8880468de130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2178.927919][ T29] 1 lock held by dhcpcd/31592: [ 2178.932758][ T29] #0: ffff888039556130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2179.027918][ T29] 1 lock held by dhcpcd/31593: [ 2179.033031][ T29] #0: ffff88803699e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2179.078636][T13250] Bluetooth: hci11: command tx timeout [ 2179.128080][ T29] 1 lock held by syz-executor/31598: [ 2179.133531][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.217915][ T29] 1 lock held by syz-executor/31601: [ 2179.223374][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.287934][ T29] 1 lock held by syz-executor/31606: [ 2179.293318][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.388268][ T29] 2 locks held by dhcpcd/31610: [ 2179.393315][ T29] #0: ffff888048330130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 2179.417949][T13250] Bluetooth: hci12: command tx timeout [ 2179.467954][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 2179.537916][ T29] 1 lock held by syz-executor/31615: [ 2179.543302][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.581213][T13250] Bluetooth: hci13: command tx timeout [ 2179.637944][ T29] 1 lock held by syz-executor/31619: [ 2179.643413][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.717928][ T29] 1 lock held by syz-executor/31622: [ 2179.723401][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.747951][T13250] Bluetooth: hci14: command tx timeout [ 2179.811765][ T29] 1 lock held by syz-executor/31624: [ 2179.817236][ T29] #0: ffffffff8e3c2808 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 2179.907923][ T29] [ 2179.927916][ T29] ============================================= [ 2179.927916][ T29] [ 2179.936656][ T29] NMI backtrace for cpu 0 [ 2179.941126][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2179.948458][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2179.958809][ T29] Call Trace: [ 2179.962152][ T29] [ 2179.965113][ T29] dump_stack_lvl+0x18c/0x250 [ 2179.969852][ T29] ? nmi_cpu_backtrace+0x1b6/0x3e0 [ 2179.975277][ T29] ? show_regs_print_info+0x20/0x20 [ 2179.980615][ T29] ? load_image+0x420/0x420 [ 2179.985274][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2179.990255][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2179.996528][ T29] ? _printk+0xde/0x130 [ 2180.000819][ T29] ? load_image+0x420/0x420 [ 2180.005471][ T29] ? load_image+0x420/0x420 [ 2180.010024][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2180.016271][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2180.022377][ T29] watchdog+0xf3d/0xf80 [ 2180.026609][ T29] ? watchdog+0x1e1/0xf80 [ 2180.031123][ T29] kthread+0x2fa/0x390 [ 2180.035404][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2180.040561][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2180.045616][ T29] ret_from_fork+0x48/0x80 [ 2180.050071][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2180.054702][ T29] ret_from_fork_asm+0x11/0x20 [ 2180.059607][ T29] [ 2180.063941][ T29] Sending NMI from CPU 0 to CPUs 1: [ 2180.069547][ C1] NMI backtrace for cpu 1 [ 2180.069559][ C1] CPU: 1 PID: 31540 Comm: syz.0.8079 Not tainted syzkaller #0 [ 2180.069576][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2180.069584][ C1] RIP: 0010:kasan_check_range+0x0/0x290 [ 2180.069608][ C1] Code: 48 c1 ee 03 48 01 c6 48 89 c7 e8 fb d7 a7 08 31 c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc <66> 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 41 56 41 55 [ 2180.069621][ C1] RSP: 0018:ffffc900001f03f8 EFLAGS: 00000046 [ 2180.069636][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81682ae7 [ 2180.069646][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8e8b15e8 [ 2180.069656][ C1] RBP: ffffc900001f0508 R08: 0000000000000001 R09: 0000000000000000 [ 2180.069666][ C1] R10: dffffc0000000000 R11: fffffbfff1d162be R12: 1ffff9200003e08c [ 2180.069676][ C1] R13: ffffffff975959e0 R14: 0000000000000001 R15: dffffc0000000000 [ 2180.069686][ C1] FS: 00007f92840186c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2180.069700][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2180.069710][ C1] CR2: 00007f5441e16572 CR3: 00000000423ad000 CR4: 00000000003506e0 [ 2180.069726][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 2180.069735][ C1] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2180.069745][ C1] Call Trace: [ 2180.069751][ C1] [ 2180.069756][ C1] lock_acquire+0xb7/0x420 [ 2180.069781][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2180.069806][ C1] _raw_spin_lock_irqsave+0xb4/0x100 [ 2180.069824][ C1] ? debug_object_deactivate+0x67/0x390 [ 2180.069844][ C1] ? _raw_spin_lock+0x40/0x40 [ 2180.069864][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 2180.069882][ C1] debug_object_deactivate+0x67/0x390 [ 2180.069906][ C1] __hrtimer_run_queues+0x2cb/0xc40 [ 2180.069923][ C1] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 2180.069951][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2180.069965][ C1] ? read_tsc+0x9/0x20 [ 2180.069996][ C1] hrtimer_interrupt+0x3c9/0x9c0 [ 2180.070028][ C1] __sysvec_apic_timer_interrupt+0xfb/0x3b0 [ 2180.070048][ C1] sysvec_apic_timer_interrupt+0x51/0xc0 [ 2180.070066][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.070084][ C1] RIP: 0010:kcov_remote_start+0x2b/0x7e0 [ 2180.070102][ C1] Code: 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 18 65 4c 8b 35 b6 8b 7c 7e 48 b8 00 00 00 00 ff ff ff 00 48 85 c7 74 11 0f 0b <48> 83 c4 18 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 89 f8 48 c1 e8 39 [ 2180.070113][ C1] RSP: 0018:ffffc900001f0990 EFLAGS: 00000206 [ 2180.070125][ C1] RAX: 35b7e03059d03700 RBX: 0000000000000246 RCX: 35b7e03059d03700 [ 2180.070136][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 2180.070146][ C1] RBP: ffffc900001f0c30 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 2180.070157][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: 0000000000000000 [ 2180.070167][ C1] R13: ffffffff81872a7f R14: ffff88802101da00 R15: 0000000000000000 [ 2180.070178][ C1] ? kcov_remote_start+0x8f/0x7e0 [ 2180.070204][ C1] ? sched_clock_cpu+0x75/0x430 [ 2180.070222][ C1] ieee80211_rx_list+0x813/0x32d0 [ 2180.070252][ C1] ? mark_lock+0x94/0x320 [ 2180.070270][ C1] ? ieee80211_check_fast_rx_iface+0x210/0x210 [ 2180.070285][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2180.070309][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.070330][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.070348][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2180.070372][ C1] ? ieee80211_rx_napi+0xd4/0x3d0 [ 2180.070387][ C1] ieee80211_rx_napi+0x1b2/0x3d0 [ 2180.070404][ C1] ? ieee80211_rx_list+0x32d0/0x32d0 [ 2180.070421][ C1] ? skb_dequeue+0x124/0x160 [ 2180.070441][ C1] ieee80211_handle_queued_frames+0x106/0x1a0 [ 2180.070460][ C1] tasklet_action_common+0x302/0x4d0 [ 2180.070476][ C1] ? scsi_end_request+0x651/0x800 [ 2180.070499][ C1] ? trace_raw_output_tasklet+0xc0/0xc0 [ 2180.070514][ C1] ? scsi_io_completion+0x13f/0x390 [ 2180.070540][ C1] handle_softirqs+0x280/0x820 [ 2180.070558][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2180.070576][ C1] ? do_softirq+0x1a0/0x1a0 [ 2180.070594][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2180.070615][ C1] __irq_exit_rcu+0xd3/0x190 [ 2180.070630][ C1] ? irq_exit_rcu+0x20/0x20 [ 2180.070650][ C1] irq_exit_rcu+0x9/0x20 [ 2180.070663][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2180.070681][ C1] [ 2180.070686][ C1] [ 2180.070692][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.070708][ C1] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 2180.070724][ C1] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 89 32 09 e8 9b 29 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 2180.070735][ C1] RSP: 0018:ffffc9000c7f7758 EFLAGS: 00000282 [ 2180.070746][ C1] RAX: 35b7e03059d03700 RBX: 0000000000000000 RCX: 35b7e03059d03700 [ 2180.070756][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 2180.070766][ C1] RBP: ffffc9000c7f77b0 R08: ffffffff911c55ff R09: 1ffffffff2238abf [ 2180.070777][ C1] R10: dffffc0000000000 R11: fffffbfff2238ac0 R12: ffff88802101da00 [ 2180.070787][ C1] R13: dffffc0000000000 R14: ffff88801be63c00 R15: ffff8880b8f3cac8 [ 2180.070809][ C1] ? finish_task_switch+0x265/0x8f0 [ 2180.070828][ C1] __schedule+0x155b/0x45a0 [ 2180.070855][ C1] ? mark_lock+0x94/0x320 [ 2180.070873][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2180.070891][ C1] ? lock_chain_count+0x20/0x20 [ 2180.070907][ C1] ? asan.module_dtor+0x20/0x20 [ 2180.070929][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.070947][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2180.070970][ C1] ? preempt_schedule+0xc0/0xd0 [ 2180.070997][ C1] preempt_schedule_common+0x82/0xc0 [ 2180.071018][ C1] preempt_schedule+0xc0/0xd0 [ 2180.071039][ C1] ? schedule_preempt_disabled+0x20/0x20 [ 2180.071058][ C1] ? event_function+0x300/0x300 [ 2180.071076][ C1] ? smp_call_function_single+0x5a0/0x5a0 [ 2180.071096][ C1] preempt_schedule_thunk+0x1a/0x30 [ 2180.071117][ C1] ? smp_call_function_single+0x488/0x5a0 [ 2180.071135][ C1] smp_call_function_single+0x48d/0x5a0 [ 2180.071152][ C1] ? event_function+0x300/0x300 [ 2180.071169][ C1] ? flush_smp_call_function_queue+0x250/0x250 [ 2180.071186][ C1] ? event_function+0x300/0x300 [ 2180.071211][ C1] perf_install_in_context+0x5be/0x920 [ 2180.071235][ C1] ? exclusive_event_installable+0x2c0/0x2c0 [ 2180.071251][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2180.071267][ C1] ? add_event_to_ctx+0x1180/0x1180 [ 2180.071287][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2180.071315][ C1] __se_sys_perf_event_open+0x1836/0x1c50 [ 2180.071340][ C1] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 2180.071365][ C1] ? lock_chain_count+0x20/0x20 [ 2180.071379][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 2180.071400][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2180.071414][ C1] ? __x64_sys_perf_event_open+0x20/0xc0 [ 2180.071433][ C1] do_syscall_64+0x55/0xa0 [ 2180.071446][ C1] ? clear_bhb_loop+0x40/0x90 [ 2180.071462][ C1] ? clear_bhb_loop+0x40/0x90 [ 2180.071480][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2180.071497][ C1] RIP: 0033:0x7f928319c819 [ 2180.071510][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2180.071521][ C1] RSP: 002b:00007f9284018028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 2180.071535][ C1] RAX: ffffffffffffffda RBX: 00007f9283416090 RCX: 00007f928319c819 [ 2180.071545][ C1] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 2180.071555][ C1] RBP: 00007f9283232c91 R08: 0000000000000002 R09: 0000000000000000 [ 2180.071564][ C1] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 2180.071574][ C1] R13: 00007f9283416128 R14: 00007f9283416090 R15: 00007ffe2758aeb8 [ 2180.071594][ C1] [ 2182.127910][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 2182.134841][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 2182.142335][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 2182.152862][ T29] Call Trace: [ 2182.156284][ T29] [ 2182.159440][ T29] dump_stack_lvl+0x18c/0x250 [ 2182.164459][ T29] ? show_regs_print_info+0x20/0x20 [ 2182.169790][ T29] ? load_image+0x420/0x420 [ 2182.174703][ T29] panic+0x2dc/0x730 [ 2182.178789][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 2182.184470][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 2182.189104][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 2182.194906][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2182.201289][ T29] watchdog+0xf7c/0xf80 [ 2182.205606][ T29] ? watchdog+0x1e1/0xf80 [ 2182.210156][ T29] kthread+0x2fa/0x390 [ 2182.214352][ T29] ? hungtask_pm_notify+0x90/0x90 [ 2182.219521][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2182.224376][ T29] ret_from_fork+0x48/0x80 [ 2182.228831][ T29] ? kthread_blkcg+0xd0/0xd0 [ 2182.233625][ T29] ret_from_fork_asm+0x11/0x20 [ 2182.238546][ T29] [ 2182.241842][ T29] Kernel Offset: disabled [ 2182.246306][ T29] Rebooting in 86400 seconds..