last executing test programs: 26.315312358s ago: executing program 1 (id=1996): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffce7}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd7", 0xc}], 0x1, 0x0, 0x0, 0x6}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x20, 0x61, 0x11, 0x6c, 0x7000}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x20}, 0x0) socket$kcm(0x11, 0x3, 0x300) socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={r2, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r0, 0x0, 0x4a046) 26.27405269s ago: executing program 2 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a00"/158], 0xf}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000001c80)={0x0, 0x0, 0x0}, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000ac0)=ANY=[@ANYRES64=r3], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x4c) r6 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f8481f0000005e140602000000030e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 26.015266811s ago: executing program 1 (id=1999): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d000200090001", 0x1b}], 0x1}, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/212, 0xd4}, {&(0x7f0000001440)=""/3, 0x3}, {&(0x7f0000001480)=""/238, 0xee}, {&(0x7f0000001580)=""/181, 0xb5}], 0x5}, 0x40000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e00e020023200b02d25a80ef8c6394f93e24fc60049d0d", 0x17}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001700)={0x1b, 0x0, 0x0, 0x41c5, 0x0, 0xffffffffffffffff, 0xfc57, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000005c0), 0x0, 0x0, 0xea, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000200)=ANY=[@ANYBLOB="8510000003000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32, @ANYBLOB="000000000200c286181100", @ANYRES32, @ANYBLOB="00000000000000005da2e0fff0ffffff"], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', r1, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000840), 0x10, 0x2}, 0x94) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780)=0xffffffffffffffff, 0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 25.800909411s ago: executing program 3 (id=2001): socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x6, 0xb}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r1, r0}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x3, 0x6, 0xb}, 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000083850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x152610}], 0x1, 0x0, 0xe00}, 0x1f00) (async) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r1, r0}, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) (async) 25.715683904s ago: executing program 1 (id=2003): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000410000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) 25.715501684s ago: executing program 2 (id=2004): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="5c00000013006bcd9e3fe3dc4e48aa31086b87123a0000001ffdff0000000400040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 25.684975156s ago: executing program 0 (id=2005): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x0) (async) close(0xffffffffffffffff) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x40) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) r0 = socket$kcm(0x10, 0x3, 0x10) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) syz_open_procfs$namespace(0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b63d25a80648c2594f90724fc60", 0x14}], 0x1}, 0x0) 25.323501141s ago: executing program 0 (id=2006): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000013006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000702080007000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) 25.319333762s ago: executing program 2 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00010000400000e2409a07987bed15e0aa2b5c0402f04eec23d5b9ec4894fd8e40ee18dc3c465677"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x14, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f93324fc60100c034002000009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x64b2074d57f2d605, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r8, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r11, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r1, r5}, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x3, 0x8, 0x2, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 25.214087526s ago: executing program 0 (id=2008): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa7, 0x1, 0x0, 0x0, 0x0, 0x3b70, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xb51}, 0x4582, 0x32, 0xfffffbff, 0x5, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$LINK_DETACH(0x22, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.170829528s ago: executing program 3 (id=2009): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180080ffffff0000000000000800000004000000bb7f1a004d00feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x4c) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x600000000000}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xe) 25.010962195s ago: executing program 1 (id=2010): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000040)="8b28e921", 0x4}], 0x1, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}, 0x4004) (async) socket$kcm(0xa, 0x2, 0x3a) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) (async) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x2ada}, 0x0, 0x0, 0x90a, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 25.007494185s ago: executing program 3 (id=2011): socket$kcm(0x2, 0x200000000000001, 0x106) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0xd0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.864210822s ago: executing program 3 (id=2012): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000040)="8b28e921", 0x4}], 0x1, &(0x7f0000001b80)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}], 0x18}, 0x4004) socket$kcm(0xa, 0x2, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x590f}, 0x2920, 0x0, 0x6, 0x8, 0x80000000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.767059485s ago: executing program 0 (id=2013): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) (async, rerun: 64) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async, rerun: 32) ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) (rerun: 32) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcf, 0xcf, 0x6, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0xa, 0x4}, {0xd, 0x1}]}, @enum64={0x9, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xf, 0xe, 0x5}, {0x2, 0x6, 0x1000}]}, @datasec={0x9, 0x5, 0x0, 0xf, 0x3, [{0x1, 0x8, 0xa9}, {0x3, 0x2c00, 0x4b}, {0x1, 0x2, 0x4}, {0x1, 0x7, 0x2}, {0x4, 0x8d, 0x10}], "b00ef3"}, @union={0x5, 0x2, 0x0, 0x5, 0x0, 0x3e, [{0x2, 0x4, 0x11}, {0x8, 0x3, 0x1}]}, @const={0xc}, @volatile={0xd, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x5f, 0x61, 0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0xee, 0x1000, 0x1, 0x7}, 0x28) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) ioctl$TUNGETVNETLE(r5, 0x8953, &(0x7f0000000040)) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) (async) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) close(0xffffffffffffffff) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c4", 0x45}], 0x1}, 0x20000000) 24.766116045s ago: executing program 1 (id=2014): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = socket$kcm(0x29, 0x5, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002440)=@bloom_filter={0x1e, 0xb, 0x2, 0x7, 0x10000, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5, 0x1, @void, @value, @value=r5}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000024c0)={&(0x7f0000000f00)="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", &(0x7f00000022c0)=""/152, &(0x7f0000002380)="12a769e9d2ceb848855fab34fe6158d9d9f6d6020cc6ad6c7aa0e250fac8f1ed40becadedec5e420ad640dc29b2859545c56e86688", &(0x7f00000023c0)="ebedda4e91c2ef47e7a45f617a5c7af4de54036cd19310154bd442cf8d555a2e5ddddb4c4f7d8fa6ba5c87c02d6ad1b99cc2e776a929f03ff46abd3382547e4c359b1998cfec415335856f418b95", 0x4b, r6, 0x4}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r8, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000100000000f"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r12}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8929, &(0x7f0000001f40)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\xf5\a\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'5\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\x06\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc5\xdcZ\xb9\xd7Z\x88\x9b\xdff[\x90\xfa\x9a{b\xf4Dq') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r9}, 0x94) openat$cgroup_int(r5, &(0x7f0000000540)='notify_on_release\x00', 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000740)="4eea0feae5e82fa0f1eedc368ef279518662c12cf9253f7184e249d75ca4d44fabfb5c61b382305e4e5d054d3d9fd4f0071038d1285c2647e5fa2f5e1f651128fbaedcd929d8e360ce3089ec3e3865a7399463a983e03d5c2090c7bf9fdcb255d7ca3a451f539e27189e32047a31d0484808b7a5fe272a2c6e5f25c084c337ab3401e74f389c20de9f15d754d1514fdf5dc3dc232127c3df9fec8b4140fab73e3ebe1459b2e0023509b8abd2aa7e7ef859f38ef5e6f680ae3092b694c6394f52f6368b41277bd920181644754fe1ad822078", 0xd2}, {&(0x7f0000000840)="3b2fdf0e7d8e587ec59355cd18c59da7b229dedf07ed27d575f9123c5dcf130874a667eb1fcc514e2b7fce8788676b10847395cd559bb18de9d9f5f46b74621cca0ebbab6a56fe6d2b0527e892974053a944118dabb4ac31a148998c5b056302d0f72cb288d00842fc303fa8581adfb374b75f495c1c043cadc0a4ae842de41d606edd8c4987df6ec34e8fd80bd58abb7da1aba50e0953eb0a72df", 0x9b}, {&(0x7f0000000900)="c9b518f9e00492a206be0db8bd4f9c58dfc76b803d5ee6bcc07e0c4d7cbec3051a47aecfb2625c6287ca894cb2c016a4bfc5177d18e21417c1d9e79abdcfa6fe7036132edc7a4c42cd8c914b9aea53f26030a56adcb5b22ce8827ed4bdab7dd18b102424a260d4de1300ca4f0d26baca954294c9ffa98d1b522feb6a8f88a4762aab347249305f464a33d72d5b7e0158f84b9c22b1fdb9a0187a80fa81fe2f52950e40faffc26a65b18562", 0xab}, {&(0x7f00000009c0)="81591c01a5a3bdc254bafac9c8e188ad3296788f36d84e589ee05f31e43221e65cf61fefcc1f3766acc115a28746fb4b8b8476bd1bb6f4174ff424b43f7f0e8ebd6e13cd4d015fcb", 0x48}], 0x4, &(0x7f0000000a80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @broadcast, @empty}}}], 0x20}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r13, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x2000, 0xffffff0b}}, 0x10, 0x0}, 0x4040000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="2e00000011008188040f80ec598cbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}, {&(0x7f0000000640)="e59cf9f0c7677baba8fa576daf0bd2a713edff13112872af47386065a4369e5b924f1a3db8b33ca185f64a5739274bf93e734ace3b273f843238bfc926bae8f04456cf41b6f461ecec0c1976a7f52753f0f932a1bad21be81ba66a0bd21b4b4df6ff10f83028e1ef54606ad01d4b56f4897a9dd83ca8241771d7b2f7accfbd80eb74f40cd921584c348794eb0f862832cb3da7fed196508a3aa12cdb513785f6e17d0321e5da2443f358886166e0ea695bf3b0ba379cf7cc7038905ab8fd2d77c37501e9e318a7e515ce74fbd2f2c065a81b27", 0xd3}, {&(0x7f0000000180)="1b5d8022327dd83403db8ce7fde7c1cb53a07169c84a24a5ebea9b9f042ff187eff03e3081f0a2fd9b67ca3bc44a74a61aae38c3a9dddef7c1c6cac4edc2f01016617becc6abff55ef6dfa031e3eea9149f398938ec89e9c51e1f64c97970982c363ef633889cfe955e6111cc2c1a237dfd199c2e282547af4a848995a536b2173f6a2912330ebcc481a828720c545ec262027355b995e4d36f1a28a17d83fccdaad4ffa0446ad94905635ce88af2d20c8fa17943f53a3d0dafab0fda617a0ca755fab8482426c5a199d9c", 0xcb}, {&(0x7f0000000440)="16e6e5893dbd5b87e428952da618e4abf4e12af2221d8a5332e4258c0a786822369d12ae970c357f26af1ed21c27d1635a44a4c53caf0a06a11c74fb533a7303f4bf906ab7500aa6e24b5b39027722d4dd8e5a9286884dda45428a21bae7cd1bf1f9fed23bbe745b07819a31eeb89b6d59879a00cffda9c840bcc8cf8b7b6d5fa399513d6ef88ecfc97f9dc3d76da5fb32d65e650d8cc01f517f3e5c0b01b7626bc5fb293893ae0a96ce814c2931cf012fa8c92da22f768b2d9d1015d3d5d17e528deea79f88d9ae06a850a4cb5bb583854903e1", 0xd4}, {&(0x7f0000000340)="3796fa2b7b56568184152930d1402711f9c06d48ed788b2c6a952de866e18f6ff9a541dd7904d4b99287ed06545027226c581232775d9abd888a44138f0432f775329184", 0x44}], 0x5}, 0x0) 24.707014278s ago: executing program 2 (id=2015): ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xff04}], 0x1}, 0x80d1) (fail_nth: 67) 24.545788555s ago: executing program 3 (id=2016): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10000000, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.135274713s ago: executing program 1 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x34000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa71c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x20004890) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="840bb834fa9d4a850400"/28, @ANYRES32=r8, @ANYRES32, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x76, 0xe, &(0x7f0000000200)="151e057f955b983e3ac83ffe5fbf96f6355db23ba58709cf7140a6035e47538124b628f2d4a3fe692fdd45339d532dec80f8757a628171b5a00255e8eb8887ef70712bec62c5a504027e3303312448a7469dc8ddb9401c1c97eaddea8848753e8d9abd5fcf3b60bcc452d391865d6b3c4c1e88887e2b", &(0x7f0000000280)=""/14, 0x3, 0x0, 0x45, 0x3d, &(0x7f00000002c0)="4670ecb6ce2314d49a79eea95743c38afc098df298858f8d79207ba50cd8c099f75a8c6c43c80eb0f7e8ca66a917d76104f31c85eb5a3ecf7155ad44e8346cda65712f90a5", &(0x7f0000000340)="fe5fa09f0aa80501da3a60e7a0c648b75474603f18f3df9700c092e81c79c88946e4a4571e04c765676d4c99026e6f9f5958b3eb257bf788daa9e5ca18", 0xd1fb35563859782b, 0x0, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 24.088665155s ago: executing program 0 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1000000, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.068050476s ago: executing program 3 (id=2019): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) close(0x4) socket$kcm(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xbeb5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0, 0x0, 0x8c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x3, 0xcc}, 0x80, 0x0}, 0x88010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010718000000000000000f00000000000400000000000000"], 0x0, 0x26}, 0x28) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 24.019313129s ago: executing program 2 (id=2020): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x3, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x80) bpf$LINK_DETACH(0x22, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r4, &(0x7f0000000180)=ANY=[@ANYRESHEX=r2], 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0ffffff}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.910577893s ago: executing program 0 (id=2021): perf_event_open(&(0x7f0000000040)={0x2, 0x49, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa70c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x20010000) (async) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0xffffffffffffff10) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c9801288763"], 0x3e) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 23.511373551s ago: executing program 2 (id=2022): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xffffffff, 0x2}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x4, 0x7f, 0x19, 0x80, 0x0, 0xe5, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xf, 0x4f1, 0x8, 0x2, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x5) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000001000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) 419.443211ms ago: executing program 32 (id=2021): perf_event_open(&(0x7f0000000040)={0x2, 0x49, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa70c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xb, 0xffffffffffffffff, 0xb) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000002240)=@generic={&(0x7f0000001240)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x20010000) (async) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3e3}, 0xffffffffffffff10) (async) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9a, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x1) (async) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0334003c5c9801288763"], 0x3e) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x2ce, 0x0, 0x0, 0x41000}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 277.764087ms ago: executing program 33 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x18}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r2 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f0000000000)=[{0x0, 0x34000}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) close(0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa71c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x14, &(0x7f0000000040), 0x3b) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xfffd, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x20004890) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="840bb834fa9d4a850400"/28, @ANYRES32=r8, @ANYRES32, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x76, 0xe, &(0x7f0000000200)="151e057f955b983e3ac83ffe5fbf96f6355db23ba58709cf7140a6035e47538124b628f2d4a3fe692fdd45339d532dec80f8757a628171b5a00255e8eb8887ef70712bec62c5a504027e3303312448a7469dc8ddb9401c1c97eaddea8848753e8d9abd5fcf3b60bcc452d391865d6b3c4c1e88887e2b", &(0x7f0000000280)=""/14, 0x3, 0x0, 0x45, 0x3d, &(0x7f00000002c0)="4670ecb6ce2314d49a79eea95743c38afc098df298858f8d79207ba50cd8c099f75a8c6c43c80eb0f7e8ca66a917d76104f31c85eb5a3ecf7155ad44e8346cda65712f90a5", &(0x7f0000000340)="fe5fa09f0aa80501da3a60e7a0c648b75474603f18f3df9700c092e81c79c88946e4a4571e04c765676d4c99026e6f9f5958b3eb257bf788daa9e5ca18", 0xd1fb35563859782b, 0x0, 0x8}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 149.562493ms ago: executing program 34 (id=2022): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x21, 0x0, 0x0, 0x4, 0x2, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3, 0x4}, {0xffffffff, 0x2}]}]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000006c0)={0x2, 0x80, 0x4, 0x7f, 0x19, 0x80, 0x0, 0xe5, 0x1000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xf, 0x4f1, 0x8, 0x2, 0x2, 0x0, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0x5) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000001000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) 0s ago: executing program 35 (id=2019): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c23003f) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c23004a) close(0x4) socket$kcm(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xbeb5}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xbd0, 0x0, 0x8c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0xe000000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000200)=@caif=@dbg={0x25, 0x3, 0xcc}, 0x80, 0x0}, 0x88010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010718000000000000000f00000000000400000000000000"], 0x0, 0x26}, 0x28) socket$kcm(0x2, 0x5, 0x84) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b05c153}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000002400)=""/4073, 0xfe9}, {&(0x7f0000000300)=""/180, 0xb4}], 0x2}, 0x0) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 272.125815][ T9270] ? load_image+0x420/0x420 [ 272.130447][ T9270] ? __might_fault+0xaa/0x120 [ 272.135159][ T9270] ? __lock_acquire+0x7d40/0x7d40 [ 272.140222][ T9270] should_fail_ex+0x39d/0x4d0 [ 272.144978][ T9270] _copy_from_user+0x2f/0xe0 [ 272.149611][ T9270] ___sys_sendmsg+0x1c7/0x360 [ 272.154332][ T9270] ? __sys_sendmsg+0x2a0/0x2a0 [ 272.159165][ T9270] ? __lock_acquire+0x7d40/0x7d40 [ 272.164264][ T9270] __se_sys_sendmsg+0x1c2/0x2b0 [ 272.169140][ T9270] ? __x64_sys_sendmsg+0x80/0x80 [ 272.174223][ T9270] ? lockdep_hardirqs_on+0x98/0x150 [ 272.179804][ T9270] do_syscall_64+0x55/0xa0 [ 272.184238][ T9270] ? clear_bhb_loop+0x40/0x90 [ 272.188963][ T9270] ? clear_bhb_loop+0x40/0x90 [ 272.193705][ T9270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 272.199830][ T9270] RIP: 0033:0x7ff2cc99cdd9 [ 272.204387][ T9270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.224310][ T9270] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.232942][ T9270] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 272.241027][ T9270] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 272.249109][ T9270] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 272.257104][ T9270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.265186][ T9270] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 272.273205][ T9270] [ 272.289389][ T9271] netlink: 'syz.3.1224': attribute type 5 has an invalid length. [ 272.489537][ T9279] netlink: 'syz.2.1228': attribute type 5 has an invalid length. [ 273.047566][ T9301] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1236'. [ 273.508663][ T9310] netlink: 'syz.2.1239': attribute type 10 has an invalid length. [ 273.522471][ T9310] hsr0: entered promiscuous mode [ 273.532795][ T9310] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 273.569892][ T9310] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 273.586146][ T9310] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 273.608157][ T9310] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 273.696164][ T9312] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1240'. [ 273.945674][ T9320] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 274.992079][ T9324] netlink: 'syz.1.1243': attribute type 22 has an invalid length. [ 275.018424][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 275.254592][ T9338] FAULT_INJECTION: forcing a failure. [ 275.254592][ T9338] name failslab, interval 1, probability 0, space 0, times 0 [ 275.284440][ T9338] CPU: 0 PID: 9338 Comm: syz.1.1248 Not tainted syzkaller #0 [ 275.291908][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.302188][ T9338] Call Trace: [ 275.305582][ T9338] [ 275.308597][ T9338] dump_stack_lvl+0x18c/0x250 [ 275.313328][ T9338] ? sctp_sendmsg+0x1575/0x28c0 [ 275.318240][ T9338] ? ___sys_sendmsg+0x2a6/0x360 [ 275.323193][ T9338] ? show_regs_print_info+0x20/0x20 [ 275.328442][ T9338] ? load_image+0x420/0x420 [ 275.333013][ T9338] should_fail_ex+0x39d/0x4d0 [ 275.337914][ T9338] should_failslab+0x9/0x20 [ 275.342463][ T9338] slab_pre_alloc_hook+0x59/0x310 [ 275.347623][ T9338] ? sctp_add_bind_addr+0x8c/0x360 [ 275.352770][ T9338] __kmem_cache_alloc_node+0x53/0x250 [ 275.358189][ T9338] ? sctp_add_bind_addr+0x8c/0x360 [ 275.363336][ T9338] kmalloc_trace+0x2a/0xe0 [ 275.367782][ T9338] sctp_add_bind_addr+0x8c/0x360 [ 275.372739][ T9338] sctp_copy_local_addr_list+0x315/0x4f0 [ 275.378393][ T9338] ? sctp_copy_local_addr_list+0xa5/0x4f0 [ 275.384211][ T9338] ? sctp_do_8_2_transport_strike+0x8a0/0x8a0 [ 275.390295][ T9338] ? sctp_v4_is_any+0x35/0x60 [ 275.394985][ T9338] ? sctp_copy_one_addr+0x8c/0x350 [ 275.400138][ T9338] sctp_bind_addr_copy+0xb3/0x3c0 [ 275.405210][ T9338] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 275.411572][ T9338] sctp_connect_new_asoc+0x2f9/0x6a0 [ 275.416916][ T9338] ? __sctp_connect+0xd80/0xd80 [ 275.421908][ T9338] ? __local_bh_enable_ip+0x13a/0x1c0 [ 275.427319][ T9338] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 275.432987][ T9338] ? security_sctp_bind_connect+0x89/0xb0 [ 275.438759][ T9338] sctp_sendmsg+0x1575/0x28c0 [ 275.443556][ T9338] ? sctp_getsockopt+0xb60/0xb60 [ 275.448568][ T9338] ? aa_sk_perm+0x83c/0x970 [ 275.453119][ T9338] ? aa_af_perm+0x330/0x330 [ 275.457644][ T9338] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 275.464079][ T9338] ? sock_rps_record_flow+0x19/0x3f0 [ 275.469390][ T9338] ? inet_sendmsg+0xe9/0x2f0 [ 275.473996][ T9338] ? inet_send_prepare+0x260/0x260 [ 275.479308][ T9338] ____sys_sendmsg+0x5ba/0x960 [ 275.484089][ T9338] ? __lock_acquire+0x7d40/0x7d40 [ 275.489285][ T9338] ? __asan_memset+0x22/0x40 [ 275.493900][ T9338] ? __sys_sendmsg_sock+0x30/0x30 [ 275.499023][ T9338] ? __import_iovec+0x5f2/0x850 [ 275.503989][ T9338] ? import_iovec+0x73/0xa0 [ 275.508524][ T9338] ___sys_sendmsg+0x2a6/0x360 [ 275.513230][ T9338] ? get_pid_task+0x20/0x1e0 [ 275.517933][ T9338] ? __sys_sendmsg+0x2a0/0x2a0 [ 275.522738][ T9338] ? __lock_acquire+0x7d40/0x7d40 [ 275.527901][ T9338] __se_sys_sendmsg+0x1c2/0x2b0 [ 275.532880][ T9338] ? __x64_sys_sendmsg+0x80/0x80 [ 275.538063][ T9338] ? lockdep_hardirqs_on+0x98/0x150 [ 275.543287][ T9338] do_syscall_64+0x55/0xa0 [ 275.547716][ T9338] ? clear_bhb_loop+0x40/0x90 [ 275.552557][ T9338] ? clear_bhb_loop+0x40/0x90 [ 275.557292][ T9338] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 275.563225][ T9338] RIP: 0033:0x7fb98cf9cdd9 [ 275.567662][ T9338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.587594][ T9338] RSP: 002b:00007fb98ddcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.596122][ T9338] RAX: ffffffffffffffda RBX: 00007fb98d215fa0 RCX: 00007fb98cf9cdd9 [ 275.604282][ T9338] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 275.612266][ T9338] RBP: 00007fb98ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 275.620433][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.628511][ T9338] R13: 00007fb98d216038 R14: 00007fb98d215fa0 R15: 00007ffde270dd38 [ 275.636602][ T9338] [ 276.565962][ T9355] nr0: tun_chr_ioctl cmd 2147767520 [ 276.600063][ T9355] nr0: tun_chr_ioctl cmd 1074025684 [ 276.775860][ T9364] bond0: left allmulticast mode [ 276.781317][ T9364] bond_slave_0: left allmulticast mode [ 276.787061][ T9364] @0Ù: left allmulticast mode [ 276.792614][ T9364] bridge0: port 3(bond0) entered disabled state [ 276.810818][ T9364] bridge_slave_1: left allmulticast mode [ 276.825906][ T9364] bridge_slave_1: left promiscuous mode [ 276.833016][ T9364] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.845741][ T9364] bridge_slave_0: left allmulticast mode [ 276.852572][ T9364] bridge_slave_0: left promiscuous mode [ 276.860918][ T9364] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.931015][ T9368] FAULT_INJECTION: forcing a failure. [ 276.931015][ T9368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.958424][ T9368] CPU: 1 PID: 9368 Comm: syz.3.1260 Not tainted syzkaller #0 [ 276.965896][ T9368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.976006][ T9368] Call Trace: [ 276.979431][ T9368] [ 276.982411][ T9368] dump_stack_lvl+0x18c/0x250 [ 276.987254][ T9368] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 276.993518][ T9368] ? show_regs_print_info+0x20/0x20 [ 276.998900][ T9368] ? load_image+0x420/0x420 [ 277.003493][ T9368] should_fail_ex+0x39d/0x4d0 [ 277.008255][ T9368] _copy_from_user+0x2f/0xe0 [ 277.012920][ T9368] __sys_bpf+0x23e/0x890 [ 277.017193][ T9368] ? bpf_link_show_fdinfo+0x390/0x390 [ 277.022628][ T9368] ? lock_chain_count+0x20/0x20 [ 277.027509][ T9368] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 277.033886][ T9368] __x64_sys_bpf+0x7c/0x90 [ 277.038430][ T9368] do_syscall_64+0x55/0xa0 [ 277.042988][ T9368] ? clear_bhb_loop+0x40/0x90 [ 277.047782][ T9368] ? clear_bhb_loop+0x40/0x90 [ 277.052512][ T9368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.058768][ T9368] RIP: 0033:0x7faaced9cdd9 [ 277.063331][ T9368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.082998][ T9368] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 277.091448][ T9368] RAX: ffffffffffffffda RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 277.099555][ T9368] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 277.107718][ T9368] RBP: 00007faacfd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.115795][ T9368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.123868][ T9368] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 277.131965][ T9368] [ 277.711198][ T9380] netlink: 'syz.1.1266': attribute type 10 has an invalid length. [ 277.728310][ T9380] netlink: 'syz.1.1266': attribute type 10 has an invalid length. [ 277.743313][ T9380] netlink: 209216 bytes leftover after parsing attributes in process `syz.1.1266'. [ 277.855123][ T9380] openvswitch: netlink: Message has 4 unknown bytes. [ 278.419881][ T9404] netlink: 'syz.3.1274': attribute type 10 has an invalid length. [ 278.428062][ T9404] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1274'. [ 278.849841][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'. [ 278.895345][ T9421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'. [ 278.931248][ T9417] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1280'. [ 279.700597][ T9456] netlink: 'syz.2.1294': attribute type 10 has an invalid length. [ 279.716946][ T9456] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 279.724828][ T9456] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 279.738114][ T9456] bridge0: port 3(netdevsim0) entered disabled state [ 279.774887][ T9456] team0: Port device netdevsim0 added [ 280.104169][ T9471] netlink: 'syz.1.1301': attribute type 10 has an invalid length. [ 280.155736][ T9471] team0: Port device netdevsim0 removed [ 282.744601][ T9512] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1315'. [ 282.781143][ T9512] bridge_slave_1: entered promiscuous mode [ 283.311020][ T9521] netlink: 'syz.1.1319': attribute type 10 has an invalid length. [ 283.319371][ T9521] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1319'. [ 283.330188][ T9521] virt_wifi0: entered promiscuous mode [ 283.335714][ T9521] virt_wifi0: entered allmulticast mode [ 283.350971][ T9521] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 285.099862][ T9542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1326'. [ 285.235889][ T9545] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1327'. [ 285.748187][ T9555] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1331'. [ 285.796466][ T9555] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 286.865900][ T9569] FAULT_INJECTION: forcing a failure. [ 286.865900][ T9569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.907780][ T9569] CPU: 1 PID: 9569 Comm: syz.3.1336 Not tainted syzkaller #0 [ 286.915326][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 286.925504][ T9569] Call Trace: [ 286.928809][ T9569] [ 286.931771][ T9569] dump_stack_lvl+0x18c/0x250 [ 286.936496][ T9569] ? show_regs_print_info+0x20/0x20 [ 286.941818][ T9569] ? load_image+0x420/0x420 [ 286.946445][ T9569] ? __lock_acquire+0x7d40/0x7d40 [ 286.951708][ T9569] ? snprintf+0xe9/0x140 [ 286.955990][ T9569] should_fail_ex+0x39d/0x4d0 [ 286.960728][ T9569] _copy_to_user+0x2f/0xa0 [ 286.965421][ T9569] simple_read_from_buffer+0xe7/0x150 [ 286.970861][ T9569] proc_fail_nth_read+0x1e8/0x260 [ 286.975950][ T9569] ? proc_fault_inject_write+0x360/0x360 [ 286.981627][ T9569] ? fsnotify_perm+0x271/0x5e0 [ 286.986519][ T9569] ? proc_fault_inject_write+0x360/0x360 [ 286.992245][ T9569] vfs_read+0x28b/0x970 [ 286.996489][ T9569] ? kernel_read+0x1e0/0x1e0 [ 287.001304][ T9569] ? __fget_files+0x28/0x4b0 [ 287.006196][ T9569] ? __fget_files+0x28/0x4b0 [ 287.010863][ T9569] ? __fget_files+0x43d/0x4b0 [ 287.015589][ T9569] ? __fdget_pos+0x2a3/0x330 [ 287.020212][ T9569] ? ksys_read+0x75/0x260 [ 287.024707][ T9569] ksys_read+0x150/0x260 [ 287.029034][ T9569] ? vfs_write+0x990/0x990 [ 287.033587][ T9569] ? lockdep_hardirqs_on+0x98/0x150 [ 287.038816][ T9569] do_syscall_64+0x55/0xa0 [ 287.043258][ T9569] ? clear_bhb_loop+0x40/0x90 [ 287.048159][ T9569] ? clear_bhb_loop+0x40/0x90 [ 287.053056][ T9569] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 287.059104][ T9569] RIP: 0033:0x7faaced5d60e [ 287.063558][ T9569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 287.083301][ T9569] RSP: 002b:00007faacfd0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.091756][ T9569] RAX: ffffffffffffffda RBX: 00007faacfd0d6c0 RCX: 00007faaced5d60e [ 287.099935][ T9569] RDX: 000000000000000f RSI: 00007faacfd0d0a0 RDI: 000000000000000a [ 287.107929][ T9569] RBP: 00007faacfd0d090 R08: 0000000000000000 R09: 0000000000000000 [ 287.115924][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.124094][ T9569] R13: 00007faacf016128 R14: 00007faacf016090 R15: 00007ffdcb6c8188 [ 287.132203][ T9569] [ 288.403425][ T9601] netlink: 'syz.3.1348': attribute type 10 has an invalid length. [ 289.224384][ T9623] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.1356'. [ 289.234381][ T9623] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.1356'. [ 290.247413][ T9653] netlink: 'syz.3.1367': attribute type 10 has an invalid length. [ 290.266539][ T9653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1367'. [ 290.289434][ T9653] batman_adv: batadv0: Adding interface: macvlan1 [ 290.295937][ T9653] batman_adv: batadv0: The MTU of interface macvlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.339152][ T9653] batman_adv: batadv0: Interface activated: macvlan1 [ 290.465827][ T9656] syzkaller0: entered promiscuous mode [ 290.472733][ T9656] syzkaller0: entered allmulticast mode [ 293.279878][ T9697] netlink: 'syz.0.1383': attribute type 10 has an invalid length. [ 293.372740][ T9700] netlink: 'syz.3.1384': attribute type 10 has an invalid length. [ 293.388680][ T9700] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1384'. [ 293.725323][ T9706] syzkaller0: entered promiscuous mode [ 293.748711][ T9706] syzkaller0: entered allmulticast mode [ 296.906907][ T9762] syzkaller0: entered promiscuous mode [ 296.932469][ T9762] syzkaller0: entered allmulticast mode [ 297.002402][ T9761] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1405'. [ 297.096007][ T9761] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 297.105765][ T9761] CPU: 0 PID: 9761 Comm: syz.0.1405 Not tainted syzkaller #0 [ 297.113265][ T9761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.123620][ T9761] Call Trace: [ 297.126907][ T9761] [ 297.129858][ T9761] dump_stack_lvl+0x18c/0x250 [ 297.134592][ T9761] ? show_regs_print_info+0x20/0x20 [ 297.139843][ T9761] ? load_image+0x420/0x420 [ 297.144418][ T9761] sysfs_warn_dup+0x8e/0xa0 [ 297.148993][ T9761] sysfs_do_create_link_sd+0xc0/0x110 [ 297.154417][ T9761] device_add_class_symlinks+0x1cf/0x240 [ 297.160113][ T9761] device_add+0x507/0xc20 [ 297.164503][ T9761] wiphy_register+0x1dad/0x2ae0 [ 297.169440][ T9761] ? cfg80211_event_work+0x40/0x40 [ 297.174684][ T9761] ? minstrel_ht_alloc+0x88a/0x990 [ 297.179859][ T9761] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 297.185975][ T9761] ieee80211_register_hw+0x3464/0x4250 [ 297.191553][ T9761] ? ieee80211_tasklet_handler+0x20/0x20 [ 297.197234][ T9761] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 297.203219][ T9761] ? __debug_object_init+0xec/0x450 [ 297.208557][ T9761] ? __asan_memset+0x22/0x40 [ 297.213190][ T9761] ? __hrtimer_init+0x186/0x270 [ 297.218104][ T9761] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 297.224004][ T9761] ? mac80211_hwsim_free+0x220/0x220 [ 297.229320][ T9761] ? rcu_is_watching+0x15/0xb0 [ 297.234089][ T9761] ? kstrndup+0xbd/0x140 [ 297.238371][ T9761] hwsim_new_radio_nl+0xdc9/0x1a90 [ 297.243518][ T9761] ? __nla_validate+0x50/0x50 [ 297.248417][ T9761] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 297.254777][ T9761] ? __nla_parse+0x40/0x50 [ 297.259218][ T9761] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 297.265572][ T9761] genl_family_rcv_msg_doit+0x211/0x310 [ 297.271231][ T9761] ? end_current_label_crit_section+0x170/0x170 [ 297.277500][ T9761] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 297.283431][ T9761] ? bpf_lsm_capable+0x9/0x10 [ 297.288311][ T9761] ? security_capable+0x89/0xb0 [ 297.293278][ T9761] genl_rcv_msg+0x619/0x7a0 [ 297.297804][ T9761] ? genl_bind+0x360/0x360 [ 297.302266][ T9761] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 297.308629][ T9761] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 297.315268][ T9761] ? ref_tracker_free+0x690/0x840 [ 297.320333][ T9761] netlink_rcv_skb+0x241/0x4d0 [ 297.325122][ T9761] ? genl_bind+0x360/0x360 [ 297.329574][ T9761] ? netlink_ack+0x1180/0x1180 [ 297.334406][ T9761] ? __lock_acquire+0x7d40/0x7d40 [ 297.339493][ T9761] ? down_read+0x1ac/0x2e0 [ 297.343950][ T9761] genl_rcv+0x28/0x40 [ 297.348250][ T9761] netlink_unicast+0x751/0x8d0 [ 297.353073][ T9761] netlink_sendmsg+0x8d0/0xbf0 [ 297.357877][ T9761] ? netlink_getsockopt+0x590/0x590 [ 297.363112][ T9761] ? aa_sock_msg_perm+0x94/0x150 [ 297.368075][ T9761] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.373390][ T9761] ? security_socket_sendmsg+0x80/0xa0 [ 297.378870][ T9761] ? netlink_getsockopt+0x590/0x590 [ 297.384267][ T9761] ____sys_sendmsg+0x5ba/0x960 [ 297.389053][ T9761] ? __asan_memset+0x22/0x40 [ 297.393771][ T9761] ? __sys_sendmsg_sock+0x30/0x30 [ 297.398804][ T9761] ? __import_iovec+0x5f2/0x850 [ 297.404219][ T9761] ? import_iovec+0x73/0xa0 [ 297.408794][ T9761] ___sys_sendmsg+0x2a6/0x360 [ 297.413641][ T9761] ? __sys_sendmsg+0x2a0/0x2a0 [ 297.418467][ T9761] ? trace_call_bpf+0xc3/0x6c0 [ 297.423391][ T9761] __se_sys_sendmsg+0x1c2/0x2b0 [ 297.428360][ T9761] ? __x64_sys_sendmsg+0x80/0x80 [ 297.433338][ T9761] ? lockdep_hardirqs_on+0x98/0x150 [ 297.438562][ T9761] do_syscall_64+0x55/0xa0 [ 297.442997][ T9761] ? clear_bhb_loop+0x40/0x90 [ 297.447690][ T9761] ? clear_bhb_loop+0x40/0x90 [ 297.452475][ T9761] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.458484][ T9761] RIP: 0033:0x7fa4ecf9cdd9 [ 297.463009][ T9761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.482908][ T9761] RSP: 002b:00007fa4edef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.491342][ T9761] RAX: ffffffffffffffda RBX: 00007fa4ed215fa0 RCX: 00007fa4ecf9cdd9 [ 297.499343][ T9761] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 297.507355][ T9761] RBP: 00007fa4ed032d69 R08: 0000000000000000 R09: 0000000000000000 [ 297.515349][ T9761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.523420][ T9761] R13: 00007fa4ed216038 R14: 00007fa4ed215fa0 R15: 00007fffccb21128 [ 297.531423][ T9761] [ 297.538429][ T9774] FAULT_INJECTION: forcing a failure. [ 297.538429][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.678351][ T9774] CPU: 0 PID: 9774 Comm: syz.3.1407 Not tainted syzkaller #0 [ 297.685815][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.696131][ T9774] Call Trace: [ 297.699454][ T9774] [ 297.702443][ T9774] dump_stack_lvl+0x18c/0x250 [ 297.707184][ T9774] ? show_regs_print_info+0x20/0x20 [ 297.712533][ T9774] ? load_image+0x420/0x420 [ 297.717105][ T9774] ? __might_fault+0xaa/0x120 [ 297.722025][ T9774] ? __lock_acquire+0x7d40/0x7d40 [ 297.727130][ T9774] should_fail_ex+0x39d/0x4d0 [ 297.731976][ T9774] _copy_from_user+0x2f/0xe0 [ 297.736730][ T9774] kstrtouint_from_user+0xde/0x170 [ 297.741918][ T9774] ? kstrtol_from_user+0x190/0x190 [ 297.747112][ T9774] proc_fail_nth_write+0x8f/0x250 [ 297.752197][ T9774] ? proc_fail_nth_read+0x260/0x260 [ 297.757496][ T9774] ? proc_fail_nth_read+0x260/0x260 [ 297.762822][ T9774] vfs_write+0x296/0x990 [ 297.767126][ T9774] ? file_end_write+0x250/0x250 [ 297.772015][ T9774] ? __fget_files+0x28/0x4b0 [ 297.776666][ T9774] ? __fget_files+0x28/0x4b0 [ 297.781307][ T9774] ? __fget_files+0x43d/0x4b0 [ 297.786010][ T9774] ? __fdget_pos+0x2a3/0x330 [ 297.790608][ T9774] ? ksys_write+0x75/0x260 [ 297.795060][ T9774] ksys_write+0x150/0x260 [ 297.799489][ T9774] ? __ia32_sys_read+0x90/0x90 [ 297.804480][ T9774] ? lockdep_hardirqs_on+0x98/0x150 [ 297.809706][ T9774] do_syscall_64+0x55/0xa0 [ 297.814135][ T9774] ? clear_bhb_loop+0x40/0x90 [ 297.818825][ T9774] ? clear_bhb_loop+0x40/0x90 [ 297.823541][ T9774] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 297.829464][ T9774] RIP: 0033:0x7faaced5d60e [ 297.834007][ T9774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.853799][ T9774] RSP: 002b:00007faacfd0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 297.862228][ T9774] RAX: ffffffffffffffda RBX: 00007faacfd0d6c0 RCX: 00007faaced5d60e [ 297.870248][ T9774] RDX: 0000000000000001 RSI: 00007faacfd0d0a0 RDI: 0000000000000008 [ 297.878327][ T9774] RBP: 00007faacfd0d090 R08: 0000000000000000 R09: 0000000000000000 [ 297.886337][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.894325][ T9774] R13: 00007faacf016128 R14: 00007faacf016090 R15: 00007ffdcb6c8188 [ 297.902322][ T9774] [ 299.194522][ T9807] syz.0.1418: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 299.254556][ T9807] CPU: 0 PID: 9807 Comm: syz.0.1418 Not tainted syzkaller #0 [ 299.262018][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.272122][ T9807] Call Trace: [ 299.275437][ T9807] [ 299.278408][ T9807] dump_stack_lvl+0x18c/0x250 [ 299.283156][ T9807] ? show_regs_print_info+0x20/0x20 [ 299.288395][ T9807] ? load_image+0x420/0x420 [ 299.292962][ T9807] ? __rcu_read_unlock+0x7c/0xd0 [ 299.298047][ T9807] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 299.304523][ T9807] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 299.311100][ T9807] warn_alloc+0x246/0x340 [ 299.315561][ T9807] ? stack_trace_save+0xaa/0x100 [ 299.320544][ T9807] ? zone_watermark_ok_safe+0x230/0x230 [ 299.326152][ T9807] ? kasan_set_track+0x5f/0x70 [ 299.330998][ T9807] ? kasan_set_track+0x4e/0x70 [ 299.335804][ T9807] ? __kasan_kmalloc+0x8f/0xa0 [ 299.340688][ T9807] ? xsk_init_queue+0xad/0x100 [ 299.345509][ T9807] ? xsk_setsockopt+0x4e5/0x760 [ 299.350392][ T9807] ? do_sock_setsockopt+0x175/0x1a0 [ 299.355619][ T9807] ? __x64_sys_setsockopt+0x182/0x200 [ 299.361028][ T9807] __vmalloc_node_range+0x126/0x1330 [ 299.366389][ T9807] ? free_vm_area+0x50/0x50 [ 299.370939][ T9807] vmalloc_user+0x74/0x80 [ 299.375305][ T9807] ? xskq_create+0xbf/0x170 [ 299.379843][ T9807] xskq_create+0xbf/0x170 [ 299.384210][ T9807] xsk_init_queue+0xad/0x100 [ 299.388847][ T9807] xsk_setsockopt+0x4e5/0x760 [ 299.393577][ T9807] ? xsk_poll+0x680/0x680 [ 299.397954][ T9807] ? __fget_files+0x28/0x4b0 [ 299.402566][ T9807] ? __fget_files+0x28/0x4b0 [ 299.407290][ T9807] ? aa_sock_opt_perm+0x74/0x100 [ 299.412285][ T9807] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 299.417967][ T9807] ? security_socket_setsockopt+0x7e/0xa0 [ 299.423709][ T9807] ? xsk_poll+0x680/0x680 [ 299.428057][ T9807] do_sock_setsockopt+0x175/0x1a0 [ 299.433125][ T9807] ? __fdget+0x180/0x210 [ 299.437404][ T9807] __x64_sys_setsockopt+0x182/0x200 [ 299.442619][ T9807] do_syscall_64+0x55/0xa0 [ 299.447075][ T9807] ? clear_bhb_loop+0x40/0x90 [ 299.451786][ T9807] ? clear_bhb_loop+0x40/0x90 [ 299.456487][ T9807] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 299.462449][ T9807] RIP: 0033:0x7fa4ecf9cdd9 [ 299.466897][ T9807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.486530][ T9807] RSP: 002b:00007fa4eded1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 299.495053][ T9807] RAX: ffffffffffffffda RBX: 00007fa4ed216090 RCX: 00007fa4ecf9cdd9 [ 299.503043][ T9807] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 299.511027][ T9807] RBP: 00007fa4ed032d69 R08: 0000000000000004 R09: 0000000000000000 [ 299.519025][ T9807] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 299.527013][ T9807] R13: 00007fa4ed216128 R14: 00007fa4ed216090 R15: 00007fffccb21128 [ 299.535010][ T9807] [ 299.559323][ T9812] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1419'. [ 299.601421][ T9807] Mem-Info: [ 299.604614][ T9807] active_anon:5887 inactive_anon:0 isolated_anon:0 [ 299.604614][ T9807] active_file:13378 inactive_file:40035 isolated_file:0 [ 299.604614][ T9807] unevictable:768 dirty:148 writeback:0 [ 299.604614][ T9807] slab_reclaimable:10740 slab_unreclaimable:93923 [ 299.604614][ T9807] mapped:25695 shmem:1361 pagetables:558 [ 299.604614][ T9807] sec_pagetables:0 bounce:0 [ 299.604614][ T9807] kernel_misc_reclaimable:0 [ 299.604614][ T9807] free:1348056 free_pcp:9969 free_cma:0 [ 299.665808][ T9804] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1417'. [ 299.668135][ T9807] Node 0 active_anon:23948kB inactive_anon:0kB active_file:53512kB inactive_file:159936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102780kB dirty:592kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10972kB pagetables:2232kB sec_pagetables:0kB all_unreclaimable? no [ 299.742648][ T9807] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 299.808347][ T9807] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.844581][ T9807] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 299.854289][ T9807] Node 0 DMA32 free:1488176kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:25312kB inactive_anon:0kB active_file:53512kB inactive_file:159108kB unevictable:1536kB writepending:592kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:18108kB local_pcp:7696kB free_cma:0kB [ 299.903622][ T9807] lowmem_reserve[]: 0 0 0 0 0 [ 299.918290][ T9807] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 299.970995][ T9807] lowmem_reserve[]: 0 0 0 0 0 [ 299.975863][ T9807] Node 1 Normal free:3887672kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21308kB local_pcp:11416kB free_cma:0kB [ 300.048395][ T9807] lowmem_reserve[]: 0 0 0 0 0 [ 300.053252][ T9807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 300.106834][ T9807] Node 0 DMA32: 1310*4kB (UM) 855*8kB (UM) 1284*16kB (UME) 451*32kB (M) 480*64kB (UME) 141*128kB (UME) 79*256kB (UME) 32*512kB (UM) 25*1024kB (UM) 5*2048kB (M) 322*4096kB (M) = 1487184kB [ 300.137274][ T9807] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 300.156125][ T9807] Node 1 Normal: 178*4kB (UME) 56*8kB (UME) 51*16kB (UME) 60*32kB (UME) 22*64kB (UME) 5*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3887672kB [ 300.175237][ T9807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.209773][ T9807] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.237924][ T9807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 300.260747][ T9807] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 300.278288][ T9807] 54774 total pagecache pages [ 300.283016][ T9807] 0 pages in swap cache [ 300.287199][ T9807] Free swap = 124996kB [ 300.293550][ T9807] Total swap = 124996kB [ 300.299242][ T9807] 2097051 pages RAM [ 300.303107][ T9807] 0 pages HighMem/MovableOnly [ 300.307817][ T9807] 416927 pages reserved [ 300.312697][ T9807] 0 pages cma reserved [ 300.682977][ T9837] -1: renamed from syzkaller0 [ 301.197291][ T9851] FAULT_INJECTION: forcing a failure. [ 301.197291][ T9851] name failslab, interval 1, probability 0, space 0, times 0 [ 301.236540][ T9851] CPU: 1 PID: 9851 Comm: syz.3.1436 Not tainted syzkaller #0 [ 301.244097][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.254896][ T9851] Call Trace: [ 301.258220][ T9851] [ 301.261199][ T9851] dump_stack_lvl+0x18c/0x250 [ 301.266292][ T9851] ? show_regs_print_info+0x20/0x20 [ 301.271645][ T9851] ? load_image+0x420/0x420 [ 301.276195][ T9851] ? __might_sleep+0xe0/0xe0 [ 301.280825][ T9851] ? __lock_acquire+0x7d40/0x7d40 [ 301.286162][ T9851] ? lock_chain_count+0x20/0x20 [ 301.291087][ T9851] should_fail_ex+0x39d/0x4d0 [ 301.295909][ T9851] should_failslab+0x9/0x20 [ 301.300457][ T9851] slab_pre_alloc_hook+0x59/0x310 [ 301.305544][ T9851] kmem_cache_alloc_node+0x60/0x320 [ 301.310790][ T9851] ? __alloc_skb+0x103/0x2c0 [ 301.315408][ T9851] __alloc_skb+0x103/0x2c0 [ 301.319852][ T9851] netlink_sendmsg+0x66a/0xbf0 [ 301.324826][ T9851] ? netlink_getsockopt+0x590/0x590 [ 301.330106][ T9851] ? aa_sock_msg_perm+0x94/0x150 [ 301.335161][ T9851] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.340637][ T9851] ? security_socket_sendmsg+0x80/0xa0 [ 301.346114][ T9851] ? netlink_getsockopt+0x590/0x590 [ 301.351331][ T9851] ____sys_sendmsg+0x5ba/0x960 [ 301.356107][ T9851] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 301.362287][ T9851] ? __asan_memset+0x22/0x40 [ 301.367066][ T9851] ? __sys_sendmsg_sock+0x30/0x30 [ 301.372101][ T9851] ? __import_iovec+0x5f2/0x850 [ 301.376977][ T9851] ? import_iovec+0x73/0xa0 [ 301.381515][ T9851] ___sys_sendmsg+0x2a6/0x360 [ 301.386255][ T9851] ? __sys_sendmsg+0x2a0/0x2a0 [ 301.391059][ T9851] ? perf_trace_preemptirq_template+0xac/0x330 [ 301.397253][ T9851] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 301.403269][ T9851] ? lockdep_hardirqs_on+0x98/0x150 [ 301.408501][ T9851] ? kasan_check_range+0x8f/0x290 [ 301.413724][ T9851] __se_sys_sendmsg+0x1c2/0x2b0 [ 301.418591][ T9851] ? __x64_sys_sendmsg+0x80/0x80 [ 301.423578][ T9851] ? syscall_enter_from_user_mode+0x2e/0x80 [ 301.429530][ T9851] do_syscall_64+0x55/0xa0 [ 301.434073][ T9851] ? clear_bhb_loop+0x40/0x90 [ 301.438962][ T9851] ? clear_bhb_loop+0x40/0x90 [ 301.443770][ T9851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 301.449690][ T9851] RIP: 0033:0x7faaced9cdd9 [ 301.454124][ T9851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.473843][ T9851] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.482400][ T9851] RAX: ffffffffffffffda RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 301.490393][ T9851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 301.498582][ T9851] RBP: 00007faacfd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 301.506753][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.514738][ T9851] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 301.522742][ T9851] [ 301.598615][ T9859] syzkaller0: entered promiscuous mode [ 301.604533][ T9859] syzkaller0: entered allmulticast mode [ 302.891489][ T9878] FAULT_INJECTION: forcing a failure. [ 302.891489][ T9878] name failslab, interval 1, probability 0, space 0, times 0 [ 302.904567][ T9878] CPU: 0 PID: 9878 Comm: syz.2.1445 Not tainted syzkaller #0 [ 302.912086][ T9878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 302.922282][ T9878] Call Trace: [ 302.925685][ T9878] [ 302.928665][ T9878] dump_stack_lvl+0x18c/0x250 [ 302.933377][ T9878] ? show_regs_print_info+0x20/0x20 [ 302.938596][ T9878] ? load_image+0x420/0x420 [ 302.943158][ T9878] ? __might_sleep+0xe0/0xe0 [ 302.947851][ T9878] ? __lock_acquire+0x7d40/0x7d40 [ 302.953032][ T9878] should_fail_ex+0x39d/0x4d0 [ 302.957909][ T9878] should_failslab+0x9/0x20 [ 302.962462][ T9878] slab_pre_alloc_hook+0x59/0x310 [ 302.967966][ T9878] ? __lock_acquire+0x7d40/0x7d40 [ 302.973051][ T9878] kmem_cache_alloc_node+0x60/0x320 [ 302.978282][ T9878] ? __alloc_skb+0x103/0x2c0 [ 302.982908][ T9878] __alloc_skb+0x103/0x2c0 [ 302.987449][ T9878] netlink_sendmsg+0x66a/0xbf0 [ 302.992340][ T9878] ? netlink_getsockopt+0x590/0x590 [ 302.997615][ T9878] ? aa_sock_msg_perm+0x94/0x150 [ 303.002833][ T9878] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 303.008224][ T9878] ? security_socket_sendmsg+0x80/0xa0 [ 303.013809][ T9878] ? netlink_getsockopt+0x590/0x590 [ 303.019039][ T9878] ____sys_sendmsg+0x5ba/0x960 [ 303.023912][ T9878] ? __asan_memset+0x22/0x40 [ 303.028605][ T9878] ? __sys_sendmsg_sock+0x30/0x30 [ 303.033642][ T9878] ? __import_iovec+0x5f2/0x850 [ 303.038516][ T9878] ? import_iovec+0x73/0xa0 [ 303.043037][ T9878] ___sys_sendmsg+0x2a6/0x360 [ 303.048359][ T9878] ? __sys_sendmsg+0x2a0/0x2a0 [ 303.053190][ T9878] ? __lock_acquire+0x7d40/0x7d40 [ 303.058266][ T9878] __se_sys_sendmsg+0x1c2/0x2b0 [ 303.063177][ T9878] ? __x64_sys_sendmsg+0x80/0x80 [ 303.068148][ T9878] ? lockdep_hardirqs_on+0x98/0x150 [ 303.073365][ T9878] do_syscall_64+0x55/0xa0 [ 303.077788][ T9878] ? clear_bhb_loop+0x40/0x90 [ 303.082480][ T9878] ? clear_bhb_loop+0x40/0x90 [ 303.087283][ T9878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 303.093203][ T9878] RIP: 0033:0x7ff2cc99cdd9 [ 303.097667][ T9878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.117824][ T9878] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.126254][ T9878] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 303.134243][ T9878] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 303.142318][ T9878] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 303.150323][ T9878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.158304][ T9878] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 303.166487][ T9878] [ 304.181847][ T9880] netlink: 'syz.2.1446': attribute type 5 has an invalid length. [ 304.255053][ T9882] netlink: 'syz.0.1448': attribute type 5 has an invalid length. [ 304.315593][ T9884] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1447'. [ 304.739360][ T9901] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1455'. [ 304.905731][ T9908] netlink: 'syz.1.1458': attribute type 10 has an invalid length. [ 305.008594][ T9908] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 305.063297][ T9908] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 305.118784][ T9908] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 305.144781][ T9908] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 305.158773][ T9910] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1459'. [ 305.337958][ T9912] batadv0: left allmulticast mode [ 305.348320][ T9912] bridge0: port 2(batadv0) entered disabled state [ 305.516374][ T9919] netlink: 16358 bytes leftover after parsing attributes in process `syz.2.1460'. [ 305.533118][ T9912] bridge_slave_0: left allmulticast mode [ 305.546258][ T9912] bridge_slave_0: left promiscuous mode [ 305.563282][ T9912] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.605579][ T9922] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1463'. [ 305.640331][ T9922] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1463'. [ 305.924857][ T9916] netlink: 'syz.1.1461': attribute type 10 has an invalid length. [ 305.991285][ T9916] team0: Port device geneve1 added [ 305.998169][ T9917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1460'. [ 306.008670][ T9924] netlink: 'syz.0.1464': attribute type 22 has an invalid length. [ 306.019022][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1464'. [ 306.111812][ T9931] FAULT_INJECTION: forcing a failure. [ 306.111812][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 306.135203][ T9931] CPU: 0 PID: 9931 Comm: syz.1.1467 Not tainted syzkaller #0 [ 306.142701][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 306.152889][ T9931] Call Trace: [ 306.156184][ T9931] [ 306.159157][ T9931] dump_stack_lvl+0x18c/0x250 [ 306.163916][ T9931] ? fib_rules_lookup+0x9c/0xb40 [ 306.168894][ T9931] ? show_regs_print_info+0x20/0x20 [ 306.174124][ T9931] ? load_image+0x420/0x420 [ 306.178744][ T9931] ? fib_rules_lookup+0x9c/0xb40 [ 306.183743][ T9931] should_fail_ex+0x39d/0x4d0 [ 306.188466][ T9931] should_failslab+0x9/0x20 [ 306.193154][ T9931] slab_pre_alloc_hook+0x59/0x310 [ 306.198217][ T9931] kmem_cache_alloc+0x5a/0x2d0 [ 306.203013][ T9931] ? dst_alloc+0x105/0x170 [ 306.207453][ T9931] dst_alloc+0x105/0x170 [ 306.211800][ T9931] ip_route_output_key_hash_rcu+0x14f6/0x2370 [ 306.217972][ T9931] ? ip_route_output_key_hash_rcu+0x1321/0x2370 [ 306.224359][ T9931] ? ip_route_output_key_hash+0x13d/0x330 [ 306.230236][ T9931] ip_route_output_key_hash+0x1f3/0x330 [ 306.235817][ T9931] ? ip_route_input_rcu+0x30f0/0x30f0 [ 306.241217][ T9931] ? crng_make_state+0x350/0x700 [ 306.246476][ T9931] ? lockdep_hardirqs_on+0x98/0x150 [ 306.251737][ T9931] ip_route_output_flow+0x2a/0x150 [ 306.256878][ T9931] sctp_v4_get_dst+0x400/0x1230 [ 306.261976][ T9931] ? sctp_v4_xmit+0xde0/0xde0 [ 306.266667][ T9931] ? _get_random_bytes+0x1e8/0x250 [ 306.271808][ T9931] ? _raw_spin_unlock+0x40/0x40 [ 306.276688][ T9931] ? dst_release+0x72/0x1a0 [ 306.281388][ T9931] sctp_transport_route+0x10b/0x2c0 [ 306.286648][ T9931] sctp_assoc_add_peer+0x650/0x1390 [ 306.291897][ T9931] sctp_connect_new_asoc+0x323/0x6a0 [ 306.297303][ T9931] ? __sctp_connect+0xd80/0xd80 [ 306.302171][ T9931] ? __local_bh_enable_ip+0x13a/0x1c0 [ 306.307566][ T9931] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 306.313148][ T9931] ? security_sctp_bind_connect+0x89/0xb0 [ 306.318979][ T9931] sctp_sendmsg+0x1575/0x28c0 [ 306.323685][ T9931] ? sctp_getsockopt+0xb60/0xb60 [ 306.328733][ T9931] ? aa_sk_perm+0x83c/0x970 [ 306.333265][ T9931] ? aa_af_perm+0x330/0x330 [ 306.337781][ T9931] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 306.344243][ T9931] ? sock_rps_record_flow+0x19/0x3f0 [ 306.349581][ T9931] ? inet_sendmsg+0xe9/0x2f0 [ 306.354183][ T9931] ? inet_send_prepare+0x260/0x260 [ 306.359316][ T9931] ____sys_sendmsg+0x5ba/0x960 [ 306.364097][ T9931] ? __lock_acquire+0x7d40/0x7d40 [ 306.369226][ T9931] ? __asan_memset+0x22/0x40 [ 306.374092][ T9931] ? __sys_sendmsg_sock+0x30/0x30 [ 306.379127][ T9931] ? __import_iovec+0x5f2/0x850 [ 306.384517][ T9931] ? import_iovec+0x73/0xa0 [ 306.389035][ T9931] ___sys_sendmsg+0x2a6/0x360 [ 306.393727][ T9931] ? get_pid_task+0x20/0x1e0 [ 306.398542][ T9931] ? __sys_sendmsg+0x2a0/0x2a0 [ 306.403343][ T9931] ? __lock_acquire+0x7d40/0x7d40 [ 306.408425][ T9931] __se_sys_sendmsg+0x1c2/0x2b0 [ 306.413402][ T9931] ? __x64_sys_sendmsg+0x80/0x80 [ 306.418365][ T9931] ? lockdep_hardirqs_on+0x98/0x150 [ 306.423715][ T9931] do_syscall_64+0x55/0xa0 [ 306.428185][ T9931] ? clear_bhb_loop+0x40/0x90 [ 306.433088][ T9931] ? clear_bhb_loop+0x40/0x90 [ 306.437782][ T9931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.443738][ T9931] RIP: 0033:0x7fb98cf9cdd9 [ 306.448276][ T9931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.467997][ T9931] RSP: 002b:00007fb98ddcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.476431][ T9931] RAX: ffffffffffffffda RBX: 00007fb98d215fa0 RCX: 00007fb98cf9cdd9 [ 306.484419][ T9931] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 306.492405][ T9931] RBP: 00007fb98ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 306.500389][ T9931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.508546][ T9931] R13: 00007fb98d216038 R14: 00007fb98d215fa0 R15: 00007ffde270dd38 [ 306.516721][ T9931] [ 308.093722][ T9962] FAULT_INJECTION: forcing a failure. [ 308.093722][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 308.107297][ T9962] CPU: 0 PID: 9962 Comm: syz.2.1477 Not tainted syzkaller #0 [ 308.115028][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.125145][ T9962] Call Trace: [ 308.128438][ T9962] [ 308.131384][ T9962] dump_stack_lvl+0x18c/0x250 [ 308.136181][ T9962] ? show_regs_print_info+0x20/0x20 [ 308.141401][ T9962] ? load_image+0x420/0x420 [ 308.145926][ T9962] ? __might_sleep+0xe0/0xe0 [ 308.150535][ T9962] ? __lock_acquire+0x7d40/0x7d40 [ 308.155667][ T9962] should_fail_ex+0x39d/0x4d0 [ 308.160377][ T9962] should_failslab+0x9/0x20 [ 308.164899][ T9962] slab_pre_alloc_hook+0x59/0x310 [ 308.169944][ T9962] ? perf_tp_event+0x1520/0x1520 [ 308.174907][ T9962] ? __get_vm_area_node+0x125/0x370 [ 308.180128][ T9962] __kmem_cache_alloc_node+0x53/0x250 [ 308.185526][ T9962] ? __get_vm_area_node+0x125/0x370 [ 308.190914][ T9962] kmalloc_node_trace+0x26/0xe0 [ 308.195807][ T9962] __get_vm_area_node+0x125/0x370 [ 308.200857][ T9962] __vmalloc_node_range+0x36e/0x1330 [ 308.206247][ T9962] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 308.212043][ T9962] ? free_vm_area+0x50/0x50 [ 308.216664][ T9962] ? end_current_label_crit_section+0x170/0x170 [ 308.223095][ T9962] ? perf_trace_lock_acquire+0x104/0x410 [ 308.228952][ T9962] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 308.234530][ T9962] __vmalloc+0x7a/0x90 [ 308.238625][ T9962] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 308.244188][ T9962] bpf_prog_alloc_no_stats+0x47/0x440 [ 308.249575][ T9962] ? bpf_prog_alloc+0x2b/0x1a0 [ 308.254372][ T9962] bpf_prog_alloc+0x3d/0x1a0 [ 308.258993][ T9962] bpf_prog_load+0x6eb/0x1670 [ 308.263782][ T9962] ? map_freeze+0x420/0x420 [ 308.268572][ T9962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.274856][ T9962] ? lockdep_hardirqs_on+0x98/0x150 [ 308.280424][ T9962] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 308.286610][ T9962] ? security_bpf+0x44/0xa0 [ 308.291407][ T9962] ? security_bpf+0x7e/0xa0 [ 308.296024][ T9962] __sys_bpf+0x5ba/0x890 [ 308.300287][ T9962] ? bpf_link_show_fdinfo+0x390/0x390 [ 308.305771][ T9962] ? lock_chain_count+0x20/0x20 [ 308.310646][ T9962] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 308.316649][ T9962] __x64_sys_bpf+0x7c/0x90 [ 308.321175][ T9962] do_syscall_64+0x55/0xa0 [ 308.325693][ T9962] ? clear_bhb_loop+0x40/0x90 [ 308.330414][ T9962] ? clear_bhb_loop+0x40/0x90 [ 308.335112][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.341294][ T9962] RIP: 0033:0x7ff2cc99cdd9 [ 308.345725][ T9962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.365434][ T9962] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.373952][ T9962] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 308.381940][ T9962] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 308.389924][ T9962] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 308.397908][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.405889][ T9962] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 308.413899][ T9962] [ 308.742982][ T9975] netlink: 'syz.2.1482': attribute type 10 has an invalid length. [ 309.406840][ T9996] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 309.431008][ T9996] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1490'. [ 309.441226][ T9996] batadv0: left allmulticast mode [ 309.447717][ T9996] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 310.255731][T10019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'. [ 310.278745][T10019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'. [ 310.305797][T10015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1497'. [ 312.097396][T10102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1511'. [ 312.178797][T10105] netlink: 'syz.3.1512': attribute type 10 has an invalid length. [ 312.193788][T10105] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 312.219491][T10105] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 312.227029][T10105] bridge0: port 3(netdevsim0) entered disabled state [ 312.321232][T10111] netlink: 'syz.1.1515': attribute type 10 has an invalid length. [ 312.450416][T10112] netlink: 'syz.2.1514': attribute type 3 has an invalid length. [ 312.468357][T10112] netlink: 'syz.2.1514': attribute type 16 has an invalid length. [ 312.476352][T10112] netlink: 'syz.2.1514': attribute type 18 has an invalid length. [ 312.508200][T10112] netlink: 'syz.2.1514': attribute type 20 has an invalid length. [ 312.537146][T10112] netlink: 'syz.2.1514': attribute type 25 has an invalid length. [ 314.300383][T10162] FAULT_INJECTION: forcing a failure. [ 314.300383][T10162] name failslab, interval 1, probability 0, space 0, times 0 [ 314.352591][T10162] CPU: 0 PID: 10162 Comm: syz.1.1529 Not tainted syzkaller #0 [ 314.360134][T10162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.370231][T10162] Call Trace: [ 314.373547][T10162] [ 314.376525][T10162] dump_stack_lvl+0x18c/0x250 [ 314.381266][T10162] ? show_regs_print_info+0x20/0x20 [ 314.386515][T10162] ? load_image+0x420/0x420 [ 314.391245][T10162] ? trace_call_bpf+0xc3/0x6c0 [ 314.396080][T10162] should_fail_ex+0x39d/0x4d0 [ 314.400824][T10162] should_failslab+0x9/0x20 [ 314.405465][T10162] slab_pre_alloc_hook+0x59/0x310 [ 314.410557][T10162] kmem_cache_alloc_node+0x60/0x320 [ 314.415893][T10162] ? __alloc_skb+0x103/0x2c0 [ 314.420621][T10162] __alloc_skb+0x103/0x2c0 [ 314.425091][T10162] tipc_msg_create+0x4f/0x4d0 [ 314.429911][T10162] __tipc_shutdown+0xcdc/0x1530 [ 314.434925][T10162] ? tipc_recvstream+0xe70/0xe70 [ 314.439909][T10162] ? wait_woken+0x180/0x180 [ 314.444463][T10162] ? _local_bh_enable+0xa0/0xa0 [ 314.449545][T10162] tipc_release+0x2f4/0x2160 [ 314.454266][T10162] ? ima_get_current_hash_algo+0x10/0x10 [ 314.460061][T10162] ? tipc_sock_destruct+0x180/0x180 [ 314.465727][T10162] ? down_write+0x16e/0x200 [ 314.470331][T10162] ? down_read_killable+0x340/0x340 [ 314.475560][T10162] sock_close+0xbd/0x230 [ 314.479821][T10162] ? sock_mmap+0xa0/0xa0 [ 314.484175][T10162] __fput+0x234/0x970 [ 314.488276][T10162] __se_sys_close+0x15f/0x220 [ 314.493002][T10162] do_syscall_64+0x55/0xa0 [ 314.497514][T10162] ? clear_bhb_loop+0x40/0x90 [ 314.502327][T10162] ? clear_bhb_loop+0x40/0x90 [ 314.507025][T10162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.512943][T10162] RIP: 0033:0x7fb98cf9cdd9 [ 314.517368][T10162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.537248][T10162] RSP: 002b:00007fb98ddae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 314.545715][T10162] RAX: ffffffffffffffda RBX: 00007fb98d216090 RCX: 00007fb98cf9cdd9 [ 314.553871][T10162] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 314.561859][T10162] RBP: 00007fb98ddae090 R08: 0000000000000000 R09: 0000000000000000 [ 314.569839][T10162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.577905][T10162] R13: 00007fb98d216128 R14: 00007fb98d216090 R15: 00007ffde270dd38 [ 314.585997][T10162] [ 314.699704][T10170] sit0: entered allmulticast mode [ 314.795128][T10172] sit0: entered promiscuous mode [ 315.560227][T10177] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1535'. [ 315.700829][T10186] netlink: 'syz.0.1538': attribute type 10 has an invalid length. [ 315.712283][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1538'. [ 315.750858][T10186] batman_adv: batadv0: Adding interface: virt_wifi0 [ 315.778096][T10186] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.824927][T10186] batman_adv: batadv0: Interface activated: virt_wifi0 [ 316.198728][T10202] netlink: 'syz.2.1543': attribute type 10 has an invalid length. [ 316.206746][T10202] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1543'. [ 316.301071][T10202] bond0: entered promiscuous mode [ 316.306213][T10202] bond_slave_0: entered promiscuous mode [ 316.363654][T10202] Ù: entered promiscuous mode [ 316.581768][ T5784] Bluetooth: hci1: unexpected subevent 0x06 length: 150 > 10 [ 316.793865][T10207] hsr_slave_1 (unregistering): left promiscuous mode [ 317.256628][T10228] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.1550'. [ 317.412239][T10230] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1551'. [ 317.467796][T10230] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 317.500567][T10230] CPU: 1 PID: 10230 Comm: syz.2.1551 Not tainted syzkaller #0 [ 317.508181][T10230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 317.518279][T10230] Call Trace: [ 317.521591][T10230] [ 317.524552][T10230] dump_stack_lvl+0x18c/0x250 [ 317.529396][T10230] ? show_regs_print_info+0x20/0x20 [ 317.534743][T10230] ? load_image+0x420/0x420 [ 317.539400][T10230] sysfs_warn_dup+0x8e/0xa0 [ 317.543942][T10230] sysfs_do_create_link_sd+0xc0/0x110 [ 317.549356][T10230] device_add_class_symlinks+0x1cf/0x240 [ 317.555037][T10230] device_add+0x507/0xc20 [ 317.559412][T10230] wiphy_register+0x1dad/0x2ae0 [ 317.564333][T10230] ? cfg80211_event_work+0x40/0x40 [ 317.569579][T10230] ? minstrel_ht_alloc+0x88a/0x990 [ 317.574782][T10230] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 317.580984][T10230] ieee80211_register_hw+0x3464/0x4250 [ 317.586519][T10230] ? ieee80211_tasklet_handler+0x20/0x20 [ 317.592193][T10230] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 317.598163][T10230] ? __debug_object_init+0xec/0x450 [ 317.603383][T10230] ? __asan_memset+0x22/0x40 [ 317.608080][T10230] ? __hrtimer_init+0x186/0x270 [ 317.612995][T10230] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 317.618766][T10230] ? mac80211_hwsim_free+0x220/0x220 [ 317.624064][T10230] ? rcu_is_watching+0x15/0xb0 [ 317.628849][T10230] ? kstrndup+0xbd/0x140 [ 317.633118][T10230] hwsim_new_radio_nl+0xdc9/0x1a90 [ 317.638266][T10230] ? __nla_validate+0x50/0x50 [ 317.642971][T10230] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 317.649324][T10230] ? __nla_parse+0x40/0x50 [ 317.653764][T10230] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 317.660113][T10230] genl_family_rcv_msg_doit+0x211/0x310 [ 317.665765][T10230] ? end_current_label_crit_section+0x170/0x170 [ 317.672207][T10230] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 317.678226][T10230] ? bpf_lsm_capable+0x9/0x10 [ 317.682935][T10230] ? security_capable+0x89/0xb0 [ 317.687839][T10230] genl_rcv_msg+0x619/0x7a0 [ 317.692400][T10230] ? genl_bind+0x360/0x360 [ 317.696968][T10230] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 317.703524][T10230] ? ref_tracker_free+0x690/0x840 [ 317.708648][T10230] netlink_rcv_skb+0x241/0x4d0 [ 317.713465][T10230] ? genl_bind+0x360/0x360 [ 317.717999][T10230] ? netlink_ack+0x1180/0x1180 [ 317.722798][T10230] ? __lock_acquire+0x7d40/0x7d40 [ 317.727852][T10230] ? down_read+0x1ac/0x2e0 [ 317.732310][T10230] genl_rcv+0x28/0x40 [ 317.736311][T10230] netlink_unicast+0x751/0x8d0 [ 317.741108][T10230] netlink_sendmsg+0x8d0/0xbf0 [ 317.745899][T10230] ? netlink_getsockopt+0x590/0x590 [ 317.751205][T10230] ? aa_sock_msg_perm+0x94/0x150 [ 317.756161][T10230] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 317.761549][T10230] ? security_socket_sendmsg+0x80/0xa0 [ 317.767019][T10230] ? netlink_getsockopt+0x590/0x590 [ 317.772240][T10230] ____sys_sendmsg+0x5ba/0x960 [ 317.777065][T10230] ? __asan_memset+0x22/0x40 [ 317.781695][T10230] ? __sys_sendmsg_sock+0x30/0x30 [ 317.786837][T10230] ? __import_iovec+0x5f2/0x850 [ 317.791718][T10230] ? import_iovec+0x73/0xa0 [ 317.796507][T10230] ___sys_sendmsg+0x2a6/0x360 [ 317.801290][T10230] ? __sys_sendmsg+0x2a0/0x2a0 [ 317.806092][T10230] ? trace_call_bpf+0xc3/0x6c0 [ 317.810906][T10230] __se_sys_sendmsg+0x1c2/0x2b0 [ 317.815778][T10230] ? __x64_sys_sendmsg+0x80/0x80 [ 317.820747][T10230] ? lockdep_hardirqs_on+0x98/0x150 [ 317.825966][T10230] do_syscall_64+0x55/0xa0 [ 317.830626][T10230] ? clear_bhb_loop+0x40/0x90 [ 317.835327][T10230] ? clear_bhb_loop+0x40/0x90 [ 317.840025][T10230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 317.846026][T10230] RIP: 0033:0x7ff2cc99cdd9 [ 317.850467][T10230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.870186][T10230] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.878618][T10230] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 317.886700][T10230] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 317.894690][T10230] RBP: 00007ff2cca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 317.902992][T10230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.911060][T10230] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 317.919067][T10230] [ 317.956235][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.962843][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.638468][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 319.434039][T10281] netlink: 'syz.1.1565': attribute type 10 has an invalid length. [ 319.457816][T10281] team0: Device bridge_slave_1 is up. Set it down before adding it as a team port [ 320.126670][T10300] netlink: 'syz.2.1569': attribute type 9 has an invalid length. [ 320.152027][T10300] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1569'. [ 320.491059][T10308] raw_sendmsg: syz.0.1575 forgot to set AF_INET. Fix it! [ 320.921386][T10325] netlink: 'syz.1.1581': attribute type 10 has an invalid length. [ 320.929726][T10325] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1581'. [ 320.943108][T10325] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 321.065909][T10327] syzkaller0: entered promiscuous mode [ 321.074998][T10329] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.1583'. [ 321.079220][T10327] syzkaller0: entered allmulticast mode [ 321.105339][T10329] netlink: 6324 bytes leftover after parsing attributes in process `syz.3.1583'. [ 322.037011][T10354] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1591'. [ 322.087839][T10349] syzkaller0: entered promiscuous mode [ 322.108408][T10349] syzkaller0: entered allmulticast mode [ 325.421236][T10374] netlink: 'syz.1.1599': attribute type 10 has an invalid length. [ 325.429332][T10374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1599'. [ 325.439378][T10377] netlink: 'syz.0.1600': attribute type 10 has an invalid length. [ 326.286569][T10412] syzkaller0: entered promiscuous mode [ 326.292412][T10412] syzkaller0: entered allmulticast mode [ 328.058177][T10416] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 328.247892][T10422] netlink: 'syz.2.1617': attribute type 4 has an invalid length. [ 328.268515][T10422] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1617'. [ 329.324527][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1623'. [ 330.359393][T10460] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1629'. [ 330.383359][T10460] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 330.427989][T10460] CPU: 0 PID: 10460 Comm: syz.2.1629 Not tainted syzkaller #0 [ 330.435547][T10460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.445746][T10460] Call Trace: [ 330.449071][T10460] [ 330.452048][T10460] dump_stack_lvl+0x18c/0x250 [ 330.456879][T10460] ? show_regs_print_info+0x20/0x20 [ 330.462134][T10460] ? load_image+0x420/0x420 [ 330.466710][T10460] sysfs_warn_dup+0x8e/0xa0 [ 330.471257][T10460] sysfs_do_create_link_sd+0xc0/0x110 [ 330.476778][T10460] device_add_class_symlinks+0x1cf/0x240 [ 330.482475][T10460] device_add+0x507/0xc20 [ 330.486882][T10460] wiphy_register+0x1dad/0x2ae0 [ 330.491806][T10460] ? cfg80211_event_work+0x40/0x40 [ 330.497143][T10460] ? minstrel_ht_alloc+0x88a/0x990 [ 330.502319][T10460] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 330.508450][T10460] ieee80211_register_hw+0x3464/0x4250 [ 330.514083][T10460] ? ieee80211_tasklet_handler+0x20/0x20 [ 330.520052][T10460] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 330.526021][T10460] ? __debug_object_init+0xec/0x450 [ 330.531456][T10460] ? __asan_memset+0x22/0x40 [ 330.536121][T10460] ? __hrtimer_init+0x186/0x270 [ 330.541036][T10460] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 330.546840][T10460] ? mac80211_hwsim_free+0x220/0x220 [ 330.552183][T10460] ? rcu_is_watching+0x15/0xb0 [ 330.557005][T10460] ? kstrndup+0xbd/0x140 [ 330.561407][T10460] hwsim_new_radio_nl+0xdc9/0x1a90 [ 330.566682][T10460] ? __nla_validate+0x50/0x50 [ 330.571466][T10460] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 330.577915][T10460] ? __nla_parse+0x40/0x50 [ 330.582474][T10460] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 330.588865][T10460] genl_family_rcv_msg_doit+0x211/0x310 [ 330.594554][T10460] ? end_current_label_crit_section+0x170/0x170 [ 330.600859][T10460] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 330.606901][T10460] ? bpf_lsm_capable+0x9/0x10 [ 330.611642][T10460] ? security_capable+0x89/0xb0 [ 330.616659][T10460] genl_rcv_msg+0x619/0x7a0 [ 330.621219][T10460] ? genl_bind+0x360/0x360 [ 330.625776][T10460] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 330.632171][T10460] netlink_rcv_skb+0x241/0x4d0 [ 330.637080][T10460] ? genl_bind+0x360/0x360 [ 330.641543][T10460] ? netlink_ack+0x1180/0x1180 [ 330.646377][T10460] ? __lock_acquire+0x7d40/0x7d40 [ 330.651466][T10460] ? down_read+0x1ac/0x2e0 [ 330.656026][T10460] genl_rcv+0x28/0x40 [ 330.660060][T10460] netlink_unicast+0x751/0x8d0 [ 330.664893][T10460] netlink_sendmsg+0x8d0/0xbf0 [ 330.669813][T10460] ? netlink_getsockopt+0x590/0x590 [ 330.675251][T10460] ? aa_sock_msg_perm+0x94/0x150 [ 330.680236][T10460] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 330.685572][T10460] ? security_socket_sendmsg+0x80/0xa0 [ 330.691077][T10460] ? netlink_getsockopt+0x590/0x590 [ 330.696333][T10460] ____sys_sendmsg+0x5ba/0x960 [ 330.701151][T10460] ? __asan_memset+0x22/0x40 [ 330.705795][T10460] ? __sys_sendmsg_sock+0x30/0x30 [ 330.710862][T10460] ? __import_iovec+0x5f2/0x850 [ 330.715944][T10460] ? import_iovec+0x73/0xa0 [ 330.720502][T10460] ___sys_sendmsg+0x2a6/0x360 [ 330.725234][T10460] ? __sys_sendmsg+0x2a0/0x2a0 [ 330.730121][T10460] __se_sys_sendmsg+0x1c2/0x2b0 [ 330.735115][T10460] ? __x64_sys_sendmsg+0x80/0x80 [ 330.740124][T10460] ? lockdep_hardirqs_on+0x98/0x150 [ 330.745473][T10460] do_syscall_64+0x55/0xa0 [ 330.749932][T10460] ? clear_bhb_loop+0x40/0x90 [ 330.754657][T10460] ? clear_bhb_loop+0x40/0x90 [ 330.759404][T10460] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.765351][T10460] RIP: 0033:0x7ff2cc99cdd9 [ 330.769807][T10460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.789548][T10460] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.798279][T10460] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 330.806299][T10460] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 330.814321][T10460] RBP: 00007ff2cca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 330.822344][T10460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.830489][T10460] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 330.838538][T10460] [ 331.174911][T10481] netlink: 'syz.0.1636': attribute type 2 has an invalid length. [ 331.213258][T10481] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1636'. [ 331.433366][T10488] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1635'. [ 332.180719][T10506] netlink: 'syz.0.1643': attribute type 46 has an invalid length. [ 332.228447][T10506] netlink: 'syz.0.1643': attribute type 46 has an invalid length. [ 332.661440][T10524] netlink: 'syz.0.1647': attribute type 9 has an invalid length. [ 332.676026][T10524] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1647'. [ 332.854591][T10531] sit0: entered allmulticast mode [ 332.892791][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.918450][T10529] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.935737][T10529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.944047][T10529] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.954789][T10529] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 332.968945][T10529] batman_adv: batadv0: Removing interface: virt_wifi0 [ 332.977322][T10529] batman_adv: batadv0: Interface deactivated: macvlan1 [ 332.989160][T10529] batman_adv: batadv0: Removing interface: macvlan1 [ 333.065440][T10531] sit0: entered promiscuous mode [ 334.511018][T10549] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 334.532412][T10549] netlink: 'syz.3.1659': attribute type 10 has an invalid length. [ 334.569041][T10549] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1659'. [ 334.605607][T10549] openvswitch: netlink: Message has 4 unknown bytes. [ 334.787534][T10555] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1662'. [ 334.829891][T10555] bridge_slave_1: entered promiscuous mode [ 335.085939][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.098492][T10564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.117700][T10564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.144901][T10564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.182446][T10564] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 335.224863][T10564] batman_adv: batadv0: Removing interface: veth0_vlan [ 335.261225][T10564] batman_adv: batadv0: Interface deactivated: macvlan1 [ 335.276877][T10564] batman_adv: batadv0: Removing interface: macvlan1 [ 335.339474][T10564] bridge0: port 4(batadv0) entered disabled state [ 335.411296][T10564] bridge0: port 4(batadv0) entered disabled state [ 335.515506][T10579] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.1670'. [ 335.714367][T10583] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1670'. [ 336.128898][T10591] sit0: entered allmulticast mode [ 336.193775][T10591] sit0: entered promiscuous mode [ 336.682055][T10600] netlink: 'syz.1.1675': attribute type 9 has an invalid length. [ 336.694568][T10600] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1675'. [ 336.975241][T10588] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1673'. [ 337.188656][T10607] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1679'. [ 337.209010][T10607] bridge_slave_1: left promiscuous mode [ 337.303142][T10610] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1688'. [ 337.412621][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.421126][T10613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.430144][T10613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.438579][T10613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.447230][T10613] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 337.455524][T10613] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 337.467663][T10613] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 337.502784][T10613] batman_adv: batadv0: Removing interface: virt_wifi0 [ 337.520303][T10613] batman_adv: batadv0: Interface deactivated: macvlan1 [ 337.527818][T10613] batman_adv: batadv0: Removing interface: macvlan1 [ 337.822630][T10630] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.1684'. [ 338.117694][T10635] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1684'. [ 338.209786][T10627] netlink: 'syz.3.1685': attribute type 21 has an invalid length. [ 338.238918][T10627] netlink: 'syz.3.1685': attribute type 6 has an invalid length. [ 339.615650][T10649] __nla_validate_parse: 1 callbacks suppressed [ 339.615677][T10649] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1687'. [ 339.632329][T10649] bridge_slave_1: entered promiscuous mode [ 339.701026][T10647] netlink: 'syz.0.1697': attribute type 21 has an invalid length. [ 339.709296][T10647] netlink: 'syz.0.1697': attribute type 6 has an invalid length. [ 339.717076][T10647] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1697'. [ 339.878861][T10655] netlink: 'syz.1.1701': attribute type 5 has an invalid length. [ 340.312578][T10663] sit0: entered allmulticast mode [ 340.361777][T10663] sit0: entered promiscuous mode [ 341.480370][T10674] netlink: 'syz.3.1692': attribute type 9 has an invalid length. [ 341.540564][T10674] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1692'. [ 341.614244][T10673] netlink: 'syz.1.1694': attribute type 33 has an invalid length. [ 341.638212][T10673] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1694'. [ 341.681128][T10673] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 341.701362][T10684] netlink: 'syz.2.1703': attribute type 5 has an invalid length. [ 342.108505][T10696] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1710'. [ 342.227699][T10694] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1711'. [ 342.237502][T10694] bridge_slave_1: entered promiscuous mode [ 342.333451][T10704] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1713'. [ 342.455230][T10711] netlink: 'syz.2.1714': attribute type 10 has an invalid length. [ 342.489061][T10711] netlink: 'syz.2.1714': attribute type 10 has an invalid length. [ 342.527682][T10711] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.1714'. [ 342.582925][T10711] openvswitch: netlink: Message has 4 unknown bytes. [ 343.063225][T10728] netlink: 'syz.1.1720': attribute type 10 has an invalid length. [ 343.224198][T10731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1722'. [ 343.239518][T10731] tc_dump_action: action bad kind [ 343.250222][T10732] netlink: 'syz.0.1721': attribute type 22 has an invalid length. [ 343.258113][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 343.268533][T10735] tc_dump_action: action bad kind [ 343.361084][T10745] FAULT_INJECTION: forcing a failure. [ 343.361084][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 343.398497][T10745] CPU: 0 PID: 10745 Comm: syz.2.1726 Not tainted syzkaller #0 [ 343.406158][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 343.416285][T10745] Call Trace: [ 343.419624][T10745] [ 343.422640][T10745] dump_stack_lvl+0x18c/0x250 [ 343.427489][T10745] ? show_regs_print_info+0x20/0x20 [ 343.432759][T10745] ? load_image+0x420/0x420 [ 343.437329][T10745] ? __lock_acquire+0x7d40/0x7d40 [ 343.442410][T10745] should_fail_ex+0x39d/0x4d0 [ 343.447231][T10745] should_failslab+0x9/0x20 [ 343.451778][T10745] slab_pre_alloc_hook+0x59/0x310 [ 343.457009][T10745] ? sctp_stream_init_ext+0x57/0x170 [ 343.462315][T10745] __kmem_cache_alloc_node+0x53/0x250 [ 343.467715][T10745] ? sctp_stream_init_ext+0x57/0x170 [ 343.473025][T10745] kmalloc_trace+0x2a/0xe0 [ 343.477556][T10745] sctp_stream_init_ext+0x57/0x170 [ 343.482881][T10745] sctp_sendmsg_to_asoc+0x1324/0x1830 [ 343.488306][T10745] ? __asan_memcpy+0x40/0x70 [ 343.492941][T10745] ? sctp_assoc_set_primary+0x249/0x340 [ 343.498641][T10745] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 343.504133][T10745] ? sctp_connect_new_asoc+0x404/0x6a0 [ 343.509700][T10745] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 343.515793][T10745] ? __sctp_connect+0xd80/0xd80 [ 343.520676][T10745] ? __local_bh_enable_ip+0x13a/0x1c0 [ 343.526247][T10745] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 343.531820][T10745] ? security_sctp_bind_connect+0x89/0xb0 [ 343.537652][T10745] sctp_sendmsg+0x1b83/0x28c0 [ 343.542439][T10745] ? sctp_getsockopt+0xb60/0xb60 [ 343.547402][T10745] ? aa_sk_perm+0x83c/0x970 [ 343.552047][T10745] ? aa_af_perm+0x330/0x330 [ 343.556573][T10745] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 343.563011][T10745] ? sock_rps_record_flow+0x19/0x3f0 [ 343.568323][T10745] ? inet_sendmsg+0xe9/0x2f0 [ 343.572943][T10745] ? inet_send_prepare+0x260/0x260 [ 343.578181][T10745] ____sys_sendmsg+0x5ba/0x960 [ 343.583059][T10745] ? __lock_acquire+0x7d40/0x7d40 [ 343.588108][T10745] ? __asan_memset+0x22/0x40 [ 343.592807][T10745] ? __sys_sendmsg_sock+0x30/0x30 [ 343.597850][T10745] ? __import_iovec+0x5f2/0x850 [ 343.602738][T10745] ? import_iovec+0x73/0xa0 [ 343.607281][T10745] ___sys_sendmsg+0x2a6/0x360 [ 343.611981][T10745] ? get_pid_task+0x20/0x1e0 [ 343.616689][T10745] ? __sys_sendmsg+0x2a0/0x2a0 [ 343.621670][T10745] ? __lock_acquire+0x7d40/0x7d40 [ 343.626734][T10745] __se_sys_sendmsg+0x1c2/0x2b0 [ 343.631609][T10745] ? __x64_sys_sendmsg+0x80/0x80 [ 343.636833][T10745] ? lockdep_hardirqs_on+0x98/0x150 [ 343.642113][T10745] do_syscall_64+0x55/0xa0 [ 343.646639][T10745] ? clear_bhb_loop+0x40/0x90 [ 343.651428][T10745] ? clear_bhb_loop+0x40/0x90 [ 343.656214][T10745] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 343.662158][T10745] RIP: 0033:0x7ff2cc99cdd9 [ 343.666679][T10745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.686656][T10745] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.695179][T10745] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 343.703199][T10745] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 343.711204][T10745] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 343.719197][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 343.727183][T10745] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 343.735274][T10745] [ 344.351207][T10760] FAULT_INJECTION: forcing a failure. [ 344.351207][T10760] name failslab, interval 1, probability 0, space 0, times 0 [ 344.438824][T10760] CPU: 1 PID: 10760 Comm: syz.2.1732 Not tainted syzkaller #0 [ 344.446385][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.456723][T10760] Call Trace: [ 344.460110][T10760] [ 344.463054][T10760] dump_stack_lvl+0x18c/0x250 [ 344.467790][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.474002][T10760] ? show_regs_print_info+0x20/0x20 [ 344.479234][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.485511][T10760] should_fail_ex+0x39d/0x4d0 [ 344.490316][T10760] should_failslab+0x9/0x20 [ 344.494957][T10760] slab_pre_alloc_hook+0x59/0x310 [ 344.500202][T10760] kmem_cache_alloc_node+0x60/0x320 [ 344.505426][T10760] ? alloc_vmap_area+0x1b4/0x1e30 [ 344.510570][T10760] alloc_vmap_area+0x1b4/0x1e30 [ 344.515532][T10760] ? lock_chain_count+0x20/0x20 [ 344.520486][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.526659][T10760] ? lockdep_hardirqs_on+0x98/0x150 [ 344.532051][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.538751][T10760] ? vm_map_ram+0xcb0/0xcb0 [ 344.543291][T10760] __get_vm_area_node+0x162/0x370 [ 344.548429][T10760] __vmalloc_node_range+0x36e/0x1330 [ 344.553741][T10760] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 344.559319][T10760] ? perf_trace_preemptirq_template+0x269/0x330 [ 344.565592][T10760] ? lock_chain_count+0x20/0x20 [ 344.570523][T10760] ? free_vm_area+0x50/0x50 [ 344.575128][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.581300][T10760] ? lockdep_hardirqs_on+0x98/0x150 [ 344.586540][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.592825][T10760] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 344.598648][T10760] __vmalloc+0x7a/0x90 [ 344.602835][T10760] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 344.608403][T10760] bpf_prog_alloc_no_stats+0x47/0x440 [ 344.613802][T10760] ? bpf_prog_alloc+0x2b/0x1a0 [ 344.618588][T10760] bpf_prog_alloc+0x3d/0x1a0 [ 344.623223][T10760] bpf_prog_load+0x6eb/0x1670 [ 344.627922][T10760] ? perf_trace_preemptirq_template+0x269/0x330 [ 344.634281][T10760] ? map_freeze+0x420/0x420 [ 344.638898][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.645062][T10760] ? lockdep_hardirqs_on+0x98/0x150 [ 344.650280][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 344.656663][T10760] ? __sys_bpf+0x295/0x890 [ 344.661205][T10760] __sys_bpf+0x5ba/0x890 [ 344.665572][T10760] ? bpf_link_show_fdinfo+0x390/0x390 [ 344.670976][T10760] ? lock_chain_count+0x20/0x20 [ 344.675851][T10760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 344.682103][T10760] __x64_sys_bpf+0x7c/0x90 [ 344.686542][T10760] do_syscall_64+0x55/0xa0 [ 344.691068][T10760] ? clear_bhb_loop+0x40/0x90 [ 344.695766][T10760] ? clear_bhb_loop+0x40/0x90 [ 344.700465][T10760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 344.706400][T10760] RIP: 0033:0x7ff2cc99cdd9 [ 344.710965][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.730879][T10760] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.739328][T10760] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 344.747406][T10760] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 344.755409][T10760] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 344.763395][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.771411][T10760] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 344.779525][T10760] [ 344.848830][T10760] warn_alloc: 1 callbacks suppressed [ 344.848876][T10760] syz.2.1732: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 344.957610][T10760] CPU: 1 PID: 10760 Comm: syz.2.1732 Not tainted syzkaller #0 [ 344.965438][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.975624][T10760] Call Trace: [ 344.979130][T10760] [ 344.982127][T10760] dump_stack_lvl+0x18c/0x250 [ 344.986960][T10760] ? show_regs_print_info+0x20/0x20 [ 344.992476][T10760] ? load_image+0x420/0x420 [ 344.997100][T10760] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 345.003804][T10760] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 345.010797][T10760] warn_alloc+0x246/0x340 [ 345.015186][T10760] ? slab_free_freelist_hook+0x130/0x1a0 [ 345.020885][T10760] ? zone_watermark_ok_safe+0x230/0x230 [ 345.026798][T10760] ? __get_vm_area_node+0x17b/0x370 [ 345.032142][T10760] ? __get_vm_area_node+0x17b/0x370 [ 345.037395][T10760] __vmalloc_node_range+0x393/0x1330 [ 345.042821][T10760] ? perf_trace_preemptirq_template+0x269/0x330 [ 345.049228][T10760] ? lock_chain_count+0x20/0x20 [ 345.054130][T10760] ? free_vm_area+0x50/0x50 [ 345.058685][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.064896][T10760] ? lockdep_hardirqs_on+0x98/0x150 [ 345.070325][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.077693][T10760] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 345.083284][T10760] __vmalloc+0x7a/0x90 [ 345.087580][T10760] ? bpf_prog_alloc_no_stats+0x47/0x440 [ 345.093258][T10760] bpf_prog_alloc_no_stats+0x47/0x440 [ 345.098764][T10760] ? bpf_prog_alloc+0x2b/0x1a0 [ 345.103635][T10760] bpf_prog_alloc+0x3d/0x1a0 [ 345.108274][T10760] bpf_prog_load+0x6eb/0x1670 [ 345.113101][T10760] ? perf_trace_preemptirq_template+0x269/0x330 [ 345.119624][T10760] ? map_freeze+0x420/0x420 [ 345.124269][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.130598][T10760] ? lockdep_hardirqs_on+0x98/0x150 [ 345.136123][T10760] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 345.142339][T10760] ? __sys_bpf+0x295/0x890 [ 345.146827][T10760] __sys_bpf+0x5ba/0x890 [ 345.151119][T10760] ? bpf_link_show_fdinfo+0x390/0x390 [ 345.156653][T10760] ? lock_chain_count+0x20/0x20 [ 345.161569][T10760] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 345.167690][T10760] __x64_sys_bpf+0x7c/0x90 [ 345.172240][T10760] do_syscall_64+0x55/0xa0 [ 345.176694][T10760] ? clear_bhb_loop+0x40/0x90 [ 345.181677][T10760] ? clear_bhb_loop+0x40/0x90 [ 345.186502][T10760] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 345.192547][T10760] RIP: 0033:0x7ff2cc99cdd9 [ 345.197120][T10760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.217056][T10760] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.225722][T10760] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 345.233828][T10760] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 345.241958][T10760] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 345.249988][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.258457][T10760] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 345.266677][T10760] [ 345.518645][T10760] Mem-Info: [ 345.521946][T10760] active_anon:5183 inactive_anon:0 isolated_anon:0 [ 345.521946][T10760] active_file:13378 inactive_file:40053 isolated_file:0 [ 345.521946][T10760] unevictable:768 dirty:415 writeback:0 [ 345.521946][T10760] slab_reclaimable:10716 slab_unreclaimable:93601 [ 345.521946][T10760] mapped:26563 shmem:1361 pagetables:584 [ 345.521946][T10760] sec_pagetables:0 bounce:0 [ 345.521946][T10760] kernel_misc_reclaimable:0 [ 345.521946][T10760] free:1348996 free_pcp:9973 free_cma:0 [ 345.623633][T10760] Node 0 active_anon:20640kB inactive_anon:0kB active_file:53512kB inactive_file:160008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106344kB dirty:1660kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11080kB pagetables:2156kB sec_pagetables:0kB all_unreclaimable? no [ 345.678520][T10760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 345.723790][T10760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.759775][T10760] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 345.765948][T10760] Node 0 DMA32 free:1492692kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:20704kB inactive_anon:0kB active_file:53512kB inactive_file:159180kB unevictable:1536kB writepending:1660kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:18876kB local_pcp:10132kB free_cma:0kB [ 345.798527][T10760] lowmem_reserve[]: 0 0 0 0 0 [ 345.803421][T10760] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.831151][T10760] lowmem_reserve[]: 0 0 0 0 0 [ 345.836024][T10760] Node 1 Normal free:3887672kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:21308kB local_pcp:11416kB free_cma:0kB [ 345.867493][T10760] lowmem_reserve[]: 0 0 0 0 0 [ 345.872669][T10760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.886063][T10760] Node 0 DMA32: 589*4kB (UME) 1362*8kB (UME) 1077*16kB (UME) 798*32kB (UME) 462*64kB (UME) 125*128kB (UME) 76*256kB (UM) 33*512kB (UME) 25*1024kB (UM) 5*2048kB (M) 322*4096kB (M) = 1492692kB [ 345.905757][T10760] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 345.919508][T10760] Node 1 Normal: 178*4kB (UME) 56*8kB (UME) 51*16kB (UME) 60*32kB (UME) 22*64kB (UME) 5*128kB (UME) 1*256kB (M) 1*512kB (U) 2*1024kB (UE) 2*2048kB (UE) 946*4096kB (M) = 3887672kB [ 345.939377][T10760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.954727][T10760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.965491][T10760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.976532][T10760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.986982][T10760] 54992 total pagecache pages [ 345.992622][T10760] 0 pages in swap cache [ 345.996938][T10760] Free swap = 124996kB [ 346.001589][T10760] Total swap = 124996kB [ 346.005813][T10760] 2097051 pages RAM [ 346.013323][T10760] 0 pages HighMem/MovableOnly [ 346.018098][T10760] 416927 pages reserved [ 346.043563][T10760] 0 pages cma reserved [ 346.333123][T10783] __nla_validate_parse: 1 callbacks suppressed [ 346.333147][T10783] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1736'. [ 346.368509][T10783] Lè+߬ç³Õ: renamed from bridge_slave_0 (while UP) [ 346.551555][T10783] Lè+߬ç³Õ: entered allmulticast mode [ 347.627271][T10796] netlink: 'syz.2.1741': attribute type 10 has an invalid length. [ 347.652152][T10796] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1741'. [ 348.102013][T10813] netlink: 'syz.2.1745': attribute type 10 has an invalid length. [ 348.148783][T10813] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.157414][T10813] team0: entered promiscuous mode [ 348.162954][T10813] team_slave_0: entered promiscuous mode [ 348.169584][T10813] team_slave_1: entered promiscuous mode [ 348.175807][T10813] geneve1: entered promiscuous mode [ 348.182255][T10813] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 348.193611][T10813] bond0: (slave team0): Enslaving as an active interface with an up link [ 349.969573][T10815] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1748'. [ 350.144346][T10822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1750'. [ 350.154084][T10822] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1750'. [ 350.193665][T10819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1750'. [ 350.421877][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 350.794651][T10839] netlink: 'syz.1.1756': attribute type 27 has an invalid length. [ 350.844056][T10839] netlink: 'syz.1.1756': attribute type 4 has an invalid length. [ 350.873577][T10839] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1756'. [ 351.191656][T10844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1758'. [ 351.233803][T10846] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1759'. [ 351.455664][T10854] netlink: 'syz.2.1761': attribute type 10 has an invalid length. [ 351.463833][T10854] __nla_validate_parse: 1 callbacks suppressed [ 351.463849][T10854] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1761'. [ 351.480731][T10854] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 352.006701][T10865] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 352.610621][T10889] netlink: 'syz.3.1772': attribute type 27 has an invalid length. [ 352.619875][T10889] netlink: 'syz.3.1772': attribute type 4 has an invalid length. [ 352.644985][T10889] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1772'. [ 352.941023][T10904] IPv6: Can't replace route, no match found [ 353.880660][T10938] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1782'. [ 353.929589][T10938] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 353.977692][T10938] netlink: 'syz.2.1782': attribute type 29 has an invalid length. [ 354.497338][T10953] FAULT_INJECTION: forcing a failure. [ 354.497338][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 354.539912][T10953] CPU: 1 PID: 10953 Comm: syz.3.1787 Not tainted syzkaller #0 [ 354.547506][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 354.557852][T10953] Call Trace: [ 354.561161][T10953] [ 354.564120][T10953] dump_stack_lvl+0x18c/0x250 [ 354.568859][T10953] ? show_regs_print_info+0x20/0x20 [ 354.574106][T10953] ? load_image+0x420/0x420 [ 354.578674][T10953] should_fail_ex+0x39d/0x4d0 [ 354.583488][T10953] should_failslab+0x9/0x20 [ 354.588030][T10953] slab_pre_alloc_hook+0x59/0x310 [ 354.593094][T10953] ? __lock_acquire+0x7d40/0x7d40 [ 354.598165][T10953] kmem_cache_alloc_node+0x60/0x320 [ 354.603416][T10953] ? __alloc_skb+0x103/0x2c0 [ 354.608224][T10953] __alloc_skb+0x103/0x2c0 [ 354.612687][T10953] _sctp_make_chunk+0x5e/0x420 [ 354.617668][T10953] sctp_make_sack+0x1aa/0x730 [ 354.622415][T10953] ? sctp_eat_data+0xb8c/0x1640 [ 354.627306][T10953] ? sctp_make_datafrag_empty+0x240/0x240 [ 354.633089][T10953] sctp_do_sm+0x2ab6/0x5a60 [ 354.637642][T10953] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 354.643628][T10953] ? read_tsc+0x9/0x20 [ 354.647809][T10953] sctp_assoc_bh_rcv+0x3f2/0x630 [ 354.652981][T10953] sctp_backlog_rcv+0x163/0x370 [ 354.657879][T10953] __release_sock+0x1e5/0x460 [ 354.662635][T10953] release_sock+0x5f/0x1c0 [ 354.667215][T10953] sctp_sendmsg+0x1bd7/0x28c0 [ 354.672157][T10953] ? sctp_getsockopt+0xb60/0xb60 [ 354.677341][T10953] ? aa_sk_perm+0x83c/0x970 [ 354.681923][T10953] ? aa_af_perm+0x330/0x330 [ 354.686581][T10953] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 354.693081][T10953] ? sock_rps_record_flow+0x19/0x3f0 [ 354.698444][T10953] ? inet_sendmsg+0x7c/0x2f0 [ 354.703090][T10953] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 354.708414][T10953] ? security_socket_sendmsg+0x80/0xa0 [ 354.713993][T10953] ? inet_send_prepare+0x260/0x260 [ 354.719143][T10953] ____sys_sendmsg+0x5ba/0x960 [ 354.723944][T10953] ? __lock_acquire+0x7d40/0x7d40 [ 354.729009][T10953] ? __asan_memset+0x22/0x40 [ 354.733638][T10953] ? __sys_sendmsg_sock+0x30/0x30 [ 354.738695][T10953] ? __import_iovec+0x5f2/0x850 [ 354.743616][T10953] ? import_iovec+0x73/0xa0 [ 354.748162][T10953] ___sys_sendmsg+0x2a6/0x360 [ 354.752903][T10953] ? get_pid_task+0x20/0x1e0 [ 354.757533][T10953] ? __sys_sendmsg+0x2a0/0x2a0 [ 354.762362][T10953] ? __lock_acquire+0x7d40/0x7d40 [ 354.767538][T10953] __se_sys_sendmsg+0x1c2/0x2b0 [ 354.772422][T10953] ? __x64_sys_sendmsg+0x80/0x80 [ 354.777411][T10953] ? lockdep_hardirqs_on+0x98/0x150 [ 354.782741][T10953] do_syscall_64+0x55/0xa0 [ 354.787188][T10953] ? clear_bhb_loop+0x40/0x90 [ 354.791908][T10953] ? clear_bhb_loop+0x40/0x90 [ 354.796622][T10953] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 354.802752][T10953] RIP: 0033:0x7faaced9cdd9 [ 354.807216][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.826966][T10953] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.835463][T10953] RAX: ffffffffffffffda RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 354.843465][T10953] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 354.851475][T10953] RBP: 00007faacfd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 354.859572][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.867687][T10953] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 354.875758][T10953] [ 355.093616][T10964] netlink: 'syz.1.1791': attribute type 10 has an invalid length. [ 355.101705][T10964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1791'. [ 355.169805][T10968] netlink: 'syz.3.1792': attribute type 10 has an invalid length. [ 355.427737][T10972] syzkaller0: entered promiscuous mode [ 355.480871][T10972] syzkaller0: entered allmulticast mode [ 355.495224][T10975] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1794'. [ 357.408511][T10980] netlink: 'syz.3.1794': attribute type 10 has an invalid length. [ 357.416551][T10980] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 358.153799][T11006] FAULT_INJECTION: forcing a failure. [ 358.153799][T11006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.174410][T11006] CPU: 1 PID: 11006 Comm: syz.0.1805 Not tainted syzkaller #0 [ 358.182036][T11006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.192191][T11006] Call Trace: [ 358.195491][T11006] [ 358.198438][T11006] dump_stack_lvl+0x18c/0x250 [ 358.203325][T11006] ? show_regs_print_info+0x20/0x20 [ 358.208583][T11006] ? load_image+0x420/0x420 [ 358.213209][T11006] ? __might_fault+0xaa/0x120 [ 358.218266][T11006] ? __lock_acquire+0x7d40/0x7d40 [ 358.223498][T11006] should_fail_ex+0x39d/0x4d0 [ 358.228207][T11006] _copy_from_user+0x2f/0xe0 [ 358.232841][T11006] ___sys_sendmsg+0x1c7/0x360 [ 358.237523][T11006] ? __sys_sendmsg+0x2a0/0x2a0 [ 358.242310][T11006] ? trace_call_bpf+0xc3/0x6c0 [ 358.247092][T11006] __se_sys_sendmsg+0x1c2/0x2b0 [ 358.251947][T11006] ? __x64_sys_sendmsg+0x80/0x80 [ 358.256889][T11006] ? lockdep_hardirqs_on+0x98/0x150 [ 358.262117][T11006] do_syscall_64+0x55/0xa0 [ 358.266574][T11006] ? clear_bhb_loop+0x40/0x90 [ 358.271442][T11006] ? clear_bhb_loop+0x40/0x90 [ 358.276212][T11006] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.282128][T11006] RIP: 0033:0x7fa4ecf9cdd9 [ 358.286566][T11006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.306326][T11006] RSP: 002b:00007fa4edef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.314777][T11006] RAX: ffffffffffffffda RBX: 00007fa4ed215fa0 RCX: 00007fa4ecf9cdd9 [ 358.322795][T11006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 358.330866][T11006] RBP: 00007fa4edef2090 R08: 0000000000000000 R09: 0000000000000000 [ 358.338861][T11006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.346879][T11006] R13: 00007fa4ed216038 R14: 00007fa4ed215fa0 R15: 00007fffccb21128 [ 358.354869][T11006] [ 358.853580][T11012] netlink: 'syz.2.1806': attribute type 27 has an invalid length. [ 358.866093][T11012] netlink: 'syz.2.1806': attribute type 4 has an invalid length. [ 358.878617][T11012] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1806'. [ 359.110198][T11026] netlink: 'syz.0.1811': attribute type 1 has an invalid length. [ 359.118503][T11026] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.1811'. [ 359.257566][T11022] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1809'. [ 359.282759][T11028] netlink: 'syz.1.1809': attribute type 10 has an invalid length. [ 359.291288][T11028] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 359.304980][T11028] team0: Port device wlan1 added [ 359.310931][T11031] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1811'. [ 359.427347][T11031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.469704][T11031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.524259][T11031] bond0 (unregistering): Released all slaves [ 359.541426][T11036] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 359.550342][T11036] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1813'. [ 360.656401][T11070] netlink: 'syz.0.1823': attribute type 5 has an invalid length. [ 360.878575][T11081] netlink: 'syz.3.1829': attribute type 32 has an invalid length. [ 361.307990][T11093] netlink: 'syz.1.1834': attribute type 22 has an invalid length. [ 361.325573][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 361.432452][T11095] FAULT_INJECTION: forcing a failure. [ 361.432452][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 361.471882][T11095] CPU: 1 PID: 11095 Comm: syz.3.1836 Not tainted syzkaller #0 [ 361.479447][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 361.489637][T11095] Call Trace: [ 361.492962][T11095] [ 361.495934][T11095] dump_stack_lvl+0x18c/0x250 [ 361.500713][T11095] ? show_regs_print_info+0x20/0x20 [ 361.506094][T11095] ? load_image+0x420/0x420 [ 361.510655][T11095] should_fail_ex+0x39d/0x4d0 [ 361.515452][T11095] should_failslab+0x9/0x20 [ 361.520013][T11095] slab_pre_alloc_hook+0x59/0x310 [ 361.525060][T11095] ? __build_skb_around+0x255/0x3d0 [ 361.530559][T11095] kmem_cache_alloc+0x5a/0x2d0 [ 361.535425][T11095] ? _sctp_make_chunk+0x14e/0x420 [ 361.540496][T11095] _sctp_make_chunk+0x14e/0x420 [ 361.545377][T11095] sctp_make_init+0x5f3/0xfc0 [ 361.550219][T11095] ? sctp_addto_chunk+0x230/0x230 [ 361.555261][T11095] ? kernel_text_address+0xa0/0xd0 [ 361.560395][T11095] ? __kernel_text_address+0xd/0x30 [ 361.565610][T11095] ? stack_trace_save+0x100/0x100 [ 361.570657][T11095] ? arch_stack_walk+0x160/0x190 [ 361.575620][T11095] sctp_sf_do_prm_asoc+0xd2/0x3e0 [ 361.580675][T11095] sctp_do_sm+0x23a/0x5a60 [ 361.585278][T11095] ? sctp_cname+0x110/0x110 [ 361.589793][T11095] ? __stack_depot_save+0x1f/0x630 [ 361.594927][T11095] ? kasan_set_track+0x4e/0x70 [ 361.599717][T11095] ? __kasan_kmalloc+0x8f/0xa0 [ 361.604498][T11095] ? sctp_stream_init_ext+0x57/0x170 [ 361.609887][T11095] ? sctp_sendmsg_to_asoc+0x1324/0x1830 [ 361.615547][T11095] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 361.621457][T11095] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 361.626494][T11095] ? do_syscall_64+0x55/0xa0 [ 361.631105][T11095] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.637501][T11095] ? __sk_mem_raise_allocated+0xa29/0x1340 [ 361.643342][T11095] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 361.648739][T11095] sctp_sendmsg_to_asoc+0x10a6/0x1830 [ 361.654167][T11095] ? __asan_memcpy+0x40/0x70 [ 361.658965][T11095] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 361.664456][T11095] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 361.670375][T11095] ? __sctp_connect+0xd80/0xd80 [ 361.675242][T11095] ? __local_bh_enable_ip+0x13a/0x1c0 [ 361.680723][T11095] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 361.686288][T11095] ? security_sctp_bind_connect+0x89/0xb0 [ 361.692032][T11095] sctp_sendmsg+0x1b83/0x28c0 [ 361.696743][T11095] ? sctp_getsockopt+0xb60/0xb60 [ 361.701798][T11095] ? aa_sk_perm+0x83c/0x970 [ 361.706379][T11095] ? aa_af_perm+0x330/0x330 [ 361.711073][T11095] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 361.717510][T11095] ? sock_rps_record_flow+0x19/0x3f0 [ 361.722819][T11095] ? inet_sendmsg+0xe9/0x2f0 [ 361.727428][T11095] ? inet_send_prepare+0x260/0x260 [ 361.732586][T11095] ____sys_sendmsg+0x5ba/0x960 [ 361.737438][T11095] ? __lock_acquire+0x7d40/0x7d40 [ 361.743020][T11095] ? __asan_memset+0x22/0x40 [ 361.747934][T11095] ? __sys_sendmsg_sock+0x30/0x30 [ 361.753362][T11095] ? __import_iovec+0x5f2/0x850 [ 361.758255][T11095] ? import_iovec+0x73/0xa0 [ 361.762796][T11095] ___sys_sendmsg+0x2a6/0x360 [ 361.767666][T11095] ? get_pid_task+0x20/0x1e0 [ 361.772373][T11095] ? __sys_sendmsg+0x2a0/0x2a0 [ 361.777206][T11095] ? __lock_acquire+0x7d40/0x7d40 [ 361.782314][T11095] __se_sys_sendmsg+0x1c2/0x2b0 [ 361.787199][T11095] ? __x64_sys_sendmsg+0x80/0x80 [ 361.792236][T11095] ? lockdep_hardirqs_on+0x98/0x150 [ 361.797463][T11095] do_syscall_64+0x55/0xa0 [ 361.801919][T11095] ? clear_bhb_loop+0x40/0x90 [ 361.806620][T11095] ? clear_bhb_loop+0x40/0x90 [ 361.811319][T11095] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.817241][T11095] RIP: 0033:0x7faaced9cdd9 [ 361.821682][T11095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.841463][T11095] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.849903][T11095] RAX: ffffffffffffffda RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 361.857891][T11095] RDX: 0000000000000c54 RSI: 0000200000000380 RDI: 0000000000000003 [ 361.866048][T11095] RBP: 00007faacfd2e090 R08: 0000000000000000 R09: 0000000000000000 [ 361.874215][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.882376][T11095] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 361.890469][T11095] [ 362.398181][T11122] netlink: 'syz.3.1845': attribute type 10 has an invalid length. [ 362.406229][T11122] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 362.428337][T11122] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 362.448066][T11122] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 362.486752][T11122] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 362.793090][T11128] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1847'. [ 363.149520][T11138] sit0: left promiscuous mode [ 363.444484][T11138] sit0: entered promiscuous mode [ 363.846610][T11153] netlink: 'syz.1.1857': attribute type 10 has an invalid length. [ 364.323001][T11168] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1863'. [ 364.351080][T11171] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1861'. [ 364.751310][T11178] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1865'. [ 364.762629][T11188] FAULT_INJECTION: forcing a failure. [ 364.762629][T11188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.807736][T11188] CPU: 1 PID: 11188 Comm: syz.3.1867 Not tainted syzkaller #0 [ 364.815372][T11188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 364.825445][T11188] Call Trace: [ 364.828740][T11188] [ 364.831696][T11188] dump_stack_lvl+0x18c/0x250 [ 364.836401][T11188] ? show_regs_print_info+0x20/0x20 [ 364.841618][T11188] ? load_image+0x420/0x420 [ 364.846141][T11188] ? __lock_acquire+0x7d40/0x7d40 [ 364.851187][T11188] ? snprintf+0xe9/0x140 [ 364.855453][T11188] should_fail_ex+0x39d/0x4d0 [ 364.860155][T11188] _copy_to_user+0x2f/0xa0 [ 364.864678][T11188] simple_read_from_buffer+0xe7/0x150 [ 364.870086][T11188] proc_fail_nth_read+0x1e8/0x260 [ 364.875166][T11188] ? proc_fault_inject_write+0x360/0x360 [ 364.880840][T11188] ? fsnotify_perm+0x271/0x5e0 [ 364.885639][T11188] ? proc_fault_inject_write+0x360/0x360 [ 364.891294][T11188] vfs_read+0x28b/0x970 [ 364.895477][T11188] ? kernel_read+0x1e0/0x1e0 [ 364.900274][T11188] ? __fget_files+0x28/0x4b0 [ 364.904970][T11188] ? __fget_files+0x28/0x4b0 [ 364.909575][T11188] ? __fget_files+0x43d/0x4b0 [ 364.914276][T11188] ? __fdget_pos+0x2a3/0x330 [ 364.918884][T11188] ? ksys_read+0x75/0x260 [ 364.923234][T11188] ksys_read+0x150/0x260 [ 364.927505][T11188] ? vfs_write+0x990/0x990 [ 364.931950][T11188] ? lockdep_hardirqs_on+0x98/0x150 [ 364.937254][T11188] do_syscall_64+0x55/0xa0 [ 364.941682][T11188] ? clear_bhb_loop+0x40/0x90 [ 364.946380][T11188] ? clear_bhb_loop+0x40/0x90 [ 364.951073][T11188] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 364.956994][T11188] RIP: 0033:0x7faaced5d60e [ 364.961434][T11188] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 364.981166][T11188] RSP: 002b:00007faacfd0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.989596][T11188] RAX: ffffffffffffffda RBX: 00007faacfd0d6c0 RCX: 00007faaced5d60e [ 364.997870][T11188] RDX: 000000000000000f RSI: 00007faacfd0d0a0 RDI: 0000000000000008 [ 365.006126][T11188] RBP: 00007faacfd0d090 R08: 0000000000000000 R09: 0000000000000000 [ 365.014228][T11188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.022222][T11188] R13: 00007faacf016128 R14: 00007faacf016090 R15: 00007ffdcb6c8188 [ 365.030233][T11188] [ 365.224967][T11191] hsr_slave_1 (unregistering): left promiscuous mode [ 365.485667][T11208] ref_ctr_offset mismatch. inode: 0x9a8 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 366.099017][T11223] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 366.357967][T11233] netlink: 'syz.2.1886': attribute type 2 has an invalid length. [ 366.366585][T11233] netlink: 'syz.2.1886': attribute type 4 has an invalid length. [ 366.375350][T11233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1886'. [ 366.437615][T11237] sit0: left promiscuous mode [ 366.647350][T11237] sit0: entered promiscuous mode [ 367.538814][T11275] netlink: 'syz.0.1901': attribute type 10 has an invalid length. [ 367.582069][T11265] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1897'. [ 367.926326][T11292] netlink: 'syz.0.1908': attribute type 46 has an invalid length. [ 367.934626][T11292] netlink: 'syz.0.1908': attribute type 46 has an invalid length. [ 368.030815][T11296] netlink: 'syz.0.1908': attribute type 46 has an invalid length. [ 368.041002][T11296] netlink: 'syz.0.1908': attribute type 46 has an invalid length. [ 368.127073][T11302] sit0: left promiscuous mode [ 368.425163][T11312] syzkaller0: entered promiscuous mode [ 368.431229][T11312] syzkaller0: entered allmulticast mode [ 368.444330][T11302] sit0: entered promiscuous mode [ 371.049543][T11329] netlink: 'syz.0.1916': attribute type 10 has an invalid length. [ 371.057678][T11329] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1916'. [ 371.322958][T11334] FAULT_INJECTION: forcing a failure. [ 371.322958][T11334] name failslab, interval 1, probability 0, space 0, times 0 [ 371.337599][T11334] CPU: 0 PID: 11334 Comm: syz.1.1919 Not tainted syzkaller #0 [ 371.345202][T11334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 371.355481][T11334] Call Trace: [ 371.358801][T11334] [ 371.361768][T11334] dump_stack_lvl+0x18c/0x250 [ 371.366495][T11334] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.372674][T11334] ? show_regs_print_info+0x20/0x20 [ 371.377904][T11334] ? load_image+0x420/0x420 [ 371.382463][T11334] should_fail_ex+0x39d/0x4d0 [ 371.387166][T11334] should_failslab+0x9/0x20 [ 371.391691][T11334] slab_pre_alloc_hook+0x59/0x310 [ 371.396758][T11334] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.402960][T11334] kmem_cache_alloc_node+0x60/0x320 [ 371.408191][T11334] ? __alloc_skb+0x103/0x2c0 [ 371.412895][T11334] __alloc_skb+0x103/0x2c0 [ 371.417762][T11334] netlink_sendmsg+0x66a/0xbf0 [ 371.422549][T11334] ? lockdep_hardirqs_on+0x98/0x150 [ 371.427771][T11334] ? netlink_getsockopt+0x590/0x590 [ 371.432989][T11334] ? aa_sock_msg_perm+0x94/0x150 [ 371.437951][T11334] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 371.443270][T11334] ? security_socket_sendmsg+0x80/0xa0 [ 371.448857][T11334] ? netlink_getsockopt+0x590/0x590 [ 371.454528][T11334] ____sys_sendmsg+0x5ba/0x960 [ 371.459405][T11334] ? lockdep_hardirqs_on+0x98/0x150 [ 371.464624][T11334] ? __sys_sendmsg_sock+0x30/0x30 [ 371.469665][T11334] ? ___sys_sendmsg+0x28b/0x360 [ 371.474541][T11334] ___sys_sendmsg+0x2a6/0x360 [ 371.479236][T11334] ? __sys_sendmsg+0x2a0/0x2a0 [ 371.484014][T11334] ? perf_trace_preemptirq_template+0x269/0x330 [ 371.490315][T11334] __se_sys_sendmsg+0x1c2/0x2b0 [ 371.495186][T11334] ? __x64_sys_sendmsg+0x80/0x80 [ 371.500157][T11334] ? lockdep_hardirqs_on+0x98/0x150 [ 371.505400][T11334] do_syscall_64+0x55/0xa0 [ 371.510086][T11334] ? clear_bhb_loop+0x40/0x90 [ 371.514783][T11334] ? clear_bhb_loop+0x40/0x90 [ 371.519558][T11334] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 371.525636][T11334] RIP: 0033:0x7fb98cf9cdd9 [ 371.530073][T11334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.549696][T11334] RSP: 002b:00007fb98ddcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.558124][T11334] RAX: ffffffffffffffda RBX: 00007fb98d215fa0 RCX: 00007fb98cf9cdd9 [ 371.566139][T11334] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 371.574181][T11334] RBP: 00007fb98ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 371.582369][T11334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.590535][T11334] R13: 00007fb98d216038 R14: 00007fb98d215fa0 R15: 00007ffde270dd38 [ 371.598536][T11334] [ 371.767510][T11344] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1922'. [ 372.008508][T11352] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 372.018362][T11352] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1924'. [ 372.120205][T11356] netlink: 'syz.1.1926': attribute type 10 has an invalid length. [ 372.158984][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1926'. [ 372.221717][T11360] netlink: 'syz.2.1927': attribute type 32 has an invalid length. [ 372.345177][T11362] FAULT_INJECTION: forcing a failure. [ 372.345177][T11362] name failslab, interval 1, probability 0, space 0, times 0 [ 372.378414][T11362] CPU: 0 PID: 11362 Comm: syz.1.1928 Not tainted syzkaller #0 [ 372.386160][T11362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.396453][T11362] Call Trace: [ 372.399774][T11362] [ 372.402825][T11362] dump_stack_lvl+0x18c/0x250 [ 372.407549][T11362] ? show_regs_print_info+0x20/0x20 [ 372.412784][T11362] ? load_image+0x420/0x420 [ 372.417442][T11362] ? verify_lock_unused+0x140/0x140 [ 372.422788][T11362] ? perf_trace_lock+0x304/0x3b0 [ 372.427976][T11362] should_fail_ex+0x39d/0x4d0 [ 372.432821][T11362] should_failslab+0x9/0x20 [ 372.437525][T11362] slab_pre_alloc_hook+0x59/0x310 [ 372.442975][T11362] kmem_cache_alloc+0x5a/0x2d0 [ 372.447825][T11362] ? skb_clone+0x1eb/0x370 [ 372.452294][T11362] skb_clone+0x1eb/0x370 [ 372.457013][T11362] __netlink_deliver_tap+0x41c/0x830 [ 372.462354][T11362] ? netlink_deliver_tap+0x2e/0x1b0 [ 372.467600][T11362] netlink_deliver_tap+0x19c/0x1b0 [ 372.472748][T11362] netlink_unicast+0x72c/0x8d0 [ 372.477563][T11362] netlink_sendmsg+0x8d0/0xbf0 [ 372.482415][T11362] ? perf_trace_lock+0x304/0x3b0 [ 372.487749][T11362] ? netlink_getsockopt+0x590/0x590 [ 372.493118][T11362] ? aa_sock_msg_perm+0x94/0x150 [ 372.498264][T11362] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 372.503584][T11362] ? security_socket_sendmsg+0x80/0xa0 [ 372.509074][T11362] ? netlink_getsockopt+0x590/0x590 [ 372.514418][T11362] ____sys_sendmsg+0x5ba/0x960 [ 372.519226][T11362] ? __asan_memset+0x22/0x40 [ 372.523855][T11362] ? __sys_sendmsg_sock+0x30/0x30 [ 372.529108][T11362] ? __import_iovec+0x5f2/0x850 [ 372.533999][T11362] ? import_iovec+0x73/0xa0 [ 372.538538][T11362] ___sys_sendmsg+0x2a6/0x360 [ 372.543251][T11362] ? __sys_sendmsg+0x2a0/0x2a0 [ 372.548084][T11362] ? __lock_acquire+0x7d40/0x7d40 [ 372.553263][T11362] __se_sys_sendmsg+0x1c2/0x2b0 [ 372.558237][T11362] ? __x64_sys_sendmsg+0x80/0x80 [ 372.563308][T11362] ? lockdep_hardirqs_on+0x98/0x150 [ 372.568547][T11362] do_syscall_64+0x55/0xa0 [ 372.573001][T11362] ? clear_bhb_loop+0x40/0x90 [ 372.577974][T11362] ? clear_bhb_loop+0x40/0x90 [ 372.582863][T11362] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.588792][T11362] RIP: 0033:0x7fb98cf9cdd9 [ 372.593270][T11362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.613905][T11362] RSP: 002b:00007fb98ddcf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.622763][T11362] RAX: ffffffffffffffda RBX: 00007fb98d215fa0 RCX: 00007fb98cf9cdd9 [ 372.631401][T11362] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 372.639415][T11362] RBP: 00007fb98ddcf090 R08: 0000000000000000 R09: 0000000000000000 [ 372.647421][T11362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.655506][T11362] R13: 00007fb98d216038 R14: 00007fb98d215fa0 R15: 00007ffde270dd38 [ 372.663531][T11362] [ 372.690181][T11362] netlink: 'syz.1.1928': attribute type 5 has an invalid length. [ 372.773285][T11373] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1933'. [ 373.110670][T11379] netlink: 'syz.0.1936': attribute type 5 has an invalid length. [ 373.123258][T11381] netlink: 'syz.2.1937': attribute type 10 has an invalid length. [ 373.132344][T11381] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1937'. [ 373.164482][T11382] netlink: 'syz.3.1932': attribute type 16 has an invalid length. [ 373.338385][T11382] netlink: 'syz.3.1932': attribute type 3 has an invalid length. [ 373.369835][T11382] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1932'. [ 374.890717][T11415] netlink: 'syz.1.1948': attribute type 21 has an invalid length. [ 374.900373][T11415] netlink: 'syz.1.1948': attribute type 10 has an invalid length. [ 374.909611][T11415] netlink: 12226 bytes leftover after parsing attributes in process `syz.1.1948'. [ 374.941873][T11421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1947'. [ 375.043052][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1950'. [ 375.684093][T11443] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 376.188857][T11451] __nla_validate_parse: 1 callbacks suppressed [ 376.188878][T11451] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1963'. [ 376.244616][T11451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.531142][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1965'. [ 376.674688][T11464] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 376.964106][T11472] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 377.365213][T11488] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1975'. [ 377.393497][T11489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1973'. [ 377.418322][T11489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1973'. [ 377.430270][T11486] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1973'. [ 377.959016][T11507] validate_nla: 14 callbacks suppressed [ 377.959035][T11507] netlink: 'syz.3.1980': attribute type 10 has an invalid length. [ 377.974082][T11507] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1980'. [ 378.039242][T11512] netlink: 'syz.2.1982': attribute type 5 has an invalid length. [ 378.060297][T11512] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1982'. [ 378.314472][T11522] netlink: 'syz.3.1985': attribute type 2 has an invalid length. [ 378.328445][T11522] netlink: 119 bytes leftover after parsing attributes in process `syz.3.1985'. [ 378.372954][T11522] netlink: 'syz.3.1985': attribute type 10 has an invalid length. [ 378.450226][T11522] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1985'. [ 378.472484][T11522] ipvlan1: entered promiscuous mode [ 378.480405][T11522] ipvlan1: entered allmulticast mode [ 378.488030][T11522] veth0_vlan: entered allmulticast mode [ 378.539548][T11522] bridge0: port 3(ipvlan1) entered blocking state [ 378.547560][T11522] bridge0: port 3(ipvlan1) entered disabled state [ 378.595051][T11522] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 378.630343][T11529] netlink: 'syz.2.1988': attribute type 10 has an invalid length. [ 378.699310][T11534] netlink: 'syz.1.1990': attribute type 29 has an invalid length. [ 378.717695][T11534] netlink: 'syz.1.1990': attribute type 29 has an invalid length. [ 379.046274][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.052853][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.331430][T11555] netlink: 'syz.2.1997': attribute type 10 has an invalid length. [ 379.355977][T11555] team0: Device bridge_slave_1 is up. Set it down before adding it as a team port [ 379.729068][T11570] netlink: 'syz.2.2004': attribute type 10 has an invalid length. [ 379.738106][T11570] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 380.772681][T11607] FAULT_INJECTION: forcing a failure. [ 380.772681][T11607] name failslab, interval 1, probability 0, space 0, times 0 [ 380.817492][T11607] CPU: 1 PID: 11607 Comm: syz.2.2015 Not tainted syzkaller #0 [ 380.825128][T11607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.835314][T11607] Call Trace: [ 380.838638][T11607] [ 380.841593][T11607] dump_stack_lvl+0x18c/0x250 [ 380.846320][T11607] ? show_regs_print_info+0x20/0x20 [ 380.851570][T11607] ? load_image+0x420/0x420 [ 380.856124][T11607] ? __might_sleep+0xe0/0xe0 [ 380.860803][T11607] ? __lock_acquire+0x7d40/0x7d40 [ 380.865865][T11607] ? exc_page_fault+0x8c/0x100 [ 380.870673][T11607] should_fail_ex+0x39d/0x4d0 [ 380.875488][T11607] should_failslab+0x9/0x20 [ 380.880029][T11607] slab_pre_alloc_hook+0x59/0x310 [ 380.885120][T11607] kmem_cache_alloc_node+0x60/0x320 [ 380.890355][T11607] ? __alloc_skb+0x103/0x2c0 [ 380.894980][T11607] __alloc_skb+0x103/0x2c0 [ 380.899430][T11607] _sctp_make_chunk+0x5e/0x420 [ 380.904254][T11607] sctp_make_datafrag_empty+0x12b/0x240 [ 380.909856][T11607] ? sctp_make_ecne+0x340/0x340 [ 380.914749][T11607] ? sctp_user_addto_chunk+0xb0/0x220 [ 380.920165][T11607] sctp_datamsg_from_user+0x722/0xee0 [ 380.925602][T11607] sctp_sendmsg_to_asoc+0x107f/0x1830 [ 380.931032][T11607] ? __asan_memcpy+0x40/0x70 [ 380.935666][T11607] ? sctp_assoc_add_peer+0xcf3/0x1390 [ 380.941091][T11607] ? sctp_sendmsg_check_sflags+0x2d0/0x2d0 [ 380.947007][T11607] ? __sctp_connect+0xd80/0xd80 [ 380.951975][T11607] ? __local_bh_enable_ip+0x13a/0x1c0 [ 380.957464][T11607] ? _local_bh_enable+0xa0/0xa0 [ 380.962429][T11607] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 380.968268][T11607] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 380.974107][T11607] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 380.979700][T11607] ? security_sctp_bind_connect+0x89/0xb0 [ 380.985489][T11607] sctp_sendmsg+0x1b83/0x28c0 [ 380.990222][T11607] ? sctp_getsockopt+0xb60/0xb60 [ 380.995199][T11607] ? aa_sk_perm+0x83c/0x970 [ 380.999763][T11607] ? aa_af_perm+0x330/0x330 [ 381.004303][T11607] ? tomoyo_socket_sendmsg_permission+0x1e1/0x2f0 [ 381.010842][T11607] ? sock_rps_record_flow+0x19/0x3f0 [ 381.016164][T11607] ? inet_sendmsg+0x7c/0x2f0 [ 381.020963][T11607] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 381.026372][T11607] ? security_socket_sendmsg+0x80/0xa0 [ 381.031862][T11607] ? inet_send_prepare+0x260/0x260 [ 381.037019][T11607] ____sys_sendmsg+0x5ba/0x960 [ 381.041821][T11607] ? __lock_acquire+0x7d40/0x7d40 [ 381.046901][T11607] ? __asan_memset+0x22/0x40 [ 381.051524][T11607] ? __sys_sendmsg_sock+0x30/0x30 [ 381.056577][T11607] ? __import_iovec+0x5f2/0x850 [ 381.061472][T11607] ? import_iovec+0x73/0xa0 [ 381.066014][T11607] ___sys_sendmsg+0x2a6/0x360 [ 381.070722][T11607] ? get_pid_task+0x20/0x1e0 [ 381.075358][T11607] ? __sys_sendmsg+0x2a0/0x2a0 [ 381.080183][T11607] ? __lock_acquire+0x7d40/0x7d40 [ 381.085286][T11607] __se_sys_sendmsg+0x1c2/0x2b0 [ 381.090176][T11607] ? __x64_sys_sendmsg+0x80/0x80 [ 381.095178][T11607] ? lockdep_hardirqs_on+0x98/0x150 [ 381.100512][T11607] do_syscall_64+0x55/0xa0 [ 381.105043][T11607] ? clear_bhb_loop+0x40/0x90 [ 381.109756][T11607] ? clear_bhb_loop+0x40/0x90 [ 381.114487][T11607] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 381.120501][T11607] RIP: 0033:0x7ff2cc99cdd9 [ 381.124946][T11607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.144677][T11607] RSP: 002b:00007ff2cd782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.153317][T11607] RAX: ffffffffffffffda RBX: 00007ff2ccc15fa0 RCX: 00007ff2cc99cdd9 [ 381.161320][T11607] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000003 [ 381.169323][T11607] RBP: 00007ff2cd782090 R08: 0000000000000000 R09: 0000000000000000 [ 381.177325][T11607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.185352][T11607] R13: 00007ff2ccc16038 R14: 00007ff2ccc15fa0 R15: 00007ffc3b5d6698 [ 381.193369][T11607] [ 406.519004][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.529440][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.559840][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.573816][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.581855][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 406.590528][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.810328][ T5788] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.821292][ T5788] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.830062][ T5788] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.839676][ T5788] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.847513][ T5788] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 406.855535][ T5788] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 407.022457][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 407.032040][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 407.042968][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 407.052847][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 407.061112][ T5784] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 407.068929][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 407.140826][ T5788] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 407.152444][ T5788] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 407.160842][ T5788] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 407.170444][ T5788] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 407.179083][ T5788] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 407.187296][ T5788] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 408.638399][ T5788] Bluetooth: hci4: command tx timeout [ 408.958416][ T5788] Bluetooth: hci5: command tx timeout [ 409.118623][ T5788] Bluetooth: hci6: command tx timeout [ 409.278403][ T5788] Bluetooth: hci7: command tx timeout [ 410.718306][ T5788] Bluetooth: hci4: command tx timeout [ 411.038365][ T5788] Bluetooth: hci5: command tx timeout [ 411.198472][ T5788] Bluetooth: hci6: command tx timeout [ 411.358442][ T5788] Bluetooth: hci7: command tx timeout [ 412.798324][ T5788] Bluetooth: hci4: command tx timeout [ 413.118694][ T5788] Bluetooth: hci5: command tx timeout [ 413.278346][ T5788] Bluetooth: hci6: command tx timeout [ 413.438512][ T5788] Bluetooth: hci7: command tx timeout [ 414.881223][ T5788] Bluetooth: hci4: command tx timeout [ 415.198482][ T5788] Bluetooth: hci5: command tx timeout [ 415.358360][ T5788] Bluetooth: hci6: command tx timeout [ 415.518320][ T5788] Bluetooth: hci7: command tx timeout [ 440.482265][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.488837][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 467.102553][ T5784] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 467.112667][ T5784] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 467.126794][ T5784] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 467.135684][ T5784] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 467.143782][ T5784] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 467.151676][ T5784] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 467.374082][ T5788] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 467.383616][ T5788] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 467.392098][ T5788] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 467.401197][ T5788] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 467.409811][ T5788] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 467.417205][ T5788] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 467.498932][ T5784] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 467.508753][ T5784] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 467.517002][ T5784] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 467.526117][ T5784] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 467.534379][ T5784] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 467.541967][ T5784] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 467.615651][ T5788] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 467.627315][ T5788] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 467.636806][ T5788] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 467.649033][ T5788] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 467.657048][ T5788] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 467.665774][ T5788] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 469.208343][ T5788] Bluetooth: hci8: command tx timeout [ 470.065412][ T5788] Bluetooth: hci9: command tx timeout [ 470.071643][ T5788] Bluetooth: hci10: command tx timeout [ 470.077495][ T5788] Bluetooth: hci11: command tx timeout [ 471.278329][ T5784] Bluetooth: hci8: command tx timeout [ 472.158585][ T5788] Bluetooth: hci10: command tx timeout [ 472.164341][ T5788] Bluetooth: hci9: command tx timeout [ 472.170800][ T5784] Bluetooth: hci11: command tx timeout [ 473.368287][ T5779] Bluetooth: hci8: command tx timeout [ 474.238460][ T5779] Bluetooth: hci11: command tx timeout [ 474.244153][ T5779] Bluetooth: hci9: command tx timeout [ 474.250560][ T5784] Bluetooth: hci10: command tx timeout [ 475.438325][ T5779] Bluetooth: hci8: command tx timeout [ 476.318710][ T5788] Bluetooth: hci11: command tx timeout [ 476.324309][ T5784] Bluetooth: hci10: command tx timeout [ 476.330613][ T5779] Bluetooth: hci9: command tx timeout [ 501.923900][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.931480][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.308147][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 527.314950][ C0] rcu: 0-....: (9891 ticks this GP) idle=6614/1/0x4000000000000000 softirq=35498/35501 fqs=4945 [ 527.326692][ C0] rcu: hardirqs softirqs csw/system [ 527.333247][ C0] rcu: number: 1801091 3 0 [ 527.339699][ C0] rcu: cputime: 23730 28758 36 ==> 52490(ms) [ 527.347557][ C0] rcu: (t=10500 jiffies g=49721 q=1804 ncpus=2) [ 527.353951][ C0] CPU: 0 PID: 11614 Comm: syz.3.2019 Not tainted syzkaller #0 [ 527.361458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 527.371541][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 527.378056][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b 74 cc f6 65 8b 05 4c a1 73 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 527.397659][ C0] RSP: 0018:ffffc90000007a60 EFLAGS: 00000206 [ 527.404264][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 895dd7958355a200 [ 527.412261][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 527.420238][ C0] RBP: ffffc90000007ae8 R08: ffffffff911c65e7 R09: 1ffffffff2238cbc [ 527.428312][ C0] R10: dffffc0000000000 R11: fffffbfff2238cbd R12: dffffc0000000000 [ 527.436308][ C0] R13: ffff88802c638410 R14: ffff8880b8e29580 R15: 1ffff92000000f4c [ 527.444710][ C0] FS: 00007faacfd2e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 527.453722][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 527.460315][ C0] CR2: 00007f371783be6a CR3: 000000002bbf3000 CR4: 00000000003506f0 [ 527.468286][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 527.476252][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 527.484343][ C0] Call Trace: [ 527.487632][ C0] [ 527.490484][ C0] ? _raw_spin_unlock+0x40/0x40 [ 527.495339][ C0] ? enqueue_timer+0x23d/0x550 [ 527.500114][ C0] __mod_timer+0x984/0xdb0 [ 527.504639][ C0] mrp_join_timer+0x13f/0x170 [ 527.509317][ C0] call_timer_fn+0x189/0x540 [ 527.514049][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 527.519450][ C0] ? call_timer_fn+0xd2/0x540 [ 527.524221][ C0] ? __run_timers+0x800/0x800 [ 527.528928][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 527.534155][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 527.539362][ C0] ? mrp_init_applicant+0x4e0/0x4e0 [ 527.544565][ C0] __run_timers+0x542/0x800 [ 527.549075][ C0] ? detach_timer+0x2b0/0x2b0 [ 527.553760][ C0] run_timer_softirq+0x67/0xf0 [ 527.558701][ C0] handle_softirqs+0x280/0x820 [ 527.563474][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 527.568238][ C0] ? do_softirq+0x1a0/0x1a0 [ 527.572825][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 527.578053][ C0] __irq_exit_rcu+0xd3/0x190 [ 527.582736][ C0] ? irq_exit_rcu+0x20/0x20 [ 527.587270][ C0] irq_exit_rcu+0x9/0x20 [ 527.591514][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 527.597262][ C0] [ 527.600248][ C0] [ 527.603208][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.609210][ C0] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 527.615112][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 d6 cd f6 e8 7c e3 fe f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 527.634848][ C0] RSP: 0018:ffffc9000bd67d60 EFLAGS: 00000286 [ 527.640941][ C0] RAX: 895dd7958355a200 RBX: 0000000000000000 RCX: 895dd7958355a200 [ 527.649088][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 527.657143][ C0] RBP: ffffc9000bd67e10 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 527.665121][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000 [ 527.673088][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920017acfac [ 527.681081][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 527.686822][ C0] ? lock_chain_count+0x20/0x20 [ 527.691866][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 527.697671][ C0] irqentry_exit+0x67/0x70 [ 527.702083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 527.708062][ C0] RIP: 0010:exit_to_user_mode_loop+0x40/0x110 [ 527.714222][ C0] Code: fb eb 1d e8 d2 a6 12 09 65 48 8b 05 ba dc 8f 7e 4c 8b 30 41 f7 c6 0e 30 02 00 0f 84 c4 00 00 00 e8 f5 ba 19 00 fb 41 f6 c6 08 <74> 05 e8 09 d2 1a 09 41 f7 c6 00 10 00 00 74 08 48 89 df e8 78 a0 [ 527.733848][ C0] RSP: 0018:ffffc9000bd67ed0 EFLAGS: 00000246 [ 527.739934][ C0] RAX: 895dd7958355a200 RBX: ffffc9000bd67f58 RCX: 895dd7958355a200 [ 527.747930][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 527.755909][ C0] RBP: ffffc9000bd67f48 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 527.763876][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000 [ 527.771843][ C0] R13: 0000000000000000 R14: 0000000000004006 R15: ffff888019fb0000 [ 527.779826][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 527.785405][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 527.790864][ C0] do_syscall_64+0x61/0xa0 [ 527.795483][ C0] ? clear_bhb_loop+0x40/0x90 [ 527.800273][ C0] ? clear_bhb_loop+0x40/0x90 [ 527.805004][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 527.810910][ C0] RIP: 0033:0x7faaced9cdd9 [ 527.815412][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.835050][ C0] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 527.843503][ C0] RAX: 0000000000000015 RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 527.851478][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 527.859477][ C0] RBP: 00007faacee32d69 R08: 0000000000000000 R09: 0000000000000000 [ 527.867483][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 527.875578][ C0] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 527.883796][ C0] [ 528.500927][T11688] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 528.510969][T11688] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 528.520508][T11688] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 528.534945][T11688] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 528.545292][T11688] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 528.554031][T11688] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 528.563059][T11688] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 528.573714][T11688] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 528.582437][T11688] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 528.590112][T11688] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 528.597461][T11688] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 528.606321][T11688] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 528.617921][T11688] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 528.625920][T11688] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 528.634131][T11688] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 528.646021][T11688] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 528.655391][T11689] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 528.662757][T11688] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 528.671447][T11689] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 528.680063][T11688] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 528.687641][T11689] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 528.695521][T11688] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 528.703125][T11689] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 528.711528][T11688] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 529.305431][ T29] INFO: task rcu_tasks_trace:15 blocked for more than 147 seconds. [ 529.325013][ T29] Not tainted syzkaller #0 [ 529.331452][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.341518][ T29] task:rcu_tasks_trace state:D stack:26704 pid:15 ppid:2 flags:0x00004000 [ 529.350844][ T29] Call Trace: [ 529.354179][ T29] [ 529.357158][ T29] __schedule+0x1553/0x45a0 [ 529.362340][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 529.368412][ T29] ? lock_chain_count+0x20/0x20 [ 529.373315][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 529.379291][ T29] ? asan.module_dtor+0x20/0x20 [ 529.384199][ T29] ? _raw_spin_unlock+0x40/0x40 [ 529.389144][ T29] ? do_raw_spin_lock+0x11f/0x2c0 [ 529.394588][ T29] ? prepare_to_wait_event+0x3db/0x470 [ 529.400253][ T29] ? prepare_to_wait_event+0x434/0x470 [ 529.405780][ T29] schedule+0xbd/0x170 [ 529.410161][ T29] synchronize_rcu_expedited+0x79f/0x880 [ 529.415861][ T29] ? schedule_delayed_monitor_work+0x40/0x40 [ 529.421957][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 529.426960][ T29] ? wake_bit_function+0x200/0x200 [ 529.432198][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 529.437234][ T29] ? __might_sleep+0xe0/0xe0 [ 529.442048][ T29] synchronize_rcu+0x142/0x3e0 [ 529.446896][ T29] ? __schedule_delayed_monitor_work+0x200/0x200 [ 529.453334][ T29] ? cpus_read_unlock+0xa6/0x130 [ 529.458360][ T29] ? rcu_tasks_trace_pregp_step+0xe50/0xea0 [ 529.464312][ T29] ? call_rcu_tasks_generic_timer+0x200/0x200 [ 529.470462][ T29] ? rcu_is_watching+0x15/0xb0 [ 529.475275][ T29] rcu_tasks_wait_gp+0x480/0xab0 [ 529.480308][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 529.486423][ T29] ? rcu_tasks_one_gp+0xadb/0xdb0 [ 529.491749][ T29] ? mutex_lock_nested+0x20/0x20 [ 529.497117][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 529.511608][ T29] ? trace_raw_output_rcu_stall_warning+0xc0/0xc0 [ 529.518304][ T29] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 529.524247][ T29] ? _raw_spin_unlock+0x40/0x40 [ 529.529209][ T29] rcu_tasks_one_gp+0xbf4/0xdb0 [ 529.534120][ T29] ? rcu_tasks_one_gp+0xe8/0xdb0 [ 529.539152][ T29] rcu_tasks_kthread+0x196/0x1c0 [ 529.544139][ T29] kthread+0x2fa/0x390 [ 529.548319][ T29] ? tasks_rcu_exit_srcu_stall+0x100/0x100 [ 529.554176][ T29] ? kthread_blkcg+0xd0/0xd0 [ 529.569365][ T29] ret_from_fork+0x48/0x80 [ 529.573959][ T29] ? kthread_blkcg+0xd0/0xd0 [ 529.578734][ T29] ret_from_fork_asm+0x11/0x20 [ 529.583576][ T29] [ 529.586749][ T29] INFO: task syz.1.2017:11609 blocked for more than 147 seconds. [ 529.594541][ T29] Not tainted syzkaller #0 [ 529.599939][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.608820][ T29] task:syz.1.2017 state:D stack:23592 pid:11609 ppid:5775 flags:0x00004004 [ 529.618087][ T29] Call Trace: [ 529.621477][ T29] [ 529.624456][ T29] __schedule+0x1553/0x45a0 [ 529.633636][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 529.654703][ T29] ? asan.module_dtor+0x20/0x20 [ 529.659801][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 529.664521][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 529.670166][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 529.676543][ T29] schedule+0xbd/0x170 [ 529.680730][ T29] schedule_preempt_disabled+0x13/0x20 [ 529.686230][ T29] __mutex_lock+0x6a9/0xcc0 [ 529.690832][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 529.695555][ T29] ? perf_trace_destroy+0x2e/0x140 [ 529.701116][ T29] ? mutex_lock_nested+0x20/0x20 [ 529.706094][ T29] ? __mutex_lock+0x315/0xcc0 [ 529.710853][ T29] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 529.716523][ T29] ? perf_detach_cgroup+0x310/0x310 [ 529.721795][ T29] ? perf_swevent_read+0x10/0x10 [ 529.726781][ T29] perf_trace_destroy+0x2e/0x140 [ 529.731891][ T29] ? perf_swevent_read+0x10/0x10 [ 529.736872][ T29] _free_event+0xb73/0xf30 [ 529.741629][ T29] perf_event_release_kernel+0x842/0x8d0 [ 529.747310][ T29] ? __might_sleep+0xe0/0xe0 [ 529.753224][ T29] ? calc_timer_values+0x400/0x400 [ 529.758442][ T29] ? __fput+0x61c/0x970 [ 529.762633][ T29] ? perf_mmap+0x15c0/0x15c0 [ 529.767274][ T29] perf_release+0x3b/0x40 [ 529.775743][ T29] __fput+0x234/0x970 [ 529.780509][ T29] task_work_run+0x1d4/0x260 [ 529.785157][ T29] ? task_work_cancel+0x220/0x220 [ 529.790309][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 529.795823][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 529.802196][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 529.807820][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 529.814560][ T29] do_syscall_64+0x61/0xa0 [ 529.819106][ T29] ? clear_bhb_loop+0x40/0x90 [ 529.823827][ T29] ? clear_bhb_loop+0x40/0x90 [ 529.829067][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 529.835012][ T29] RIP: 0033:0x7fb98cf9cdd9 [ 529.840193][ T29] RSP: 002b:00007ffde270de98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 529.848996][ T29] RAX: 0000000000000000 RBX: 00007fb98d217da0 RCX: 00007fb98cf9cdd9 [ 529.857015][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 529.865534][ T29] RBP: 00007fb98d217da0 R08: 0000000000000006 R09: 0000000000000000 [ 529.875055][ T29] R10: 00007fb98d217cb0 R11: 0000000000000246 R12: 000000000005d434 [ 529.887855][ T29] R13: 00007fb98d21618c R14: 000000000005d1e1 R15: 00007fb98d216180 [ 529.896217][ T29] [ 529.899606][ T29] INFO: task syz.3.2019:11613 blocked for more than 147 seconds. [ 529.907709][ T29] Not tainted syzkaller #0 [ 529.913136][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 529.922205][ T29] task:syz.3.2019 state:D stack:27016 pid:11613 ppid:5773 flags:0x00004004 [ 529.931840][ T29] Call Trace: [ 529.935152][ T29] [ 529.939348][ T29] __schedule+0x1553/0x45a0 [ 529.943935][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 529.949322][ T29] ? perf_trace_lock+0xfc/0x3b0 [ 529.954215][ T29] ? asan.module_dtor+0x20/0x20 [ 529.960098][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 530.590849][ T29] schedule+0xbd/0x170 [ 530.595020][ T29] schedule_timeout+0xc1/0x2d0 [ 530.599886][ T29] ? console_conditional_schedule+0x40/0x40 [ 530.605830][ T29] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 530.611925][ T29] ? lock_chain_count+0x20/0x20 [ 530.616814][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 530.622351][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 530.628058][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 530.633380][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 530.638726][ T29] ? wait_for_completion+0x27a/0x5b0 [ 530.644063][ T29] wait_for_completion+0x2cb/0x5b0 [ 530.649288][ T29] ? io_schedule+0xd0/0xd0 [ 530.653755][ T29] ? __init_swait_queue_head+0xa9/0x150 [ 530.659378][ T29] __wait_rcu_gp+0x242/0x270 [ 530.664022][ T29] synchronize_rcu_tasks_trace+0x160/0x230 [ 530.669930][ T29] ? call_rcu_tasks_trace+0x10/0x10 [ 530.675164][ T29] ? call_rcu_tasks_generic+0x667/0x960 [ 530.681038][ T29] ? rcu_tasks_trace_qs_blkd+0x340/0x340 [ 530.686773][ T29] ? rcu_read_lock_any_held+0x140/0x140 [ 530.692428][ T29] ? call_rcu_tasks+0x10/0x10 [ 530.697143][ T29] ? bpf_prog_array_copy+0x176/0x370 [ 530.702632][ T29] perf_event_detach_bpf_prog+0x264/0x310 [ 530.708623][ T29] ? perf_event_attach_bpf_prog+0x380/0x380 [ 530.714710][ T29] ? irq_work_sync+0x287/0x370 [ 530.719716][ T29] _free_event+0xa6b/0xf30 [ 530.724582][ T29] perf_event_release_kernel+0x842/0x8d0 [ 530.730308][ T29] ? __might_sleep+0xe0/0xe0 [ 530.734960][ T29] ? calc_timer_values+0x400/0x400 [ 530.740172][ T29] ? __fput+0x61c/0x970 [ 530.744460][ T29] ? perf_mmap+0x15c0/0x15c0 [ 530.749130][ T29] perf_release+0x3b/0x40 [ 530.753500][ T29] __fput+0x234/0x970 [ 530.757532][ T29] task_work_run+0x1d4/0x260 [ 530.762204][ T29] ? task_work_cancel+0x220/0x220 [ 530.767278][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 530.772839][ T29] exit_to_user_mode_loop+0xe6/0x110 [ 530.778201][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 530.783789][ T29] syscall_exit_to_user_mode+0x1a/0x50 [ 530.793787][ T29] do_syscall_64+0x61/0xa0 [ 530.800260][T11691] Bluetooth: hci4: command 0x0406 tx timeout [ 530.806334][T11691] Bluetooth: hci5: command 0x0406 tx timeout [ 530.815066][T11691] Bluetooth: hci6: command 0x0406 tx timeout [ 530.821847][T11691] Bluetooth: hci7: command 0x0406 tx timeout [ 530.829092][T11691] Bluetooth: hci14: command tx timeout [ 530.835282][T11691] Bluetooth: hci13: command tx timeout [ 530.848355][ T29] ? clear_bhb_loop+0x40/0x90 [ 530.853138][ T29] ? clear_bhb_loop+0x40/0x90 [ 530.857862][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.863916][ T29] RIP: 0033:0x7faaced9cdd9 [ 530.868419][ T29] RSP: 002b:00007ffdcb6c82e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 530.876881][ T29] RAX: 0000000000000000 RBX: 00007faacf017da0 RCX: 00007faaced9cdd9 [ 530.884920][ T29] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 530.892997][ T29] RBP: 00007faacf017da0 R08: 0000000000000006 R09: 0000000000000000 [ 530.901096][ T29] R10: 00007faacf017cb0 R11: 0000000000000246 R12: 000000000005d4a0 [ 530.909140][ T29] R13: 00007faacf01609c R14: 000000000005d2d9 R15: 00007faacf016090 [ 530.917186][ T29] [ 530.920354][ T29] INFO: task syz.2.2022:11629 blocked for more than 148 seconds. [ 530.928601][ T29] Not tainted syzkaller #0 [ 530.933575][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 530.942403][ T29] task:syz.2.2022 state:D stack:29000 pid:11629 ppid:5776 flags:0x00004004 [ 530.951879][ T29] Call Trace: [ 530.955193][ T29] [ 530.958310][ T29] __schedule+0x1553/0x45a0 [ 530.962964][ T29] ? trace_event_raw_event_lock+0x250/0x250 [ 530.969102][ T29] ? asan.module_dtor+0x20/0x20 [ 530.974041][ T29] ? __mutex_lock+0x6a4/0xcc0 [ 530.978859][ T29] ? __mutex_trylock_common+0x8a/0x260 [ 530.984372][ T29] ? trace_raw_output_contention_end+0xd0/0xd0 [ 530.990620][ T29] schedule+0xbd/0x170 [ 530.994784][ T29] schedule_preempt_disabled+0x13/0x20 [ 531.000393][ T29] __mutex_lock+0x6a9/0xcc0 [ 531.004933][ T29] ? __mutex_lock+0x4f9/0xcc0 [ 531.009761][ T29] ? perf_trace_init+0x50/0x2d0 [ 531.014745][ T29] ? mutex_lock_nested+0x20/0x20 [ 531.019790][ T29] perf_trace_init+0x50/0x2d0 [ 531.024517][ T29] ? perf_tp_event_init+0x7c/0x110 [ 531.029762][ T29] perf_tp_event_init+0x8d/0x110 [ 531.035115][ T29] perf_try_init_event+0x12b/0x3c0 [ 531.040338][ T29] perf_event_alloc+0xfa4/0x21b0 [ 531.045321][ T29] ? perf_event_alloc+0xc06/0x21b0 [ 531.050544][ T29] ? find_lively_task_by_vpid+0x19/0x290 [ 531.056225][ T29] __se_sys_perf_event_open+0x740/0x1c50 [ 531.062865][ T29] ? __ia32_sys_get_robust_list+0x110/0x110 [ 531.068887][ T29] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 531.074672][ T29] ? lock_chain_count+0x20/0x20 [ 531.083251][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 531.088596][ T29] ? __x64_sys_perf_event_open+0x20/0xc0 [ 531.094287][ T29] do_syscall_64+0x55/0xa0 [ 531.099368][ T29] ? clear_bhb_loop+0x40/0x90 [ 531.104179][ T29] ? clear_bhb_loop+0x40/0x90 [ 531.108941][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 531.114876][ T29] RIP: 0033:0x7ff2cc99cdd9 [ 531.119414][ T29] RSP: 002b:00007ff2cabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 531.127868][ T29] RAX: ffffffffffffffda RBX: 00007ff2ccc16090 RCX: 00007ff2cc99cdd9 [ 531.138412][ T29] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000500 [ 531.146522][ T29] RBP: 00007ff2cca32d69 R08: 0000000000000000 R09: 0000000000000000 [ 531.154601][ T29] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 531.162917][ T29] R13: 00007ff2ccc16128 R14: 00007ff2ccc16090 R15: 00007ffc3b5d6698 [ 531.171659][ T29] [ 531.174748][ T29] [ 531.174748][ T29] Showing all locks held in the system: [ 531.182580][ T29] 2 locks held by kworker/u4:1/12: [ 531.187719][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.201140][ T29] #1: ffffc90000117d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.216691][ T29] 1 lock held by rcu_tasks_trace/15: [ 531.222655][ T29] #0: ffffffff8d132e10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0xadb/0xdb0 [ 531.235520][ T29] 1 lock held by khungtaskd/29: [ 531.240877][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 531.251445][ T29] 3 locks held by kworker/u4:3/49: [ 531.256598][ T29] #0: ffff88802c61fd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.269502][ T29] #1: ffffc90000ba7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.283669][ T29] #2: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 531.298575][ T29] 2 locks held by getty/5532: [ 531.303510][ T29] #0: ffff88803156a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 531.336870][ T29] #1: ffffc9000326e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x433/0x1390 [ 531.388240][T11687] Bluetooth: hci12: command tx timeout [ 531.458380][ T29] 1 lock held by sshd-session/5759: [ 531.463746][ T29] 5 locks held by kworker/u5:2/5779: [ 531.488545][ T29] #0: ffff8880250d7538 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.508177][ T29] #1: ffffc9000478fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.526486][ T29] #2: ffff8880223e0e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 531.537066][ T29] #3: ffff8880223e00b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 531.547926][ T29] #4: ffffffff8e5307a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 531.563489][ T29] 5 locks held by kworker/u5:4/5784: [ 531.569105][ T29] #0: ffff88805ccbf938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.580483][ T29] #1: ffffc900047efd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.593403][ T29] #2: ffff8880598d4e70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 531.605896][ T29] #3: ffff8880598d40b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 531.616561][ T29] #4: ffffffff8e5307a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 531.626776][ T29] 5 locks held by kworker/u5:7/5788: [ 531.632398][ T29] #0: ffff88801bbfd138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.643687][ T29] #1: ffffc9000482fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.657075][ T29] #2: ffff88802d16ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 531.667428][ T29] #3: ffff88802d16c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 531.680998][ T29] #4: ffffffff8e5307a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 531.691186][T11687] Bluetooth: hci15: command tx timeout [ 531.698101][ T29] 3 locks held by kworker/0:4/5814: [ 531.703647][ T29] 3 locks held by kworker/u4:28/10083: [ 531.709532][ T29] #0: ffff888017c71538 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.722003][ T29] #1: ffffc900197efd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.733784][ T29] #2: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 531.743329][ T29] 2 locks held by kworker/1:8/11306: [ 531.749390][ T29] #0: ffff888017c72538 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.760882][ T29] #1: ffffc90004a67d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 531.773718][ T29] 1 lock held by syz.1.2017/11609: [ 531.779139][ T29] #0: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_destroy+0x2e/0x140 [ 531.793628][ T29] 1 lock held by syz.3.2019/11613: [ 531.799098][ T29] #0: ffffffff8d192328 (bpf_event_mutex){+.+.}-{3:3}, at: perf_event_detach_bpf_prog+0x8b/0x310 [ 531.810147][ T29] 2 locks held by syz.3.2019/11614: [ 531.815376][ T29] 1 lock held by syz.0.2021/11623: [ 531.821065][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x41/0x1c0 [ 531.830439][ T29] 4 locks held by syz.2.2022/11628: [ 531.835671][ T29] #0: ffffffff9731cc30 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xc06/0x21b0 [ 531.846445][ T29] #1: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0 [ 531.856437][ T29] #2: ffffffff8d17a848 (tracepoints_mutex){+.+.}-{3:3}, at: tracepoint_probe_register+0x40/0x90 [ 531.867601][ T29] #3: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 531.878903][ T29] 2 locks held by syz.2.2022/11629: [ 531.884135][ T29] #0: ffffffff9731cc30 (&pmus_srcu){.+.+}-{0:0}, at: perf_event_alloc+0xc06/0x21b0 [ 531.894081][ T29] #1: ffffffff8d188128 (event_mutex){+.+.}-{3:3}, at: perf_trace_init+0x50/0x2d0 [ 531.907380][ T29] 1 lock held by syz-executor/11636: [ 531.912991][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 531.922823][ T29] 1 lock held by syz-executor/11641: [ 531.928666][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 531.938847][ T29] 1 lock held by syz-executor/11643: [ 531.944398][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 531.955562][ T29] 1 lock held by syz-executor/11645: [ 531.961419][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 531.971433][ T29] 2 locks held by dhcpcd/11647: [ 531.976412][ T29] #0: ffff888079234130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 531.986739][ T29] #1: ffffffff8d137ab8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x3da/0x880 [ 531.998086][ T29] 1 lock held by dhcpcd/11648: [ 532.003258][ T29] #0: ffff8880504a6130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 532.018577][ T29] 1 lock held by dhcpcd/11649: [ 532.023417][ T29] #0: ffff88805ae8e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 532.033801][ T29] 1 lock held by dhcpcd/11650: [ 532.038926][ T29] #0: ffff88802e05e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 532.048995][ T29] 1 lock held by dhcpcd/11651: [ 532.053796][ T29] #0: ffff88807924e130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 532.064847][ T29] 1 lock held by dhcpcd/11652: [ 532.070047][ T29] #0: ffff88804db12130 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcc0 [ 532.080234][ T29] 1 lock held by syz-executor/11657: [ 532.085549][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.095516][ T29] 1 lock held by syz-executor/11662: [ 532.101111][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.110937][ T29] 1 lock held by syz-executor/11664: [ 532.116317][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.129802][ T29] 1 lock held by syz-executor/11666: [ 532.135229][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.145286][ T29] 1 lock held by syz-executor/11672: [ 532.150911][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.161044][ T29] 1 lock held by syz-executor/11673: [ 532.166364][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.177436][ T29] 6 locks held by kworker/u5:0/11676: [ 532.183298][ T29] #0: ffff88802470e538 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 532.194622][ T29] #1: ffffc9000483fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 532.463551][ T29] #2: ffff88807876ce70 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1d4/0x380 [ 532.477486][ T29] #3: ffff88807876c0b8 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x98a/0xec0 [ 532.487692][ T29] #4: ffffffff8e5307a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x165/0x300 [ 532.498358][ T29] #5: ffff88802650f338 (&conn->lock#2){+.+.}-{3:3}, at: l2cap_conn_del+0x70/0x660 [ 532.507969][ T29] 1 lock held by syz-executor/11677: [ 532.513872][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.523883][ T29] 1 lock held by syz-executor/11678: [ 532.529570][ T29] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x811/0xfa0 [ 532.539590][ T29] [ 532.541957][ T29] ============================================= [ 532.541957][ T29] [ 532.550984][ T29] NMI backtrace for cpu 1 [ 532.555376][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 532.562601][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.572689][ T29] Call Trace: [ 532.576110][ T29] [ 532.579072][ T29] dump_stack_lvl+0x18c/0x250 [ 532.583803][ T29] ? show_regs_print_info+0x20/0x20 [ 532.589052][ T29] ? load_image+0x420/0x420 [ 532.593733][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 532.598917][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 532.605111][ T29] ? _printk+0xde/0x130 [ 532.609398][ T29] ? load_image+0x420/0x420 [ 532.613941][ T29] ? load_image+0x420/0x420 [ 532.618498][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 532.624618][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 532.630643][ T29] watchdog+0xf3d/0xf80 [ 532.634870][ T29] ? watchdog+0x1e1/0xf80 [ 532.639249][ T29] kthread+0x2fa/0x390 [ 532.643365][ T29] ? hungtask_pm_notify+0x90/0x90 [ 532.648432][ T29] ? kthread_blkcg+0xd0/0xd0 [ 532.653074][ T29] ret_from_fork+0x48/0x80 [ 532.657524][ T29] ? kthread_blkcg+0xd0/0xd0 [ 532.662144][ T29] ret_from_fork_asm+0x11/0x20 [ 532.666964][ T29] [ 532.672517][ T29] Sending NMI from CPU 1 to CPUs 0: [ 532.677776][ C0] NMI backtrace for cpu 0 [ 532.677789][ C0] CPU: 0 PID: 11614 Comm: syz.3.2019 Not tainted syzkaller #0 [ 532.677804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 532.677813][ C0] RIP: 0010:perf_callchain_user+0xd12/0x15c0 [ 532.677841][ C0] Code: 42 80 3c 38 00 74 08 4c 89 f7 e8 f9 18 de 00 49 89 2e 48 8b 44 24 18 42 0f b6 04 38 84 c0 0f 85 06 01 00 00 48 8b 04 24 ff 00 <4c> 8b 74 24 08 48 8b 44 24 18 42 0f b6 04 38 84 c0 0f 85 8c 00 00 [ 532.677854][ C0] RSP: 0018:ffffc90000005be0 EFLAGS: 00000002 [ 532.677869][ C0] RAX: ffffc90000005ccc RBX: 00000000ffffffff RCX: 000000000000002a [ 532.677880][ C0] RDX: 000000000000002b RSI: 000000000000007f RDI: 0000000000000028 [ 532.677889][ C0] RBP: 73646e6168206461 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 532.677900][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000028 [ 532.677910][ C0] R13: 6200786c6c257830 R14: ffff88805e6c8598 R15: dffffc0000000000 [ 532.677928][ C0] FS: 00007faacfd2e6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 532.677942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.677952][ C0] CR2: 00007f371783be6a CR3: 000000002bbf3000 CR4: 00000000003506f0 [ 532.677967][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.677976][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 532.677985][ C0] Call Trace: [ 532.677991][ C0] [ 532.678006][ C0] get_perf_callchain+0x394/0x510 [ 532.678026][ C0] ? put_callchain_entry+0xb0/0xb0 [ 532.678043][ C0] ? __lock_acquire+0x1347/0x7d40 [ 532.678061][ C0] ? __perf_event_header__init_id+0x3be/0x480 [ 532.678081][ C0] perf_prepare_sample+0x3c7/0x1df0 [ 532.678101][ C0] ? read_lock_is_recursive+0x20/0x20 [ 532.678117][ C0] ? perf_callchain+0x220/0x220 [ 532.678139][ C0] perf_event_output_forward+0x187/0x3e0 [ 532.678157][ C0] ? perf_event_output_forward+0xb9/0x3e0 [ 532.678173][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 532.678190][ C0] ? trace_event_raw_event_lock+0x250/0x250 [ 532.678217][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 532.678234][ C0] __perf_event_overflow+0x447/0x630 [ 532.678257][ C0] perf_swevent_event+0x319/0x570 [ 532.678279][ C0] ? perf_tp_event+0x1520/0x1520 [ 532.678297][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 532.678317][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 532.678337][ C0] perf_tp_event+0x5f9/0x1520 [ 532.678360][ C0] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 532.678378][ C0] ? hrtimer_interrupt+0x597/0x9c0 [ 532.678396][ C0] ? ktime_get+0x7f/0x280 [ 532.678439][ C0] ? sched_clock+0x3f/0x60 [ 532.678458][ C0] ? sched_clock_cpu+0x75/0x430 [ 532.678476][ C0] ? lapic_next_event+0x11/0x20 [ 532.678495][ C0] ? clockevents_program_event+0x230/0x310 [ 532.678520][ C0] perf_trace_run_bpf_submit+0xf4/0x1c0 [ 532.678543][ C0] perf_trace_preemptirq_template+0x269/0x330 [ 532.678565][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.678585][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 532.678604][ C0] ? __irq_exit_rcu+0xdf/0x190 [ 532.678619][ C0] ? irq_exit_rcu+0x20/0x20 [ 532.678636][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.678655][ C0] trace_irq_enable+0xbb/0xe0 [ 532.678673][ C0] trace_hardirqs_on+0x18/0x40 [ 532.678691][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.678708][ C0] RIP: 0010:seqcount_lockdep_reader_access+0x19a/0x1d0 [ 532.678727][ C0] Code: 00 4d 85 e4 75 16 e8 95 c6 0f 00 eb 15 e8 8e c6 0f 00 e8 69 0f 0f 09 4d 85 e4 74 ea e8 7f c6 0f 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 43 c7 44 3e 08 00 00 00 00 65 48 8b 04 25 [ 532.678738][ C0] RSP: 0018:ffffc90000006540 EFLAGS: 00000246 [ 532.678751][ C0] RAX: ffffffff81775b81 RBX: 0000000000000000 RCX: ffff888019fb0000 [ 532.678761][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.678770][ C0] RBP: ffffc900000065f8 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 532.678780][ C0] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: 0000000000000200 [ 532.678790][ C0] R13: 000001fb63109b96 R14: 1ffff92000000ca8 R15: dffffc0000000000 [ 532.678806][ C0] ? seqcount_lockdep_reader_access+0x191/0x1d0 [ 532.678828][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 532.678848][ C0] ? __skb_clone+0x480/0x790 [ 532.678867][ C0] ktime_get_with_offset+0x103/0x330 [ 532.678887][ C0] dev_queue_xmit_nit+0x8ce/0xbb0 [ 532.678906][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 532.678936][ C0] dev_hard_start_xmit+0x148/0x740 [ 532.678963][ C0] sch_direct_xmit+0x25e/0x4c0 [ 532.678984][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 532.679006][ C0] __dev_queue_xmit+0x165d/0x3660 [ 532.679023][ C0] ? lapic_next_event+0x11/0x20 [ 532.679038][ C0] ? clockevents_program_event+0x230/0x310 [ 532.679061][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 532.679082][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 532.679100][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 532.679122][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.679139][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 532.679157][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.679179][ C0] ? ip_finish_output2+0xb04/0x11e0 [ 532.679197][ C0] ? ip_finish_output2+0x457/0x11e0 [ 532.679210][ C0] ip_finish_output2+0xcec/0x11e0 [ 532.679226][ C0] ? ip_finish_output2+0x457/0x11e0 [ 532.679246][ C0] ? ip_fragment+0x210/0x210 [ 532.679259][ C0] ? ip_mc_finish_output+0x250/0x250 [ 532.679273][ C0] ? ip_skb_dst_mtu+0x58a/0x9c0 [ 532.679289][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 532.679305][ C0] ip_output+0x2a1/0x3b0 [ 532.679320][ C0] ? ip_output+0x60/0x3b0 [ 532.679335][ C0] ip_send_skb+0x12f/0x1d0 [ 532.679351][ C0] ip_send_unicast_reply+0xd40/0x1530 [ 532.679365][ C0] ? lapic_next_event+0x11/0x20 [ 532.679380][ C0] ? clockevents_program_event+0x230/0x310 [ 532.679400][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 532.679424][ C0] ? ip_make_skb+0x440/0x440 [ 532.679448][ C0] ? __bpf_trace_tasklet+0x160/0x160 [ 532.679463][ C0] ? __put_user_ns+0x50/0x50 [ 532.679485][ C0] tcp_v4_send_reset+0x14fc/0x23e0 [ 532.679512][ C0] ? tcp_v4_send_reset+0x5a3/0x23e0 [ 532.679531][ C0] ? tcp_v4_reqsk_send_ack+0x710/0x710 [ 532.679554][ C0] ? __inet_lookup_listener+0x282/0x3e0 [ 532.679572][ C0] ? tcp_v4_fill_cb+0x39/0x4a0 [ 532.679592][ C0] ? __asan_memmove+0x40/0x70 [ 532.679611][ C0] ? tcp_v4_fill_cb+0x1fc/0x4a0 [ 532.679629][ C0] ? tcp_checksum_complete+0x152/0x200 [ 532.679649][ C0] tcp_v4_rcv+0x208c/0x2af0 [ 532.679668][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 532.679706][ C0] ? tcp_filter+0x90/0x90 [ 532.679731][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 532.679752][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 532.679773][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 532.679797][ C0] NF_HOOK+0x32d/0x3b0 [ 532.679816][ C0] ? fib_multipath_hash+0x1b10/0x1b10 [ 532.679834][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 532.679852][ C0] ? NF_HOOK+0x9f/0x3b0 [ 532.679870][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 532.679891][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 532.679908][ C0] ? ip_rcv_finish_core+0xd92/0x1bd0 [ 532.679938][ C0] ? ip_local_deliver+0x122/0x1b0 [ 532.679959][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 532.679979][ C0] ? packet_rcv+0x16b/0x13d0 [ 532.680005][ C0] ? ip_list_rcv+0x440/0x440 [ 532.680028][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 532.680054][ C0] ip_list_rcv+0x3f2/0x440 [ 532.680079][ C0] ? ip_rcv_finish+0x250/0x250 [ 532.680102][ C0] ? ip_rcv_finish+0x250/0x250 [ 532.680122][ C0] __netif_receive_skb_list_core+0x2da/0x750 [ 532.680146][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 532.680161][ C0] ? read_tsc+0x9/0x20 [ 532.680180][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 532.680204][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 532.680224][ C0] ? netif_receive_skb_core+0x230/0x230 [ 532.680244][ C0] ? receive_buf+0x2203/0x3820 [ 532.680266][ C0] napi_complete_done+0x329/0x820 [ 532.680288][ C0] ? __napi_schedule_irqoff+0x90/0x90 [ 532.680306][ C0] ? do_raw_spin_trylock+0xb2/0x190 [ 532.680326][ C0] ? virtqueue_get_buf_ctx+0x457/0xd10 [ 532.680347][ C0] ? virtqueue_enable_cb_prepare+0x20d/0x4f0 [ 532.680368][ C0] virtnet_poll+0xa9c/0x1280 [ 532.680390][ C0] ? refill_work+0x220/0x220 [ 532.680408][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 532.680434][ C0] __napi_poll+0xc0/0x460 [ 532.680448][ C0] ? napi_skb_cache_put+0xfe/0x240 [ 532.680464][ C0] net_rx_action+0x616/0xc40 [ 532.680487][ C0] ? net_tx_action+0x980/0x980 [ 532.680502][ C0] ? detach_timer+0x2b0/0x2b0 [ 532.680527][ C0] handle_softirqs+0x280/0x820 [ 532.680544][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 532.680562][ C0] ? do_softirq+0x1a0/0x1a0 [ 532.680579][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 532.680599][ C0] __irq_exit_rcu+0xd3/0x190 [ 532.680613][ C0] ? irq_exit_rcu+0x20/0x20 [ 532.680632][ C0] irq_exit_rcu+0x9/0x20 [ 532.680645][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 532.680661][ C0] [ 532.680666][ C0] [ 532.680671][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.680688][ C0] RIP: 0010:preempt_schedule_irq+0xba/0x150 [ 532.680702][ C0] Code: 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 6f bf 01 00 00 00 e8 51 d6 cd f6 e8 7c e3 fe f6 fb bf 01 00 00 00 f1 b4 ff ff 43 c6 44 37 08 00 48 c7 44 24 40 00 00 00 00 9c 8f [ 532.680714][ C0] RSP: 0018:ffffc9000bd67d60 EFLAGS: 00000286 [ 532.680725][ C0] RAX: 895dd7958355a200 RBX: 0000000000000000 RCX: 895dd7958355a200 [ 532.680734][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: 0000000000000001 [ 532.680744][ C0] RBP: ffffc9000bd67e10 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 532.680754][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000 [ 532.680763][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920017acfac [ 532.680784][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 532.680799][ C0] ? lock_chain_count+0x20/0x20 [ 532.680818][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 532.680839][ C0] irqentry_exit+0x67/0x70 [ 532.680854][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 532.680871][ C0] RIP: 0010:exit_to_user_mode_loop+0x40/0x110 [ 532.680889][ C0] Code: fb eb 1d e8 d2 a6 12 09 65 48 8b 05 ba dc 8f 7e 4c 8b 30 41 f7 c6 0e 30 02 00 0f 84 c4 00 00 00 e8 f5 ba 19 00 fb 41 f6 c6 08 <74> 05 e8 09 d2 1a 09 41 f7 c6 00 10 00 00 74 08 48 89 df e8 78 a0 [ 532.680900][ C0] RSP: 0018:ffffc9000bd67ed0 EFLAGS: 00000246 [ 532.680910][ C0] RAX: 895dd7958355a200 RBX: ffffc9000bd67f58 RCX: 895dd7958355a200 [ 532.680954][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8fa0 [ 532.680964][ C0] RBP: ffffc9000bd67f48 R08: ffffffff8e8b19af R09: 1ffffffff1d16335 [ 532.680974][ C0] R10: dffffc0000000000 R11: fffffbfff1d16336 R12: 0000000000000000 [ 532.680984][ C0] R13: 0000000000000000 R14: 0000000000004006 R15: ffff888019fb0000 [ 532.681005][ C0] exit_to_user_mode_prepare+0xee/0x180 [ 532.681024][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 532.681040][ C0] do_syscall_64+0x61/0xa0 [ 532.681053][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.681069][ C0] ? clear_bhb_loop+0x40/0x90 [ 532.681086][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.681103][ C0] RIP: 0033:0x7faaced9cdd9 [ 532.681115][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.681126][ C0] RSP: 002b:00007faacfd2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 532.681141][ C0] RAX: 0000000000000015 RBX: 00007faacf015fa0 RCX: 00007faaced9cdd9 [ 532.681150][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000100 [ 532.681160][ C0] RBP: 00007faacee32d69 R08: 0000000000000000 R09: 0000000000000000 [ 532.681168][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 532.681178][ C0] R13: 00007faacf016038 R14: 00007faacf015fa0 R15: 00007ffdcb6c8188 [ 532.681198][ C0] [ 533.856192][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 533.863101][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 533.870768][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.881031][ T29] Call Trace: [ 533.884428][ T29] [ 533.887487][ T29] dump_stack_lvl+0x18c/0x250 [ 533.892214][ T29] ? show_regs_print_info+0x20/0x20 [ 533.897448][ T29] ? load_image+0x420/0x420 [ 533.902523][ T29] panic+0x2dc/0x730 [ 533.906460][ T29] ? schedule_preempt_disabled+0x20/0x20 [ 533.912386][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 533.917193][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 533.922778][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 533.928978][ T29] watchdog+0xf7c/0xf80 [ 533.933170][ T29] ? watchdog+0x1e1/0xf80 [ 533.937542][ T29] kthread+0x2fa/0x390 [ 533.941639][ T29] ? hungtask_pm_notify+0x90/0x90 [ 533.946699][ T29] ? kthread_blkcg+0xd0/0xd0 [ 533.951319][ T29] ret_from_fork+0x48/0x80 [ 533.955771][ T29] ? kthread_blkcg+0xd0/0xd0 [ 533.960391][ T29] ret_from_fork_asm+0x11/0x20 [ 533.965204][ T29] [ 533.968419][ T29] Kernel Offset: disabled [ 533.972849][ T29] Rebooting in 86400 seconds..